Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: AorF3wAeeyoTDFKoyyQQWuKeHCscovEtgpIEla9Ognk=
Subject key identifier: 14:33:C4:1D:5B:FC:63:B3:92:21:19:A7:C5:7B:1B:2A:36:F5:6E:05
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 0196778CFBFF60BCF5BB49CD4579AB5F1339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 15
Signing time: Sun 27 Apr 2025 14:00:50 +0000
Manifest this update: Sun 27 Apr 2025 14:00:50 +0000
Manifest next update: Mon 28 Apr 2025 14:00:50 +0000
Files and hashes: 1: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (hash: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: TuuKPUzHNvA3AiKFEubp88TnLf/NwNe3NNGK/uFLF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:fb:ff:60:bc:f5:bb:49:cd:45:79:ab:5f:13:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Apr 27 14:00:50 2025 GMT
Not After : Apr 28 14:00:50 2025 GMT
Subject: CN=1433c41d5bfc63b3922119a7c57b1b2a36f56e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d8:4a:3c:9b:18:13:a4:38:be:99:37:a5:7b:
e3:af:26:52:a1:39:c6:df:5b:3a:dc:29:17:4b:56:
3a:8b:fa:07:b8:24:f7:8c:f4:3b:c9:dd:3d:fc:ae:
0c:84:5d:82:fd:5e:f9:9d:9e:36:e5:d5:94:81:00:
77:0f:bc:dc:5c:2f:8e:1a:70:52:3a:7c:79:42:7b:
b9:d5:87:2f:1d:83:34:d4:19:39:a4:4b:12:56:ac:
ae:ea:fd:90:c0:46:34:eb:f9:f8:60:1e:d3:cc:39:
d3:90:bf:b5:f5:90:05:3f:f9:79:1f:f5:e7:9f:4d:
5b:ab:41:b1:4a:0e:3b:65:6e:e0:93:02:af:8e:e8:
cd:61:dc:9d:a1:47:2b:73:e1:6a:f9:28:1a:8d:cb:
12:de:5b:f8:91:e6:b4:b4:df:c0:81:6d:87:de:99:
94:71:2b:24:ab:4b:9a:f7:5c:17:7a:66:70:59:26:
e8:e4:ec:38:d7:d2:2f:2e:42:2a:e8:40:62:88:77:
40:68:64:4c:2b:06:6a:32:41:34:49:88:8f:0b:fc:
3d:2f:65:d6:dd:f6:94:9b:5f:06:e9:35:91:5e:71:
4a:2b:1b:66:b8:9f:36:a2:76:73:4b:38:51:b9:23:
be:e0:46:79:16:89:4a:c5:9a:37:d2:5b:f2:b8:e8:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:33:C4:1D:5B:FC:63:B3:92:21:19:A7:C5:7B:1B:2A:36:F5:6E:05
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:77:79:d8:f6:f7:cd:eb:db:ef:12:f9:00:25:c3:13:7e:
a5:2e:28:79:d1:a9:42:2b:96:d2:c2:5d:94:12:68:67:bc:a7:
85:0e:6d:52:18:3a:12:ae:d4:8a:05:d3:fb:57:40:ff:a7:c7:
a7:93:eb:59:83:dd:7d:64:6b:86:c8:18:1d:19:0d:eb:d5:7a:
cd:cb:a9:2e:d7:a0:c2:ca:54:71:2c:cc:66:58:ee:88:0c:74:
6b:57:e5:78:fd:a8:e1:d3:1e:aa:cb:24:e5:54:bf:39:f6:47:
3b:1c:06:81:3c:78:ec:17:42:de:ec:a9:52:83:a9:bf:ae:97:
a8:20:3b:ac:0b:bc:8c:9c:48:bb:dd:63:c9:02:e3:e5:5d:73:
95:83:c5:94:d1:a8:e0:d5:e3:64:06:cd:e8:03:f3:9b:62:a4:
09:a0:a3:48:b8:5d:f6:e1:4f:38:6e:75:11:84:a8:00:41:50:
e6:ee:72:33:04:3c:e0:18:86:56:7b:6d:14:45:82:8f:6a:64:
cd:f6:20:8d:6f:e2:25:4b:be:d0:d3:fc:55:65:31:b0:dd:90:
51:c9:f6:2f:a7:89:9e:88:85:de:9d:5b:3f:11:dd:a8:6d:30:
21:7c:d8:9e:e8:03:75:a8:5d:69:ba:38:80:46:67:10:e7:e0:
0a:fd:a0:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jPv/YLz1u0nNRXmrXxM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDNkMTNkZDI2ZjAwNDRhMjgzZmM2YTExZTc1NmEyYTJi
NTY5MWIwHhcNMjUwNDI3MTQwMDUwWhcNMjUwNDI4MTQwMDUwWjAzMTEwLwYDVQQD
EygxNDMzYzQxZDViZmM2M2IzOTIyMTE5YTdjNTdiMWIyYTM2ZjU2ZTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdhKPJsYE6Q4vpk3pXvjryZSoTnG
31s63CkXS1Y6i/oHuCT3jPQ7yd09/K4MhF2C/V75nZ425dWUgQB3D7zcXC+OGnBS
Onx5Qnu51YcvHYM01Bk5pEsSVqyu6v2QwEY06/n4YB7TzDnTkL+19ZAFP/l5H/Xn
n01bq0GxSg47ZW7gkwKvjujNYdydoUcrc+Fq+SgajcsS3lv4kea0tN/AgW2H3pmU
cSskq0ua91wXemZwWSbo5Ow419IvLkIq6EBiiHdAaGRMKwZqMkE0SYiPC/w9L2XW
3faUm18G6TWRXnFKKxtmuJ82onZzSzhRuSO+4EZ5FolKxZo30lvyuOhiwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQzxB1b/GOzkiEZp8V7Gyo29W4FMB8GA1UdIwQY
MBaAFM0D0T3SbwBEooP8ahHnVqKitWkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUt
MWEzZmY1MzJiYzIwLzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jZmQ0MWUtMzk4ZC00ZjFiLTk5OTUtMWEzZmY1MzJiYzIw
LzEvelFQUlBkSnZBRVNpZ194cUVlZFdvcUsxYVJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFON3edj2
983r2+8S+QAlwxN+pS4oedGpQiuW0sJdlBJoZ7ynhQ5tUhg6Eq7UigXT+1dA/6fH
p5PrWYPdfWRrhsgYHRkN69V6zcupLtegwspUcSzMZljuiAx0a1fleP2o4dMeqssk
5VS/OfZHOxwGgTx47BdC3uypUoOpv66XqCA7rAu8jJxIu91jyQLj5V1zlYPFlNGo
4NXjZAbN6APzm2KkCaCjSLhd9uFPOG51EYSoAEFQ5u5yMwQ84BiGVnttFEWCj2pk
zfYgjW/iJUu+0NP8VWUxsN2QUcn2L6eJnoiF3p1bPxHdqG0wIXzYnugDdahdabo4
gEZnEOfgCv2gUw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 21:33:33 2025 by rpki-client