Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File: Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier: zZKr9kzaNNd89BASWNd74SaORJKh9fRSdj3S3Uwsb9I=
Subject key identifier: 72:2F:F2:12:6E:35:B1:15:EB:62:89:4A:38:6B:F1:5F:B4:5C:30:F6
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer: /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial: 0196816B7DEEBD2B0725CD4AE0BC3F044B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number: 125B
Signing time: Tue 29 Apr 2025 12:00:27 +0000
Manifest this update: Tue 29 Apr 2025 12:00:27 +0000
Manifest next update: Wed 30 Apr 2025 12:00:27 +0000
Files and hashes: 1: JLmy4TR8RrUtQURM0_SunkucXNg.roa (hash: tyjdJ+wzrKeWzDFxJ16QXw9ZyxjFDWvObDxvX6J8AjA=)
2: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: bGr/F9qHUXEdg9TmvPEI71n9bRJHAg0a8O24RWFMdB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:7d:ee:bd:2b:07:25:cd:4a:e0:bc:3f:04:4b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
Validity
Not Before: Apr 29 12:00:27 2025 GMT
Not After : Apr 30 12:00:27 2025 GMT
Subject: CN=722ff2126e35b115eb62894a386bf15fb45c30f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:23:92:d5:e9:ad:9f:97:bf:dd:5b:03:ce:
e0:b5:63:b3:98:79:9b:b4:6e:8f:3d:66:23:33:3a:
d4:83:fd:1f:c1:c3:09:de:34:a7:d9:76:25:80:53:
66:20:f6:b7:05:ab:74:ef:0c:ec:ca:8e:14:61:72:
1a:2c:d3:ac:98:35:89:3d:e7:c5:01:c6:cf:05:91:
e9:56:e9:cb:db:4a:15:c7:d7:e0:cf:9e:5f:c7:d1:
9f:4d:df:6e:8d:67:2f:60:34:28:3f:04:91:18:fb:
f8:20:35:89:43:d0:69:14:22:1f:27:5c:ec:21:14:
be:4d:bf:93:5e:59:a9:5e:2d:80:24:54:76:cb:9d:
f1:e7:14:4b:2d:24:f0:ca:f7:4b:bb:75:36:92:0f:
6c:7f:a4:23:66:5d:fc:e6:80:bc:a0:4e:74:b8:b0:
1f:c3:e4:95:83:ad:4a:cf:89:e1:aa:d4:3a:5f:6d:
89:85:87:a6:63:74:e0:d9:c8:10:09:d1:e0:ea:f8:
c8:13:2a:df:02:e5:3d:20:40:c4:fb:c2:ef:f4:7f:
1d:11:c1:5e:2f:4b:cd:46:99:de:30:58:e0:70:c0:
73:4a:7c:9b:62:0e:c5:1f:a8:07:76:45:ee:01:a4:
35:22:e6:30:2a:f2:65:51:fd:3a:51:0d:ad:e7:c9:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:F2:12:6E:35:B1:15:EB:62:89:4A:38:6B:F1:5F:B4:5C:30:F6
X509v3 Authority Key Identifier:
keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a4:a0:ab:98:94:55:5d:77:39:0d:dd:2d:df:04:8f:1f:a5:
d9:62:15:e9:1c:55:6b:89:37:ae:cd:ef:0a:a5:2c:c6:b5:d4:
28:f1:ed:85:6f:27:c8:e2:e4:d2:b4:87:0f:18:86:0e:46:db:
be:51:54:de:2e:9c:bc:7e:16:fb:05:c9:73:d3:24:13:df:88:
c0:87:52:48:cf:fd:3b:ed:85:aa:69:a7:33:11:8f:53:d2:8b:
55:46:9a:a7:31:01:03:83:8f:8e:a0:e3:75:be:42:30:03:d6:
10:57:13:69:7a:72:82:b1:9d:60:b5:3f:2e:32:17:66:7c:62:
1b:89:2a:4e:10:63:86:45:24:bc:db:65:ed:2c:80:8d:8b:6e:
27:3c:aa:5e:b8:57:e7:f8:a8:46:e4:15:6f:ba:fb:b1:e8:37:
4b:08:cb:d8:35:0a:11:a1:78:b5:ef:35:b1:10:2a:d2:5b:bc:
11:50:dc:f2:63:ca:4d:70:61:09:38:d7:36:a0:be:e1:50:9e:
62:b6:e9:ec:d4:1d:df:e4:17:f7:43:bc:ef:bb:bd:19:9e:4a:
e9:be:51:12:70:3b:64:28:01:29:5f:4f:a9:bb:3e:47:42:6a:
1f:ed:32:8e:18:47:d1:ee:b8:75:c7:ee:c7:7e:70:84:61:a9:
77:ed:7d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBa33uvSsHJc1K4Lw/BEskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmY1NWQzNzcxMjdmMjhjZTI2Yjc4ZmQ4M2JlY2Y0MWJl
Y2FkNGIwHhcNMjUwNDI5MTIwMDI3WhcNMjUwNDMwMTIwMDI3WjAzMTEwLwYDVQQD
Eyg3MjJmZjIxMjZlMzViMTE1ZWI2Mjg5NGEzODZiZjE1ZmI0NWMzMGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyocjktXprZ+Xv91bA87gtWOzmHmb
tG6PPWYjMzrUg/0fwcMJ3jSn2XYlgFNmIPa3Bat07wzsyo4UYXIaLNOsmDWJPefF
AcbPBZHpVunL20oVx9fgz55fx9GfTd9ujWcvYDQoPwSRGPv4IDWJQ9BpFCIfJ1zs
IRS+Tb+TXlmpXi2AJFR2y53x5xRLLSTwyvdLu3U2kg9sf6QjZl385oC8oE50uLAf
w+SVg61Kz4nhqtQ6X22JhYemY3Tg2cgQCdHg6vjIEyrfAuU9IEDE+8Lv9H8dEcFe
L0vNRpneMFjgcMBzSnybYg7FH6gHdkXuAaQ1IuYwKvJlUf06UQ2t58lQewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIv8hJuNbEV62KJSjhr8V+0XDD2MB8GA1UdIwQY
MBaAFGYvVdN3En8ozia3j9g77PQb7K1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgt
OGJlMTQ2MjUzMzU2LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zODhjNzAtZTRjNy00MjBkLTgxODgtOGJlMTQ2MjUzMzU2
LzEvWmk5VjAzY1NmeWpPSnJlUDJEdnM5QnZzclVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqSgq5iU
VV13OQ3dLd8Ejx+l2WIV6RxVa4k3rs3vCqUsxrXUKPHthW8nyOLk0rSHDxiGDkbb
vlFU3i6cvH4W+wXJc9MkE9+IwIdSSM/9O+2FqmmnMxGPU9KLVUaapzEBA4OPjqDj
db5CMAPWEFcTaXpygrGdYLU/LjIXZnxiG4kqThBjhkUkvNtl7SyAjYtuJzyqXrhX
5/ioRuQVb7r7seg3SwjL2DUKEaF4te81sRAq0lu8EVDc8mPKTXBhCTjXNqC+4VCe
Yrbp7NQd3+QX90O877u9GZ5K6b5REnA7ZCgBKV9Pqbs+R0JqH+0yjhhH0e64dcfu
x35whGGpd+19jA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:36:39 2025 by rpki-client