Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
File: zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft (raw, json)
Hash identifier: lDyrOiH3N6ZmkVE+7/VyC5N7hoaI0C2N3PnvHa5IVkQ=
Subject key identifier: 1C:B1:4C:21:1D:38:B0:C9:AE:69:45:93:31:51:A3:6E:84:F4:E1:D3
Authority key identifier: CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
Certificate issuer: /CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Certificate serial: 01958C603C4599E846B17811E5EAFEA989B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
Manifest number: 0A8C
Signing time: Wed 12 Mar 2025 22:01:11 +0000
Manifest this update: Wed 12 Mar 2025 22:01:11 +0000
Manifest next update: Thu 13 Mar 2025 22:01:11 +0000
Files and hashes: 1: qrZKSOFpAICcNRLOx5AIirWqvBo.roa (hash: h3wCdr8A46DdDE5I42tcnvu/LE64VypZvT4djSXNycs=)
2: zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl (hash: RStfZ7FQdKFwi5dP9s2bnKanmh1sq80810hmDhFMJrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:3c:45:99:e8:46:b1:78:11:e5:ea:fe:a9:89:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc55f76cfe9dafb2d94190142bc8aab0d32806ee
Validity
Not Before: Mar 12 22:01:11 2025 GMT
Not After : Mar 13 22:01:11 2025 GMT
Subject: CN=1cb14c211d38b0c9ae6945933151a36e84f4e1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:f7:65:20:10:4a:98:bc:63:aa:4e:28:60:
16:26:58:85:f4:c0:86:4d:63:e8:a2:a0:86:13:1f:
8c:f6:3f:d4:57:75:9b:19:6e:4c:44:02:96:99:10:
03:f9:52:40:62:45:8c:64:e8:cc:6c:29:70:7e:5b:
ce:6b:39:46:56:6b:45:70:55:35:51:8f:79:18:37:
75:e4:a5:43:4a:b2:df:0e:4c:69:6f:24:57:95:84:
17:24:ef:5a:e5:b5:23:92:1d:0f:0f:0d:09:7f:24:
b0:44:b4:c9:0d:52:a8:24:cf:12:b4:2c:a3:bc:c8:
82:81:a4:4f:60:8a:28:8a:18:17:0c:81:dc:85:82:
ef:8a:a9:5f:0e:24:48:80:ef:e6:d9:d2:4e:ec:66:
3b:8a:a0:c8:f9:e9:be:80:f1:14:88:69:45:b0:6f:
80:96:96:6d:52:73:6b:67:13:98:2e:22:e0:96:07:
9e:5b:e1:c9:3e:ad:c5:66:ca:f9:9c:b8:8a:40:c3:
7d:64:3b:39:bf:78:5b:80:7e:9a:35:8a:bb:9c:21:
57:b2:ab:50:3c:24:57:c9:20:b6:39:9f:fe:21:f4:
81:10:b5:be:f0:17:e9:0b:e4:bf:aa:02:93:8b:6f:
05:f8:5f:bd:57:6a:72:99:a0:67:6c:70:95:12:5c:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:4C:21:1D:38:B0:C9:AE:69:45:93:31:51:A3:6E:84:F4:E1:D3
X509v3 Authority Key Identifier:
keyid:CC:55:F7:6C:FE:9D:AF:B2:D9:41:90:14:2B:C8:AA:B0:D3:28:06:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFX3bP6dr7LZQZAUK8iqsNMoBu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d81f14-1ff4-42b1-9b9f-34cd0575e1cb/1/zFX3bP6dr7LZQZAUK8iqsNMoBu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ba:fa:f8:e7:96:3b:55:6a:ae:0d:3a:96:3f:25:1f:9d:28:
