Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
File: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft (raw, json)
Hash identifier: KtuM07u7bXwmn1wHmps+FEPdm9wc0GSWjfeUPr5Sf7U=
Subject key identifier: A3:01:24:69:CC:44:96:39:52:BD:BF:7B:71:66:81:5D:7C:46:9C:9A
Authority key identifier: CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
Certificate issuer: /CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Certificate serial: 019510C6A0F98D8C471EF9A58809BF389434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
Manifest number: 1456
Signing time: Sun 16 Feb 2025 22:00:07 +0000
Manifest this update: Sun 16 Feb 2025 22:00:07 +0000
Manifest next update: Mon 17 Feb 2025 22:00:07 +0000
Files and hashes: 1: 6jUnw4ABLZRGWLZ3VvsECujZOn8.roa (hash: 80lSH+cuu92XEp7oB7l+5noYKD/CLX9ilJo36guu33A=)
2: zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl (hash: HS+x1S1AGJFLByOBdqUNUYImjD/2rHe19wgGaTSQhXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c6:a0:f9:8d:8c:47:1e:f9:a5:88:09:bf:38:94:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1c5bea595d890f21307c1b336519fb0edc089c
Validity
Not Before: Feb 16 22:00:07 2025 GMT
Not After : Feb 17 22:00:07 2025 GMT
Subject: CN=a3012469cc44963952bdbf7b7166815d7c469c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:f7:f0:2b:65:b5:05:bc:f8:9b:73:b9:ff:
54:dd:20:49:02:74:ff:3b:2e:e3:e8:51:af:24:21:
15:26:1a:93:d4:13:f3:71:ba:2a:26:a8:f8:0f:6c:
da:4c:1a:cf:1d:ae:7b:12:02:a1:52:1b:d9:84:22:
41:4b:bc:73:3c:4a:2e:ca:cd:a9:35:0f:bb:22:0c:
93:83:e7:8f:24:f8:88:06:38:5d:1e:44:e8:3e:1c:
b5:4f:28:8f:20:80:21:0f:2d:d6:db:7e:e5:a0:38:
c4:3f:70:ef:e9:1b:0f:6c:b8:5c:be:4d:74:33:17:
ba:4d:65:cd:18:af:b7:7f:85:7d:f6:94:e5:79:35:
e9:0d:57:e8:e2:ae:48:d0:d0:2a:2a:6f:91:67:42:
a6:eb:bd:b8:da:6c:a6:9a:67:f4:3a:e3:40:ec:29:
e3:f7:3b:bf:de:02:31:46:3f:f2:48:9d:f1:39:a1:
ce:d6:d5:ff:af:92:4b:93:36:51:96:0b:9e:5e:36:
c5:d0:ee:06:23:ed:48:c5:b3:0a:35:38:2b:0c:81:
63:37:dc:c4:50:05:c4:da:9d:62:1f:02:83:5e:b3:
20:32:1d:3f:61:79:d2:6b:38:0c:0a:8a:b2:b0:f9:
2a:32:bf:44:eb:f3:27:1e:d6:90:4c:08:3b:f6:01:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:01:24:69:CC:44:96:39:52:BD:BF:7B:71:66:81:5D:7C:46:9C:9A
X509v3 Authority Key Identifier:
keyid:CE:1C:5B:EA:59:5D:89:0F:21:30:7C:1B:33:65:19:FB:0E:DC:08:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92256d-b875-4762-b743-05b15f5ee8c3/1/zhxb6lldiQ8hMHwbM2UZ-w7cCJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cf:e5:0e:b9:e4:ad:86:25:3f:af:6d:29:e1:09:fd:d7:e0:
