Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: hRDTCY7KQ5ubHrNWD3OPRRpPo5NhJEVdy3Jc5ivIwHA=
Subject key identifier: 7F:F3:95:BC:B0:FB:47:14:92:34:24:E9:C7:4C:D9:BF:DD:F7:6C:3F
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01965A5E3B068F56A9CB7C350342069C2DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 22:00:47 +0000
Manifest this update: Mon 21 Apr 2025 22:00:47 +0000
Manifest next update: Tue 22 Apr 2025 22:00:47 +0000
Files and hashes: 1: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: v2UPNE1twr0C68ivBVjnoBsnMdRtBNWGJok1FojsyAg=)
2: JdsxpHDD-qqNJkrJeExqLIW60EE.roa (hash: wUmR1eI1Oq3wFYscONP1bCcbT5gMXn5T1HRqSh6Eweg=)
3: Q--C0irvMpEnsSFDblZpFtPtBqc.roa (hash: JFaxMibJvUby0GCOLMJkygjTHxA6xj2IL0k6gCeBVCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:3b:06:8f:56:a9:cb:7c:35:03:42:06:9c:2d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Apr 21 22:00:47 2025 GMT
Not After : Apr 22 22:00:47 2025 GMT
Subject: CN=7ff395bcb0fb4714923424e9c74cd9bfddf76c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:a3:5c:94:58:22:98:a9:3e:95:ab:8f:d2:
37:ea:c8:3b:7d:27:fe:b8:a9:61:0d:ee:9a:05:77:
a7:e8:31:3e:ae:0a:84:8b:ae:41:39:c6:a8:56:44:
14:54:48:a1:d8:b0:92:15:9d:9c:d8:c5:52:53:d9:
eb:2c:76:4a:8c:97:fe:4f:81:ba:07:f3:a5:37:f7:
73:09:58:89:4c:71:ef:49:c5:ed:d8:91:19:25:ab:
89:e8:f7:9b:73:e6:ca:18:63:3e:b6:33:65:bb:6d:
27:e4:d5:b9:1e:6f:c4:19:d8:80:f8:70:1d:67:01:
d9:c6:7b:b3:d0:6b:d3:46:f2:3c:c8:d4:47:79:3c:
e3:8f:7c:4b:5d:28:fd:86:3e:46:2d:df:1e:6a:0a:
b4:6c:3a:0b:5e:e6:c8:45:c1:4e:dd:86:aa:3d:70:
65:2b:7f:44:70:40:3c:09:f8:78:ac:87:d7:08:52:
b7:aa:d8:a2:f8:39:3b:a5:c1:a3:9c:37:b6:fc:6e:
b4:c6:45:53:ca:90:c3:78:e8:04:f4:aa:31:26:43:
cd:08:e5:ae:34:0c:4d:cc:69:69:86:25:c0:5b:31:
dd:e1:78:69:0a:9b:37:0c:2b:4b:d2:64:d7:29:2f:
ea:69:4e:99:e6:3e:e4:25:0c:af:5a:d6:b1:95:04:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F3:95:BC:B0:FB:47:14:92:34:24:E9:C7:4C:D9:BF:DD:F7:6C:3F
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ab:48:6c:49:63:7b:fa:f6:fb:3f:84:8b:eb:6b:37:56:ea:
79:76:f6:c1:09:c6:c8:cc:09:e7:4a:15:07:65:38:41:b5:fd:
52:39:30:18:ec:c3:27:db:68:de:16:eb:12:d8:0c:e6:28:e4:
79:9b:40:b1:18:47:97:c0:ef:fb:20:1f:9e:dd:38:74:34:be:
63:f2:40:f4:22:28:0f:23:80:9f:90:3f:fe:da:0b:3d:b6:60:
6d:a7:70:b6:b9:b8:27:0c:6e:13:36:ac:6c:06:51:ec:dc:7d:
84:8d:46:b0:cb:ed:2b:26:78:c4:8f:eb:d3:69:e9:fc:d6:c7:
71:0e:9e:cc:8c:7d:ff:d4:b0:1e:24:6b:10:51:9f:d9:5f:b2:
75:4e:10:aa:a6:f1:b4:da:76:24:f4:c1:46:b0:8a:27:0b:5c:
38:dd:d4:24:51:e9:77:fd:30:35:2a:91:df:f0:a0:0a:37:82:
c4:97:d0:81:ce:3a:f0:29:f8:5d:ba:cb:4c:6e:3f:c9:97:80:
1e:23:c1:81:d2:b1:67:fb:88:73:4c:89:8b:0c:52:c7:e5:93:
e9:16:bc:3d:d5:10:2a:24:3c:13:b2:1f:92:07:ca:56:e2:b5:
15:00:fe:cb:aa:84:1c:2c:84:72:f0:4c:77:e5:bb:29:f0:dd:
08:6d:fa:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXjsGj1apy3w1A0IGnC2vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjUwNDIxMjIwMDQ3WhcNMjUwNDIyMjIwMDQ3WjAzMTEwLwYDVQQD
Eyg3ZmYzOTViY2IwZmI0NzE0OTIzNDI0ZTljNzRjZDliZmRkZjc2YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uWjXJRYIpipPpWrj9I36sg7fSf+
uKlhDe6aBXen6DE+rgqEi65BOcaoVkQUVEih2LCSFZ2c2MVSU9nrLHZKjJf+T4G6
B/OlN/dzCViJTHHvScXt2JEZJauJ6Pebc+bKGGM+tjNlu20n5NW5Hm/EGdiA+HAd
ZwHZxnuz0GvTRvI8yNRHeTzjj3xLXSj9hj5GLd8eagq0bDoLXubIRcFO3YaqPXBl
K39EcEA8Cfh4rIfXCFK3qtii+Dk7pcGjnDe2/G60xkVTypDDeOgE9KoxJkPNCOWu
NAxNzGlphiXAWzHd4XhpCps3DCtL0mTXKS/qaU6Z5j7kJQyvWtaxlQTH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/zlbyw+0cUkjQk6cdM2b/d92w/MB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWatIbElj
e/r2+z+Ei+trN1bqeXb2wQnGyMwJ50oVB2U4QbX9UjkwGOzDJ9to3hbrEtgM5ijk
eZtAsRhHl8Dv+yAfnt04dDS+Y/JA9CIoDyOAn5A//toLPbZgbadwtrm4JwxuEzas
bAZR7Nx9hI1GsMvtKyZ4xI/r02np/NbHcQ6ezIx9/9SwHiRrEFGf2V+ydU4Qqqbx
tNp2JPTBRrCKJwtcON3UJFHpd/0wNSqR3/CgCjeCxJfQgc468Cn4XbrLTG4/yZeA
HiPBgdKxZ/uIc0yJiwxSx+WT6Ra8PdUQKiQ8E7IfkgfKVuK1FQD+y6qEHCyEcvBM
d+W7KfDdCG362g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:52:39 2025 by rpki-client