Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File: ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier: 1KXaDk2hzmnLIZvrpGCCMkbbW8YdgyhwDcdW6X42IJM=
Subject key identifier: 13:D2:79:DD:D2:D9:D9:BE:5B:9D:2B:4A:1A:7D:C9:B1:49:9A:12:B9
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer: /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial: 01967642F787102659357FFFEE8AB25B03C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number: 0488
Signing time: Sun 27 Apr 2025 08:00:22 +0000
Manifest this update: Sun 27 Apr 2025 08:00:22 +0000
Manifest next update: Mon 28 Apr 2025 08:00:22 +0000
Files and hashes: 1: CNanKGITt6BZ7mvdQ6Xv0MVd_cg.roa (hash: qTzgtOOAjYnbYX/V8tOmm+S0TaEKxSqcRfCFeliNRNI=)
2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: 2C0+tdhEior8+LEbrxYF88kNl4T/gYsVn6L69SEb3SY=)
3: kLdYNlBxoUsO0xToRjcSbRZEf5M.roa (hash: uSz8pizyGPkpRJKc5zYo+RcDvjmGd3gE3D8JNJ5Va40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:f7:87:10:26:59:35:7f:ff:ee:8a:b2:5b:03:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Validity
Not Before: Apr 27 08:00:22 2025 GMT
Not After : Apr 28 08:00:22 2025 GMT
Subject: CN=13d279ddd2d9d9be5b9d2b4a1a7dc9b1499a12b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:63:7f:e8:9a:74:df:37:79:0a:81:a0:19:
34:3d:7a:d1:17:8a:8a:04:32:cf:cf:85:56:1e:45:
a8:ca:ff:1a:f0:88:9b:d0:f0:f4:4a:90:8b:4c:db:
40:75:d2:94:da:75:5b:ef:fc:c9:3f:74:e4:d9:2c:
74:e9:d1:e8:33:ba:1b:42:7a:a3:f7:2a:b8:e8:f7:
63:b3:ae:6b:c9:10:8c:62:58:eb:e1:c0:20:3f:05:
1a:5f:73:42:4f:04:c4:f1:c2:61:0a:54:ef:43:fe:
bd:d9:0b:52:e7:ef:0d:8d:d7:1a:7e:de:aa:9b:4a:
57:d4:53:ca:34:c9:d5:5b:5e:bb:f7:1b:ff:fa:66:
6e:b8:b2:70:a8:78:8f:9e:14:1f:ef:09:d9:d9:a2:
93:d0:19:23:c7:dd:65:e9:14:40:b4:db:d4:80:3f:
8c:24:f9:e4:e1:82:85:fa:23:e6:71:d3:0d:51:5d:
54:65:b2:c4:d7:2a:be:52:5a:15:43:5c:f3:18:87:
5b:12:27:79:43:f3:6b:49:44:d4:3a:0c:bf:b7:5b:
12:01:48:f4:72:10:e5:50:a1:48:0e:09:92:62:cc:
2b:30:db:89:11:e7:0a:c1:51:86:bd:4f:20:d8:b6:
a7:2d:08:86:e2:7f:34:18:68:c8:d9:e5:75:98:bf:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D2:79:DD:D2:D9:D9:BE:5B:9D:2B:4A:1A:7D:C9:B1:49:9A:12:B9
X509v3 Authority Key Identifier:
keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b6:26:53:78:a4:4d:11:d5:d4:c3:0e:5c:ca:b0:03:a8:90:
bc:a9:e7:f5:99:50:1d:ea:3d:11:28:85:aa:eb:37:16:03:c8:
d5:a5:81:32:21:bd:a8:c2:22:a9:6b:61:ad:c5:b6:c6:85:0d:
c9:0f:dc:a4:42:04:12:18:1d:3b:df:c3:18:ba:1f:1c:55:ce:
b9:95:5d:f2:19:a7:3a:55:cd:93:8b:6c:42:e6:74:31:b8:42:
80:68:17:c0:1e:b6:05:85:52:85:0c:c5:a9:70:40:6c:89:d0:
ed:b1:a0:fc:37:63:d6:2e:62:80:65:be:be:70:d1:63:30:77:
29:d3:74:63:8a:71:0f:b9:31:d9:b3:9d:ce:dc:42:c8:5a:17:
2b:04:58:63:43:f1:00:18:a3:8a:12:a2:53:ae:52:8d:03:82:
c1:eb:b4:9b:c8:92:38:cd:b8:d0:fe:19:0c:03:48:f5:5d:b3:
2d:80:24:97:c7:c5:cb:2e:27:58:cb:f2:7e:95:41:f1:41:29:
53:42:8d:15:c4:a9:6c:9c:0c:ea:b7:f0:47:25:23:bd:6a:0a:
ea:ee:8a:12:d0:c2:90:d2:9b:5f:12:9d:4e:76:f7:17:81:ce:
42:74:28:ed:64:45:48:c7:3e:c9:e4:96:46:0f:5c:e5:92:04:
b5:60:a6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QveHECZZNX//7oqyWwPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzU5ZjdhOGY5MDY3MmVhODM1M2FmNGQxMWQ2YWM1ZTlm
ZDgyMDYwHhcNMjUwNDI3MDgwMDIyWhcNMjUwNDI4MDgwMDIyWjAzMTEwLwYDVQQD
EygxM2QyNzlkZGQyZDlkOWJlNWI5ZDJiNGExYTdkYzliMTQ5OWExMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu51jf+iadN83eQqBoBk0PXrRF4qK
BDLPz4VWHkWoyv8a8Iib0PD0SpCLTNtAddKU2nVb7/zJP3Tk2Sx06dHoM7obQnqj
9yq46Pdjs65ryRCMYljr4cAgPwUaX3NCTwTE8cJhClTvQ/692QtS5+8Njdcaft6q
m0pX1FPKNMnVW1679xv/+mZuuLJwqHiPnhQf7wnZ2aKT0Bkjx91l6RRAtNvUgD+M
JPnk4YKF+iPmcdMNUV1UZbLE1yq+UloVQ1zzGIdbEid5Q/NrSUTUOgy/t1sSAUj0
chDlUKFIDgmSYswrMNuJEecKwVGGvU8g2LanLQiG4n80GGjI2eV1mL8qWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPSed3S2dm+W50rShp9ybFJmhK5MB8GA1UdIwQY
MBaAFGZ1n3qPkGcuqDU69NEdasXp/YIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3Yjgt
ZTRlMTdlNGI1MTgwLzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNzhiMDItOTQ4Yy00NjI0LTk3YjgtZTRlMTdlNGI1MTgw
LzEvWm5XZmVvLVFaeTZvTlRyMDBSMXF4ZW45Z2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWrYmU3ik
TRHV1MMOXMqwA6iQvKnn9ZlQHeo9ESiFqus3FgPI1aWBMiG9qMIiqWthrcW2xoUN
yQ/cpEIEEhgdO9/DGLofHFXOuZVd8hmnOlXNk4tsQuZ0MbhCgGgXwB62BYVShQzF
qXBAbInQ7bGg/Ddj1i5igGW+vnDRYzB3KdN0Y4pxD7kx2bOdztxCyFoXKwRYY0Px
ABijihKiU65SjQOCweu0m8iSOM240P4ZDANI9V2zLYAkl8fFyy4nWMvyfpVB8UEp
U0KNFcSpbJwM6rfwRyUjvWoK6u6KEtDCkNKbXxKdTnb3F4HOQnQo7WRFSMc+yeSW
Rg9c5ZIEtWCm8g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:39 2025 by rpki-client