Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
File: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft (raw, json)
Hash identifier: J7r9Nt0PL3CQV51GCp5feLdcxkEkIM/gj0mIlL66rbg=
Subject key identifier: 10:A0:9C:63:26:61:1A:00:B7:BC:38:58:EF:13:6C:9B:1A:E3:57:BC
Authority key identifier: D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
Certificate issuer: /CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Certificate serial: 01963FF9B9524F427606D547AD910DC62F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
Manifest number: 0245
Signing time: Wed 16 Apr 2025 19:00:52 +0000
Manifest this update: Wed 16 Apr 2025 19:00:52 +0000
Manifest next update: Thu 17 Apr 2025 19:00:52 +0000
Files and hashes: 1: 0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl (hash: y35jfj5Se2ZtYn+u05FfKQIfLa1BoiV8JN1J6fUkdUs=)
2: 3P6wXNJcDC3b35lAwjjqX-1dpME.roa (hash: u7hgo1u27j1RyUhAH8Or7hL0YQ+vaU+na5DgQVVElfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:b9:52:4f:42:76:06:d5:47:ad:91:0d:c6:2f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1993f78cae4459a9b9e2689ad30f0bc44cc6724
Validity
Not Before: Apr 16 19:00:52 2025 GMT
Not After : Apr 17 19:00:52 2025 GMT
Subject: CN=10a09c6326611a00b7bc3858ef136c9b1ae357bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:8e:bb:28:83:dd:a9:11:e3:95:33:c6:a5:
2b:77:f3:ab:9e:56:25:b9:9e:f1:55:a7:17:e6:fc:
58:62:16:b8:6a:ba:a8:7e:0d:f3:16:ff:cd:f1:eb:
bc:0f:1c:c5:5f:98:e2:8c:df:7b:fc:16:dc:a6:a7:
44:1b:80:9f:0a:3e:cc:fe:d3:cf:9c:bc:1e:40:70:
02:d1:9c:ff:bd:d1:45:76:a2:b6:77:0c:34:5f:32:
d5:67:70:e9:c7:90:59:fc:d4:21:53:90:1b:07:10:
76:1d:b3:ff:c8:13:10:71:38:23:b3:ea:f4:5d:14:
0f:2b:0b:ca:57:5f:dc:f0:68:fa:08:ff:7e:09:34:
26:9d:8f:56:a3:fd:f2:d6:da:1c:4d:b5:f2:9d:10:
4d:df:2a:a6:58:fe:fa:13:6d:08:ec:0a:84:11:3b:
dc:43:77:4c:08:db:97:6f:08:12:08:f3:da:31:a1:
a3:f2:96:99:74:78:a6:35:0d:be:ed:4b:cf:86:60:
f3:c4:67:85:0c:b7:5b:72:df:9e:e7:cd:d5:79:84:
24:a5:e5:a8:c8:e2:51:f9:27:ae:ca:f4:07:8e:01:
b9:ca:af:9a:0d:39:06:92:1c:3f:07:00:2d:37:b4:
ac:df:5d:a6:4d:dd:32:4e:1c:c5:04:a6:8a:d6:e3:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A0:9C:63:26:61:1A:00:B7:BC:38:58:EF:13:6C:9B:1A:E3:57:BC
X509v3 Authority Key Identifier:
keyid:D1:99:3F:78:CA:E4:45:9A:9B:9E:26:89:AD:30:F0:BC:44:CC:67:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Zk_eMrkRZqbniaJrTDwvETMZyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2ebc79-7b94-4bf8-9133-4b05774de371/1/0Zk_eMrkRZqbniaJrTDwvETMZyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:dc:63:ee:69:5f:7f:16:bd:6d:49:98:b4:f5:7b:a6:21:
