Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
File: ZZb7iaiiPL5PKtsWXInybeireHY.mft (raw, json)
Hash identifier: XILigkvVeW+PLk+sRk4+pThKgeRoKM+eQMnX6cohYko=
Subject key identifier: 6F:B2:F4:04:39:25:92:BA:18:D7:23:02:04:D1:AB:5C:B0:40:BB:15
Authority key identifier: 65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
Certificate issuer: /CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Certificate serial: 019674C2F641693011DEFADABFF996F709A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:56 +0000
Manifest this update: Sun 27 Apr 2025 01:00:56 +0000
Manifest next update: Mon 28 Apr 2025 01:00:56 +0000
Files and hashes: 1: ZZb7iaiiPL5PKtsWXInybeireHY.crl (hash: bwAMKRNKetHPx76Qvid4abbciughnfrV1/gA0w+L8b0=)
2: eVvmAEAIedlVHCPd9SMP0Bncqxc.roa (hash: 4VuWPxpiNhIPFJNGqrNiqAkoBmgIxFNuRTiyh6Py9uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:f6:41:69:30:11:de:fa:da:bf:f9:96:f7:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6596fb89a8a23cbe4f2adb165c89f26de8ab7876
Validity
Not Before: Apr 27 01:00:56 2025 GMT
Not After : Apr 28 01:00:56 2025 GMT
Subject: CN=6fb2f404392592ba18d7230204d1ab5cb040bb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:69:be:4e:e2:4f:ac:b5:0f:21:c4:9f:b9:
81:28:c5:68:ad:75:70:9d:65:f8:60:c0:f7:ce:c5:
21:82:ab:91:f8:fe:3c:5d:d8:67:a4:c0:a6:85:ac:
00:f1:a3:5f:46:e3:6b:01:4d:ea:47:23:df:26:ab:
28:d4:16:22:62:42:6c:ab:d8:dd:e7:42:bc:b6:e6:
b4:2b:57:6b:92:fe:9b:f4:eb:11:e6:b5:a5:05:2b:
2d:7e:63:cf:5e:fb:57:74:7f:b7:6e:c8:d0:44:92:
d4:3e:b2:a1:3e:25:3d:f3:f1:90:a3:c1:cc:d1:bd:
dc:9c:1b:c3:44:b7:36:65:75:8d:78:d9:7c:da:29:
11:32:0a:02:cc:c7:f8:82:e2:6f:7a:24:44:b2:be:
b1:cf:44:20:64:45:9b:a2:13:89:6f:35:7e:bf:9f:
a7:6c:66:b8:72:c7:26:47:9e:8e:5f:9d:5f:87:90:
b8:75:9b:5d:dc:ef:9d:ff:7b:1e:76:45:a8:2f:0e:
8a:f2:79:9a:39:a3:f9:d7:b6:7d:bf:97:e8:39:9d:
66:9c:bb:27:f6:d6:49:4e:4d:ff:a8:4d:7f:c3:06:
32:3a:d0:df:54:96:6b:f2:e7:67:c5:99:18:1e:3e:
bf:7c:8d:00:d7:53:fc:a5:d0:7c:55:8a:7c:83:a0:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:F4:04:39:25:92:BA:18:D7:23:02:04:D1:AB:5C:B0:40:BB:15
X509v3 Authority Key Identifier:
keyid:65:96:FB:89:A8:A2:3C:BE:4F:2A:DB:16:5C:89:F2:6D:E8:AB:78:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZb7iaiiPL5PKtsWXInybeireHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d743df-5f6f-4f17-a225-202e19c088b1/1/ZZb7iaiiPL5PKtsWXInybeireHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:a1:9e:6d:b6:87:9f:a1:2e:da:df:c2:34:f4:87:20:a3:
