
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File: 1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier: AUv13VDP9g+UMK/hfgE9xIVhtXFpRw4jdPv19nqedUg=
Subject key identifier: 8F:B1:B3:B5:62:F0:44:D5:62:F6:31:EC:68:4E:0D:47:84:2B:FD:34
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer: /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial: 019680904BC3071B700EC7F3A8629DE1F9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number: 0E03
Signing time: Tue 29 Apr 2025 08:01:02 +0000
Manifest this update: Tue 29 Apr 2025 08:01:02 +0000
Manifest next update: Wed 30 Apr 2025 08:01:02 +0000
Files and hashes: 1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: eoIBOe3TCTFoD2zv8fHPlgtb8EH3BU58mFbI4E/IyZY=)
2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:4b:c3:07:1b:70:0e:c7:f3:a8:62:9d:e1:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Validity
Not Before: Apr 29 08:01:02 2025 GMT
Not After : Apr 30 08:01:02 2025 GMT
Subject: CN=8fb1b3b562f044d562f631ec684e0d47842bfd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:0b:25:10:8e:c9:b0:55:97:44:92:98:0a:
9f:a1:a7:06:e3:c7:91:b4:0c:f1:73:26:30:1e:4c:
90:fd:e0:8d:58:b0:13:8e:69:a6:c6:67:bb:b7:5d:
5b:4d:a2:64:7a:2c:89:85:d3:a4:e8:dc:31:59:e5:
ee:59:53:8e:b4:fa:36:f5:d9:56:40:7f:59:90:34:
05:f8:44:ff:79:08:e4:43:ea:8a:5e:ba:ec:8a:ee:
1c:b9:d2:d4:f0:f1:74:98:03:e8:54:c9:34:16:6d:
ff:4c:07:4f:2f:78:82:ff:66:3b:63:d0:1b:fe:08:
d2:b4:18:05:61:07:98:74:46:82:6b:79:16:44:28:
b2:75:54:28:c9:f8:40:43:7c:f9:3d:e8:8f:a8:fb:
ed:37:f6:a9:e4:53:75:e4:89:d8:d9:92:3a:14:78:
0f:4d:5e:59:03:57:f9:b4:1c:49:49:5d:ca:4b:26:
5e:69:e3:30:45:9a:4a:bb:67:6b:c1:ff:0d:34:78:
2c:b8:ba:10:a3:dd:f1:2a:38:a3:3c:d6:73:d8:ad:
9d:dc:ec:d7:e1:3e:26:a2:19:5d:72:9c:7c:9a:ba:
5d:0a:e0:3d:98:31:13:2e:49:6b:e9:bc:9f:4c:07:
29:5b:e4:d7:85:1f:6c:28:f6:df:92:d7:96:e1:87:
1d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:B3:B5:62:F0:44:D5:62:F6:31:EC:68:4E:0D:47:84:2B:FD:34
X509v3 Authority Key Identifier:
keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:04:48:2f:2e:ee:b5:a1:cc:4d:c8:d2:3c:90:0b:b7:c9:d4:
e9:67:a3:be:37:0c:19:f0:40:f9:79:4d:1e:55:c5:7a:08:ea:
6d:c6:a0:4e:1b:8c:27:2a:37:e7:67:b8:32:27:d7:c5:05:58:
f9:d3:b1:8e:5f:6c:a7:8c:b9:6f:14:b4:49:0e:48:ee:ba:3e:
da:a2:2b:7f:f8:43:66:fe:c7:60:1e:4b:21:d5:c2:ba:46:ba:
fd:e5:3b:d1:38:22:57:6e:97:19:79:c7:7c:ef:3c:93:96:01:
a2:0f:33:1e:4e:67:ee:12:dc:3b:c3:57:9c:c8:0d:49:17:61:
10:0c:76:3b:1a:33:5f:f6:57:62:35:a6:7f:8a:d3:b2:09:f5:
a0:7a:a4:8a:6f:b1:ad:af:92:4f:15:6b:76:0d:63:97:e5:2f:
2e:79:e5:68:31:e5:fc:76:ea:4a:92:c9:da:94:51:0a:e6:6a:
b4:02:a6:5b:22:52:4a:c3:75:2d:0e:5f:07:45:cd:b9:ca:70:
7f:b2:7c:7b:2f:25:be:6a:f6:5c:83:ad:72:5f:a0:23:cd:2c:
2b:7a:bf:44:fd:2d:37:f1:7d:04:34:cb:66:55:85:8d:e1:13:
ea:d2:20:42:d8:89:ae:6d:01:4c:07:ed:f3:b8:28:14:c7:a1:
31:d8:86:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAkEvDBxtwDsfzqGKd4fmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzQ5MmU0ZDI1YzNiYmQwYzVlMjBjNWE4NWVjYjIyZWM5
NzM2MGEwHhcNMjUwNDI5MDgwMTAyWhcNMjUwNDMwMDgwMTAyWjAzMTEwLwYDVQQD
Eyg4ZmIxYjNiNTYyZjA0NGQ1NjJmNjMxZWM2ODRlMGQ0Nzg0MmJmZDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirILJRCOybBVl0SSmAqfoacG48eR
tAzxcyYwHkyQ/eCNWLATjmmmxme7t11bTaJkeiyJhdOk6NwxWeXuWVOOtPo29dlW
QH9ZkDQF+ET/eQjkQ+qKXrrsiu4cudLU8PF0mAPoVMk0Fm3/TAdPL3iC/2Y7Y9Ab
/gjStBgFYQeYdEaCa3kWRCiydVQoyfhAQ3z5PeiPqPvtN/ap5FN15InY2ZI6FHgP
TV5ZA1f5tBxJSV3KSyZeaeMwRZpKu2drwf8NNHgsuLoQo93xKjijPNZz2K2d3OzX
4T4mohldcpx8mrpdCuA9mDETLklr6byfTAcpW+TXhR9sKPbfkteW4YcdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+xs7Vi8ETVYvYx7GhODUeEK/00MB8GA1UdIwQY
MBaAFNc0kuTSXDu9DF4gxaheyyLslzYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgt
ZGVjMjFlZWZhMzhiLzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wOWFhNjEtODdkNy00ZjUzLTk4MTgtZGVjMjFlZWZhMzhi
LzEvMXpTUzVOSmNPNzBNWGlERnFGN0xJdXlYTmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzARILy7u
taHMTcjSPJALt8nU6WejvjcMGfBA+XlNHlXFegjqbcagThuMJyo352e4MifXxQVY
+dOxjl9sp4y5bxS0SQ5I7ro+2qIrf/hDZv7HYB5LIdXCuka6/eU70TgiV26XGXnH
fO88k5YBog8zHk5n7hLcO8NXnMgNSRdhEAx2OxozX/ZXYjWmf4rTsgn1oHqkim+x
ra+STxVrdg1jl+UvLnnlaDHl/HbqSpLJ2pRRCuZqtAKmWyJSSsN1LQ5fB0XNucpw
f7J8ey8lvmr2XIOtcl+gI80sK3q/RP0tN/F9BDTLZlWFjeET6tIgQtiJrm0BTAft
87goFMehMdiGrg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:16:55 2025 by rpki-client