b8:7b:2a:4c:14:dd:63:74:91:35:21:66:dd:2d:0b:73:a8:40:
36:7e:b8:2e:5b:a7:a3:21:66:6b:63:53:7b:e7:6f:07:50:0a:
7f:eb:b8:1d:42:f3:6e:95:ce:1b:ba:8b:5e:58:f7:a5:2d:d4:
61:33:e3:65:7e:74:89:dd:85:aa:7e:2f:de:77:79:a7:da:59:
1a:c4:0e:eb:6c:1c:e0:6b:d2:1f:10:54:95:6e:35:47:dd:f0:
6c:b5:d9:d6:e8:dd:a8:12:94:07:b0:e2:97:81:2c:0f:29:3b:
a1:c9:a1:42:30:55:2d:5f:46:06:fb:0f:84:a4:42:99:38:c7:
10:ce:19:7a:36:88:2e:ea:eb:05:8c:2c:77:79:8a:73:23:81:
72:5d:ef:8d:be:a7:49:d9:e1:fa:27:71:20:5e:20:67:38:7b:
d8:ae:aa:74:d7:86:c4:b5:50:92:be:c2:54:5f:ad:05:49:f7:
8b:4f:ef:96:9d:6a:f2:81:c7:18:43:f4:b6:be:2c:f5:51:e2:
df:bb:89:7c:f8:d3:a8:0e:20:b3:50:ac:e6:0d:74:3d:e4:aa:
71:27:28:7f:a5:bd:01:a4:36:b1:ea:9e:c4:67:ca:1f:6f:cd:
ae:ec:e3:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYDxFmehGsXgR5er+qYmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNTVmNzZjZmU5ZGFmYjJkOTQxOTAxNDJiYzhhYWIwZDMy
ODA2ZWUwHhcNMjUwMzEyMjIwMTExWhcNMjUwMzEzMjIwMTExWjAzMTEwLwYDVQQD
EygxY2IxNGMyMTFkMzhiMGM5YWU2OTQ1OTMzMTUxYTM2ZTg0ZjRlMWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qb3ZSAQSpi8Y6pOKGAWJliF9MCG
TWPooqCGEx+M9j/UV3WbGW5MRAKWmRAD+VJAYkWMZOjMbClwflvOazlGVmtFcFU1
UY95GDd15KVDSrLfDkxpbyRXlYQXJO9a5bUjkh0PDw0JfySwRLTJDVKoJM8StCyj
vMiCgaRPYIooihgXDIHchYLviqlfDiRIgO/m2dJO7GY7iqDI+em+gPEUiGlFsG+A
lpZtUnNrZxOYLiLglgeeW+HJPq3FZsr5nLiKQMN9ZDs5v3hbgH6aNYq7nCFXsqtQ
PCRXySC2OZ/+IfSBELW+8BfpC+S/qgKTi28F+F+9V2pymaBnbHCVElx0UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByxTCEdOLDJrmlFkzFRo26E9OHTMB8GA1UdIwQY
MBaAFMxV92z+na+y2UGQFCvIqrDTKAbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYt
MzRjZDA1NzVlMWNiLzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kODFmMTQtMWZmNC00MmIxLTliOWYtMzRjZDA1NzVlMWNi
LzEvekZYM2JQNmRyN0xaUVpBVUs4aXFzTk1vQnU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrr6+OeW
O1Vqrg06lj8lH50ouHsqTBTdY3SRNSFm3S0Lc6hANn64LlunoyFma2NTe+dvB1AK
f+u4HULzbpXOG7qLXlj3pS3UYTPjZX50id2Fqn4v3nd5p9pZGsQO62wc4GvSHxBU
lW41R93wbLXZ1ujdqBKUB7Dil4EsDyk7ocmhQjBVLV9GBvsPhKRCmTjHEM4ZejaI
LurrBYwsd3mKcyOBcl3vjb6nSdnh+idxIF4gZzh72K6qdNeGxLVQkr7CVF+tBUn3
i0/vlp1q8oHHGEP0tr4s9VHi37uJfPjTqA4gs1Cs5g10PeSqcScof6W9AaQ2seqe
xGfKH2/Nruzjcg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:12:57 2025 by rpki-client