Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: mGk5M1Aub/TrnSQBCOlgVdc73QerBf2lDR4zvJj0maQ=
Subject key identifier: 79:EA:27:08:8C:43:26:37:78:50:37:39:B7:28:8C:BA:21:73:4A:26
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 01967379205E6C0A07208CBDCA1B1EDFA56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0E4F
Signing time: Sat 26 Apr 2025 19:00:40 +0000
Manifest this update: Sat 26 Apr 2025 19:00:40 +0000
Manifest next update: Sun 27 Apr 2025 19:00:40 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: IaXnlnHxVgoEX1UTLs1DE8GtJn0.roa (hash: vQAYnVro3YqKas8+EITAndDR2jmhTfit27limCUGo58=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: icHna8NTrBYnEa5frZ6Ywt01HWqWQSf8dJhKTIxFQqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:20:5e:6c:0a:07:20:8c:bd:ca:1b:1e:df:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Apr 26 19:00:40 2025 GMT
Not After : Apr 27 19:00:40 2025 GMT
Subject: CN=79ea27088c43263778503739b7288cba21734a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:e9:ae:a1:dc:c2:7d:1e:0d:97:b6:05:b6:
2e:5f:9e:d8:13:37:9c:c5:82:d0:02:4b:62:e0:2b:
b2:33:ac:70:6d:ac:f3:f9:c3:63:22:23:52:1f:5a:
25:af:9f:ac:35:8b:55:f2:65:cd:0b:dd:63:cc:6f:
ae:ad:ca:9a:b6:6a:6c:80:b1:42:1e:2f:80:ee:cc:
27:a6:3f:f9:a9:1e:6d:32:b6:a2:0d:51:60:2e:75:
c0:b6:30:e1:c0:21:84:b0:90:5a:a4:26:b9:b9:3c:
ec:ef:6a:94:2d:5a:02:ba:3b:33:b4:76:36:af:54:
ac:e8:ad:8d:3e:e2:3c:01:49:c8:51:1b:51:36:98:
35:14:a2:69:de:3a:20:91:6c:05:68:90:f9:96:bb:
50:31:80:f8:d0:3a:bb:27:14:7f:ea:a0:33:40:21:
ea:20:50:db:f8:b4:41:7a:0b:5d:d5:53:c8:d9:ab:
74:fd:ee:4f:5e:cb:01:dc:89:60:6e:ed:5d:5a:64:
5e:12:69:05:78:4e:e6:04:a5:e5:1e:4d:a8:44:a7:
7b:79:33:01:15:d8:a1:c0:5d:ee:cd:2f:6f:5d:52:
ff:1f:df:ac:d3:d8:91:43:af:16:ab:d9:c3:a7:ab:
dc:64:4e:4b:b9:e7:c3:b9:ad:93:57:c6:4a:4f:2c:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EA:27:08:8C:43:26:37:78:50:37:39:B7:28:8C:BA:21:73:4A:26
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1f:5a:54:a1:27:ce:db:84:58:a6:75:54:a5:b7:11:fb:ac:
7a:96:fb:06:94:c6:17:8b:57:3a:af:c3:65:d3:e8:e9:c9:8a:
77:2f:cf:bf:c1:b9:82:b1:89:5c:06:8d:c1:12:f1:8b:29:c6:
6a:b2:18:a9:eb:9f:cb:74:d0:fd:ed:72:26:b4:80:e8:e8:b4:
39:45:55:df:86:9f:22:c7:40:84:fa:71:c1:c7:2a:a7:9a:a0:
59:02:3c:26:6f:b5:e8:f1:c9:94:14:d3:15:12:43:c7:04:d9:
24:f4:6c:b4:c3:c3:b2:fc:36:7d:6d:b5:c2:15:32:69:15:2c:
28:4a:8c:a4:73:3f:c4:38:65:14:88:9f:08:7c:f4:28:ef:c9:
68:3b:4f:6f:c7:e3:fd:73:f3:30:ac:48:2c:f3:d8:f8:62:db:
0b:a5:c8:eb:1b:25:07:e9:fe:8b:01:74:ef:77:30:ed:2a:8a:
58:d6:8c:fe:aa:82:96:02:9e:d6:8d:b0:1b:f8:66:32:cb:72:
2e:47:cf:09:80:f6:c7:b6:cb:3e:f7:f1:8d:8d:6c:6e:4a:b4:
03:e0:58:14:16:6e:92:45:84:17:86:7f:8c:33:a1:e4:48:23:
29:ba:60:fb:07:48:87:84:d6:51:e3:6a:4d:24:f2:d4:4b:07:
99:97:89:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeSBebAoHIIy9yhse36VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjM3NDY1N2Y1NzA3OGYzY2EyYzcxMTA5ZDM1OTI3YzIy
NDg2ODEwHhcNMjUwNDI2MTkwMDQwWhcNMjUwNDI3MTkwMDQwWjAzMTEwLwYDVQQD
Eyg3OWVhMjcwODhjNDMyNjM3Nzg1MDM3MzliNzI4OGNiYTIxNzM0YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvPprqHcwn0eDZe2BbYuX57YEzec
xYLQAkti4CuyM6xwbazz+cNjIiNSH1olr5+sNYtV8mXNC91jzG+urcqatmpsgLFC
Hi+A7swnpj/5qR5tMraiDVFgLnXAtjDhwCGEsJBapCa5uTzs72qULVoCujsztHY2
r1Ss6K2NPuI8AUnIURtRNpg1FKJp3jogkWwFaJD5lrtQMYD40Dq7JxR/6qAzQCHq
IFDb+LRBegtd1VPI2at0/e5PXssB3Ilgbu1dWmReEmkFeE7mBKXlHk2oRKd7eTMB
FdihwF3uzS9vXVL/H9+s09iRQ68Wq9nDp6vcZE5LuefDua2TV8ZKTyxxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnqJwiMQyY3eFA3ObcojLohc0omMB8GA1UdIwQY
MBaAFM/zdGV/VwePPKLHEQnTWSfCJIaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEt
M2VhMmViZmU4NzA3LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jZDIxNDYtN2ZiZS00ZTVkLTkzYmEtM2VhMmViZmU4NzA3
LzEvel9OMFpYOVhCNDg4b3NjUkNkTlpKOElraG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmB9aVKEn
ztuEWKZ1VKW3Efusepb7BpTGF4tXOq/DZdPo6cmKdy/Pv8G5grGJXAaNwRLxiynG
arIYqeufy3TQ/e1yJrSA6Oi0OUVV34afIsdAhPpxwccqp5qgWQI8Jm+16PHJlBTT
FRJDxwTZJPRstMPDsvw2fW21whUyaRUsKEqMpHM/xDhlFIifCHz0KO/JaDtPb8fj
/XPzMKxILPPY+GLbC6XI6xslB+n+iwF073cw7SqKWNaM/qqClgKe1o2wG/hmMsty
LkfPCYD2x7bLPvfxjY1sbkq0A+BYFBZukkWEF4Z/jDOh5EgjKbpg+wdIh4TWUeNq
TSTy1EsHmZeJ9w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:31 2025 by rpki-client