Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: 1lpxzfkxUgBkXImcglm2u6lJGHqyv17p2Sz9ajrRwUs=
Subject key identifier: 57:02:35:03:8D:95:90:6F:D7:3A:0C:61:0D:24:37:1E:2F:19:09:ED
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019510902CBCC7485D863649243DF596DF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 095D
Signing time: Sun 16 Feb 2025 21:00:38 +0000
Manifest this update: Sun 16 Feb 2025 21:00:38 +0000
Manifest next update: Mon 17 Feb 2025 21:00:38 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: z+80BAM/ZVP4t0bMoxjhYCwKpn8T0oVfkpaxTTB0+dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:90:2c:bc:c7:48:5d:86:36:49:24:3d:f5:96:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Feb 16 21:00:38 2025 GMT
Not After : Feb 17 21:00:38 2025 GMT
Subject: CN=570235038d95906fd73a0c610d24371e2f1909ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:38:f2:bd:89:57:c0:b1:de:fa:12:27:92:79:
58:50:18:97:57:06:8d:39:7f:43:a2:eb:53:4e:55:
d7:63:26:f9:31:b6:0e:b4:af:7c:3f:c1:24:bd:af:
63:fd:a2:a9:07:d2:a2:23:a7:b4:6c:07:cd:ba:ba:
ef:9b:59:d8:b1:a4:3a:08:78:4f:68:ce:08:65:17:
67:cb:43:cb:08:8e:1c:65:28:f1:7c:22:b0:d9:61:
e3:86:0b:04:83:20:04:6e:58:1e:a3:6b:2d:a2:82:
c0:c0:55:30:98:0e:d5:c1:cf:c1:bd:67:03:cf:09:
ad:eb:c9:48:b9:97:7c:c4:d1:c1:d9:1b:61:19:bf:
a8:49:52:17:3b:e4:f3:28:dc:45:b5:3c:41:9e:f8:
f4:dc:c9:38:3c:f2:f5:c6:85:42:b8:91:f6:63:36:
a1:81:17:78:10:be:ea:d1:25:cb:ca:a5:e9:4f:80:
a0:7f:85:42:ee:70:c1:39:36:06:c8:21:4d:9d:d9:
14:cb:2e:43:d3:6f:3f:9c:a3:9d:76:af:f2:ff:3b:
cf:43:14:47:83:e5:27:b8:23:f3:99:66:9c:75:ce:
54:5e:47:66:32:5a:d0:52:56:0b:37:b2:a9:ee:74:
e3:80:b0:60:69:e2:82:84:b2:04:72:53:0f:b5:af:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:35:03:8D:95:90:6F:D7:3A:0C:61:0D:24:37:1E:2F:19:09:ED
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:dd:97:57:ee:43:99:cc:4c:13:11:a8:90:f0:ae:fc:7e:e0:
fc:7c:41:07:11:51:d0:9b:b9:38:39:1a:c0:24:f6:1f:46:9c:
fe:61:31:80:3d:ca:87:01:58:04:d5:23:be:6a:0e:cf:46:b9:
cc:0f:d4:c1:79:21:41:de:3d:c1:c4:0b:46:f8:9b:81:54:c6:
7c:3e:1e:10:5d:49:80:cd:53:e7:42:87:73:7e:94:07:87:83:
16:6e:34:cc:1a:95:b5:fb:13:66:44:b2:37:05:c1:2d:e2:0b:
ce:e8:f2:91:c7:bd:3b:76:38:a8:3b:25:c2:ce:3f:fa:23:6e:
09:5e:f8:5f:63:0c:b7:00:69:ec:d1:9d:21:29:15:38:4e:04:
91:26:aa:48:77:79:ac:5d:bb:3f:7e:fb:4d:b6:1f:1e:ef:90:
e6:6a:8a:1d:50:35:47:93:25:8c:a5:d6:4f:41:03:c5:0b:94:
3a:95:6f:0b:91:d0:5b:1c:67:91:85:96:b9:de:aa:86:ab:b6:
d6:d5:25:69:13:5b:ea:97:3a:05:1e:4d:e7:0e:91:2a:ca:35:
ac:56:bd:04:71:ce:81:e5:f5:a0:dc:8e:ab:9a:1a:59:a0:87:
05:80:ac:97:fa:0d:5e:a7:72:28:d8:72:88:9f:7f:76:d8:09:
d3:3e:f7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQkCy8x0hdhjZJJD31lt9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx
ZTdhNGQwHhcNMjUwMjE2MjEwMDM4WhcNMjUwMjE3MjEwMDM4WjAzMTEwLwYDVQQD
Eyg1NzAyMzUwMzhkOTU5MDZmZDczYTBjNjEwZDI0MzcxZTJmMTkwOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjjyvYlXwLHe+hInknlYUBiXVwaN
OX9DoutTTlXXYyb5MbYOtK98P8Ekva9j/aKpB9KiI6e0bAfNurrvm1nYsaQ6CHhP
aM4IZRdny0PLCI4cZSjxfCKw2WHjhgsEgyAEblgeo2stooLAwFUwmA7Vwc/BvWcD
zwmt68lIuZd8xNHB2RthGb+oSVIXO+TzKNxFtTxBnvj03Mk4PPL1xoVCuJH2Yzah
gRd4EL7q0SXLyqXpT4Cgf4VC7nDBOTYGyCFNndkUyy5D028/nKOddq/y/zvPQxRH
g+UnuCPzmWacdc5UXkdmMlrQUlYLN7Kp7nTjgLBgaeKChLIEclMPta9EqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcCNQONlZBv1zoMYQ0kNx4vGQntMB8GA1UdIwQY
MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt
NTdhNWYzMjg5OTkyLzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky
LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ92XV+5D
mcxMExGokPCu/H7g/HxBBxFR0Ju5ODkawCT2H0ac/mExgD3KhwFYBNUjvmoOz0a5
zA/UwXkhQd49wcQLRvibgVTGfD4eEF1JgM1T50KHc36UB4eDFm40zBqVtfsTZkSy
NwXBLeILzujykce9O3Y4qDslws4/+iNuCV74X2MMtwBp7NGdISkVOE4EkSaqSHd5
rF27P377TbYfHu+Q5mqKHVA1R5MljKXWT0EDxQuUOpVvC5HQWxxnkYWWud6qhqu2
1tUlaRNb6pc6BR5N5w6RKso1rFa9BHHOgeX1oNyOq5oaWaCHBYCsl/oNXqdyKNhy
iJ9/dtgJ0z73Ng==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:03 2025 by rpki-client