Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: lzo87M8G8DQcq7eXkozVI0eglkWUMZD5LERmQdXdUXo=
Subject key identifier: 4B:9E:91:F6:DB:B7:B8:75:69:73:44:18:A2:62:41:E6:48:0C:FA:A2
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 01968B819498AE3F1D9B1B283C97EB9B2B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: 0130
Signing time: Thu 01 May 2025 11:00:47 +0000
Manifest this update: Thu 01 May 2025 11:00:47 +0000
Manifest next update: Fri 02 May 2025 11:00:47 +0000
Files and hashes: 1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: dHneByb5uw/soqs7nbjgbGG5e50PP7ot6dlrnYsiGYM=)
3: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
4: sQVxZ_lbDcaGAO6GQ4Uax3TrnbA.roa (hash: NBxjFtKEwZR8bN/MCO3rMHIc0Pkb+5FRotafl/NdAVw=)
5: ySpicQatPy5iHCLP1veD0rDhvRU.roa (hash: y3lstPEKv9L5HhDFlk02HVUCo0C3eJ06Z+uYgaJZhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:94:98:ae:3f:1d:9b:1b:28:3c:97:eb:9b:2b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: May 1 11:00:47 2025 GMT
Not After : May 2 11:00:47 2025 GMT
Subject: CN=4b9e91f6dbb7b87569734418a26241e6480cfaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:2b:9a:f1:bf:fa:b3:a8:7e:e2:a4:9b:59:
37:64:fc:e3:55:4f:7a:be:da:71:38:62:55:e2:a0:
b9:64:ce:5a:10:e7:cd:13:a3:6a:9b:41:f1:d8:75:
65:2a:a0:a7:8f:8a:a9:e9:1e:3f:86:95:0d:01:bc:
04:4d:5c:df:6f:cc:18:83:d3:02:c6:a1:f5:bf:84:
ee:55:08:da:b8:37:32:48:df:62:cb:12:a2:97:8c:
78:f9:51:a9:51:f3:64:93:03:0b:d4:15:a3:6b:fe:
58:56:af:b1:d2:7f:32:3e:88:15:b7:21:51:96:3d:
1c:d6:e9:04:48:51:1b:f2:4d:6e:97:63:36:f8:cf:
12:63:78:45:2c:e6:50:5b:85:39:c0:cb:e6:67:9f:
69:60:cb:ad:e4:e9:88:ad:16:ef:af:2f:20:90:6d:
40:20:47:62:bc:ef:35:38:e0:79:e7:c0:1f:4c:9a:
bd:64:e5:25:d7:73:8c:10:b0:4f:9a:bc:a3:2e:e7:
19:9f:d2:47:4e:37:90:09:71:9f:b6:cb:97:85:cf:
9e:72:22:ed:00:88:34:b6:1c:9d:a3:89:05:af:61:
23:0b:50:63:21:54:3b:91:f0:ed:48:73:0a:36:2a:
bc:9f:37:57:31:25:98:bd:3e:60:b7:84:8f:6c:fd:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:91:F6:DB:B7:B8:75:69:73:44:18:A2:62:41:E6:48:0C:FA:A2
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:97:40:69:04:2a:0d:2b:68:c3:e9:63:dc:8d:e1:44:1e:6f:
aa:77:04:cf:0e:9f:3d:c2:29:10:76:f1:5d:9b:41:00:a8:35:
cf:44:4c:53:c8:c1:91:3d:84:4b:c4:77:cf:98:80:76:0d:1e:
9b:73:cb:0a:90:d3:72:f3:a9:17:a2:6e:91:f0:0a:c5:49:fd:
2c:7f:db:fb:e5:14:26:03:c4:4c:a5:7a:14:c6:d8:e8:4b:89:
c2:c7:2b:9a:b5:4d:19:1f:f3:75:b4:21:67:a9:be:f5:70:19:
4a:06:57:5a:9b:0a:36:05:97:f0:7b:a4:e2:ab:2d:e8:c7:59:
1a:32:39:af:71:c5:f8:19:f3:42:3e:ea:eb:73:76:df:98:7f:
97:23:7b:4e:a4:b9:b0:a3:aa:e8:f3:fe:08:07:02:e3:22:d2:
c9:7d:19:73:a3:c2:cb:d1:de:88:24:be:19:82:00:c2:59:92:
84:12:ab:3f:43:5d:26:b1:18:d6:ad:16:74:c2:d3:5a:d6:f3:
5c:6d:90:58:64:11:c3:6b:b0:a2:74:7e:d1:db:cb:25:bf:40:
b2:ef:42:c3:23:ea:14:bb:ce:74:fd:e1:a9:28:e8:49:93:ca:
cb:62:8c:16:9e:a7:9a:c7:9c:f2:0f:e9:ea:e1:27:07:b1:03:
c8:70:97:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLgZSYrj8dmxsoPJfrmys+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2M2EyNDQ4MGYwNGQxMzE4YmYxYTcwZGFiZmZhNGIyN2Vm
MzJkYTIwHhcNMjUwNTAxMTEwMDQ3WhcNMjUwNTAyMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg0YjllOTFmNmRiYjdiODc1Njk3MzQ0MThhMjYyNDFlNjQ4MGNmYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqkrmvG/+rOofuKkm1k3ZPzjVU96
vtpxOGJV4qC5ZM5aEOfNE6Nqm0Hx2HVlKqCnj4qp6R4/hpUNAbwETVzfb8wYg9MC
xqH1v4TuVQjauDcySN9iyxKil4x4+VGpUfNkkwML1BWja/5YVq+x0n8yPogVtyFR
lj0c1ukESFEb8k1ul2M2+M8SY3hFLOZQW4U5wMvmZ59pYMut5OmIrRbvry8gkG1A
IEdivO81OOB558AfTJq9ZOUl13OMELBPmryjLucZn9JHTjeQCXGftsuXhc+eciLt
AIg0thydo4kFr2EjC1BjIVQ7kfDtSHMKNiq8nzdXMSWYvT5gt4SPbP2y2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuekfbbt7h1aXNEGKJiQeZIDPqiMB8GA1UdIwQY
MBaAFGY6JEgPBNExi/GnDav/pLJ+8y2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDkt
Nzc1ZjVmNzRkNTgxLzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi82ZjgwYTgtNmI2YS00ZDk2LWJmNDktNzc1ZjVmNzRkNTgx
LzEvWmpva1NBOEUwVEdMOGFjTnFfLWtzbjd6TGFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5dAaQQq
DStow+lj3I3hRB5vqncEzw6fPcIpEHbxXZtBAKg1z0RMU8jBkT2ES8R3z5iAdg0e
m3PLCpDTcvOpF6JukfAKxUn9LH/b++UUJgPETKV6FMbY6EuJwscrmrVNGR/zdbQh
Z6m+9XAZSgZXWpsKNgWX8Huk4qst6MdZGjI5r3HF+BnzQj7q63N235h/lyN7TqS5
sKOq6PP+CAcC4yLSyX0Zc6PCy9HeiCS+GYIAwlmShBKrP0NdJrEY1q0WdMLTWtbz
XG2QWGQRw2uwonR+0dvLJb9Asu9CwyPqFLvOdP3hqSjoSZPKy2KMFp6nmsec8g/p
6uEnB7EDyHCXYA==
-----END CERTIFICATE-----
Generated at Thu May 1 18:17:23 2025 by rpki-client