Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: 9PWLn5oFiByUFqK8nS9Fb8P0j8zalpvLviSTLcNgE8I=
Subject key identifier: 4C:DC:F1:AB:39:D4:E7:53:6A:18:64:11:D5:30:BB:DE:51:92:01:C8
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0194BB5FD402603FB863643545F1D6A8B68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 040C
Signing time: Fri 31 Jan 2025 08:00:06 +0000
Manifest this update: Fri 31 Jan 2025 08:00:06 +0000
Manifest next update: Sat 01 Feb 2025 08:00:06 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: LFLeYvnXbYpaAiyK9mCGh/inNrOQxhZcks3F+KmpC+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:5f:d4:02:60:3f:b8:63:64:35:45:f1:d6:a8:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Jan 31 08:00:06 2025 GMT
Not After : Feb 1 08:00:06 2025 GMT
Subject: CN=4cdcf1ab39d4e7536a186411d530bbde519201c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:be:21:77:a7:2d:de:e0:2a:74:36:7a:5d:
f5:ab:fb:22:ee:dc:73:95:c1:08:80:b6:4a:8f:8f:
ea:93:22:cb:2c:07:2b:c6:6a:67:d4:d4:9f:01:92:
c4:02:00:a0:38:e6:ea:77:83:28:67:9a:3d:a9:50:
d8:ff:b1:e2:92:4b:6d:a5:2f:21:21:4d:06:1a:56:
ca:96:c7:2e:d1:b7:58:21:b4:df:bd:27:99:ed:a4:
94:a5:af:fc:74:5d:d7:af:f0:95:ea:a7:e9:f8:86:
1f:e9:f8:3d:15:22:06:b8:db:6e:18:1f:0e:6b:c5:
aa:80:fc:5c:cc:26:68:6d:f1:5a:83:c9:8a:a3:93:
a5:21:6b:5f:f2:b0:f3:0e:13:23:b4:95:fc:8c:0a:
71:33:e0:9b:f2:51:6e:65:48:2d:82:48:b6:7d:0c:
63:c7:76:7f:8e:9c:cc:58:7b:ea:53:30:85:a9:42:
04:fb:26:85:34:d2:b7:10:8b:83:29:5e:1d:02:06:
ff:71:5a:d1:ce:9d:ed:79:60:0b:39:fe:fe:33:18:
50:eb:39:6b:0c:3c:ac:7c:95:ce:eb:56:80:6b:1f:
71:d1:54:bb:c1:8e:1b:f9:1f:ff:63:2f:ac:bf:bc:
5a:a2:ee:f3:97:e7:5d:70:c9:ae:0f:fd:57:7c:28:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:F1:AB:39:D4:E7:53:6A:18:64:11:D5:30:BB:DE:51:92:01:C8
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:03:15:5b:a2:2e:79:86:55:c2:86:70:b5:4e:52:67:56:
e6:ef:9e:ab:b2:e3:d8:a7:31:86:e3:d7:aa:b1:be:c1:a3:1b:
f9:30:81:63:04:b5:05:91:e9:4a:2c:e4:0b:0a:6c:e4:c1:37:
1a:99:2d:1c:e7:28:25:71:0f:c4:76:b4:90:bc:2f:8c:1d:d9:
28:31:10:c7:40:70:14:10:cf:30:5f:0e:45:5c:7c:fb:b0:ba:
1a:85:72:b0:2b:3d:6e:7d:28:0d:7a:dc:5b:fc:8d:65:cb:b7:
1c:54:3b:19:66:38:e2:82:ed:56:53:9c:c8:a3:50:1b:f5:38:
2e:c1:dc:d0:cc:87:33:e3:ee:99:b1:46:49:45:c3:a1:e5:d2:
8d:e9:e0:50:22:3a:89:d8:4c:f0:6d:03:68:5a:ec:d9:5a:63:
34:bf:8b:57:72:fe:46:da:7d:9f:0d:a2:6f:a7:39:93:81:b2:
f9:d0:2e:01:94:83:32:71:25:c7:5f:5a:f8:b3:7c:32:63:7e:
a4:aa:3f:83:7f:c6:a2:cb:56:4d:26:09:8b:fb:c0:67:45:b7:
e9:f5:79:1a:74:bf:71:58:a2:46:05:ab:e6:76:8f:74:63:0b:
10:4e:e4:c4:c0:70:9f:66:a8:7b:78:8a:92:3b:fe:6e:39:d1:
71:d5:54:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7X9QCYD+4Y2Q1RfHWqLaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzY2YTczOTE1ZjkwOTBkNGIxMDgzODk3YWE0MDI1Nzdl
MTYzZGUwHhcNMjUwMTMxMDgwMDA2WhcNMjUwMjAxMDgwMDA2WjAzMTEwLwYDVQQD
Eyg0Y2RjZjFhYjM5ZDRlNzUzNmExODY0MTFkNTMwYmJkZTUxOTIwMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMq+IXenLd7gKnQ2el31q/si7txz
lcEIgLZKj4/qkyLLLAcrxmpn1NSfAZLEAgCgOObqd4MoZ5o9qVDY/7HikkttpS8h
IU0GGlbKlscu0bdYIbTfvSeZ7aSUpa/8dF3Xr/CV6qfp+IYf6fg9FSIGuNtuGB8O
a8WqgPxczCZobfFag8mKo5OlIWtf8rDzDhMjtJX8jApxM+Cb8lFuZUgtgki2fQxj
x3Z/jpzMWHvqUzCFqUIE+yaFNNK3EIuDKV4dAgb/cVrRzp3teWALOf7+MxhQ6zlr
DDysfJXO61aAax9x0VS7wY4b+R//Yy+sv7xaou7zl+ddcMmuD/1XfCjvyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzc8as51OdTahhkEdUwu95RkgHIMB8GA1UdIwQY
MBaAFGQ2anORX5CQ1LEIOJeqQCV34WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMt
NTE4MmVlZGUyYTI5LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMtNTE4MmVlZGUyYTI5
LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ50DFVui
LnmGVcKGcLVOUmdW5u+eq7Lj2KcxhuPXqrG+waMb+TCBYwS1BZHpSizkCwps5ME3
GpktHOcoJXEPxHa0kLwvjB3ZKDEQx0BwFBDPMF8ORVx8+7C6GoVysCs9bn0oDXrc
W/yNZcu3HFQ7GWY44oLtVlOcyKNQG/U4LsHc0MyHM+PumbFGSUXDoeXSjengUCI6
idhM8G0DaFrs2VpjNL+LV3L+Rtp9nw2ib6c5k4Gy+dAuAZSDMnElx19a+LN8MmN+
pKo/g3/GostWTSYJi/vAZ0W36fV5GnS/cViiRgWr5naPdGMLEE7kxMBwn2aoe3iK
kjv+bjnRcdVUQA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:58 2025 by rpki-client on console-fra.rpki-client.org