Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: LGq6Q8BCsGDJUghy3+TL4z3DqOnKZ++1YIkAVDn6kio=
Subject key identifier: AD:03:C4:F0:2B:69:3C:87:0F:8F:A0:2B:DA:10:FD:7A:2F:92:B7:0E
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019672D480287EF22583E5BA3B6FFDF639C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0DB7
Signing time: Sat 26 Apr 2025 16:00:51 +0000
Manifest this update: Sat 26 Apr 2025 16:00:51 +0000
Manifest next update: Sun 27 Apr 2025 16:00:51 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: 4FpfAuudd5qJOQh9P9zS3hRMeGwe8iPTHfdiVJ4B+RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:80:28:7e:f2:25:83:e5:ba:3b:6f:fd:f6:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Apr 26 16:00:51 2025 GMT
Not After : Apr 27 16:00:51 2025 GMT
Subject: CN=ad03c4f02b693c870f8fa02bda10fd7a2f92b70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:bd:60:f7:b8:e4:d6:c4:e4:08:34:b2:3d:
d9:73:ba:d4:f0:c6:b9:f4:4f:13:1a:b5:0d:c4:55:
bb:02:f3:01:2c:eb:33:64:06:e8:f5:75:74:f9:88:
28:fc:ff:e4:55:ef:31:f1:e3:ef:71:cd:f8:b5:d2:
14:0a:1b:20:fd:8a:d6:60:6f:66:1f:b5:4b:f0:9d:
c0:57:0a:bf:2d:b8:45:7b:f3:59:e0:60:6a:56:fa:
65:57:05:9f:08:6d:6e:aa:d8:87:3f:67:97:77:4a:
00:08:f9:89:af:43:a1:cc:43:62:93:0d:56:a3:18:
92:bd:3a:6d:da:64:a5:82:60:29:42:2d:f5:1f:03:
31:aa:a2:02:60:02:7e:35:7b:89:7d:96:92:13:9b:
32:56:58:45:45:df:dd:22:f5:cd:2d:9b:5a:c8:70:
26:3f:d6:c9:2d:5c:62:2d:1b:4d:f8:22:f5:b3:9d:
9f:22:8f:6a:1f:db:ba:66:ec:00:d3:d2:43:7d:c7:
8d:61:36:c2:65:0a:d7:ed:0f:84:d1:2b:38:8f:1c:
77:da:32:38:f7:41:71:6f:34:fb:db:17:78:90:6a:
35:b2:18:2d:69:71:8c:0f:35:69:62:e5:e0:73:54:
43:77:7c:91:38:1c:0d:55:8b:eb:92:6a:68:f0:86:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:03:C4:F0:2B:69:3C:87:0F:8F:A0:2B:DA:10:FD:7A:2F:92:B7:0E
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:02:08:a1:c4:0d:04:ba:b7:d3:d8:51:e9:a4:b7:f5:c3:
13:d6:d4:18:cc:4e:76:da:2d:b5:fd:4a:6b:1e:00:53:3a:07:
87:58:d9:de:2a:54:d5:ac:0c:7a:41:27:ee:f8:b1:32:fa:6e:
2e:3a:89:2a:34:01:38:76:15:a2:d4:16:12:42:a0:f3:b1:9c:
68:16:ab:ca:0e:08:50:36:da:8b:54:db:39:20:06:84:95:07:
c9:04:41:15:55:a2:eb:7c:18:3e:8b:65:b0:21:3d:f3:34:99:
c1:7f:45:99:05:48:b9:40:7f:00:c9:7a:4f:62:8e:b6:0d:5e:
49:36:1d:13:7d:cb:ba:2a:fb:39:d6:8b:c2:4f:5b:10:ef:83:
35:1f:06:18:ac:5d:1b:d8:f4:11:bd:0d:28:a3:6d:58:81:dd:
7d:a4:d0:1d:b0:af:11:0e:b6:c5:3a:65:25:d0:f0:b5:d0:ca:
dd:7a:c0:23:88:1f:30:45:52:e9:75:1d:c8:94:24:bd:0b:78:
30:dd:b9:74:9f:32:fe:99:dc:5c:e7:75:5e:55:e2:f1:e4:c1:
49:82:de:f6:93:c8:85:9b:b0:6d:9b:38:0a:60:ff:de:f0:bb:
c5:87:c6:c0:0a:0d:d4:8e:b0:e4:4d:ab:ae:3e:91:1a:dc:c8:
be:a4:28:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1IAofvIlg+W6O2/99jnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMzk0NzU3ZTE0MTYyMDJhNDAyMjk1NmRiZjQ4ZDcwNzQ1
ODUyMGMwHhcNMjUwNDI2MTYwMDUxWhcNMjUwNDI3MTYwMDUxWjAzMTEwLwYDVQQD
EyhhZDAzYzRmMDJiNjkzYzg3MGY4ZmEwMmJkYTEwZmQ3YTJmOTJiNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFi9YPe45NbE5Ag0sj3Zc7rU8Ma5
9E8TGrUNxFW7AvMBLOszZAbo9XV0+Ygo/P/kVe8x8ePvcc34tdIUChsg/YrWYG9m
H7VL8J3AVwq/LbhFe/NZ4GBqVvplVwWfCG1uqtiHP2eXd0oACPmJr0OhzENikw1W
oxiSvTpt2mSlgmApQi31HwMxqqICYAJ+NXuJfZaSE5syVlhFRd/dIvXNLZtayHAm
P9bJLVxiLRtN+CL1s52fIo9qH9u6ZuwA09JDfceNYTbCZQrX7Q+E0Ss4jxx32jI4
90FxbzT72xd4kGo1shgtaXGMDzVpYuXgc1RDd3yROBwNVYvrkmpo8IbKEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0DxPAraTyHD4+gK9oQ/XovkrcOMB8GA1UdIwQY
MBaAFM05R1fhQWICpAIpVtv0jXB0WFIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEt
MmZjNmQxN2Y4YjU4LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NzVlNGYtNmMyNi00NGJiLTlhZGEtMmZjNmQxN2Y4YjU4
LzEvelRsSFYtRkJZZ0trQWlsVzJfU05jSFJZVWd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIMCCKHE
DQS6t9PYUemkt/XDE9bUGMxOdtottf1Kax4AUzoHh1jZ3ipU1awMekEn7vixMvpu
LjqJKjQBOHYVotQWEkKg87GcaBaryg4IUDbai1TbOSAGhJUHyQRBFVWi63wYPotl
sCE98zSZwX9FmQVIuUB/AMl6T2KOtg1eSTYdE33Luir7OdaLwk9bEO+DNR8GGKxd
G9j0Eb0NKKNtWIHdfaTQHbCvEQ62xTplJdDwtdDK3XrAI4gfMEVS6XUdyJQkvQt4
MN25dJ8y/pncXOd1XlXi8eTBSYLe9pPIhZuwbZs4CmD/3vC7xYfGwAoN1I6w5E2r
rj6RGtzIvqQo8Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:07 2025 by rpki-client