Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
File: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft (raw, json)
Hash identifier: 0r63WV/CWbXZDtyFKDGKudi+32aPW3pReNLoXtf6XpM=
Subject key identifier: FD:0E:8A:0B:BA:DA:D6:11:91:56:72:82:6D:EC:52:FA:49:69:54:98
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 01968F95836B218BFF0301335BD588B208F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
Manifest number: 1522
Signing time: Fri 02 May 2025 06:01:02 +0000
Manifest this update: Fri 02 May 2025 06:01:02 +0000
Manifest next update: Sat 03 May 2025 06:01:02 +0000
Files and hashes: 1: Ylu4oY650LeSLzKfRWZsKd7D6d4.roa (hash: at13Jjp52CyKiekCDznMGprsJGH6Ha6O/Aegpe9S1N0=)
2: zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl (hash: hjPgsYLpEd495VpOpS070T9lUsdPsb+N9kEAhfvB9uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:83:6b:21:8b:ff:03:01:33:5b:d5:88:b2:08:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: May 2 06:01:02 2025 GMT
Not After : May 3 06:01:02 2025 GMT
Subject: CN=fd0e8a0bbadad611915672826dec52fa49695498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a5:bd:fa:02:83:40:ff:f8:ad:59:a0:fc:b7:
a8:2c:4b:ff:a4:b6:7b:e6:15:db:ee:18:5c:40:d2:
63:4b:e8:61:08:4c:2c:dc:ce:56:55:28:e9:1c:c2:
62:3d:ce:4d:e7:67:7d:83:d1:a8:cb:ba:d0:72:98:
fe:51:cf:1c:73:5a:44:bd:ee:19:75:cf:4e:c4:e8:
8a:73:f3:63:ff:78:1c:de:ca:29:b8:7f:63:5c:50:
d6:b9:38:3c:28:82:2d:db:02:a9:b9:ec:49:06:04:
0b:b4:2e:cd:42:67:6a:d1:6a:6f:79:b4:63:b9:2b:
24:37:97:2e:4d:11:03:d9:07:72:a4:f8:98:f2:26:
18:3d:11:31:e1:8e:3a:e4:f0:fc:ad:7d:83:e0:c1:
b5:ff:8a:8f:1b:ce:a6:86:2b:33:aa:e6:b9:dc:6a:
c6:18:9e:4d:2d:57:e2:45:e4:ba:f5:a0:59:43:10:
61:8e:c5:68:03:7d:c1:c0:2c:39:06:b0:27:b0:5f:
a5:34:85:1b:e1:0d:f2:7d:11:c1:11:7d:82:2a:ec:
37:ec:24:e6:ed:89:51:02:3e:bf:3c:98:08:50:f1:
73:6a:27:42:28:7f:5e:69:88:ac:6e:99:61:01:2c:
73:c0:c9:62:38:36:50:e5:4b:71:2e:ff:a9:62:a0:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0E:8A:0B:BA:DA:D6:11:91:56:72:82:6D:EC:52:FA:49:69:54:98
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:46:62:43:5b:89:1d:cd:2f:31:8d:a4:a4:3c:fd:93:df:e2:
ce:11:ce:0e:e8:0a:de:18:00:65:15:9e:70:da:71:5a:2d:72:
7a:d1:34:92:39:07:06:b3:93:c8:03:aa:eb:9f:db:cc:f1:41:
8d:b1:7e:aa:8f:b2:40:c2:47:59:96:60:2c:92:bf:8b:0d:ee:
b5:83:1e:49:a3:8c:29:d2:34:63:da:92:b1:88:5c:d2:eb:77:
36:42:49:14:78:30:89:52:e1:af:b3:ef:31:de:30:a5:47:6c:
81:c8:bd:04:83:3c:58:7e:a3:90:0c:74:0c:e6:6b:b5:f1:f3:
6d:4b:74:40:20:03:30:18:13:47:c8:bb:27:1a:93:99:54:ea:
ad:1e:c7:37:6b:f1:a3:6a:65:08:12:4c:c9:a6:30:a1:12:39:
50:3d:2f:1e:3c:d8:b6:0f:6d:92:e0:25:b3:b4:06:13:f2:ac:
b4:cd:aa:01:6b:6f:af:74:c7:cc:25:68:d2:36:b3:58:ad:a4:
9c:7a:71:a4:58:ab:09:69:ac:66:98:b2:bc:7e:17:1d:c5:d8:
a3:0c:e9:51:c6:b2:30:e2:85:1f:63:d9:34:4c:8f:9c:9a:df:
6c:60:36:3f:e7:ac:d2:42:8d:64:72:8f:dd:1e:84:fe:ca:95:
f0:7b:78:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPlYNrIYv/AwEzW9WIsgj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGQ5MDJhMTI3MTI3MDAyN2U0NTc3Nzc4ZWEzNTg4M2I0
NTE1ZjYwHhcNMjUwNTAyMDYwMTAyWhcNMjUwNTAzMDYwMTAyWjAzMTEwLwYDVQQD
EyhmZDBlOGEwYmJhZGFkNjExOTE1NjcyODI2ZGVjNTJmYTQ5Njk1NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qW9+gKDQP/4rVmg/LeoLEv/pLZ7
5hXb7hhcQNJjS+hhCEws3M5WVSjpHMJiPc5N52d9g9Goy7rQcpj+Uc8cc1pEve4Z
dc9OxOiKc/Nj/3gc3sopuH9jXFDWuTg8KIIt2wKpuexJBgQLtC7NQmdq0WpvebRj
uSskN5cuTRED2QdypPiY8iYYPREx4Y465PD8rX2D4MG1/4qPG86mhiszqua53GrG
GJ5NLVfiReS69aBZQxBhjsVoA33BwCw5BrAnsF+lNIUb4Q3yfRHBEX2CKuw37CTm
7YlRAj6/PJgIUPFzaidCKH9eaYisbplhASxzwMliODZQ5UtxLv+pYqAlJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0Oigu62tYRkVZygm3sUvpJaVSYMB8GA1UdIwQY
MBaAFM3dkCoScScAJ+RXd3jqNYg7RRX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEt
ZGM3NTQyMTM4OTUyLzEvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEtZGM3NTQyMTM4OTUy
LzEvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUZiQ1uJ
Hc0vMY2kpDz9k9/izhHODugK3hgAZRWecNpxWi1yetE0kjkHBrOTyAOq65/bzPFB
jbF+qo+yQMJHWZZgLJK/iw3utYMeSaOMKdI0Y9qSsYhc0ut3NkJJFHgwiVLhr7Pv
Md4wpUdsgci9BIM8WH6jkAx0DOZrtfHzbUt0QCADMBgTR8i7JxqTmVTqrR7HN2vx
o2plCBJMyaYwoRI5UD0vHjzYtg9tkuAls7QGE/KstM2qAWtvr3THzCVo0jazWK2k
nHpxpFirCWmsZpiyvH4XHcXYowzpUcayMOKFH2PZNEyPnJrfbGA2P+es0kKNZHKP
3R6E/sqV8Ht45g==
-----END CERTIFICATE-----
Generated at Fri May 2 15:25:48 2025 by rpki-client