Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: EYtnczYu6RqtllPFuq38zZYk+KruGJHfKGp7g8+ZvIY=
Subject key identifier: 1F:51:28:AD:D6:E9:BF:C3:54:E2:48:1F:2E:97:EE:1E:B6:BC:FB:FC
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 0194C507E9D7713AAE1A63D8C5FE30E3AC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 142F
Signing time: Sun 02 Feb 2025 05:00:17 +0000
Manifest this update: Sun 02 Feb 2025 05:00:17 +0000
Manifest next update: Mon 03 Feb 2025 05:00:17 +0000
Files and hashes: 1: 6qAIt9V6Tuc9FVGp-Mx0RnmXJnc.roa (hash: CiYXMrIwOkUf5P8W6OuLsiwB9SuH3vnA0mKQsfSXJRs=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: 8K8jvCIioC5xvMmKmD5065G0GEbiPaR45QACDGCclrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:07:e9:d7:71:3a:ae:1a:63:d8:c5:fe:30:e3:ac:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Feb 2 05:00:17 2025 GMT
Not After : Feb 3 05:00:17 2025 GMT
Subject: CN=1f5128add6e9bfc354e2481f2e97ee1eb6bcfbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:9f:dc:be:b1:6a:0d:92:cd:28:9d:81:e0:
bf:f1:1e:63:a4:e4:1b:38:44:c3:36:d6:86:98:0f:
ff:90:b1:d9:65:80:37:c7:9f:ab:6e:60:f0:46:ac:
a2:47:f1:42:0a:40:22:ff:cc:b3:57:0b:8c:d4:10:
d3:36:94:2e:3f:61:76:d1:08:d1:48:e3:e3:7f:ac:
08:4b:59:08:4b:e0:c0:fc:03:20:92:60:c1:a4:37:
ee:b0:87:ec:3a:e3:be:2d:9c:e3:6d:b0:ae:2d:92:
3e:98:d1:4a:85:b4:2e:e2:b7:ec:89:63:7c:a7:99:
4e:c9:d9:92:5b:1f:62:7d:57:60:0d:ec:49:88:0b:
1c:85:23:8e:de:c6:76:80:41:5b:f4:a6:a1:5e:3b:
f6:86:9b:f1:4a:89:60:02:70:a9:48:a8:36:70:54:
bc:47:4f:70:39:1f:27:b0:1e:a4:43:ff:8c:36:b3:
6a:6d:e0:47:aa:fe:93:63:d0:2e:7f:3f:16:77:d1:
b0:dd:f9:93:59:6d:33:22:87:fe:f8:3e:32:39:17:
a3:b1:ad:2e:7f:74:7e:bc:bb:1f:9f:b9:58:fe:d9:
9c:03:5b:ab:3d:12:02:5e:a0:9e:85:5b:7e:25:68:
93:90:07:00:fa:d6:95:75:5e:1d:35:21:a2:09:b6:
d3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:51:28:AD:D6:E9:BF:C3:54:E2:48:1F:2E:97:EE:1E:B6:BC:FB:FC
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:65:3a:a1:1e:fa:ba:1c:9a:e3:a6:18:be:be:bd:d8:75:5a:
c8:87:bb:51:b1:2c:58:49:f0:3b:f8:3b:6e:6c:c1:c2:d4:bd:
2d:b0:ce:16:a0:f5:4c:97:18:1e:39:91:48:4b:e2:a1:9a:4c:
6c:7e:3c:61:de:b3:e5:e8:80:42:25:13:cf:53:22:33:1c:75:
7e:db:27:89:01:b3:ba:b7:92:89:07:6e:1d:71:0c:ba:62:81:
42:00:4c:cc:8f:ad:04:89:26:73:c9:83:17:7e:96:84:fe:f8:
3e:09:b9:c3:53:0b:28:7b:4d:15:34:19:eb:e7:61:74:2e:69:
31:86:0d:58:41:2f:44:73:e7:a1:4d:0a:bb:f2:49:dc:c4:26:
a2:3c:e3:79:ed:bc:be:d1:b6:a8:be:36:bd:e9:a5:d9:23:cd:
e0:33:90:79:66:ba:19:44:f6:ca:1f:db:24:62:c9:1a:62:35:
b7:99:b2:d1:2a:d2:bc:2e:51:c9:7b:75:2d:08:a9:01:ed:1b:
54:b2:71:4e:2c:c3:1a:98:f1:97:18:64:5e:b0:2a:d5:67:f6:
d2:4e:e7:63:4f:71:02:23:b8:b7:d5:ec:e4:cc:f3:81:5b:f9:
48:0e:47:69:63:8d:91:8f:9f:14:f0:4b:fb:db:d4:3b:be:ee:
25:d3:cb:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTFB+nXcTquGmPYxf4w46ybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm
YTM5NjgwHhcNMjUwMjAyMDUwMDE3WhcNMjUwMjAzMDUwMDE3WjAzMTEwLwYDVQQD
EygxZjUxMjhhZGQ2ZTliZmMzNTRlMjQ4MWYyZTk3ZWUxZWI2YmNmYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwef3L6xag2SzSidgeC/8R5jpOQb
OETDNtaGmA//kLHZZYA3x5+rbmDwRqyiR/FCCkAi/8yzVwuM1BDTNpQuP2F20QjR
SOPjf6wIS1kIS+DA/AMgkmDBpDfusIfsOuO+LZzjbbCuLZI+mNFKhbQu4rfsiWN8
p5lOydmSWx9ifVdgDexJiAschSOO3sZ2gEFb9KahXjv2hpvxSolgAnCpSKg2cFS8
R09wOR8nsB6kQ/+MNrNqbeBHqv6TY9Aufz8Wd9Gw3fmTWW0zIof++D4yORejsa0u
f3R+vLsfn7lY/tmcA1urPRICXqCehVt+JWiTkAcA+taVdV4dNSGiCbbT8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9RKK3W6b/DVOJIHy6X7h62vPv8MB8GA1UdIwQY
MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt
Mzg3YWZhMGE1MzRmLzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm
LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWU6oR76
uhya46YYvr692HVayIe7UbEsWEnwO/g7bmzBwtS9LbDOFqD1TJcYHjmRSEvioZpM
bH48Yd6z5eiAQiUTz1MiMxx1ftsniQGzureSiQduHXEMumKBQgBMzI+tBIkmc8mD
F36WhP74Pgm5w1MLKHtNFTQZ6+dhdC5pMYYNWEEvRHPnoU0Ku/JJ3MQmojzjee28
vtG2qL42veml2SPN4DOQeWa6GUT2yh/bJGLJGmI1t5my0SrSvC5RyXt1LQipAe0b
VLJxTizDGpjxlxhkXrAq1Wf20k7nY09xAiO4t9Xs5MzzgVv5SA5HaWONkY+fFPBL
+9vUO77uJdPLuA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:44:22 2025 by rpki-client