Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.mft (raw, json)
Hash identifier: ag5ngfkbG9sG3D8B0H3x1eBZPSxXc+RKKZYdlP7jbLc=
Subject key identifier: FE:78:03:BB:98:83:D2:D8:04:A2:ED:47:CD:7B:B6:D5:28:2F:DC:5E
Authority key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Certificate issuer: /CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Certificate serial: 0196775582DCC08AEA34C09F72939EA1787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:14 +0000
Manifest this update: Sun 27 Apr 2025 13:00:14 +0000
Manifest next update: Mon 28 Apr 2025 13:00:14 +0000
Files and hashes: 1: EGFdZlaTjbOVYClf_Y2avAhZpcQ.roa (hash: x3O5tXnddOP1tRMR1naKV9GJx9HqGBOVan7EV3M3azI=)
2: ZJn3HhXA84zrolfTAwTtRL6ofFA.crl (hash: GvRKQpzOdu5s8EkU5HeOweHdagMQpRmlS9WV48+vTVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:82:dc:c0:8a:ea:34:c0:9f:72:93:9e:a1:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Validity
Not Before: Apr 27 13:00:14 2025 GMT
Not After : Apr 28 13:00:14 2025 GMT
Subject: CN=fe7803bb9883d2d804a2ed47cd7bb6d5282fdc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:bb:db:ed:a0:27:fb:40:22:2c:37:4c:02:
aa:49:52:d7:eb:be:0b:c8:e4:e2:9b:82:b2:bd:c4:
7f:5c:55:d4:1e:b6:0c:12:0d:67:1b:f9:aa:49:4a:
f0:a8:58:e6:40:d7:8a:e2:2f:71:6f:d7:1e:91:b8:
8a:fd:1e:a3:34:2e:aa:5d:0a:9e:e4:74:57:09:9d:
67:26:7a:b7:86:c6:a6:3e:47:e1:59:ab:45:59:65:
d5:e8:a6:43:0c:e4:55:22:9e:6f:d5:9b:a5:97:f6:
fd:ea:c1:c2:33:88:6f:2c:f0:be:14:9a:55:72:9b:
00:5a:01:4b:3b:8f:ee:ea:28:50:5a:13:72:45:e6:
89:36:d7:52:dc:e3:75:f5:ca:5b:61:08:81:e3:3d:
d4:50:d5:93:71:23:5c:f2:af:35:af:ff:39:69:f9:
91:67:41:1d:7d:9c:05:b8:a0:bb:bd:f7:c7:00:f0:
74:bb:3b:19:4d:14:e7:b5:38:d7:e7:97:db:86:12:
08:28:6e:c8:cf:e7:e2:d6:85:e3:6a:c7:b6:c4:2d:
55:86:02:37:65:21:aa:3e:82:9c:97:1a:4a:95:9d:
c4:cf:5c:be:37:8e:08:a3:a8:b4:38:12:01:4f:80:
63:50:1d:45:e3:61:b6:98:0e:c9:99:fb:d7:c9:51:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:03:BB:98:83:D2:D8:04:A2:ED:47:CD:7B:B6:D5:28:2F:DC:5E
X509v3 Authority Key Identifier:
keyid:64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1a:88:28:40:84:38:3b:61:e3:d7:88:68:88:94:a1:4f:e0:
07:d7:a5:97:be:d7:68:10:71:a5:8c:87:6f:5f:c3:6b:a1:3d:
05:3c:76:61:46:50:63:e9:4d:64:1e:1e:e0:73:7a:52:11:2a:
e9:1f:3d:07:a0:26:2b:2f:7f:8d:09:72:27:5a:c6:eb:02:63:
a8:e0:fa:f6:22:fa:e2:ee:77:b2:e6:61:f0:85:3a:71:78:da:
75:62:b8:1b:e1:65:a6:a4:8c:1b:d5:62:6d:63:dc:ba:25:9d:
bb:46:fa:a3:7b:62:09:87:32:1a:c5:13:eb:86:c5:9b:4d:6d:
97:b4:92:b6:d5:dc:39:f0:41:fa:b7:55:80:1e:1c:e4:4a:d0:
b4:48:fe:f8:2b:9b:8c:e3:fa:a0:78:d0:a9:28:52:09:81:b5:
e8:a9:20:e0:9d:52:de:fd:3b:f5:19:5f:ca:dd:07:0b:51:42:
38:d3:71:fc:8f:2d:37:ff:38:ca:c7:93:1d:82:5d:c5:a0:43:
a3:d0:7b:07:9d:26:91:05:5a:12:13:8f:be:29:71:19:58:5c:
fc:ab:ed:a0:eb:90:a1:06:e6:4e:1c:e8:df:7e:22:9c:f9:76:
8d:48:5a:3c:aa:92:d6:72:05:eb:82:ee:77:53:f0:65:8d:bc:
5f:25:f0:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VYLcwIrqNMCfcpOeoXh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0OTlmNzFlMTVjMGYzOGNlYmEyNTdkMzAzMDRlZDQ0YmVh
ODdjNTAwHhcNMjUwNDI3MTMwMDE0WhcNMjUwNDI4MTMwMDE0WjAzMTEwLwYDVQQD
EyhmZTc4MDNiYjk4ODNkMmQ4MDRhMmVkNDdjZDdiYjZkNTI4MmZkYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUC72+2gJ/tAIiw3TAKqSVLX674L
yOTim4KyvcR/XFXUHrYMEg1nG/mqSUrwqFjmQNeK4i9xb9cekbiK/R6jNC6qXQqe
5HRXCZ1nJnq3hsamPkfhWatFWWXV6KZDDORVIp5v1Zull/b96sHCM4hvLPC+FJpV
cpsAWgFLO4/u6ihQWhNyReaJNtdS3ON19cpbYQiB4z3UUNWTcSNc8q81r/85afmR
Z0EdfZwFuKC7vffHAPB0uzsZTRTntTjX55fbhhIIKG7Iz+fi1oXjase2xC1VhgI3
ZSGqPoKclxpKlZ3Ez1y+N44Io6i0OBIBT4BjUB1F42G2mA7JmfvXyVGUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP54A7uYg9LYBKLtR817ttUoL9xeMB8GA1UdIwQY
MBaAFGSZ9x4VwPOM66JX0wME7US+qHxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDct
NTc4NWIxNTczYTY5LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80ZjUxZWYtYWRjNi00YTFjLTgyZDctNTc4NWIxNTczYTY5
LzEvWkpuM0hoWEE4NHpyb2xmVEF3VHRSTDZvZkZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBqIKECE
ODth49eIaIiUoU/gB9ell77XaBBxpYyHb1/Da6E9BTx2YUZQY+lNZB4e4HN6UhEq
6R89B6AmKy9/jQlyJ1rG6wJjqOD69iL64u53suZh8IU6cXjadWK4G+FlpqSMG9Vi
bWPcuiWdu0b6o3tiCYcyGsUT64bFm01tl7SSttXcOfBB+rdVgB4c5ErQtEj++Cub
jOP6oHjQqShSCYG16Kkg4J1S3v079Rlfyt0HC1FCONNx/I8tN/84yseTHYJdxaBD
o9B7B50mkQVaEhOPvilxGVhc/KvtoOuQoQbmThzo334inPl2jUhaPKqS1nIF64Lu
d1PwZY28XyXwRg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:17 2025 by rpki-client