Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json)
Hash identifier: 36kurY2g9sOp7EmyEiP/hmD/5rEOupYhg2iq48VWO80=
Subject key identifier: A1:C7:A0:6C:05:6E:CD:54:02:17:12:02:29:40:51:9A:C6:16:B9:01
Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Certificate serial: 019510C7D945EBEBB2D88783158721B72727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
Manifest number: 1156
Signing time: Sun 16 Feb 2025 22:01:27 +0000
Manifest this update: Sun 16 Feb 2025 22:01:27 +0000
Manifest next update: Mon 17 Feb 2025 22:01:27 +0000
Files and hashes: 1: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: lt4+8NRfqDiG9kVtI90+rCW9LOZwERp3eUXjHtoMt9I=)
2: _3NEeq6GOXOiLdZdEWjfBKtdhh8.roa (hash: pTgzQ3b72uIy4BLhpeJN6uHM+SJH/WDu+3JWOoF47hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d9:45:eb:eb:b2:d8:87:83:15:87:21:b7:27:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426
Validity
Not Before: Feb 16 22:01:27 2025 GMT
Not After : Feb 17 22:01:27 2025 GMT
Subject: CN=a1c7a06c056ecd54021712022940519ac616b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b2:23:0e:0c:ec:60:a8:29:fd:be:03:23:7a:
da:c1:a8:04:1b:7a:87:b3:05:8a:79:3b:2b:de:c5:
60:11:b4:68:9a:35:e8:e2:a4:65:4a:9c:b9:ee:82:
b9:12:b0:99:0a:b3:9e:4b:05:ec:e1:37:16:ec:ba:
31:df:1f:88:24:01:4f:91:7b:70:be:3c:76:23:dd:
ec:2a:ff:fb:67:c0:1c:08:66:97:2b:91:20:bb:63:
77:3a:5a:8b:18:7c:df:ec:c9:90:b4:0b:7d:48:68:
f2:d8:44:f5:95:a5:3d:d9:b4:5e:44:ec:1c:33:8a:
0f:e1:39:31:2e:97:8a:f4:0a:5c:34:f2:e7:3f:ce:
36:2b:e4:51:4d:da:4b:95:6e:8c:49:7c:7c:13:2a:
16:c4:f7:f3:1e:e0:ad:a6:a6:23:d3:4f:cb:b6:73:
15:80:f9:84:59:98:e8:1a:ac:ca:0c:0e:99:77:e0:
07:dd:33:be:c0:9c:39:97:2e:85:b3:69:e9:bc:48:
d9:57:e6:2e:03:97:ca:f1:48:50:53:0c:2d:44:8b:
19:bf:83:d0:61:c0:ff:30:c8:8d:3e:ca:b6:a2:7e:
4e:aa:af:7e:9e:01:bc:23:98:96:f2:c5:83:5a:f0:
c3:89:77:dd:a6:fc:31:78:47:f4:25:17:27:15:36:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:A0:6C:05:6E:CD:54:02:17:12:02:29:40:51:9A:C6:16:B9:01
X509v3 Authority Key Identifier:
keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:49:a2:63:04:78:fa:ed:95:83:9e:c4:12:f1:54:1a:83:85:
8a:d2:ae:03:c1:b1:fa:6c:89:94:ee:a1:b4:d8:66:c7:2b:1b:
45:04:61:95:be:a6:f2:fd:cf:06:53:e8:76:61:71:19:3d:2c:
1f:86:90:5e:81:02:7a:44:b5:a6:3e:68:d7:a7:b1:41:cf:0f:
fc:03:63:d3:90:55:33:e7:84:e3:54:6e:e7:ad:16:eb:05:15:
b1:10:6d:69:ea:3d:5b:f1:a1:1d:f3:70:cc:7b:76:73:2f:20:
01:7f:80:0b:85:66:6d:80:4c:7e:2c:56:b8:0d:90:5d:4a:3d:
dd:21:e3:61:21:74:d3:ee:ab:9c:27:6a:23:12:a5:96:6e:5a:
7d:3b:24:13:94:e3:cc:aa:a8:21:68:3c:28:41:57:18:8f:fc:
07:21:9c:51:36:1c:ec:43:b2:50:ff:78:ef:26:9b:91:e3:a2:
bc:f3:66:95:2e:ab:eb:83:bc:fc:ef:11:2b:b3:e4:6d:7b:d4:
7f:ec:ed:62:f8:9b:d8:86:e3:c4:5c:f4:b8:21:0d:c2:ba:c3:
e7:4c:23:07:2c:fc:c5:9d:03:21:a4:a2:b2:0e:aa:07:39:1c:
d0:83:42:56:2c:d4:d1:c4:40:3f:85:48:3e:94:95:7b:d6:8d:
eb:8f:a0:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx9lF6+uy2IeDFYchtycnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz
ZWM0MjYwHhcNMjUwMjE2MjIwMTI3WhcNMjUwMjE3MjIwMTI3WjAzMTEwLwYDVQQD
EyhhMWM3YTA2YzA1NmVjZDU0MDIxNzEyMDIyOTQwNTE5YWM2MTZiOTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bIjDgzsYKgp/b4DI3rawagEG3qH
swWKeTsr3sVgEbRomjXo4qRlSpy57oK5ErCZCrOeSwXs4TcW7Lox3x+IJAFPkXtw
vjx2I93sKv/7Z8AcCGaXK5Egu2N3OlqLGHzf7MmQtAt9SGjy2ET1laU92bReROwc
M4oP4TkxLpeK9ApcNPLnP842K+RRTdpLlW6MSXx8EyoWxPfzHuCtpqYj00/LtnMV
gPmEWZjoGqzKDA6Zd+AH3TO+wJw5ly6Fs2npvEjZV+YuA5fK8UhQUwwtRIsZv4PQ
YcD/MMiNPsq2on5Oqq9+ngG8I5iW8sWDWvDDiXfdpvwxeEf0JRcnFTZ2dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHHoGwFbs1UAhcSAilAUZrGFrkBMB8GA1UdIwQY
MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt
OWExNWJjMGQzOTg4LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4
LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkmiYwR4
+u2Vg57EEvFUGoOFitKuA8Gx+myJlO6htNhmxysbRQRhlb6m8v3PBlPodmFxGT0s
H4aQXoECekS1pj5o16exQc8P/ANj05BVM+eE41Ru560W6wUVsRBtaeo9W/GhHfNw
zHt2cy8gAX+AC4VmbYBMfixWuA2QXUo93SHjYSF00+6rnCdqIxKllm5afTskE5Tj
zKqoIWg8KEFXGI/8ByGcUTYc7EOyUP947yabkeOivPNmlS6r64O8/O8RK7PkbXvU
f+ztYvib2IbjxFz0uCENwrrD50wjByz8xZ0DIaSisg6qBzkc0INCVizU0cRAP4VI
PpSVe9aN64+gvg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:21 2025 by rpki-client