Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json)
Hash identifier: z6TvxnzycuaRjbUlTZTIK1bswvXELnq5tGqOgBFm/wU=
Subject key identifier: 8D:20:8F:70:CB:94:6A:B9:9E:8A:DC:14:73:49:D4:E6:DA:E4:CE:A6
Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Certificate serial: 019690DE5E4BEE6BA8322A00A564D5A786A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
Manifest number: 149A
Signing time: Fri 02 May 2025 12:00:14 +0000
Manifest this update: Fri 02 May 2025 12:00:14 +0000
Manifest next update: Sat 03 May 2025 12:00:14 +0000
Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=)
2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: 206qucO6wrtus5NRngmvj7j2kxMGLQuAdIH/ywPQZUE=)
3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:5e:4b:ee:6b:a8:32:2a:00:a5:64:d5:a7:86:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a
Validity
Not Before: May 2 12:00:14 2025 GMT
Not After : May 3 12:00:14 2025 GMT
Subject: CN=8d208f70cb946ab99e8adc147349d4e6dae4cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:31:83:1e:4f:79:ff:85:16:49:23:d9:f4:
65:12:b7:2d:bd:ce:6c:e3:06:3a:39:1f:13:9c:db:
69:99:18:84:65:86:fc:0a:3d:a7:d4:72:d2:de:da:
e5:b4:77:0b:a5:29:cf:9b:ed:79:4a:b5:4f:b9:71:
8c:45:3e:11:4b:cb:61:0b:40:17:53:c2:aa:be:8d:
2b:43:30:64:4b:73:bd:3f:b6:d9:24:1a:0a:7d:b5:
8c:9d:a9:3d:93:85:98:12:55:03:ed:46:fc:ae:1b:
1c:93:6f:b5:8b:6d:85:70:c3:30:bc:e1:83:a0:60:
f0:e0:37:06:1c:d4:58:b3:dd:67:98:75:25:69:72:
57:ea:86:3a:c4:e0:20:85:89:d7:ca:d5:2d:7a:a6:
3c:cc:7f:0f:f0:17:f5:af:e5:f2:33:f8:8f:72:35:
7d:a6:31:31:ec:57:9c:37:d1:67:a9:26:61:48:65:
4e:a1:e3:4e:32:bd:3d:17:0e:82:0f:de:b7:74:c8:
46:b1:7d:44:c6:dc:79:de:85:b8:08:40:c5:22:45:
72:62:55:16:38:04:fc:2c:70:de:58:e8:18:0c:9a:
ef:42:7b:ca:c6:2e:c3:e5:3d:48:5c:d1:a2:40:8e:
14:f4:2e:6b:46:9e:7a:5d:fa:47:52:61:4c:7e:ad:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:20:8F:70:CB:94:6A:B9:9E:8A:DC:14:73:49:D4:E6:DA:E4:CE:A6
X509v3 Authority Key Identifier:
keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:26:7e:45:6a:58:b2:d6:c0:45:bb:6a:84:43:c3:35:3e:
be:b0:a5:ad:77:c3:ed:c9:99:fb:2c:34:f3:aa:17:9a:4b:8a:
13:2d:d0:27:b2:05:e5:2d:8b:aa:4d:6c:13:58:18:3e:f0:e6:
ac:4f:e8:1c:53:6e:86:b4:eb:6c:0e:2d:7f:9f:04:85:0f:ff:
c2:e5:5a:87:e4:e1:d0:18:96:a1:c8:27:51:92:49:73:15:bd:
6a:95:eb:09:82:f0:7d:2e:47:eb:7c:04:47:15:4c:3e:f9:85:
af:c9:5c:79:0b:da:03:8a:95:da:04:23:61:16:e5:9f:10:c5:
aa:60:25:a0:46:c0:25:dc:22:14:a1:a1:b5:18:e2:0a:37:da:
6d:be:1f:6c:0e:23:81:9f:d4:d8:e4:08:68:ee:33:cd:da:95:
96:f9:8f:8f:d5:81:4f:06:8f:40:5d:10:8f:84:0d:90:a8:9a:
34:80:7c:b4:eb:de:6d:24:b4:f2:d5:e3:ef:c6:e2:75:21:83:
ea:68:09:33:3d:00:c0:96:2b:b9:6f:49:ac:6c:cd:34:b1:14:
df:5a:5d:64:bb:0c:ae:e3:bf:91:b6:77:fe:bb:2e:41:54:0a:
50:f8:d5:b8:d8:53:6e:1d:19:6e:5f:0e:f8:f1:71:c5:1a:37:
51:4d:70:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaQ3l5L7muoMioApWTVp4amMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1
YTQ0OWEwHhcNMjUwNTAyMTIwMDE0WhcNMjUwNTAzMTIwMDE0WjAzMTEwLwYDVQQD
Eyg4ZDIwOGY3MGNiOTQ2YWI5OWU4YWRjMTQ3MzQ5ZDRlNmRhZTRjZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLoxgx5Pef+FFkkj2fRlErctvc5s
4wY6OR8TnNtpmRiEZYb8Cj2n1HLS3trltHcLpSnPm+15SrVPuXGMRT4RS8thC0AX
U8Kqvo0rQzBkS3O9P7bZJBoKfbWMnak9k4WYElUD7Ub8rhsck2+1i22FcMMwvOGD
oGDw4DcGHNRYs91nmHUlaXJX6oY6xOAghYnXytUteqY8zH8P8Bf1r+XyM/iPcjV9
pjEx7FecN9FnqSZhSGVOoeNOMr09Fw6CD963dMhGsX1Extx53oW4CEDFIkVyYlUW
OAT8LHDeWOgYDJrvQnvKxi7D5T1IXNGiQI4U9C5rRp56XfpHUmFMfq0JBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0gj3DLlGq5norcFHNJ1Oba5M6mMB8GA1UdIwQY
MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt
NjYyZWM4MThkMjNkLzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk
LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXkkmfkVq
WLLWwEW7aoRDwzU+vrClrXfD7cmZ+yw086oXmkuKEy3QJ7IF5S2Lqk1sE1gYPvDm
rE/oHFNuhrTrbA4tf58EhQ//wuVah+Th0BiWocgnUZJJcxW9apXrCYLwfS5H63wE
RxVMPvmFr8lceQvaA4qV2gQjYRblnxDFqmAloEbAJdwiFKGhtRjiCjfabb4fbA4j
gZ/U2OQIaO4zzdqVlvmPj9WBTwaPQF0Qj4QNkKiaNIB8tOvebSS08tXj78bidSGD
6mgJMz0AwJYruW9JrGzNNLEU31pdZLsMruO/kbZ3/rsuQVQKUPjVuNhTbh0Zbl8O
+PFxxRo3UU1wCg==
-----END CERTIFICATE-----
Generated at Fri May 2 21:20:11 2025 by rpki-client