Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: OnV6mS07/O0wpz8JJeFwhh/ruX466sl5xXcKThd29gI=
Subject key identifier: 4C:4E:5B:F0:3E:47:8E:43:40:96:30:88:5A:FA:70:E2:B3:C0:61:80
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 0196A277BFE054685129C1E721D7BACCC12D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 22:01:18 +0000
Manifest this update: Mon 05 May 2025 22:01:18 +0000
Manifest next update: Tue 06 May 2025 22:01:18 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: T6TWTMlKDqxD/W6W299i77h+wE3ZpUbNmL5ze2QKSb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:bf:e0:54:68:51:29:c1:e7:21:d7:ba:cc:c1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: May 5 22:01:18 2025 GMT
Not After : May 6 22:01:18 2025 GMT
Subject: CN=4c4e5bf03e478e43409630885afa70e2b3c06180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:10:46:a1:72:8e:53:68:84:ae:68:46:c7:
e0:3f:e7:16:77:64:ba:ec:04:a0:ab:38:8c:f0:70:
3a:96:e6:67:4e:e7:7e:55:ca:68:6b:c4:3e:1a:b4:
02:c8:ce:26:33:9b:ea:20:90:a5:59:42:79:9e:bf:
db:63:14:a4:71:7a:bd:4e:d1:45:77:99:72:92:89:
40:74:e9:6b:a8:4b:79:62:fd:7c:92:3d:c2:d8:b9:
a3:5d:f8:0b:c5:68:48:95:ba:55:41:75:22:99:48:
07:8b:ff:c0:91:28:c2:61:28:16:9d:76:35:6f:98:
8f:17:11:de:ea:92:58:7a:cb:60:ed:35:0d:e2:e3:
0a:90:c0:6c:4a:e6:47:cf:ab:5a:3c:3c:e5:e1:0a:
92:41:f4:aa:ea:ff:30:07:b6:75:3b:ee:77:4f:09:
c0:3f:aa:66:9c:2e:f8:a7:eb:54:29:25:9c:5a:4d:
b7:b1:1c:78:07:9b:86:6f:50:72:c8:f3:53:6d:a3:
fb:05:68:66:8c:6f:b7:8e:52:6a:62:89:57:f1:0d:
b4:37:92:f6:38:67:13:fc:13:0e:90:eb:61:3e:68:
e0:34:29:08:5e:05:f9:06:da:e0:bc:84:34:35:87:
95:5a:63:95:37:79:d8:e3:54:76:bc:42:d4:93:97:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:5B:F0:3E:47:8E:43:40:96:30:88:5A:FA:70:E2:B3:C0:61:80
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:25:d8:a3:62:31:85:25:a6:92:07:97:81:82:b1:45:bc:24:
a9:f0:35:20:3a:6d:12:f6:e2:d7:5f:78:bb:9f:91:0b:8d:25:
4e:00:c8:24:d4:28:d9:88:8b:88:51:8c:23:60:1a:05:42:e1:
66:68:a5:ff:4f:40:d7:60:d3:05:38:33:04:01:eb:4c:47:2f:
de:42:99:69:bd:3c:0e:ae:35:77:d6:e4:60:5a:48:ea:90:18:
7b:c4:42:ba:f5:99:5b:90:b2:c1:f8:a4:58:f2:54:6d:57:e4:
95:6e:03:ab:a7:0c:26:c9:ed:bb:6c:93:6d:bc:e2:70:5c:d1:
7e:49:06:08:1c:af:04:45:75:0f:41:3a:1c:72:22:08:6a:4b:
d3:d3:59:91:15:47:e1:95:77:c8:26:87:0a:15:e5:15:ea:1d:
40:84:41:83:a0:54:5b:02:0b:40:1f:73:00:b8:a7:54:48:a5:
1a:60:ab:48:4b:0a:6e:ce:0c:6c:a3:f5:35:f2:a5:a3:11:2e:
9b:e3:d6:b6:0f:5c:27:93:a0:3d:0a:eb:1d:2e:ac:ee:d7:9c:
4b:d0:9a:2e:78:6f:d4:72:93:f2:ef:a7:6c:a1:48:3f:c7:ab:
2c:47:c0:c3:9a:5e:1d:5e:57:d0:2b:47:4b:0d:d7:6b:f3:3a:
5e:8f:59:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid7/gVGhRKcHnIde6zMEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3
MzZiMTkwHhcNMjUwNTA1MjIwMTE4WhcNMjUwNTA2MjIwMTE4WjAzMTEwLwYDVQQD
Eyg0YzRlNWJmMDNlNDc4ZTQzNDA5NjMwODg1YWZhNzBlMmIzYzA2MTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHsQRqFyjlNohK5oRsfgP+cWd2S6
7ASgqziM8HA6luZnTud+Vcpoa8Q+GrQCyM4mM5vqIJClWUJ5nr/bYxSkcXq9TtFF
d5lykolAdOlrqEt5Yv18kj3C2LmjXfgLxWhIlbpVQXUimUgHi//AkSjCYSgWnXY1
b5iPFxHe6pJYestg7TUN4uMKkMBsSuZHz6taPDzl4QqSQfSq6v8wB7Z1O+53TwnA
P6pmnC74p+tUKSWcWk23sRx4B5uGb1ByyPNTbaP7BWhmjG+3jlJqYolX8Q20N5L2
OGcT/BMOkOthPmjgNCkIXgX5BtrgvIQ0NYeVWmOVN3nY41R2vELUk5dDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExOW/A+R45DQJYwiFr6cOKzwGGAMB8GA1UdIwQY
MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et
MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl
LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCXYo2Ix
hSWmkgeXgYKxRbwkqfA1IDptEvbi1194u5+RC40lTgDIJNQo2YiLiFGMI2AaBULh
Zmil/09A12DTBTgzBAHrTEcv3kKZab08Dq41d9bkYFpI6pAYe8RCuvWZW5Cywfik
WPJUbVfklW4Dq6cMJsntu2yTbbzicFzRfkkGCByvBEV1D0E6HHIiCGpL09NZkRVH
4ZV3yCaHChXlFeodQIRBg6BUWwILQB9zALinVEilGmCrSEsKbs4MbKP1NfKloxEu
m+PWtg9cJ5OgPQrrHS6s7tecS9CaLnhv1HKT8u+nbKFIP8erLEfAw5peHV5X0CtH
Sw3Xa/M6Xo9ZHg==
-----END CERTIFICATE-----
Generated at Tue May 6 03:37:29 2025 by rpki-client