Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: aBRNq45jnlzHeQZiEArffwxtNBlRN0RoHsAKB4JdTiQ=
Subject key identifier: 24:A3:98:97:7E:D6:F5:40:DE:2A:4A:1F:80:3E:B4:0A:E3:A8:16:E7
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 01958C5FF6962D979A3BC3E8331F760DAF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1196
Signing time: Wed 12 Mar 2025 22:00:54 +0000
Manifest this update: Wed 12 Mar 2025 22:00:54 +0000
Manifest next update: Thu 13 Mar 2025 22:00:54 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: QkCilWxBKnnLhTwgoBgcXUv+lv3WAI+4gTsKPr2HD+s=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:5f:f6:96:2d:97:9a:3b:c3:e8:33:1f:76:0d:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Mar 12 22:00:54 2025 GMT
Not After : Mar 13 22:00:54 2025 GMT
Subject: CN=24a398977ed6f540de2a4a1f803eb40ae3a816e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:52:1b:eb:e3:25:a1:8a:30:4d:18:e8:2a:
31:d0:1f:e5:8b:16:fb:64:9d:0a:5e:c7:ad:ef:2d:
23:1a:3e:21:1f:aa:27:bc:cb:86:3a:e6:a8:3f:4d:
13:98:06:b5:a7:af:e2:9d:ce:e5:38:51:22:9d:8a:
74:42:bf:5f:df:50:db:1a:0b:8d:8a:88:f6:f3:7b:
c6:3a:4d:7e:1b:cf:de:cb:8e:0a:c1:21:70:85:a3:
a3:81:f4:d3:0d:ec:7a:57:b0:f7:53:77:f5:05:9e:
39:3b:2a:aa:1e:39:34:a6:8e:ca:58:94:c5:33:fb:
8d:d5:ed:cd:0f:9a:83:c8:63:bc:20:cb:fc:e3:9b:
19:d9:c7:67:91:48:79:5c:b0:9c:55:fd:60:da:8b:
ad:b6:d1:fd:71:db:46:7e:27:02:d8:ff:25:a9:45:
eb:e9:45:7a:58:8e:64:e3:9a:76:08:8b:6a:44:67:
f1:0d:bc:56:42:4c:4e:c7:6c:e0:aa:04:ff:67:05:
97:59:cc:c4:d7:52:e5:5c:d9:4f:c5:90:a5:a0:ec:
07:84:46:7f:f6:b5:92:f6:40:e7:c6:86:4c:60:21:
48:ea:e9:65:18:6d:ea:d3:15:df:37:77:f6:46:26:
9c:9b:0d:3d:6d:82:ee:b8:03:8c:a0:d1:ec:12:a2:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A3:98:97:7E:D6:F5:40:DE:2A:4A:1F:80:3E:B4:0A:E3:A8:16:E7
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a2:ac:35:15:b9:2b:8a:d0:f1:1b:3d:3b:08:2d:80:be:8a:
a4:a8:3d:2d:4b:f1:a1:bd:be:c5:79:12:0f:ed:27:c5:1d:2e:
87:bd:ac:c5:c4:bd:a1:7d:00:9f:04:8c:ed:9c:b4:a7:99:6a:
09:0c:d7:53:09:be:7a:3f:d2:94:20:a2:00:92:f3:f5:c0:d6:
f3:15:be:35:68:78:ec:3e:b8:16:69:68:e9:b8:01:4a:0b:6d:
9a:f1:bb:0a:81:e3:0a:67:c3:86:54:a9:68:99:d9:61:b5:eb:
bb:19:31:b9:ca:5e:71:9a:16:b4:47:25:70:b7:f8:47:ae:33:
2c:0f:50:b1:99:ae:2c:4c:94:2e:65:17:d4:fc:d9:28:36:46:
83:0a:b4:f4:ac:62:4b:78:33:77:91:9e:b8:76:12:46:c1:a7:
b4:f7:ae:d1:a8:fa:e1:28:65:e5:3e:32:60:69:04:07:31:6d:
45:00:01:09:9d:f4:7c:1f:e4:79:fc:cc:d4:f1:9a:57:f6:59:
bd:af:d8:55:44:1c:36:57:be:f4:4c:da:cf:ed:17:dc:3b:df:
e5:a9:ee:76:9a:0b:dc:63:a9:cc:e6:c2:70:54:24:7b:7a:b2:
dd:a1:b8:7c:de:fb:07:ac:6e:e2:e4:e7:31:c8:87:6f:92:2c:
ec:98:64:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMX/aWLZeaO8PoMx92Da8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz
ZWM0MjYwHhcNMjUwMzEyMjIwMDU0WhcNMjUwMzEzMjIwMDU0WjAzMTEwLwYDVQQD
EygyNGEzOTg5NzdlZDZmNTQwZGUyYTRhMWY4MDNlYjQwYWUzYTgxNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtptSG+vjJaGKME0Y6Cox0B/lixb7
ZJ0KXset7y0jGj4hH6onvMuGOuaoP00TmAa1p6/inc7lOFEinYp0Qr9f31DbGguN
ioj283vGOk1+G8/ey44KwSFwhaOjgfTTDex6V7D3U3f1BZ45OyqqHjk0po7KWJTF
M/uN1e3ND5qDyGO8IMv845sZ2cdnkUh5XLCcVf1g2outttH9cdtGficC2P8lqUXr
6UV6WI5k45p2CItqRGfxDbxWQkxOx2zgqgT/ZwWXWczE11LlXNlPxZCloOwHhEZ/
9rWS9kDnxoZMYCFI6ullGG3q0xXfN3f2Riacmw09bYLuuAOMoNHsEqI0jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSjmJd+1vVA3ipKH4A+tArjqBbnMB8GA1UdIwQY
MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt
OWExNWJjMGQzOTg4LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4
LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKKsNRW5
K4rQ8Rs9OwgtgL6KpKg9LUvxob2+xXkSD+0nxR0uh72sxcS9oX0AnwSM7Zy0p5lq
CQzXUwm+ej/SlCCiAJLz9cDW8xW+NWh47D64Fmlo6bgBSgttmvG7CoHjCmfDhlSp
aJnZYbXruxkxucpecZoWtEclcLf4R64zLA9QsZmuLEyULmUX1PzZKDZGgwq09Kxi
S3gzd5GeuHYSRsGntPeu0aj64Shl5T4yYGkEBzFtRQABCZ30fB/kefzM1PGaV/ZZ
va/YVUQcNle+9Ezaz+0X3Dvf5anudpoL3GOpzObCcFQke3qy3aG4fN77B6xu4uTn
MciHb5Is7Jhk0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:38 2025 by rpki-client