Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
File: zVdth24X5nqjsfHBDas52yk14is.mft (raw, json)
Hash identifier: c3P0jfz6Rzn0yjr4/MiPOFAbvh7ozeYui4wkeCcE3+0=
Subject key identifier: 7B:0D:AD:F6:88:90:3E:0C:12:22:78:29:B7:8A:FB:73:DB:79:88:9E
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 01967454D8998B8630E5A3EFDFE757C05552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
Manifest number: 0F0C
Signing time: Sat 26 Apr 2025 23:00:39 +0000
Manifest this update: Sat 26 Apr 2025 23:00:39 +0000
Manifest next update: Sun 27 Apr 2025 23:00:39 +0000
Files and hashes: 1: VPlTFU2v9_-5Ue2KnHe2hWSrbvU.roa (hash: xjvDPgjYTpNfIICBZo+KKv8oMM12S2D874qBPcDZFuw=)
2: YhHxsxNH4RP_FfePdq8SlQdgZyg.roa (hash: K3fGfKE/dBh+cdQFHO8biNnAdH/Glpbr/rysigKy5PI=)
3: jFc_wlQoiHbPyXbisyroWRENeu0.roa (hash: ITqThjHQNWEDIzaupfeF4coOz5rZPmtce8EoNUCuRBY=)
4: lCJmZzkmjXSr7FEoBdA3ylq1U04.roa (hash: STzWF0AEDLQ8FI+DmmWhhzxn4hvpubeIokmYgyoJVoQ=)
5: zVdth24X5nqjsfHBDas52yk14is.crl (hash: rhfjYGMnJrjQpkkBetckK632DKaR87UYUtU41eqcWbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:d8:99:8b:86:30:e5:a3:ef:df:e7:57:c0:55:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Apr 26 23:00:39 2025 GMT
Not After : Apr 27 23:00:39 2025 GMT
Subject: CN=7b0dadf688903e0c12227829b78afb73db79889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:a7:b8:ab:79:4a:a8:bc:03:57:c1:0d:7a:
01:38:bc:40:3b:c9:22:78:67:b1:f2:16:31:50:47:
8d:94:a3:1a:39:3f:59:08:4b:5b:9e:5b:45:82:c3:
ac:5c:85:b2:fd:89:22:f9:2d:ca:fc:b3:3f:b3:07:
a6:d2:4b:9a:ec:32:c3:42:19:e2:8b:e5:f4:7a:ff:
6a:63:d2:f5:63:da:97:dc:9f:9c:cb:93:62:bf:59:
d2:2c:2e:be:47:4d:50:03:25:df:b8:8c:56:9d:7f:
4c:37:56:7c:c5:b3:8c:60:94:e2:8c:8e:64:d1:23:
9b:08:52:50:ec:01:00:76:2d:e8:e8:23:57:1f:f1:
81:e8:c4:35:6d:50:7a:f1:3d:ba:50:ec:47:eb:b2:
53:eb:39:4d:99:89:b9:c9:9e:f4:6f:53:f9:a2:06:
bb:8b:68:b8:6b:fe:4a:b4:81:e9:9c:b9:97:e2:53:
7e:b4:89:b4:a9:2f:e1:5c:9f:0e:8c:2b:b1:5a:60:
c3:79:55:7c:ba:64:04:dd:cb:69:38:80:9d:d2:63:
24:30:54:12:52:80:ba:e4:b5:75:04:dd:d8:ac:e0:
2d:c9:30:88:9d:7c:cd:87:8b:27:55:95:2b:98:f3:
94:fe:c6:38:83:06:03:b2:03:c9:1e:ef:48:e0:0d:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:AD:F6:88:90:3E:0C:12:22:78:29:B7:8A:FB:73:DB:79:88:9E
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f8:af:81:73:88:4f:7f:d5:01:b6:d1:ab:b4:93:9c:0f:34:
6d:14:97:e3:05:d7:27:bd:13:4f:0d:33:cf:b0:ee:23:fb:01:
b2:8d:98:42:18:74:25:00:84:db:af:4a:1a:69:af:b1:2b:0a:
9a:02:7c:76:02:8f:d9:3b:7d:b5:e6:3c:b0:1d:9c:c0:9a:d4:
38:bf:35:21:1a:8c:9a:c9:f1:47:6f:91:38:43:00:9c:63:95:
e1:af:c0:fb:06:06:3b:8f:af:9e:77:3d:44:c1:28:71:b7:df:
33:fc:8c:0e:fb:46:29:9a:29:bf:d0:f5:43:7d:11:87:61:02:
58:98:ee:78:92:3b:88:73:2b:51:d5:da:e5:fe:e9:11:4c:58:
4f:41:57:2d:41:a6:b0:00:0d:e1:50:b9:47:9d:1b:61:37:11:
42:8e:bd:db:5f:41:54:35:d8:17:e0:33:5c:1e:36:98:ac:6e:
ee:8c:b5:34:ad:e5:a9:91:0a:b8:25:9c:4a:40:3e:ea:36:7a:
2b:6f:6e:c1:f5:82:7e:69:59:43:e4:9e:41:ee:a5:1a:07:0f:
93:59:7f:37:6a:19:c6:fc:19:59:12:c4:24:3b:7b:5a:43:38:
90:ce:34:50:24:f1:b7:cf:3d:43:0a:ac:12:7e:38:1d:c3:98:
50:86:23:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VNiZi4Yw5aPv3+dXwFVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNTc2ZDg3NmUxN2U2N2FhM2IxZjFjMTBkYWIzOWRiMjkz
NWUyMmIwHhcNMjUwNDI2MjMwMDM5WhcNMjUwNDI3MjMwMDM5WjAzMTEwLwYDVQQD
Eyg3YjBkYWRmNjg4OTAzZTBjMTIyMjc4MjliNzhhZmI3M2RiNzk4ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/anuKt5Sqi8A1fBDXoBOLxAO8ki
eGex8hYxUEeNlKMaOT9ZCEtbnltFgsOsXIWy/Yki+S3K/LM/swem0kua7DLDQhni
i+X0ev9qY9L1Y9qX3J+cy5Niv1nSLC6+R01QAyXfuIxWnX9MN1Z8xbOMYJTijI5k
0SObCFJQ7AEAdi3o6CNXH/GB6MQ1bVB68T26UOxH67JT6zlNmYm5yZ70b1P5oga7
i2i4a/5KtIHpnLmX4lN+tIm0qS/hXJ8OjCuxWmDDeVV8umQE3ctpOICd0mMkMFQS
UoC65LV1BN3YrOAtyTCInXzNh4snVZUrmPOU/sY4gwYDsgPJHu9I4A3GGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsNrfaIkD4MEiJ4KbeK+3PbeYieMB8GA1UdIwQY
MBaAFM1XbYduF+Z6o7HxwQ2rOdspNeIrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMt
MWE4MGEyZjdkN2VhLzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80MmYwMTQtY2Q5Mi00MjA1LWFhNTMtMWE4MGEyZjdkN2Vh
LzEvelZkdGgyNFg1bnFqc2ZIQkRhczUyeWsxNGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvivgXOI
T3/VAbbRq7STnA80bRSX4wXXJ70TTw0zz7DuI/sBso2YQhh0JQCE269KGmmvsSsK
mgJ8dgKP2Tt9teY8sB2cwJrUOL81IRqMmsnxR2+ROEMAnGOV4a/A+wYGO4+vnnc9
RMEocbffM/yMDvtGKZopv9D1Q30Rh2ECWJjueJI7iHMrUdXa5f7pEUxYT0FXLUGm
sAAN4VC5R50bYTcRQo69219BVDXYF+AzXB42mKxu7oy1NK3lqZEKuCWcSkA+6jZ6
K29uwfWCfmlZQ+SeQe6lGgcPk1l/N2oZxvwZWRLEJDt7WkM4kM40UCTxt889Qwqs
En44HcOYUIYjew==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:18:22 2025 by rpki-client