Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: jVIZ+QtbVKb/TH8ZbPDBR79L8xNhfSB0KUE7YqBZRZc=
Subject key identifier: AF:31:C6:96:1A:97:88:50:E2:9C:A3:42:0C:CE:1A:BC:C4:FB:7B:12
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 01958B16F2C67EC5BF35111713B95FC852FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 094F
Signing time: Wed 12 Mar 2025 16:01:31 +0000
Manifest this update: Wed 12 Mar 2025 16:01:31 +0000
Manifest next update: Thu 13 Mar 2025 16:01:31 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: XpxrlvmXneHsT/x6ecwjGjLrMVTQmKfdCscroa7M0AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:f2:c6:7e:c5:bf:35:11:17:13:b9:5f:c8:52:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Mar 12 16:01:31 2025 GMT
Not After : Mar 13 16:01:31 2025 GMT
Subject: CN=af31c6961a978850e29ca3420cce1abcc4fb7b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:e2:a8:b1:38:53:c4:d9:f2:4f:1e:e3:82:
01:31:43:f9:78:ee:72:8f:89:86:09:52:ff:e9:fb:
c1:3f:6b:af:0a:ce:6d:74:43:0d:67:29:a8:68:dc:
9f:7d:97:66:94:e6:c4:1c:d7:81:a9:db:81:f9:9c:
61:45:e9:74:cb:f2:2e:aa:63:e7:ef:90:10:fe:45:
03:3c:98:de:5d:fb:2f:f5:16:e4:34:da:21:76:af:
09:98:7e:99:70:f1:cf:4f:5d:44:da:99:27:45:9f:
be:02:99:ad:54:0e:f9:39:44:87:f9:63:e6:e1:d1:
6b:39:c2:b4:2f:3b:43:16:bc:33:95:34:f7:6d:b6:
34:e1:a5:0c:fa:4b:6b:6f:79:b4:32:7e:ff:68:55:
89:31:4d:19:58:97:49:5c:73:a0:ef:de:73:4b:38:
95:34:65:d2:3b:ea:c8:ea:65:7d:51:7d:a4:22:e8:
f9:ef:c9:a6:1a:23:a5:c0:21:34:c8:8d:2b:28:66:
fd:9c:9d:2d:74:cb:f0:25:05:3f:42:4a:4e:0d:50:
77:ab:44:dc:31:9b:3e:af:df:5e:8b:79:e4:ba:74:
79:57:79:66:90:9c:07:4b:00:05:38:71:ef:12:ec:
70:5b:60:ec:ae:93:6a:ca:1b:a8:bd:6b:f8:b4:5b:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:31:C6:96:1A:97:88:50:E2:9C:A3:42:0C:CE:1A:BC:C4:FB:7B:12
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fc:56:e4:ad:2c:3e:0c:98:ea:84:f6:e0:a1:ba:f0:35:0b:
c1:e3:3c:e1:a9:28:63:f1:78:41:8e:05:b6:75:9b:b3:61:74:
91:2d:c5:da:01:37:de:cc:eb:85:60:3b:91:ba:e1:91:5d:23:
c1:a0:72:8c:e1:92:da:78:c2:c7:d2:1b:14:fc:1a:4d:65:2f:
e3:7c:6c:2f:00:bb:ff:7c:5c:c7:d2:7d:26:40:11:58:f7:c3:
b6:99:ae:58:2d:a5:4a:95:4e:65:14:fc:54:32:67:64:57:d4:
41:7a:a8:fd:31:c3:3c:9b:7d:da:e7:d2:4b:27:31:88:83:60:
7b:5e:81:e4:c8:a8:37:78:e9:f0:34:83:f1:cd:2a:14:95:97:
a4:a0:39:0b:c7:e1:7c:a7:5c:a5:ad:a6:63:42:ca:30:25:2a:
87:c7:87:f8:ff:18:87:cc:42:d8:89:4c:2b:92:d6:7d:68:3d:
e4:02:ed:5d:9e:eb:a0:71:2c:e5:54:84:99:9a:7a:60:a2:d3:
b7:2a:9e:32:19:8b:8f:b9:f9:52:25:11:05:bb:d8:50:08:92:
87:cf:45:b0:26:89:18:a0:fd:e9:ad:e7:02:b8:37:a3:32:1b:
3b:1d:ad:dd:c3:d4:f9:72:55:60:50:15:34:48:6f:de:52:d2:
ff:52:93:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFvLGfsW/NREXE7lfyFL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmMzMGYzNDQ5M2M0NTJhMTczZTRkZTBjNDYyYzgzYTcx
MWMzMzgwHhcNMjUwMzEyMTYwMTMxWhcNMjUwMzEzMTYwMTMxWjAzMTEwLwYDVQQD
EyhhZjMxYzY5NjFhOTc4ODUwZTI5Y2EzNDIwY2NlMWFiY2M0ZmI3YjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEHiqLE4U8TZ8k8e44IBMUP5eO5y
j4mGCVL/6fvBP2uvCs5tdEMNZymoaNyffZdmlObEHNeBqduB+ZxhRel0y/IuqmPn
75AQ/kUDPJjeXfsv9RbkNNohdq8JmH6ZcPHPT11E2pknRZ++ApmtVA75OUSH+WPm
4dFrOcK0LztDFrwzlTT3bbY04aUM+ktrb3m0Mn7/aFWJMU0ZWJdJXHOg795zSziV
NGXSO+rI6mV9UX2kIuj578mmGiOlwCE0yI0rKGb9nJ0tdMvwJQU/QkpODVB3q0Tc
MZs+r99ei3nkunR5V3lmkJwHSwAFOHHvEuxwW2DsrpNqyhuovWv4tFvT8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8xxpYal4hQ4pyjQgzOGrzE+3sSMB8GA1UdIwQY
MBaAFM8sMPNEk8RSoXPk3gxGLIOnEcM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAt
NWE5MjJhNjJjNTcxLzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82ZjY3NTgtYzIzMy00YWMwLTk5YjAtNWE5MjJhNjJjNTcx
LzEvenl3dzgwU1R4RktoYy1UZURFWXNnNmNSd3pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/xW5K0s
PgyY6oT24KG68DULweM84akoY/F4QY4FtnWbs2F0kS3F2gE33szrhWA7kbrhkV0j
waByjOGS2njCx9IbFPwaTWUv43xsLwC7/3xcx9J9JkARWPfDtpmuWC2lSpVOZRT8
VDJnZFfUQXqo/THDPJt92ufSSycxiINge16B5MioN3jp8DSD8c0qFJWXpKA5C8fh
fKdcpa2mY0LKMCUqh8eH+P8Yh8xC2IlMK5LWfWg95ALtXZ7roHEs5VSEmZp6YKLT
tyqeMhmLj7n5UiURBbvYUAiSh89FsCaJGKD96a3nArg3ozIbOx2t3cPU+XJVYFAV
NEhv3lLS/1KTKg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:32 2025 by rpki-client