Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json)
Hash identifier: KMl+UCfUfM+RytbcyOJapMunnn//HqvS66g9yWbBoyE=
Subject key identifier: 29:57:20:30:9B:5E:09:3D:BB:51:5B:DF:78:91:5B:AC:7C:EE:E0:5D
Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Certificate serial: 01964F6CAC0FF1A427737F6D9584E5709423
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 19:00:44 +0000
Manifest this update: Sat 19 Apr 2025 19:00:44 +0000
Manifest next update: Sun 20 Apr 2025 19:00:44 +0000
Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: PJL92QycO2QZDB+ykLqZEGkJGygWHVRv5iEAyb9CIjY=)
2: qoiJ2dkjuPKR2DINrHtiZnfckMQ.roa (hash: LgXeymWOOJplKwnla/9DQkVIgYhvAdLAg89NuJpLJ/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:ac:0f:f1:a4:27:73:7f:6d:95:84:e5:70:94:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4
Validity
Not Before: Apr 19 19:00:44 2025 GMT
Not After : Apr 20 19:00:44 2025 GMT
Subject: CN=295720309b5e093dbb515bdf78915bac7ceee05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:b4:97:27:b0:f0:20:2b:6b:d5:34:ff:69:
86:66:27:5a:f2:45:59:cf:5b:59:8d:d8:10:fa:c1:
40:dc:dd:15:38:c8:ef:a1:e6:5c:cb:5a:59:97:d4:
db:32:37:72:7b:2e:fe:be:c0:8d:a9:7c:07:c1:0f:
7e:a2:8d:f7:6a:eb:70:34:e1:76:ed:7c:f8:91:3c:
3d:b8:bb:30:7e:57:24:77:76:ee:7e:32:00:53:11:
f9:71:f3:73:98:c2:fe:cb:d2:f8:d8:ca:1a:8b:e7:
78:77:c0:51:c6:63:28:f0:b1:fa:0b:be:38:d8:7c:
76:42:fd:04:28:0d:0d:18:f8:63:bf:71:2d:6d:6a:
19:b4:cd:f8:8d:15:75:bb:89:b8:85:d3:d4:b3:9c:
23:e2:cc:71:7d:d7:f8:66:0f:d7:e8:20:3d:46:18:
14:5d:db:76:5d:a0:21:8c:0e:1d:bc:5e:b9:f4:8a:
80:7a:49:a4:01:e8:21:9f:19:d1:c4:f9:6c:ed:c4:
8f:9a:a0:99:7d:b5:f8:d2:48:3b:4e:f1:97:1e:46:
f9:f6:bf:59:cd:a8:7c:0c:cf:26:5b:e3:a3:8a:7c:
c3:d9:95:79:f8:98:cc:95:b8:19:9d:68:b3:f0:24:
af:02:4f:63:d2:32:dd:1f:0f:0b:91:3d:be:68:a6:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:57:20:30:9B:5E:09:3D:BB:51:5B:DF:78:91:5B:AC:7C:EE:E0:5D
X509v3 Authority Key Identifier:
keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c3:d4:9b:52:22:fc:e0:4a:a8:11:ac:7e:2f:38:2f:e9:28:
2d:1f:5e:07:18:79:26:f8:fb:8d:50:59:b3:03:01:1c:e2:c3:
0a:aa:c3:cf:4c:63:7b:01:39:11:3b:c8:74:5f:7c:1b:fa:b9:
f3:f1:9c:9b:fe:2a:32:11:95:55:6e:27:50:9a:83:58:77:34:
0f:d8:d4:6e:72:2c:25:51:a7:05:44:1b:1a:40:8a:6d:9c:08:
35:e2:fa:5b:84:bd:65:44:cb:2e:f4:ef:72:f9:88:2f:4c:b2:
14:68:89:8b:14:46:fc:6d:f9:01:3d:09:87:86:1d:16:fa:5d:
94:ef:ee:56:ec:d8:61:45:a5:e3:ba:de:62:7a:9c:39:cc:46:
e2:62:72:66:d0:a5:f9:f1:5b:7e:49:bf:00:15:a0:b9:73:47:
24:1a:2c:85:c6:24:04:85:35:ec:a3:60:da:3b:94:30:8c:ad:
4c:3b:61:fe:cc:7a:a8:6d:e4:44:61:65:63:d8:43:b1:f2:4f:
c6:22:a6:18:88:79:fc:df:cb:00:11:c8:68:18:9e:25:79:cb:
fa:55:ba:67:9c:a5:34:df:56:2b:f5:78:af:26:8e:2b:ea:d6:
94:aa:3a:ab:ba:e8:f8:81:c8:0c:4b:f2:08:5f:30:76:a9:03:
db:8a:e2:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbKwP8aQnc39tlYTlcJQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1
YWNmYjQwHhcNMjUwNDE5MTkwMDQ0WhcNMjUwNDIwMTkwMDQ0WjAzMTEwLwYDVQQD
EygyOTU3MjAzMDliNWUwOTNkYmI1MTViZGY3ODkxNWJhYzdjZWVlMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV60lyew8CAra9U0/2mGZida8kVZ
z1tZjdgQ+sFA3N0VOMjvoeZcy1pZl9TbMjdyey7+vsCNqXwHwQ9+oo33autwNOF2
7Xz4kTw9uLswflckd3bufjIAUxH5cfNzmML+y9L42Moai+d4d8BRxmMo8LH6C744
2Hx2Qv0EKA0NGPhjv3EtbWoZtM34jRV1u4m4hdPUs5wj4sxxfdf4Zg/X6CA9RhgU
Xdt2XaAhjA4dvF659IqAekmkAeghnxnRxPls7cSPmqCZfbX40kg7TvGXHkb59r9Z
zah8DM8mW+OjinzD2ZV5+JjMlbgZnWiz8CSvAk9j0jLdHw8LkT2+aKb5sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClXIDCbXgk9u1Fb33iRW6x87uBdMB8GA1UdIwQY
MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt
NWYyODgyZGUzZWM3LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3
LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMPUm1Ii
/OBKqBGsfi84L+koLR9eBxh5Jvj7jVBZswMBHOLDCqrDz0xjewE5ETvIdF98G/q5
8/Gcm/4qMhGVVW4nUJqDWHc0D9jUbnIsJVGnBUQbGkCKbZwINeL6W4S9ZUTLLvTv
cvmIL0yyFGiJixRG/G35AT0Jh4YdFvpdlO/uVuzYYUWl47reYnqcOcxG4mJyZtCl
+fFbfkm/ABWguXNHJBoshcYkBIU17KNg2juUMIytTDth/sx6qG3kRGFlY9hDsfJP
xiKmGIh5/N/LABHIaBieJXnL+lW6Z5ylNN9WK/V4ryaOK+rWlKo6q7ro+IHIDEvy
CF8wdqkD24riGA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:17 2025 by rpki-client