23:e6:76:a9:6f:4e:53:93:e4:8d:99:20:c4:5e:09:ef:a1:47:
2d:bf:5c:97:0b:98:ee:fd:6c:fa:8e:53:79:8c:9b:88:df:aa:
3f:9e:98:e9:84:99:79:1e:81:3a:d1:07:1d:72:95:cb:a7:07:
8e:86:c0:b3:7a:f6:39:40:a8:f9:3a:21:a1:d0:19:6b:b1:16:
bd:3e:d0:ea:26:2f:9b:ec:d8:ab:79:d7:17:13:51:2b:0b:0e:
95:be:c9:a5:80:27:d9:5a:23:13:37:4a:44:1d:23:c2:e4:a8:
30:b9:41:36:53:2d:a9:5a:5f:f3:04:ec:0c:bd:31:c1:e9:47:
5b:8e:f0:58:09:eb:7e:cb:6d:37:07:5a:b8:fd:59:f7:f3:95:
fa:57:25:69:10:de:19:34:df:d9:4f:51:eb:e2:2a:b6:ac:c7:
72:5d:6c:49:0e:93:fa:b0:3e:43:4c:3f:a3:a9:f1:35:0d:38:
32:10:c8:f0:86:26:93:6a:06:16:fa:e7:0f:8a:40:ce:fa:d4:
73:42:ad:05:8a:25:49:48:c5:95:13:02:50:47:7d:98:a8:d4:
32:cf:01:fa:2d:5b:f0:b1:c4:7e:9a:e8:a5:af:b8:6f:f9:90:
15:64:d5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQxqD5jYxHHvmliAm/OJQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMWM1YmVhNTk1ZDg5MGYyMTMwN2MxYjMzNjUxOWZiMGVk
YzA4OWMwHhcNMjUwMjE2MjIwMDA3WhcNMjUwMjE3MjIwMDA3WjAzMTEwLwYDVQQD
EyhhMzAxMjQ2OWNjNDQ5NjM5NTJiZGJmN2I3MTY2ODE1ZDdjNDY5YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc338CtltQW8+Jtzuf9U3SBJAnT/
Oy7j6FGvJCEVJhqT1BPzcboqJqj4D2zaTBrPHa57EgKhUhvZhCJBS7xzPEouys2p
NQ+7IgyTg+ePJPiIBjhdHkToPhy1TyiPIIAhDy3W237loDjEP3Dv6RsPbLhcvk10
Mxe6TWXNGK+3f4V99pTleTXpDVfo4q5I0NAqKm+RZ0Km67242mymmmf0OuNA7Cnj
9zu/3gIxRj/ySJ3xOaHO1tX/r5JLkzZRlgueXjbF0O4GI+1IxbMKNTgrDIFjN9zE
UAXE2p1iHwKDXrMgMh0/YXnSazgMCoqysPkqMr9E6/MnHtaQTAg79gFCaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMBJGnMRJY5Ur2/e3FmgV18RpyaMB8GA1UdIwQY
MBaAFM4cW+pZXYkPITB8GzNlGfsO3AicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMt
MDViMTVmNWVlOGMzLzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85MjI1NmQtYjg3NS00NzYyLWI3NDMtMDViMTVmNWVlOGMz
LzEvemh4YjZsbGRpUThoTUh3Yk0yVVotdzdjQ0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcc/lDrnk
rYYlP69tKeEJ/dfgI+Z2qW9OU5PkjZkgxF4J76FHLb9clwuY7v1s+o5TeYybiN+q
P56Y6YSZeR6BOtEHHXKVy6cHjobAs3r2OUCo+TohodAZa7EWvT7Q6iYvm+zYq3nX
FxNRKwsOlb7JpYAn2VojEzdKRB0jwuSoMLlBNlMtqVpf8wTsDL0xwelHW47wWAnr
fsttNwdauP1Z9/OV+lclaRDeGTTf2U9R6+IqtqzHcl1sSQ6T+rA+Q0w/o6nxNQ04
MhDI8IYmk2oGFvrnD4pAzvrUc0KtBYolSUjFlRMCUEd9mKjUMs8B+i1b8LHEfpro
pa+4b/mQFWTViw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:20 2025 by rpki-client