Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: H5oBPBgQFV+TexyRPqqa8F1HqVDXFU7oblx/SFQ/5tM=
Subject key identifier: A8:E7:88:6A:B7:9E:16:94:A4:3D:DA:B0:B5:94:0B:AE:B7:B9:37:CC
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 0196767A530F8C3165D5409BEFF64C9749F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 084A
Signing time: Sun 27 Apr 2025 09:00:50 +0000
Manifest this update: Sun 27 Apr 2025 09:00:50 +0000
Manifest next update: Mon 28 Apr 2025 09:00:50 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: fyS9LPNtTRGmgXPgdIs95hSRvztM9Zj4AT3wrUqP2Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:53:0f:8c:31:65:d5:40:9b:ef:f6:4c:97:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Apr 27 09:00:50 2025 GMT
Not After : Apr 28 09:00:50 2025 GMT
Subject: CN=a8e7886ab79e1694a43ddab0b5940baeb7b937cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:04:0c:f9:32:59:cc:df:24:73:64:5d:bd:bb:
81:da:d2:96:fa:11:91:d2:a2:9d:60:0a:bf:a7:a4:
02:fa:ab:72:5f:d0:d4:0a:3d:43:af:be:86:1a:fa:
da:40:e1:08:e9:bd:bd:4b:48:07:b8:6a:82:71:bc:
9d:c1:41:97:67:e6:42:94:31:1a:de:bc:e4:dd:a7:
83:28:c8:35:25:e8:57:ef:8a:e9:e9:43:9b:98:8a:
eb:c7:4b:4a:1f:51:43:6d:b6:d1:73:3d:11:af:42:
32:89:d3:64:77:2d:0e:8d:e1:49:93:fd:64:a2:b7:
e2:4b:f3:1b:61:f1:83:c3:e1:c4:45:10:ca:2a:ec:
d5:19:ac:bf:1a:e0:b6:95:6a:51:04:d3:99:1a:87:
17:97:dd:57:af:32:dd:ce:a5:71:76:38:30:51:03:
16:a4:16:79:bb:ff:ac:b7:1c:eb:d4:45:d9:f0:c6:
bd:4c:64:7f:97:09:06:ce:ab:ad:99:36:87:d8:70:
83:2e:f6:42:07:ca:16:46:29:9f:ee:a0:12:b4:0a:
ca:91:e8:e8:e5:95:06:55:0d:5f:1f:dd:71:c3:e6:
db:fe:82:66:ce:20:9c:1d:69:cf:2a:68:a6:01:86:
f2:28:38:17:cb:5b:47:aa:b1:39:80:d4:5d:79:12:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E7:88:6A:B7:9E:16:94:A4:3D:DA:B0:B5:94:0B:AE:B7:B9:37:CC
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f7:1e:03:f1:c7:02:90:7e:66:84:8a:5b:d9:42:40:69:62:
53:a3:e2:f1:87:d8:dd:2d:43:2f:56:7e:d4:d7:85:f4:c7:64:
a4:1b:3d:9c:e8:80:c2:0d:a1:b2:e3:9b:b7:d2:ca:53:99:fd:
fe:e9:20:05:80:bd:ad:b4:5c:8b:82:4b:b0:97:61:4f:ab:46:
f0:08:46:b6:50:d3:8c:54:cd:9f:62:68:2d:f8:31:e6:5c:a0:
cd:7f:d3:8e:c4:15:00:ba:0b:60:d8:fd:c4:d5:d3:76:32:bf:
b3:00:6b:6d:d4:75:4a:c9:62:21:9a:89:3b:09:80:b4:1f:89:
49:09:8f:7c:ac:2e:cf:1c:d4:26:64:45:66:d1:35:6b:6e:44:
c2:98:f5:6e:20:3d:e0:c8:f0:8f:1d:d0:e1:11:60:8c:e1:fc:
02:3c:81:d6:68:a5:62:56:03:08:31:ba:e1:94:d5:8a:7e:e4:
23:e1:59:81:f1:28:65:e2:66:ed:39:7a:22:87:04:1e:2f:2c:
a6:fd:b9:98:ab:70:59:2a:9c:57:e6:e3:35:46:bc:1a:31:eb:
de:7d:62:fb:0a:23:23:45:0d:6c:87:5e:34:1c:3e:30:e7:a6:
b3:5b:94:99:31:44:b5:4f:03:e8:c3:76:d6:bf:70:df:14:a7:
2e:cf:e9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2elMPjDFl1UCb7/ZMl0n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjM5YTUxMDg0ZjFiMmI1YzY4NDY0M2NhYzE0NjIxN2M3
OWY4ZDEwHhcNMjUwNDI3MDkwMDUwWhcNMjUwNDI4MDkwMDUwWjAzMTEwLwYDVQQD
EyhhOGU3ODg2YWI3OWUxNjk0YTQzZGRhYjBiNTk0MGJhZWI3YjkzN2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgQM+TJZzN8kc2RdvbuB2tKW+hGR
0qKdYAq/p6QC+qtyX9DUCj1Dr76GGvraQOEI6b29S0gHuGqCcbydwUGXZ+ZClDEa
3rzk3aeDKMg1JehX74rp6UObmIrrx0tKH1FDbbbRcz0Rr0IyidNkdy0OjeFJk/1k
orfiS/MbYfGDw+HERRDKKuzVGay/GuC2lWpRBNOZGocXl91XrzLdzqVxdjgwUQMW
pBZ5u/+stxzr1EXZ8Ma9TGR/lwkGzqutmTaH2HCDLvZCB8oWRimf7qAStArKkejo
5ZUGVQ1fH91xw+bb/oJmziCcHWnPKmimAYbyKDgXy1tHqrE5gNRdeRKwPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjniGq3nhaUpD3asLWUC663uTfMMB8GA1UdIwQY
MBaAFGQjmlEITxsrXGhGQ8rBRiF8efjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYt
NGU5MzA1Y2FmMWEzLzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYtNGU5MzA1Y2FmMWEz
LzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/ceA/HH
ApB+ZoSKW9lCQGliU6Pi8YfY3S1DL1Z+1NeF9MdkpBs9nOiAwg2hsuObt9LKU5n9
/ukgBYC9rbRci4JLsJdhT6tG8AhGtlDTjFTNn2JoLfgx5lygzX/TjsQVALoLYNj9
xNXTdjK/swBrbdR1SsliIZqJOwmAtB+JSQmPfKwuzxzUJmRFZtE1a25Ewpj1biA9
4Mjwjx3Q4RFgjOH8AjyB1milYlYDCDG64ZTVin7kI+FZgfEoZeJm7Tl6IocEHi8s
pv25mKtwWSqcV+bjNUa8GjHr3n1i+wojI0UNbIdeNBw+MOems1uUmTFEtU8D6MN2
1r9w3xSnLs/pGw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:55:54 2025 by rpki-client