7b:91:a4:da:8c:b5:77:ae:32:0f:82:d4:44:4d:90:da:ea:e8:
d3:35:0b:6b:a6:79:1d:52:ea:11:71:02:7d:a3:20:6e:ad:32:
d3:18:41:06:d0:40:f8:45:7e:5e:0a:5e:25:15:2a:f1:57:9d:
ef:0b:ec:0f:b4:b9:09:4b:8b:83:a1:e3:5a:7a:90:52:8d:66:
c4:ea:3e:58:35:89:a0:53:00:f6:6a:63:66:89:c8:a8:2c:e0:
a0:8d:46:e0:b5:73:c2:90:86:59:b5:4b:c2:b2:95:12:be:16:
20:4b:fa:72:4f:f8:7f:93:66:58:97:0c:ac:3d:c4:ee:d1:07:
9c:17:23:97:92:df:2e:4b:af:fd:50:19:60:28:a9:51:a1:a6:
54:ad:70:ac:94:0b:e6:44:b3:37:83:6e:69:ee:0c:24:ac:b4:
9e:e6:8a:c1:4d:88:67:3d:c8:06:b8:86:cf:74:18:6b:68:dd:
eb:53:3c:98:7a:f2:e4:65:a1:27:c5:ab:20:90:d7:8e:ed:96:
8c:aa:af:04:f6:5e:5b:a5:e7:09:db:73:24:44:f5:62:ae:80:
70:bc:5d:69:ce:77:f8:53:ba:af:da:b6:87:a8:18:38:94:dd:
3f:2f:95:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wvZBaTAR3vrav/mW9wmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OTZmYjg5YThhMjNjYmU0ZjJhZGIxNjVjODlmMjZkZThh
Yjc4NzYwHhcNMjUwNDI3MDEwMDU2WhcNMjUwNDI4MDEwMDU2WjAzMTEwLwYDVQQD
Eyg2ZmIyZjQwNDM5MjU5MmJhMThkNzIzMDIwNGQxYWI1Y2IwNDBiYjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuytpvk7iT6y1DyHEn7mBKMVorXVw
nWX4YMD3zsUhgquR+P48XdhnpMCmhawA8aNfRuNrAU3qRyPfJqso1BYiYkJsq9jd
50K8tua0K1drkv6b9OsR5rWlBSstfmPPXvtXdH+3bsjQRJLUPrKhPiU98/GQo8HM
0b3cnBvDRLc2ZXWNeNl82ikRMgoCzMf4guJveiREsr6xz0QgZEWbohOJbzV+v5+n
bGa4cscmR56OX51fh5C4dZtd3O+d/3sedkWoLw6K8nmaOaP517Z9v5foOZ1mnLsn
9tZJTk3/qE1/wwYyOtDfVJZr8udnxZkYHj6/fI0A11P8pdB8VYp8g6CtUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+y9AQ5JZK6GNcjAgTRq1ywQLsVMB8GA1UdIwQY
MBaAFGWW+4moojy+TyrbFlyJ8m3oq3h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUt
MjAyZTE5YzA4OGIxLzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9kNzQzZGYtNWY2Zi00ZjE3LWEyMjUtMjAyZTE5YzA4OGIx
LzEvWlpiN2lhaWlQTDVQS3RzV1hJbnliZWlyZUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTyhnm22
h5+hLtrfwjT0hyCje5Gk2oy1d64yD4LURE2Q2uro0zULa6Z5HVLqEXECfaMgbq0y
0xhBBtBA+EV+XgpeJRUq8Ved7wvsD7S5CUuLg6HjWnqQUo1mxOo+WDWJoFMA9mpj
ZonIqCzgoI1G4LVzwpCGWbVLwrKVEr4WIEv6ck/4f5NmWJcMrD3E7tEHnBcjl5Lf
Lkuv/VAZYCipUaGmVK1wrJQL5kSzN4Nuae4MJKy0nuaKwU2IZz3IBriGz3QYa2jd
61M8mHry5GWhJ8WrIJDXju2WjKqvBPZeW6XnCdtzJET1Yq6AcLxdac53+FO6r9q2
h6gYOJTdPy+VfQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:54 2025 by rpki-client