Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: DGlCuDWUzV/eL27NYhJx4tzgLKxGgVLWJ520v4MJdYE=
Subject key identifier: 0C:EC:BE:AC:FB:ED:9E:51:7B:6E:42:55:34:DD:F3:CD:06:63:3A:56
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 01967ED898C9110426DD47161B4FBD9BF4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 00:00:46 +0000
Manifest this update: Tue 29 Apr 2025 00:00:46 +0000
Manifest next update: Wed 30 Apr 2025 00:00:46 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: KT1LZEM2sq5p7MFYOGb+qBAfb2hTzjEjZDLNsMU7ahU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:98:c9:11:04:26:dd:47:16:1b:4f:bd:9b:f4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Apr 29 00:00:46 2025 GMT
Not After : Apr 30 00:00:46 2025 GMT
Subject: CN=0cecbeacfbed9e517b6e425534ddf3cd06633a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:b3:e7:11:60:c0:93:ad:17:21:40:e0:9d:
b4:22:97:49:c6:bc:b4:15:ac:f9:e4:df:e7:5f:53:
fd:ef:01:af:e4:61:5e:ab:74:f5:e4:08:f1:a7:63:
ca:7b:6b:2c:77:84:5d:69:ee:b3:a9:8f:f5:cd:4c:
81:81:d5:0b:86:87:08:4e:88:7a:1f:0e:63:3b:97:
ab:f8:13:bc:e5:c0:89:3c:ff:59:98:b2:9c:a9:f5:
a9:fb:b9:f3:fd:ac:08:06:70:e3:76:f9:28:58:11:
62:e3:1e:31:91:8c:06:0e:e3:7e:c4:14:41:dc:49:
14:dc:a5:82:8a:ac:e7:85:88:53:21:fe:f6:15:97:
c5:de:d9:66:80:e4:d6:26:08:e5:96:58:3e:08:02:
77:3c:26:72:9b:ec:db:1c:84:b6:8c:87:c1:6a:7a:
a5:e6:47:67:b4:48:63:60:47:5f:68:2d:9d:4a:30:
b9:cd:fb:5c:0f:85:fa:d7:5d:9b:34:f6:ee:e3:58:
48:d1:40:16:e2:86:b0:96:c6:a2:b8:eb:ac:5c:a7:
0b:ff:a0:8b:15:72:30:9c:87:ff:11:3b:bf:1a:d3:
ba:ac:86:d1:e1:b2:fa:83:1e:69:97:60:a3:aa:8a:
b7:f4:b6:02:ff:e1:d8:c6:40:39:9c:d8:1f:ae:f8:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:BE:AC:FB:ED:9E:51:7B:6E:42:55:34:DD:F3:CD:06:63:3A:56
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:72:65:20:92:0f:cd:6b:ba:3a:63:84:b7:87:84:7a:61:a2:
63:76:b5:3c:34:2b:32:63:4a:90:d9:c0:2e:a3:63:21:e6:6c:
65:80:d2:24:81:44:e7:24:e4:96:81:cf:a9:22:97:50:cd:7b:
3a:15:d9:c6:0f:0c:fa:d0:8d:95:94:79:a4:ab:65:93:49:e9:
1a:cf:a9:0a:4b:03:a7:bd:e5:26:fd:24:ea:4c:06:71:0f:17:
7c:a5:02:94:7a:80:91:a7:ad:34:55:40:e8:65:8d:4e:d4:e5:
eb:7c:ed:90:16:c6:67:be:fe:80:ac:6b:d9:78:47:c4:59:6f:
55:4b:4a:7e:7b:01:c8:66:54:e6:f7:a7:66:01:37:73:19:40:
27:4e:5b:a5:e3:9a:84:72:08:75:c1:18:79:7e:01:c4:f6:d0:
6b:9d:a9:82:4c:61:ff:c9:2c:de:16:1f:79:72:65:90:bb:61:
9a:35:5d:fd:6f:4d:ee:50:fb:ac:db:ee:88:ff:e3:47:48:1a:
13:32:62:b8:2c:b6:db:c1:11:76:d9:70:ec:40:39:71:d9:d6:
f5:8b:5c:d7:df:27:4a:56:54:16:68:36:1c:62:68:65:f1:c6:
fe:66:bd:69:a2:7f:60:92:2f:db:79:29:1b:91:5a:5a:b2:f4:
b5:90:7c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2JjJEQQm3UcWG0+9m/TzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDE1Y2JhMjJlMzMxYWRhOTFmZjRkYzY2ODhlNWZhMGFm
NDU3NjkwHhcNMjUwNDI5MDAwMDQ2WhcNMjUwNDMwMDAwMDQ2WjAzMTEwLwYDVQQD
EygwY2VjYmVhY2ZiZWQ5ZTUxN2I2ZTQyNTUzNGRkZjNjZDA2NjMzYTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGKz5xFgwJOtFyFA4J20IpdJxry0
Faz55N/nX1P97wGv5GFeq3T15Ajxp2PKe2ssd4Rdae6zqY/1zUyBgdULhocIToh6
Hw5jO5er+BO85cCJPP9ZmLKcqfWp+7nz/awIBnDjdvkoWBFi4x4xkYwGDuN+xBRB
3EkU3KWCiqznhYhTIf72FZfF3tlmgOTWJgjlllg+CAJ3PCZym+zbHIS2jIfBanql
5kdntEhjYEdfaC2dSjC5zftcD4X6112bNPbu41hI0UAW4oawlsaiuOusXKcL/6CL
FXIwnIf/ETu/GtO6rIbR4bL6gx5pl2Cjqoq39LYC/+HYxkA5nNgfrvjgPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzsvqz77Z5Re25CVTTd880GYzpWMB8GA1UdIwQY
MBaAFGdBXLoi4zGtqR/03GaI5foK9FdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDIt
NjY2NDNlMDY2M2RmLzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDItNjY2NDNlMDY2M2Rm
LzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnJlIJIP
zWu6OmOEt4eEemGiY3a1PDQrMmNKkNnALqNjIeZsZYDSJIFE5yTkloHPqSKXUM17
OhXZxg8M+tCNlZR5pKtlk0npGs+pCksDp73lJv0k6kwGcQ8XfKUClHqAkaetNFVA
6GWNTtTl63ztkBbGZ77+gKxr2XhHxFlvVUtKfnsByGZU5venZgE3cxlAJ05bpeOa
hHIIdcEYeX4BxPbQa52pgkxh/8ks3hYfeXJlkLthmjVd/W9N7lD7rNvuiP/jR0ga
EzJiuCy228ERdtlw7EA5cdnW9Ytc198nSlZUFmg2HGJoZfHG/ma9aaJ/YJIv23kp
G5FaWrL0tZB8JQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:25:49 2025 by rpki-client