Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: oxZJ6OVjaY4vN55XXSRQG0bbNsTVQLP7lo1QEXg3wxs=
Subject key identifier: 5D:A1:92:02:E1:29:7A:77:8E:6C:F8:64:C1:87:81:48:FE:7D:05:48
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 01967642F98139C1D7D510925FF99D7F3904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 08:00:22 +0000
Manifest this update: Sun 27 Apr 2025 08:00:22 +0000
Manifest next update: Mon 28 Apr 2025 08:00:22 +0000
Files and hashes: 1: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (hash: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=)
2: HT1N8Mmz6IMM5YW385P2T31kK7g.roa (hash: eDZrD7or10sxe0ZnfIhEw2KQZGg5eDEQrsVwHBWFKyk=)
3: rkFFxagKsCZzL6ha1afROc46-i4.roa (hash: X8v0BqEuUtbA/N/cHBtFm11dCr+R+u6qXiVNMBQlsf4=)
4: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: zBqFOAjTDkN5qhVK7fD/kw1fTEN457t3v077Vl2a9iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:f9:81:39:c1:d7:d5:10:92:5f:f9:9d:7f:39:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Apr 27 08:00:22 2025 GMT
Not After : Apr 28 08:00:22 2025 GMT
Subject: CN=5da19202e1297a778e6cf864c1878148fe7d0548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:68:68:f9:0d:49:60:18:d9:3d:01:46:f0:
42:60:40:80:0b:cc:6f:99:14:ee:e7:07:a9:cf:96:
c4:ab:6b:23:c8:a8:31:84:d6:e2:19:58:99:cc:97:
ae:e6:a2:19:f7:b8:40:d4:24:45:f9:d3:43:6b:3f:
28:62:ea:10:8b:9a:02:6e:cc:d5:61:5d:31:0d:74:
31:d7:b4:6c:a9:3a:ea:30:b1:7f:91:1c:2f:04:a5:
49:c8:04:8b:ba:55:63:56:cc:ef:a8:6f:9a:00:e7:
9b:00:63:e2:fd:ca:ed:a5:32:a5:ef:82:da:75:55:
44:84:6a:ea:3b:1e:80:35:9d:c6:e6:59:63:3b:a2:
09:85:e3:d6:e9:83:22:91:7c:c1:db:72:7d:21:41:
44:cc:60:99:32:ff:3d:c4:81:37:6a:b2:e6:9b:4e:
81:2a:7b:65:d9:c6:76:22:ca:34:2b:e7:c3:96:e4:
dc:d9:01:09:de:ea:2b:cc:65:21:11:47:3d:84:9a:
5b:86:1f:09:1a:7b:80:0e:5a:1e:53:7b:a0:11:63:
5c:0f:5d:9d:19:4a:f4:3e:d6:c8:3b:88:81:21:59:
c3:39:ad:75:92:64:bf:dd:08:9b:87:4a:13:e2:b4:
3e:d5:bb:8d:15:a4:1e:38:24:6f:54:00:d4:85:5a:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A1:92:02:E1:29:7A:77:8E:6C:F8:64:C1:87:81:48:FE:7D:05:48
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a6:60:21:8e:08:e9:d5:2b:57:c4:c0:0d:65:d7:2f:14:15:
f0:2d:c3:b8:12:f3:be:47:83:24:f1:f6:78:46:0c:1e:00:85:
82:e5:7f:68:d1:0f:5b:b3:b6:19:fa:d0:cb:b0:b5:e3:f7:47:
d4:f6:25:a3:d7:41:83:b0:7b:f9:62:0a:3e:04:b1:d0:2d:da:
e4:23:fc:75:9c:e4:4d:49:ab:42:12:9a:70:50:4c:09:92:1d:
ce:c1:7c:76:f0:f0:4d:1a:b3:ee:5f:68:1c:99:25:8b:79:c5:
18:f7:0c:98:36:95:34:14:bd:2e:f7:5f:d9:72:05:ea:59:f7:
77:79:88:52:37:39:5d:dd:32:f8:78:7f:e2:be:14:ff:8b:ac:
71:ac:87:b2:d9:4c:a3:a9:1c:22:49:ec:24:0c:b1:23:35:9d:
9a:3b:00:6d:fc:ca:ef:21:0c:a8:f6:69:44:ad:ba:d7:3a:41:
b8:f0:b9:25:4c:9b:8a:1f:b6:c9:da:b7:6d:71:3c:bf:44:f6:
6a:c0:fe:c8:67:1c:16:fb:c0:ee:d5:c4:a7:7c:f7:0f:7c:cf:
71:1a:71:d6:aa:88:d1:6b:d8:3d:ad:01:fa:57:ff:5b:76:b0:
53:1e:ee:b4:01:2b:fb:49:56:92:e7:34:d2:27:c2:f9:60:fe:
64:c1:b1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QvmBOcHX1RCSX/mdfzkEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNzNmMjM4ZDk2Y2Y2N2E1ZWZjMGMzNzQ3NmZkMzA2MDI5
YWY1NTIwHhcNMjUwNDI3MDgwMDIyWhcNMjUwNDI4MDgwMDIyWjAzMTEwLwYDVQQD
Eyg1ZGExOTIwMmUxMjk3YTc3OGU2Y2Y4NjRjMTg3ODE0OGZlN2QwNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJxoaPkNSWAY2T0BRvBCYECAC8xv
mRTu5wepz5bEq2sjyKgxhNbiGViZzJeu5qIZ97hA1CRF+dNDaz8oYuoQi5oCbszV
YV0xDXQx17RsqTrqMLF/kRwvBKVJyASLulVjVszvqG+aAOebAGPi/crtpTKl74La
dVVEhGrqOx6ANZ3G5lljO6IJhePW6YMikXzB23J9IUFEzGCZMv89xIE3arLmm06B
Kntl2cZ2Iso0K+fDluTc2QEJ3uorzGUhEUc9hJpbhh8JGnuADloeU3ugEWNcD12d
GUr0PtbIO4iBIVnDOa11kmS/3Qibh0oT4rQ+1buNFaQeOCRvVADUhVp8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2hkgLhKXp3jmz4ZMGHgUj+fQVIMB8GA1UdIwQY
MBaAFM1z8jjZbPZ6XvwMN0dv0wYCmvVSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelhQeU9ObHM5bnBlX0F3M1IyX1RCZ0thOVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84NzEyNjgtYmNjMS00NzIyLWIxNGIt
ZGQwMjgxMTkwM2RmLzEvelhQeU9ObHM5bnBlX0F3M1IyX1RCZ0thOVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84NzEyNjgtYmNjMS00NzIyLWIxNGItZGQwMjgxMTkwM2Rm
LzEvelhQeU9ObHM5bnBlX0F3M1IyX1RCZ0thOVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6ZgIY4I
6dUrV8TADWXXLxQV8C3DuBLzvkeDJPH2eEYMHgCFguV/aNEPW7O2GfrQy7C14/dH
1PYlo9dBg7B7+WIKPgSx0C3a5CP8dZzkTUmrQhKacFBMCZIdzsF8dvDwTRqz7l9o
HJkli3nFGPcMmDaVNBS9Lvdf2XIF6ln3d3mIUjc5Xd0y+Hh/4r4U/4uscayHstlM
o6kcIknsJAyxIzWdmjsAbfzK7yEMqPZpRK261zpBuPC5JUybih+2ydq3bXE8v0T2
asD+yGccFvvA7tXEp3z3D3zPcRpx1qqI0WvYPa0B+lf/W3awUx7utAEr+0lWkuc0
0ifC+WD+ZMGxRw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:21 2025 by rpki-client