Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json)
Hash identifier: bpDI58xwSRYdOYUMoCnQU6W1NxTYKv5g7MgA6UAUPqs=
Subject key identifier: 86:3A:9B:31:C4:B4:01:E4:4A:92:84:83:59:6A:C4:57:12:23:EB:FB
Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Certificate serial: 0196824717EAD0F2F450476F0D9BEDAB2A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 16:00:19 +0000
Manifest this update: Tue 29 Apr 2025 16:00:19 +0000
Manifest next update: Wed 30 Apr 2025 16:00:19 +0000
Files and hashes: 1: 90E-kBjO5zMPh_CjvoGF6X6gBPo.roa (hash: CtoUcToSQH/z7T8Z7IC3trmKUCXpBxtjD/8pAoHxgVE=)
2: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: fzovAbhoG8xfSTol9goP5cHtllw4GmjOIcmhqm4sjlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:17:ea:d0:f2:f4:50:47:6f:0d:9b:ed:ab:2a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757
Validity
Not Before: Apr 29 16:00:19 2025 GMT
Not After : Apr 30 16:00:19 2025 GMT
Subject: CN=863a9b31c4b401e44a928483596ac4571223ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:0c:6a:c0:97:18:2c:6c:d4:00:63:33:7a:
e3:ff:e0:fb:95:dd:12:2f:a9:de:89:7b:b8:15:b1:
05:6c:5d:da:81:a6:9c:95:5c:f4:26:a7:ef:a5:c1:
9b:13:a3:66:6a:0d:4b:55:9e:ea:94:be:aa:94:37:
28:2b:0c:38:63:da:fe:61:09:fe:7a:fa:93:d9:3e:
0f:c9:73:fd:a8:dc:5b:ae:77:39:4c:40:0e:5f:30:
49:2f:c5:75:9f:cf:ce:60:37:2f:ed:e2:71:f4:8b:
5d:4c:7d:ea:31:19:64:1c:5c:f2:0f:58:e4:6e:a0:
41:df:7f:39:5f:42:fe:80:aa:97:f8:aa:ba:1b:7b:
e2:c2:3f:ed:59:71:12:28:64:ba:8b:41:ef:d5:ad:
23:9f:8b:9e:d4:67:69:cb:a0:f4:a2:4f:d7:af:25:
2a:db:00:1e:0c:69:6c:e9:11:da:e4:f0:d2:b5:df:
14:4d:0a:30:69:70:03:ce:f5:be:9b:a5:11:e7:a8:
84:fe:68:9b:3d:f2:49:ff:56:63:b8:f9:b6:f9:4c:
0e:e0:3f:2d:62:12:5a:43:50:75:c3:4e:10:81:71:
22:64:bf:1f:c6:5b:7b:86:86:c9:76:9d:d1:3d:71:
57:f0:f1:d1:fa:85:72:e7:f7:f2:64:0f:2d:7b:51:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:9B:31:C4:B4:01:E4:4A:92:84:83:59:6A:C4:57:12:23:EB:FB
X509v3 Authority Key Identifier:
keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ad:e7:2b:2a:51:62:7e:4f:c7:d4:a4:f2:80:55:46:e1:55:
62:ec:60:9a:7b:f2:3f:de:a2:a7:7c:ca:c8:d9:c6:a4:a1:31:
6c:18:61:a7:a6:25:d4:e5:47:7f:9b:a8:53:e0:4d:f0:f6:93:
22:94:58:95:34:e9:1d:79:3d:7d:5d:c7:22:b3:92:14:a5:92:
bd:85:f0:26:e5:a7:0d:59:94:69:f0:88:49:4d:1b:8e:dc:43:
9d:7c:c5:80:11:69:24:01:fd:12:6c:50:6d:fe:f5:ea:61:72:
45:f7:6f:40:98:58:60:5d:fa:67:ec:f5:48:82:30:d4:03:b5:
a9:0b:9c:57:ed:3d:e5:88:f1:00:ee:cf:ea:b6:63:5b:bf:c3:
e7:89:9f:9e:f7:7b:fe:5b:2a:29:57:0f:69:95:65:34:2a:3c:
58:52:8b:33:6d:36:9f:33:2a:c0:7e:e2:d3:57:ed:a9:cc:f9:
7f:13:29:90:5f:26:b3:e3:8b:b5:42:ca:c1:36:cf:91:5a:73:
52:7e:e9:54:eb:32:3a:1e:cb:fb:90:57:74:1c:ac:7b:7b:b1:
37:00:89:b5:bf:b5:83:36:02:db:10:97:d1:11:20:69:f4:5c:
1c:4c:16:08:a6:05:5d:8d:04:05:20:a7:da:36:d4:e2:89:06:
27:b3:ff:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCRxfq0PL0UEdvDZvtqypkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl
N2Y3NTcwHhcNMjUwNDI5MTYwMDE5WhcNMjUwNDMwMTYwMDE5WjAzMTEwLwYDVQQD
Eyg4NjNhOWIzMWM0YjQwMWU0NGE5Mjg0ODM1OTZhYzQ1NzEyMjNlYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0YMasCXGCxs1ABjM3rj/+D7ld0S
L6neiXu4FbEFbF3agaaclVz0JqfvpcGbE6Nmag1LVZ7qlL6qlDcoKww4Y9r+YQn+
evqT2T4PyXP9qNxbrnc5TEAOXzBJL8V1n8/OYDcv7eJx9ItdTH3qMRlkHFzyD1jk
bqBB3385X0L+gKqX+Kq6G3viwj/tWXESKGS6i0Hv1a0jn4ue1Gdpy6D0ok/XryUq
2wAeDGls6RHa5PDStd8UTQowaXADzvW+m6UR56iE/mibPfJJ/1ZjuPm2+UwO4D8t
YhJaQ1B1w04QgXEiZL8fxlt7hobJdp3RPXFX8PHR+oVy5/fyZA8te1HEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY6mzHEtAHkSpKEg1lqxFcSI+v7MB8GA1UdIwQY
MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt
MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk
LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMa3nKypR
Yn5Px9Sk8oBVRuFVYuxgmnvyP96ip3zKyNnGpKExbBhhp6Yl1OVHf5uoU+BN8PaT
IpRYlTTpHXk9fV3HIrOSFKWSvYXwJuWnDVmUafCISU0bjtxDnXzFgBFpJAH9EmxQ
bf716mFyRfdvQJhYYF36Z+z1SIIw1AO1qQucV+095YjxAO7P6rZjW7/D54mfnvd7
/lsqKVcPaZVlNCo8WFKLM202nzMqwH7i01ftqcz5fxMpkF8ms+OLtULKwTbPkVpz
Un7pVOsyOh7L+5BXdByse3uxNwCJtb+1gzYC2xCX0REgafRcHEwWCKYFXY0EBSCn
2jbU4okGJ7P/Bg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:42:55 2025 by rpki-client