11:71:40:f2:f1:da:8b:34:44:05:bd:75:38:48:93:40:22:e9:
31:f0:21:fe:2b:a2:4a:3e:7b:6f:a6:a6:0d:79:23:94:f1:2d:
15:af:5b:f2:ea:02:2b:f8:5b:9a:6c:df:16:f8:e4:c3:26:9f:
e5:ea:5d:26:98:27:84:4e:9a:f1:5a:a6:e1:71:60:9c:71:6d:
fc:a2:7e:e5:e5:f4:32:39:53:90:ae:3d:7d:48:0f:d2:3a:74:
69:9d:3f:d2:f9:3d:9c:62:b4:6b:09:48:c0:23:a5:68:f8:91:
e4:be:9a:77:69:1d:2e:45:9a:a5:8e:b8:0a:df:b2:7d:db:f9:
76:6e:f8:59:90:97:36:49:36:76:6a:e3:21:2f:33:ba:ed:8c:
bd:42:86:f8:c2:bd:4b:77:51:59:0b:20:8d:ae:20:23:28:9c:
b3:f3:a4:68:f0:27:bf:20:21:b6:2c:b4:3a:9f:1a:0a:ca:ae:
d8:63:80:59:d7:97:b7:c0:ff:53:8d:2a:4f:11:bd:d3:02:58:
12:8d:37:91:ce:62:67:cc:e4:b5:32:29:1d:fc:0c:e1:6a:c0:
5e:df:6e:d1:6c:c9:c5:bf:fa:dc:6e:01:67:e4:8a:9b:ec:71:
3d:8a:6f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+blST0J2BtVHrZENxi9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTkzZjc4Y2FlNDQ1OWE5YjllMjY4OWFkMzBmMGJjNDRj
YzY3MjQwHhcNMjUwNDE2MTkwMDUyWhcNMjUwNDE3MTkwMDUyWjAzMTEwLwYDVQQD
EygxMGEwOWM2MzI2NjExYTAwYjdiYzM4NThlZjEzNmM5YjFhZTM1N2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KOuyiD3akR45UzxqUrd/OrnlYl
uZ7xVacX5vxYYha4arqofg3zFv/N8eu8DxzFX5jijN97/BbcpqdEG4CfCj7M/tPP
nLweQHAC0Zz/vdFFdqK2dww0XzLVZ3Dpx5BZ/NQhU5AbBxB2HbP/yBMQcTgjs+r0
XRQPKwvKV1/c8Gj6CP9+CTQmnY9Wo/3y1tocTbXynRBN3yqmWP76E20I7AqEETvc
Q3dMCNuXbwgSCPPaMaGj8paZdHimNQ2+7UvPhmDzxGeFDLdbct+e583VeYQkpeWo
yOJR+SeuyvQHjgG5yq+aDTkGkhw/BwAtN7Ss312mTd0yThzFBKaK1uNnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCgnGMmYRoAt7w4WO8TbJsa41e8MB8GA1UdIwQY
MBaAFNGZP3jK5EWam54mia0w8LxEzGckMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMt
NGIwNTc3NGRlMzcxLzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8yZWJjNzktN2I5NC00YmY4LTkxMzMtNGIwNTc3NGRlMzcx
LzEvMFprX2VNcmtSWnFibmlhSnJURHd2RVRNWnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGrcY+5p
X38WvW1JmLT1e6YhEXFA8vHaizREBb11OEiTQCLpMfAh/iuiSj57b6amDXkjlPEt
Fa9b8uoCK/hbmmzfFvjkwyaf5epdJpgnhE6a8Vqm4XFgnHFt/KJ+5eX0MjlTkK49
fUgP0jp0aZ0/0vk9nGK0awlIwCOlaPiR5L6ad2kdLkWapY64Ct+yfdv5dm74WZCX
Nkk2dmrjIS8zuu2MvUKG+MK9S3dRWQsgja4gIyics/OkaPAnvyAhtiy0Op8aCsqu
2GOAWdeXt8D/U40qTxG90wJYEo03kc5iZ8zktTIpHfwM4WrAXt9u0WzJxb/63G4B
Z+SKm+xxPYpvPA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:17:44 2025 by rpki-client