Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: KIe3XL7b8gux2AvK4NCiMgkIhNOIjXofXxMFAbMeku8=
Subject key identifier: 70:84:26:EE:1F:9E:5F:96:92:E3:BD:93:FF:E7:29:D8:A3:FD:AD:F3
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 0196827E5D8F1102952AE2186B8751A5CA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 0DEF
Signing time: Tue 29 Apr 2025 17:00:41 +0000
Manifest this update: Tue 29 Apr 2025 17:00:41 +0000
Manifest next update: Wed 30 Apr 2025 17:00:41 +0000
Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: cmEkNfGiEU5eU6XfbMhC2fGLAROWP+7rdj1ryhpTydE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:5d:8f:11:02:95:2a:e2:18:6b:87:51:a5:ca:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Apr 29 17:00:41 2025 GMT
Not After : Apr 30 17:00:41 2025 GMT
Subject: CN=708426ee1f9e5f9692e3bd93ffe729d8a3fdadf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:9a:3d:bb:b2:01:70:70:9d:9a:4e:3b:ef:
8d:46:3c:fa:a5:ba:77:6c:97:1a:6a:68:2c:f2:a5:
f9:5d:74:8f:f6:ed:bd:7a:67:b9:c5:26:e3:81:20:
1f:bc:80:bd:f2:c0:95:7c:ae:bb:fa:88:e0:ce:2c:
99:6f:59:77:7b:17:02:f6:43:ab:4d:cb:90:5e:40:
5f:e0:29:db:fe:76:3f:29:35:bc:31:a4:4c:59:e2:
ef:ef:bd:ef:19:8c:44:a6:e3:56:7f:c1:34:03:45:
32:c7:6c:d0:76:23:33:64:77:26:cc:46:f5:b6:13:
58:8b:81:54:d7:2a:51:e1:76:b1:a9:fa:1f:ee:9a:
c6:18:1f:6c:05:4f:17:26:43:50:b4:c8:86:46:31:
1e:65:f2:7a:5a:e6:0b:bb:8e:f1:ea:75:12:4a:49:
41:e2:b9:fd:7a:0a:c4:25:97:05:0d:70:6e:9d:44:
fc:20:90:66:ed:5f:59:0c:74:64:9c:94:34:1e:f8:
ad:a0:fe:11:68:38:06:69:8f:aa:70:22:8a:8a:a6:
0c:49:11:13:d9:a5:c2:65:65:17:1a:a4:bc:b1:40:
38:fe:3c:13:3f:60:49:96:db:75:70:73:b8:b0:9a:
e8:e2:96:56:ce:f7:bf:98:99:bd:fa:6a:31:71:10:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:26:EE:1F:9E:5F:96:92:E3:BD:93:FF:E7:29:D8:A3:FD:AD:F3
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:43:87:c4:0a:0d:6e:37:41:a9:81:84:c6:ae:ed:73:18:a1:
a2:48:f4:92:f1:96:e8:bf:26:fd:5b:6d:f8:2d:d6:91:5b:c9:
9f:38:87:be:84:0c:a7:62:73:38:92:12:ca:15:6b:9d:42:94:
9a:b6:f6:58:9b:b6:1a:7a:90:26:ed:3a:0a:dc:c8:f8:fc:64:
e0:02:f1:fa:66:71:65:01:8f:dd:55:30:77:57:ae:9a:c7:32:
69:89:ee:a5:d0:d9:35:2f:33:c2:85:d9:3c:ca:19:9a:fb:46:
1e:cd:e1:c1:73:3f:ba:89:c3:04:20:c0:92:53:63:8d:3d:42:
f1:75:b5:92:e9:1a:cd:86:a9:81:18:23:ed:78:10:39:7e:d2:
06:7f:34:4c:4a:9b:a9:25:b0:47:28:7f:27:82:a1:54:83:19:
19:26:c9:bd:c0:e2:86:fd:6a:58:c9:4e:ec:74:fe:37:41:cb:
9c:f7:be:f3:28:af:76:e8:71:2a:2e:48:68:21:bd:bd:d7:a0:
ff:6e:5a:c0:ce:f4:0b:09:9a:08:ab:52:a8:96:74:28:dc:47:
6e:0b:09:d0:ac:72:6d:23:97:d7:28:09:c1:5b:ce:76:b5:51:
b2:22:41:9f:38:21:1b:15:3d:fb:f3:66:00:4f:7c:99:8f:73:
a5:12:39:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfl2PEQKVKuIYa4dRpcqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzU3MTg1NDcyZjE2ZDUzZWViNjhhMTQwZTM1MTNmYTMx
YzMxZDgwHhcNMjUwNDI5MTcwMDQxWhcNMjUwNDMwMTcwMDQxWjAzMTEwLwYDVQQD
Eyg3MDg0MjZlZTFmOWU1Zjk2OTJlM2JkOTNmZmU3MjlkOGEzZmRhZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb+aPbuyAXBwnZpOO++NRjz6pbp3
bJcaamgs8qX5XXSP9u29eme5xSbjgSAfvIC98sCVfK67+ojgziyZb1l3excC9kOr
TcuQXkBf4Cnb/nY/KTW8MaRMWeLv773vGYxEpuNWf8E0A0Uyx2zQdiMzZHcmzEb1
thNYi4FU1ypR4Xaxqfof7prGGB9sBU8XJkNQtMiGRjEeZfJ6WuYLu47x6nUSSklB
4rn9egrEJZcFDXBunUT8IJBm7V9ZDHRknJQ0HvitoP4RaDgGaY+qcCKKiqYMSRET
2aXCZWUXGqS8sUA4/jwTP2BJltt1cHO4sJro4pZWzve/mJm9+moxcRC1jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCEJu4fnl+WkuO9k//nKdij/a3zMB8GA1UdIwQY
MBaAFGR1cYVHLxbVPutooUDjUT+jHDHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2Yzct
ODFkMTAwNzNkZWU0LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2YzctODFkMTAwNzNkZWU0
LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0OHxAoN
bjdBqYGExq7tcxihokj0kvGW6L8m/Vtt+C3WkVvJnziHvoQMp2JzOJISyhVrnUKU
mrb2WJu2GnqQJu06CtzI+Pxk4ALx+mZxZQGP3VUwd1eumscyaYnupdDZNS8zwoXZ
PMoZmvtGHs3hwXM/uonDBCDAklNjjT1C8XW1kukazYapgRgj7XgQOX7SBn80TEqb
qSWwRyh/J4KhVIMZGSbJvcDihv1qWMlO7HT+N0HLnPe+8yivduhxKi5IaCG9vdeg
/25awM70CwmaCKtSqJZ0KNxHbgsJ0KxybSOX1ygJwVvOdrVRsiJBnzghGxU9+/Nm
AE98mY9zpRI5Zg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:00:39 2025 by rpki-client