Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: /SWJBxno7mHrHVGdoPeO02kHG8KJy2eONIdsYLIeLBg=
Subject key identifier: 76:36:65:20:AE:01:43:F0:71:B9:D0:12:3C:AF:E1:1A:E6:60:1C:45
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 01967868E2D0825C6872127F3FD764E4277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 18:01:01 +0000
Manifest this update: Sun 27 Apr 2025 18:01:01 +0000
Manifest next update: Mon 28 Apr 2025 18:01:01 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: n9ahE9ILuvZuCxau8E1Mo++4SNRPRQqa0vqWkVDmdZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:e2:d0:82:5c:68:72:12:7f:3f:d7:64:e4:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Apr 27 18:01:01 2025 GMT
Not After : Apr 28 18:01:01 2025 GMT
Subject: CN=76366520ae0143f071b9d0123cafe11ae6601c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:51:c8:0f:44:37:01:04:5b:b5:f8:a0:cf:
dd:28:de:3d:36:db:32:a4:f0:3c:38:86:f0:b4:06:
ee:57:e1:5e:4d:c9:d2:40:56:51:01:4f:3b:2f:6f:
bd:6a:74:eb:e5:17:8d:a5:34:40:db:17:80:b4:e2:
e6:f5:27:7c:05:ae:b9:9a:91:58:74:bf:5b:ea:3d:
f0:73:04:ef:11:eb:c9:0d:3a:7d:db:ef:1b:a7:d5:
29:f8:04:71:de:08:9b:55:0d:1e:32:2e:a1:9a:2c:
8c:61:27:25:9c:b0:88:55:6d:cd:c9:b3:9a:2e:83:
f7:5e:60:b5:5d:46:a2:c2:2e:6c:7e:c8:99:68:16:
09:b9:b1:a8:62:88:f2:eb:04:1f:2f:ca:8f:08:f7:
60:ab:76:8f:e3:76:0f:50:14:51:9e:0a:82:5f:bf:
65:b7:1d:3a:03:2d:ad:47:26:de:11:59:c7:7f:48:
49:83:b0:17:48:90:b4:94:22:0e:00:b9:6b:d0:83:
fc:20:9e:3d:76:5f:4a:af:e6:9b:f5:d2:37:a2:ba:
ab:2a:9c:cd:7a:2d:2b:41:a6:ad:61:5f:5a:9b:ec:
7d:51:a2:69:7e:86:1e:2e:bb:3d:64:c0:1a:c6:ff:
0c:a0:bd:f8:5e:39:f0:be:f3:b9:75:34:d0:43:78:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:65:20:AE:01:43:F0:71:B9:D0:12:3C:AF:E1:1A:E6:60:1C:45
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:24:fe:57:3c:6b:6a:85:08:24:8c:9e:9a:8f:d4:0a:f2:
4b:c2:bb:f9:6f:56:ce:20:31:d3:d9:e2:c4:ef:2a:49:2d:e8:
49:6f:d1:bb:e2:9c:23:3d:e5:ff:93:03:26:3c:2a:7e:c5:60:
c1:7b:e0:54:50:3a:e5:b2:ee:c0:1f:fd:41:14:ad:31:95:6a:
9c:c5:cb:15:f5:a0:7d:d3:9a:95:b7:19:2f:71:d6:d5:8a:06:
a6:57:96:b3:25:b6:af:02:db:6c:b0:ad:05:11:5b:f7:a8:78:
20:ba:a3:ec:d1:e1:23:ae:17:7c:e3:bc:a3:a3:90:d0:99:21:
0c:77:bb:c9:b5:aa:de:7c:68:1c:66:7a:05:ca:32:dc:5b:38:
11:18:41:84:dd:ce:8b:d9:3d:5c:5c:a7:e1:9b:6d:6b:c7:93:
92:fe:b0:89:1e:0e:b4:f8:12:ca:00:9c:91:20:b4:67:b9:9b:
88:20:38:03:dc:f1:59:5f:c0:84:b7:41:2d:13:8f:0f:21:79:
2a:e5:cf:1f:04:df:e7:89:19:6c:bc:91:a7:f4:9b:3b:27:57:
df:35:61:ea:2f:11:8a:c2:b1:ee:08:df:7e:d5:ed:c8:a5:2e:
91:c6:aa:8d:8c:cd:46:d1:d1:6a:ab:ac:c6:80:61:99:d8:de:
51:bc:e3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aOLQglxochJ/P9dk5Cd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmOWYwMmRiZDk3MjU5NWEzMWNhYmVhYjBjZDk1ZDcwNmE4
Y2RkMzEwHhcNMjUwNDI3MTgwMTAxWhcNMjUwNDI4MTgwMTAxWjAzMTEwLwYDVQQD
Eyg3NjM2NjUyMGFlMDE0M2YwNzFiOWQwMTIzY2FmZTExYWU2NjAxYzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJNRyA9ENwEEW7X4oM/dKN49Ntsy
pPA8OIbwtAbuV+FeTcnSQFZRAU87L2+9anTr5ReNpTRA2xeAtOLm9Sd8Ba65mpFY
dL9b6j3wcwTvEevJDTp92+8bp9Up+ARx3gibVQ0eMi6hmiyMYSclnLCIVW3NybOa
LoP3XmC1XUaiwi5sfsiZaBYJubGoYojy6wQfL8qPCPdgq3aP43YPUBRRngqCX79l
tx06Ay2tRybeEVnHf0hJg7AXSJC0lCIOALlr0IP8IJ49dl9Kr+ab9dI3orqrKpzN
ei0rQaatYV9am+x9UaJpfoYeLrs9ZMAaxv8MoL34XjnwvvO5dTTQQ3gQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY2ZSCuAUPwcbnQEjyv4RrmYBxFMB8GA1UdIwQY
MBaAFM+fAtvZcllaMcq+qwzZXXBqjN0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzct
ZTI3MDdlMTk3NTQxLzEvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZTdjZjktYTlkZi00YmEzLWFmNzctZTI3MDdlMTk3NTQx
LzEvejU4QzI5bHlXVm94eXI2ckRObGRjR3FNM1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/ok/lc8
a2qFCCSMnpqP1AryS8K7+W9WziAx09nixO8qSS3oSW/Ru+KcIz3l/5MDJjwqfsVg
wXvgVFA65bLuwB/9QRStMZVqnMXLFfWgfdOalbcZL3HW1YoGpleWsyW2rwLbbLCt
BRFb96h4ILqj7NHhI64XfOO8o6OQ0JkhDHe7ybWq3nxoHGZ6Bcoy3Fs4ERhBhN3O
i9k9XFyn4Ztta8eTkv6wiR4OtPgSygCckSC0Z7mbiCA4A9zxWV/AhLdBLROPDyF5
KuXPHwTf54kZbLyRp/SbOydX3zVh6i8RisKx7gjfftXtyKUukcaqjYzNRtHRaqus
xoBhmdjeUbzjsA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:09:07 2025 by rpki-client