Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: 2pXumOeI/afsnO89fnFtkn1k/JcJIs42xomrNPMjKXI=
Subject key identifier: 49:1B:EC:86:F2:18:AF:2A:FC:93:8F:27:92:AE:82:A3:3F:41:D2:BF
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 019690DEB6ACADA20E3E4BFD9934E099A5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 1239
Signing time: Fri 02 May 2025 12:00:36 +0000
Manifest this update: Fri 02 May 2025 12:00:36 +0000
Manifest next update: Sat 03 May 2025 12:00:36 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: HuNQgnkZGFYE1j3Mk0lZwMJPmUKWPydLvYCcaU9nRdk=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:b6:ac:ad:a2:0e:3e:4b:fd:99:34:e0:99:a5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: May 2 12:00:36 2025 GMT
Not After : May 3 12:00:36 2025 GMT
Subject: CN=491bec86f218af2afc938f2792ae82a33f41d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:d4:62:d2:5c:28:47:a3:50:39:2d:03:e4:
51:7e:13:fc:10:57:90:a8:6d:6d:70:38:cf:07:4c:
78:24:c9:eb:ac:3a:26:3d:c7:ba:79:9b:e8:db:4f:
e0:8b:20:fc:99:df:f0:be:bd:d6:e8:79:df:e0:af:
41:b0:6c:e1:bb:16:ed:4e:ae:7c:ff:d8:0d:66:7a:
31:f7:62:0a:ee:3c:c6:ec:a6:e4:2a:e7:5e:37:16:
3a:ff:d2:94:42:0e:2a:98:0f:76:bf:f4:50:05:67:
db:15:f7:85:38:7c:a7:09:b6:97:02:c7:c0:46:c0:
e7:dd:8a:be:62:ee:a7:e6:44:fd:88:23:a6:74:0b:
65:d2:64:db:92:34:89:67:f5:aa:74:f7:c8:d8:70:
a3:79:ae:c0:b6:ae:9f:08:3a:f9:79:48:c4:59:8e:
86:8d:8a:1f:df:7b:ea:8a:c0:c8:6e:78:b3:68:09:
0a:b0:77:0a:a5:13:be:8d:f3:a3:78:74:fe:18:dc:
cd:0e:77:f8:bc:a6:19:99:56:8a:c2:1f:cd:ab:d0:
6f:3a:5f:b2:63:e4:e3:5f:ce:04:56:80:8e:8d:75:
09:c2:74:b5:69:4b:98:2b:e7:2e:89:ce:b3:ec:fa:
e1:54:8b:18:c9:a8:52:37:da:31:46:63:32:30:d2:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:1B:EC:86:F2:18:AF:2A:FC:93:8F:27:92:AE:82:A3:3F:41:D2:BF
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:ac:36:c0:14:93:21:00:4a:17:13:09:66:b3:c0:b6:19:
24:8d:74:31:c7:14:04:d6:0e:42:12:e0:e9:ad:e3:25:99:1e:
d3:1d:3c:75:9a:1b:bb:16:26:3c:a8:f5:b8:ac:36:91:01:c8:
0b:04:f0:f5:3f:15:79:94:ab:ad:93:f8:ef:a4:bd:4c:f3:eb:
47:98:93:77:be:55:d8:72:bd:fa:03:45:4d:2a:57:90:2d:e2:
eb:a1:49:b3:75:a7:a4:4d:46:2d:96:7f:28:4b:ad:11:c0:70:
60:2f:70:b1:25:fe:cf:ec:2f:9b:35:07:68:3a:1b:eb:df:58:
36:28:63:92:b1:ae:89:1e:0b:b9:ec:3c:e1:03:44:38:b9:99:
c4:96:f8:12:e2:38:57:33:10:bd:41:65:4e:a8:1c:57:b9:5c:
98:35:84:51:a1:8c:a8:1d:c2:e9:f1:ce:db:d4:8a:fd:dc:97:
12:da:c6:5e:fd:c5:dd:7e:62:c5:da:9f:9b:f0:95:71:e5:c6:
6f:57:3b:1c:1c:49:c3:c3:53:87:8e:ac:a9:fa:75:9a:d4:35:
00:18:aa:0c:04:67:8f:32:76:fd:d2:4d:da:07:0d:98:52:5e:
3a:72:3c:0e:25:d5:90:a7:57:7f:4d:b9:85:7c:c8:a1:9a:1d:
dd:de:12:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQ3rasraIOPkv9mTTgmaX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWU0ZDdlYThhMzQ3MGM5NzAzZWU3NTUxNDgxYzM2Zjc3
NGZlYmIwHhcNMjUwNTAyMTIwMDM2WhcNMjUwNTAzMTIwMDM2WjAzMTEwLwYDVQQD
Eyg0OTFiZWM4NmYyMThhZjJhZmM5MzhmMjc5MmFlODJhMzNmNDFkMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILUYtJcKEejUDktA+RRfhP8EFeQ
qG1tcDjPB0x4JMnrrDomPce6eZvo20/giyD8md/wvr3W6Hnf4K9BsGzhuxbtTq58
/9gNZnox92IK7jzG7KbkKudeNxY6/9KUQg4qmA92v/RQBWfbFfeFOHynCbaXAsfA
RsDn3Yq+Yu6n5kT9iCOmdAtl0mTbkjSJZ/WqdPfI2HCjea7Atq6fCDr5eUjEWY6G
jYof33vqisDIbnizaAkKsHcKpRO+jfOjeHT+GNzNDnf4vKYZmVaKwh/Nq9BvOl+y
Y+TjX84EVoCOjXUJwnS1aUuYK+cuic6z7PrhVIsYyahSN9oxRmMyMNKcUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkb7IbyGK8q/JOPJ5KugqM/QdK/MB8GA1UdIwQY
MBaAFGZeTX6oo0cMlwPudVFIHDb3dP67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmIt
MTYyZWQ2MjRlMjgyLzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNGRkZDEtZGVhYy00MWZmLWJhNmItMTYyZWQ2MjRlMjgy
LzEvWmw1TmZxaWpSd3lYQS01MVVVZ2NOdmQwX3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYisNsAU
kyEAShcTCWazwLYZJI10MccUBNYOQhLg6a3jJZke0x08dZobuxYmPKj1uKw2kQHI
CwTw9T8VeZSrrZP476S9TPPrR5iTd75V2HK9+gNFTSpXkC3i66FJs3WnpE1GLZZ/
KEutEcBwYC9wsSX+z+wvmzUHaDob699YNihjkrGuiR4Luew84QNEOLmZxJb4EuI4
VzMQvUFlTqgcV7lcmDWEUaGMqB3C6fHO29SK/dyXEtrGXv3F3X5ixdqfm/CVceXG
b1c7HBxJw8NTh46sqfp1mtQ1ABiqDARnjzJ2/dJN2gcNmFJeOnI8DiXVkKdXf025
hXzIoZod3d4SKA==
-----END CERTIFICATE-----
Generated at Fri May 2 20:17:08 2025 by rpki-client