Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier: /RL4rbvAsHOBnAxLEThgG1wNqwLS4uHj/X52Exme+3A=
Subject key identifier: BA:00:C3:31:EF:45:10:92:CD:0C:C7:3E:A0:0F:B2:A2:D2:15:DD:AD
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 019682478B2538369D6B296B5FC661177063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number: 0F9F
Signing time: Tue 29 Apr 2025 16:00:48 +0000
Manifest this update: Tue 29 Apr 2025 16:00:48 +0000
Manifest next update: Wed 30 Apr 2025 16:00:48 +0000
Files and hashes: 1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: POMl4c5yh44lOTCA1D7WCF54uqEx4lbfFKInO6IzrRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:8b:25:38:36:9d:6b:29:6b:5f:c6:61:17:70:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Apr 29 16:00:48 2025 GMT
Not After : Apr 30 16:00:48 2025 GMT
Subject: CN=ba00c331ef451092cd0cc73ea00fb2a2d215ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:83:9b:90:b2:8a:a1:b3:39:e9:c1:bc:bd:
29:19:3f:65:c0:4f:ae:d3:16:b8:56:6a:16:9f:2b:
60:b0:2b:2d:51:f5:fa:fe:a0:df:09:c7:d7:1a:43:
e0:e1:2e:9a:04:51:01:91:ef:48:cd:ab:6c:89:a8:
8c:ef:a0:e4:12:7a:02:34:85:78:40:c1:01:f3:90:
55:60:25:5c:e8:23:b0:c4:64:d9:cd:86:bf:c8:d9:
74:04:c1:48:66:83:33:0d:9d:26:7e:5e:5a:31:70:
7f:36:af:14:e5:ae:23:8a:43:43:81:f2:2a:fc:ba:
95:b5:4a:0e:73:e5:df:0c:13:80:b4:a8:9f:e9:d0:
79:16:87:a0:81:c1:13:06:e9:42:ee:7c:61:b6:d2:
7f:bc:23:13:20:7f:b6:bd:4b:3b:dd:41:01:c4:b8:
b0:f7:6c:da:4c:83:44:66:c5:81:54:60:b9:6c:86:
da:b4:4f:90:97:2b:3a:08:ff:10:da:bf:13:af:49:
96:3d:09:ac:cb:93:a4:59:9f:0c:7b:12:a9:ea:da:
6e:82:90:a0:ad:3b:3a:84:76:96:f5:71:8e:b0:ed:
ca:72:38:e4:0e:bf:51:1e:c7:f5:e3:02:4c:0f:0a:
90:26:cd:8f:33:3b:c6:bf:d3:5c:48:e5:b5:7b:c7:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:00:C3:31:EF:45:10:92:CD:0C:C7:3E:A0:0F:B2:A2:D2:15:DD:AD
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:58:71:9c:5f:e4:bd:92:2c:13:2f:8d:26:d4:d8:7d:a6:b3:
ca:bf:a9:24:c2:57:81:11:d0:68:07:ec:bf:af:13:47:94:e2:
ad:c5:e3:a1:41:d7:da:73:a3:e3:46:2b:70:81:6d:44:f1:ad:
3e:25:f5:a4:af:98:b7:ef:b5:de:0b:6c:fc:c3:0b:a4:1f:6e:
1c:67:4c:e9:90:03:b2:b3:a4:d1:c6:8d:62:ed:fd:a7:8d:fb:
f6:17:c8:1a:75:fa:96:5c:a2:a5:ef:4a:7a:fb:73:ca:f6:c4:
82:e5:eb:40:0a:ed:94:93:d7:50:6a:55:92:a1:d6:01:2f:ec:
74:28:23:9d:33:97:01:5d:89:48:fb:d8:9d:79:65:14:50:29:
1f:c0:2f:54:a0:bf:0e:a7:93:3b:33:bc:f4:99:eb:30:27:05:
a9:87:4d:73:7f:56:56:fa:f5:e6:e4:5a:34:70:94:8a:45:04:
18:63:3c:ae:3d:01:ae:e8:95:d3:56:86:6c:12:cf:40:1f:ac:
ac:e4:64:09:1d:84:5e:4a:74:19:48:62:07:41:1d:74:76:6d:
54:ba:85:fe:35:e7:b9:67:84:53:06:ae:26:a6:cb:c9:27:03:
06:44:0e:cb:2c:e1:e9:4e:68:dc:5a:e5:83:df:ff:a8:fe:a7:
ba:77:d4:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR4slODadaylrX8ZhF3BjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTM2ZTAxZmZhZjg1M2RiYjJhNWNmY2ZlNWQxYjY3ZDIw
YzIwYjUwHhcNMjUwNDI5MTYwMDQ4WhcNMjUwNDMwMTYwMDQ4WjAzMTEwLwYDVQQD
EyhiYTAwYzMzMWVmNDUxMDkyY2QwY2M3M2VhMDBmYjJhMmQyMTVkZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphaDm5CyiqGzOenBvL0pGT9lwE+u
0xa4VmoWnytgsCstUfX6/qDfCcfXGkPg4S6aBFEBke9IzatsiaiM76DkEnoCNIV4
QMEB85BVYCVc6COwxGTZzYa/yNl0BMFIZoMzDZ0mfl5aMXB/Nq8U5a4jikNDgfIq
/LqVtUoOc+XfDBOAtKif6dB5FoeggcETBulC7nxhttJ/vCMTIH+2vUs73UEBxLiw
92zaTINEZsWBVGC5bIbatE+Qlys6CP8Q2r8Tr0mWPQmsy5OkWZ8MexKp6tpugpCg
rTs6hHaW9XGOsO3KcjjkDr9RHsf14wJMDwqQJs2PMzvGv9NcSOW1e8eWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoAwzHvRRCSzQzHPqAPsqLSFd2tMB8GA1UdIwQY
MBaAFM8TbgH/r4U9uypc/P5dG2fSDCC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYt
NjVkYmE2M2IxYTgyLzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYtNjVkYmE2M2IxYTgy
LzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVhxnF/k
vZIsEy+NJtTYfaazyr+pJMJXgRHQaAfsv68TR5TircXjoUHX2nOj40YrcIFtRPGt
PiX1pK+Yt++13gts/MMLpB9uHGdM6ZADsrOk0caNYu39p4379hfIGnX6llyipe9K
evtzyvbEguXrQArtlJPXUGpVkqHWAS/sdCgjnTOXAV2JSPvYnXllFFApH8AvVKC/
DqeTOzO89JnrMCcFqYdNc39WVvr15uRaNHCUikUEGGM8rj0BruiV01aGbBLPQB+s
rORkCR2EXkp0GUhiB0EddHZtVLqF/jXnuWeEUwauJqbLyScDBkQOyyzh6U5o3Frl
g9//qP6nunfUIw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:50 2025 by rpki-client