Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
File: zgj-M6XwugsoYlNQW7-ykyIPWBY.mft (raw, json)
Hash identifier: 1dCGE2Rd3EcUhuyiNp+56FLVKmnzJJcVRlqkKtsu4UM=
Subject key identifier: 45:42:E8:D0:91:15:35:EF:1D:37:31:E5:F0:EB:A1:26:A2:6E:6B:81
Authority key identifier: CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
Certificate issuer: /CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Certificate serial: 01963F8B5E32A797822DD2D12EE1945DAAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
Manifest number: 0A67
Signing time: Wed 16 Apr 2025 17:00:20 +0000
Manifest this update: Wed 16 Apr 2025 17:00:20 +0000
Manifest next update: Thu 17 Apr 2025 17:00:20 +0000
Files and hashes: 1: B8TmpTIld46zLBK0-B3daz7YHhY.roa (hash: cFhKXA0OqtddifzterPyToaMFZ67uadtC/NjCzS5eJ0=)
2: zgj-M6XwugsoYlNQW7-ykyIPWBY.crl (hash: tkqJNQFeXuFmQt/X7wFCWiXd118HVGzbTdqk+WEvv64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:5e:32:a7:97:82:2d:d2:d1:2e:e1:94:5d:aa:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce08fe33a5f0ba0b286253505bbfb293220f5816
Validity
Not Before: Apr 16 17:00:20 2025 GMT
Not After : Apr 17 17:00:20 2025 GMT
Subject: CN=4542e8d0911535ef1d3731e5f0eba126a26e6b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2f:c6:84:15:f1:33:77:a9:9f:dd:ae:67:df:
64:f1:e7:1f:5b:7b:dc:1f:f1:da:95:20:b0:3d:8a:
69:67:fb:5e:47:4b:ee:a0:2d:9d:67:91:f2:30:38:
db:e2:b2:27:a2:6b:ca:32:63:84:e7:23:73:f5:90:
fc:62:91:80:b2:9e:02:3e:a7:f4:ef:ed:57:55:62:
74:d6:1d:df:6f:e3:1a:f1:2e:07:5b:32:4a:a4:f5:
62:f0:66:01:3a:7a:d3:f9:8c:96:ff:d6:ad:d5:97:
3b:c7:85:89:9b:67:87:e4:57:8a:69:f3:fc:6e:be:
4d:ed:a6:39:d3:ca:58:77:87:99:fe:a0:d8:62:c6:
f8:47:6b:4e:e1:dc:24:de:7b:c7:11:9a:83:65:71:
47:e0:e3:3d:77:c5:c1:26:19:7f:8d:9c:63:36:10:
33:89:1a:24:1a:d0:31:be:70:fc:89:32:a4:5f:4a:
6f:25:79:30:83:ad:44:42:1b:66:c7:b2:51:f9:55:
16:6b:56:c9:d3:4e:71:d3:e2:c6:9f:33:87:0c:5c:
c5:2e:2e:52:d9:60:6d:bc:20:82:f7:1a:06:20:90:
86:29:d9:e8:77:26:e6:bd:18:5f:c7:c6:94:06:76:
8b:98:2b:cb:dc:09:50:14:4a:2e:64:8b:79:48:f8:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:42:E8:D0:91:15:35:EF:1D:37:31:E5:F0:EB:A1:26:A2:6E:6B:81
X509v3 Authority Key Identifier:
keyid:CE:08:FE:33:A5:F0:BA:0B:28:62:53:50:5B:BF:B2:93:22:0F:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgj-M6XwugsoYlNQW7-ykyIPWBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a55cf-ce4a-498d-bcd7-d8cfe591dd9e/1/zgj-M6XwugsoYlNQW7-ykyIPWBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:57:a2:dd:35:a4:ca:b8:4d:f1:ed:da:e2:a7:11:fa:4a:5f:
