Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: C1ECJKZAYjJ1awTXy5veev+jKCA98uHEqXiRA4nrPL8=
Subject key identifier: 8D:A2:E4:5A:EE:AE:DA:54:F2:67:20:51:8F:03:8F:40:DC:C6:63:2F
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 019679B22DB11745D77A0B3C02D17D1C5026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 09C8
Signing time: Mon 28 Apr 2025 00:00:42 +0000
Manifest this update: Mon 28 Apr 2025 00:00:42 +0000
Manifest next update: Tue 29 Apr 2025 00:00:42 +0000
Files and hashes: 1: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (hash: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=)
2: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (hash: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: +RqSqWr39vRhD6MTKueeQzKdEQ4+Gqw/4ssVULGubjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:2d:b1:17:45:d7:7a:0b:3c:02:d1:7d:1c:50:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Apr 28 00:00:42 2025 GMT
Not After : Apr 29 00:00:42 2025 GMT
Subject: CN=8da2e45aeeaeda54f26720518f038f40dcc6632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7c:be:61:75:63:ce:cf:ec:70:61:fb:8b:7b:
9e:cc:42:c4:80:db:2d:7f:7f:d5:e1:dd:e0:c8:e8:
16:8f:3a:64:9b:4a:eb:ae:04:89:38:87:52:93:3b:
0a:8d:5a:8d:47:8b:a5:d2:ad:7d:19:9d:49:5e:c9:
22:9d:bb:25:0b:29:f6:23:6d:37:ee:a5:f1:11:0a:
c3:69:28:c9:da:12:2b:a7:c1:bb:96:36:fa:4a:51:
db:4b:1e:b2:71:b8:c1:2c:bb:b4:7a:3f:cd:48:08:
92:dc:49:bf:9c:8b:bb:d0:f1:ef:fe:f6:6e:f5:10:
60:a7:fa:db:51:e8:bb:b0:69:6c:05:e8:98:e7:35:
80:38:5f:7e:d0:f9:16:5c:df:a6:ca:cd:e3:9d:4f:
16:dc:6e:1d:87:16:77:c5:a2:59:34:50:5f:c6:4f:
68:43:93:41:03:b7:63:1c:d2:ff:2c:a9:1b:be:af:
19:c5:ca:47:4e:06:fe:36:bf:5c:0d:2e:a3:5e:36:
3c:00:8e:f5:26:d0:26:ba:62:63:c8:16:24:38:96:
ef:ae:51:4c:28:97:8d:ed:7d:4e:79:78:60:56:ba:
bf:a2:b6:9e:84:06:bd:1e:21:a6:24:08:b8:7b:a9:
02:cc:52:4c:45:0c:6f:97:e6:4c:e6:23:2b:5d:02:
a1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:E4:5A:EE:AE:DA:54:F2:67:20:51:8F:03:8F:40:DC:C6:63:2F
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:4f:11:8e:8a:ba:26:08:fa:72:55:ad:be:76:cc:b2:e1:d3:
9b:b6:62:72:b9:1c:90:85:a2:b6:82:6e:33:14:cb:73:1c:df:
4e:27:5b:2b:77:16:34:aa:81:da:11:b2:03:50:b8:c7:83:62:
0e:44:20:c0:18:ec:e8:f8:67:ff:3f:ce:e4:50:53:a6:fa:ca:
b2:0b:4d:cc:62:e8:17:ed:ec:79:fc:fe:b5:68:54:1b:82:bc:
a7:90:0b:ba:bf:4c:68:c0:36:ab:3f:c1:d3:81:02:c2:0d:0d:
dc:21:c0:b8:7f:18:dd:31:9a:26:77:76:fc:87:51:c9:ce:7a:
8b:c9:3e:4b:40:bb:e2:15:07:a7:27:82:74:2c:41:f0:4a:19:
93:b3:04:14:60:ad:89:eb:e2:11:6e:ca:18:bc:70:cb:eb:27:
d2:ad:27:d0:c3:63:bf:17:f8:2c:60:c9:d7:27:ff:f6:b1:2d:
50:3f:91:89:bf:52:99:34:45:b9:7e:70:c1:c5:68:63:bd:ab:
6d:37:55:ac:23:df:d2:02:4e:6e:ed:6e:ce:22:ff:3f:d0:de:
f3:ca:50:99:32:32:7f:85:de:77:86:9f:05:06:c0:05:5e:a1:
90:37:e4:9f:97:2b:86:20:f1:8b:67:3e:f1:41:37:7e:99:22:
3c:4f:69:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5si2xF0XXegs8AtF9HFAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjAzNGNhNmExNmJiZDAxNDRhYmRmNWNmMjQ1OGY5Njhi
MTU4OWMwHhcNMjUwNDI4MDAwMDQyWhcNMjUwNDI5MDAwMDQyWjAzMTEwLwYDVQQD
Eyg4ZGEyZTQ1YWVlYWVkYTU0ZjI2NzIwNTE4ZjAzOGY0MGRjYzY2MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Xy+YXVjzs/scGH7i3uezELEgNst
f3/V4d3gyOgWjzpkm0rrrgSJOIdSkzsKjVqNR4ul0q19GZ1JXskinbslCyn2I203
7qXxEQrDaSjJ2hIrp8G7ljb6SlHbSx6ycbjBLLu0ej/NSAiS3Em/nIu70PHv/vZu
9RBgp/rbUei7sGlsBeiY5zWAOF9+0PkWXN+mys3jnU8W3G4dhxZ3xaJZNFBfxk9o
Q5NBA7djHNL/LKkbvq8ZxcpHTgb+Nr9cDS6jXjY8AI71JtAmumJjyBYkOJbvrlFM
KJeN7X1OeXhgVrq/oraehAa9HiGmJAi4e6kCzFJMRQxvl+ZM5iMrXQKhPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2i5FrurtpU8mcgUY8Dj0DcxmMvMB8GA1UdIwQY
MBaAFGZgNMpqFrvQFEq99c8kWPlosVicMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDIt
NWQ0OGJjZDdjMWRjLzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mNGI3MzMtMjlhZC00ZDU2LWI5ZDItNWQ0OGJjZDdjMWRj
LzEvWm1BMHltb1d1OUFVU3IzMXp5UlktV2l4V0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY08Rjoq6
Jgj6clWtvnbMsuHTm7ZicrkckIWitoJuMxTLcxzfTidbK3cWNKqB2hGyA1C4x4Ni
DkQgwBjs6Phn/z/O5FBTpvrKsgtNzGLoF+3sefz+tWhUG4K8p5ALur9MaMA2qz/B
04ECwg0N3CHAuH8Y3TGaJnd2/IdRyc56i8k+S0C74hUHpyeCdCxB8EoZk7MEFGCt
ieviEW7KGLxwy+sn0q0n0MNjvxf4LGDJ1yf/9rEtUD+Rib9SmTRFuX5wwcVoY72r
bTdVrCPf0gJObu1uziL/P9De88pQmTIyf4Xed4afBQbABV6hkDfkn5crhiDxi2c+
8UE3fpkiPE9pPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:50 2025 by rpki-client