Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: JpJd+36a1qT2xbqtiCkhz9FWCFJKhaQ44iJNK8ArGnw=
Subject key identifier: B0:31:99:22:95:61:AE:F1:7B:D1:A8:D7:9A:E8:41:86:E4:D3:B5:6D
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 01967F7D0D96BBD0ACFE109656417901A503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0DAC
Signing time: Tue 29 Apr 2025 03:00:24 +0000
Manifest this update: Tue 29 Apr 2025 03:00:24 +0000
Manifest next update: Wed 30 Apr 2025 03:00:24 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: /FCmdl67sKjiIDLXOavGHpkjXUdvxCk1qs4GGM3ibc4=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:0d:96:bb:d0:ac:fe:10:96:56:41:79:01:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: Apr 29 03:00:24 2025 GMT
Not After : Apr 30 03:00:24 2025 GMT
Subject: CN=b03199229561aef17bd1a8d79ae84186e4d3b56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:8d:0f:43:9c:c9:f6:fd:60:4f:bb:5a:7b:
63:94:56:2c:5f:ab:6b:c7:06:4c:ec:97:1b:1a:c5:
4b:ee:5a:6a:56:ae:b5:e2:d9:20:6c:f7:8b:32:3f:
df:51:ac:20:f8:d6:2c:3d:99:fc:d1:af:50:69:a6:
cb:ce:cc:a5:83:7d:2b:3c:9b:75:f4:31:28:de:05:
85:44:f6:51:41:bb:7d:51:4f:db:d0:62:1c:5d:97:
97:46:90:48:37:2a:05:f7:cc:b6:3c:75:98:76:e0:
dd:a5:09:9f:ee:e2:d1:5f:31:e3:38:f9:4e:53:94:
4a:2f:b9:7d:d8:4d:d4:59:cb:20:ca:85:30:72:52:
00:b1:64:b4:23:7e:7b:25:c8:84:3d:9d:77:ad:ae:
5a:c6:76:a7:82:c5:c5:e1:05:97:8b:08:87:76:31:
c7:52:32:ca:31:7e:5c:b3:69:b0:03:f6:8b:8a:42:
f0:cb:df:c6:8b:f8:99:0f:97:3a:a4:47:42:0f:e3:
7e:53:fe:35:54:1c:c4:4b:f6:fe:e8:c8:80:34:0a:
37:c0:f3:af:19:b6:f7:3e:fa:ac:d7:9b:ab:94:de:
50:29:c9:d7:9f:5d:aa:cd:d9:2e:13:d7:fa:02:8b:
8c:49:22:26:fe:05:0a:ef:fb:f0:aa:ea:fc:8b:0f:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:99:22:95:61:AE:F1:7B:D1:A8:D7:9A:E8:41:86:E4:D3:B5:6D
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a5:6e:dd:9f:17:ba:aa:2e:f8:cc:69:dc:a0:16:d9:20:e1:
4a:4a:02:95:7f:8e:ce:f9:c5:9d:66:71:0a:3e:65:18:c8:58:
c5:f9:ae:4b:dd:c3:ad:79:39:98:90:97:15:52:a8:47:2d:da:
fd:c4:19:f3:cf:d7:bd:21:9b:b4:01:00:f9:88:6d:db:27:95:
42:b3:2c:56:b5:d6:8b:38:fa:41:1e:62:12:54:6d:a3:c1:d9:
b7:a3:8b:f4:1a:50:ec:23:44:07:3d:bc:ba:1c:36:8b:76:18:
af:e2:91:2f:d7:13:23:2e:7a:31:15:50:a2:48:12:59:2e:e8:
ca:e0:cf:7b:88:28:9f:02:03:d1:c6:05:8d:3f:8f:77:62:42:
b8:8d:2a:85:b4:a6:c4:7d:b2:78:cb:cf:a4:01:4c:30:af:f7:
b7:a9:3e:11:21:b9:19:ef:56:af:21:6b:f6:14:b1:81:2c:55:
0b:69:7d:57:04:cd:3c:1f:1b:23:90:dc:66:1a:a0:52:0d:11:
e3:ab:57:21:27:13:56:97:7c:5a:2e:e3:5a:1a:e0:0c:e9:0e:
62:24:6f:ae:8e:5f:8e:93:8a:77:8a:15:1b:e5:ba:d1:f5:2f:
76:c9:8b:50:35:0b:e8:8d:a5:1f:c8:04:bf:2a:e7:54:ac:59:
a0:49:09:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fQ2Wu9Cs/hCWVkF5AaUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NWZiZTRiMWYwMDIzM2VkNzY3OTkwMDcxZjA0NTkwYzkw
Yzg4N2QwHhcNMjUwNDI5MDMwMDI0WhcNMjUwNDMwMDMwMDI0WjAzMTEwLwYDVQQD
EyhiMDMxOTkyMjk1NjFhZWYxN2JkMWE4ZDc5YWU4NDE4NmU0ZDNiNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3CND0Ocyfb9YE+7WntjlFYsX6tr
xwZM7JcbGsVL7lpqVq614tkgbPeLMj/fUawg+NYsPZn80a9QaabLzsylg30rPJt1
9DEo3gWFRPZRQbt9UU/b0GIcXZeXRpBINyoF98y2PHWYduDdpQmf7uLRXzHjOPlO
U5RKL7l92E3UWcsgyoUwclIAsWS0I357JciEPZ13ra5axnangsXF4QWXiwiHdjHH
UjLKMX5cs2mwA/aLikLwy9/Gi/iZD5c6pEdCD+N+U/41VBzES/b+6MiANAo3wPOv
Gbb3Pvqs15urlN5QKcnXn12qzdkuE9f6AouMSSIm/gUK7/vwqur8iw82OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAxmSKVYa7xe9Go15roQYbk07VtMB8GA1UdIwQY
MBaAFGdfvksfACM+12eZAHHwRZDJDIh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYt
NGY5ZDA0MDEwNzEwLzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NWMyYTAtNDlkZi00ZDk2LTk4OGYtNGY5ZDA0MDEwNzEw
LzEvWjEtLVN4OEFJejdYWjVrQWNmQkZrTWtNaUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaVu3Z8X
uqou+Mxp3KAW2SDhSkoClX+OzvnFnWZxCj5lGMhYxfmuS93DrXk5mJCXFVKoRy3a
/cQZ88/XvSGbtAEA+Yht2yeVQrMsVrXWizj6QR5iElRto8HZt6OL9BpQ7CNEBz28
uhw2i3YYr+KRL9cTIy56MRVQokgSWS7oyuDPe4gonwID0cYFjT+Pd2JCuI0qhbSm
xH2yeMvPpAFMMK/3t6k+ESG5Ge9WryFr9hSxgSxVC2l9VwTNPB8bI5DcZhqgUg0R
46tXIScTVpd8Wi7jWhrgDOkOYiRvro5fjpOKd4oVG+W60fUvdsmLUDUL6I2lH8gE
vyrnVKxZoEkJKw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:19:15 2025 by rpki-client