7d:60:f7:29:5a:44:c3:54:a5:13:1f:57:1a:86:c8:75:8b:3b:
60:1c:6b:01:1b:da:e2:7c:a9:8c:02:22:c3:11:c4:2d:d2:77:
7c:42:4c:a8:c9:87:0d:5a:52:5e:02:34:99:d8:d8:44:d2:f1:
79:bf:45:d8:5b:b4:fc:57:44:f7:27:fa:34:68:f4:5b:b2:b8:
0c:74:af:b7:83:2f:d7:c4:48:29:f6:bb:2e:97:a1:52:5a:75:
b3:dc:46:48:71:ce:a3:93:d5:1f:7c:38:55:c3:38:cc:c8:0a:
09:04:ea:bc:4e:0b:c9:c3:0f:52:df:dc:05:a6:e9:29:ed:f6:
54:df:c0:38:5b:72:86:5d:8f:74:f9:c3:a8:89:34:06:60:53:
f3:58:58:ed:dc:c5:5d:2b:95:7c:b5:b9:1e:8b:5b:0f:d4:ce:
86:12:07:eb:70:e7:73:bf:34:42:b1:0e:4b:cf:55:ee:c8:ca:
a4:7f:4a:18:bc:b3:10:88:dc:8f:5e:46:7e:f1:75:6b:b0:a9:
f3:64:5e:e3:9c:c3:56:53:c5:67:e8:b2:61:99:64:e2:13:dd:
da:14:71:7b:ef:49:f6:7d:27:78:75:fd:29:62:00:b8:67:e1:
ad:df:fa:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/i14yp5eCLdLRLuGUXarEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMDhmZTMzYTVmMGJhMGIyODYyNTM1MDViYmZiMjkzMjIw
ZjU4MTYwHhcNMjUwNDE2MTcwMDIwWhcNMjUwNDE3MTcwMDIwWjAzMTEwLwYDVQQD
Eyg0NTQyZThkMDkxMTUzNWVmMWQzNzMxZTVmMGViYTEyNmEyNmU2YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9C/GhBXxM3epn92uZ99k8ecfW3vc
H/HalSCwPYppZ/teR0vuoC2dZ5HyMDjb4rInomvKMmOE5yNz9ZD8YpGAsp4CPqf0
7+1XVWJ01h3fb+Ma8S4HWzJKpPVi8GYBOnrT+YyW/9at1Zc7x4WJm2eH5FeKafP8
br5N7aY508pYd4eZ/qDYYsb4R2tO4dwk3nvHEZqDZXFH4OM9d8XBJhl/jZxjNhAz
iRokGtAxvnD8iTKkX0pvJXkwg61EQhtmx7JR+VUWa1bJ005x0+LGnzOHDFzFLi5S
2WBtvCCC9xoGIJCGKdnodybmvRhfx8aUBnaLmCvL3AlQFEouZIt5SPgw9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVC6NCRFTXvHTcx5fDroSaibmuBMB8GA1UdIwQY
MBaAFM4I/jOl8LoLKGJTUFu/spMiD1gWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDct
ZDhjZmU1OTFkZDllLzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU1Y2YtY2U0YS00OThkLWJjZDctZDhjZmU1OTFkZDll
LzEvemdqLU02WHd1Z3NvWWxOUVc3LXlreUlQV0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlei3TWk
yrhN8e3a4qcR+kpffWD3KVpEw1SlEx9XGobIdYs7YBxrARva4nypjAIiwxHELdJ3
fEJMqMmHDVpSXgI0mdjYRNLxeb9F2Fu0/FdE9yf6NGj0W7K4DHSvt4Mv18RIKfa7
LpehUlp1s9xGSHHOo5PVH3w4VcM4zMgKCQTqvE4LycMPUt/cBabpKe32VN/AOFty
hl2PdPnDqIk0BmBT81hY7dzFXSuVfLW5HotbD9TOhhIH63Dnc780QrEOS89V7sjK
pH9KGLyzEIjcj15GfvF1a7Cp82Re45zDVlPFZ+iyYZlk4hPd2hRxe+9J9n0neHX9
KWIAuGfhrd/6wA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:13:35 2025 by rpki-client