Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: HrntwAa1KsDYMlXn/9cDvHLlgZV9eNELq0Mytbsv9lg=
Subject key identifier: 8E:01:60:3B:05:8B:36:18:83:4A:1D:C4:D2:6E:9F:FA:00:1E:1C:E4
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 0194BABB803D31DC8DF5D5103C669F35B1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0A92
Signing time: Fri 31 Jan 2025 05:00:37 +0000
Manifest this update: Fri 31 Jan 2025 05:00:37 +0000
Manifest next update: Sat 01 Feb 2025 05:00:37 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: viXVohW+FPZ3XWqczkQE9tWg9ZsuyfdmUuwqC0oJMGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:80:3d:31:dc:8d:f5:d5:10:3c:66:9f:35:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: Jan 31 05:00:37 2025 GMT
Not After : Feb 1 05:00:37 2025 GMT
Subject: CN=8e01603b058b3618834a1dc4d26e9ffa001e1ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:11:a5:cf:0a:bd:5d:a9:c3:cf:d9:d2:f2:
69:c0:7f:73:5c:ca:7c:d0:c0:c4:8e:1f:2d:3e:e9:
34:08:cb:5d:0d:59:06:53:79:1a:d6:02:2f:d8:31:
21:6d:0f:1e:30:5f:98:f9:bc:de:82:f7:59:03:4d:
72:c1:00:84:e6:2f:bd:73:e7:f1:2e:c1:d0:13:81:
96:21:91:54:92:a6:4d:fa:4a:8f:19:11:cc:02:3b:
62:52:72:c1:96:6b:52:b0:84:da:8d:ee:b3:24:e3:
80:ff:17:84:6d:5b:a9:71:ea:2b:02:39:2c:49:71:
c4:8a:32:88:43:d5:37:ce:53:c6:42:ad:1f:02:e2:
01:b2:a4:ea:91:01:22:b8:f9:27:b9:ca:e2:db:dd:
41:a9:20:dd:cf:19:b4:e0:85:1c:fb:25:fb:0c:20:
13:10:b2:78:6f:19:9d:e7:5a:bc:52:28:54:a1:be:
e1:67:55:89:3a:0d:78:ab:16:fe:87:36:4c:68:17:
a2:71:73:65:c9:45:09:7f:b8:7d:a1:5c:91:a0:c9:
30:dd:2c:20:a2:cd:5d:ec:c4:55:e1:58:5d:ce:a0:
65:83:55:c6:69:e7:d5:e5:cc:30:08:d6:e9:cf:b4:
22:32:5a:85:3b:a4:1a:af:59:5d:3f:a6:14:59:57:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:01:60:3B:05:8B:36:18:83:4A:1D:C4:D2:6E:9F:FA:00:1E:1C:E4
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:76:5a:f2:09:2a:22:39:d5:b6:f3:5f:7d:d8:4e:8f:8e:3b:
09:d5:fa:d3:7e:0f:14:31:9c:4f:1f:c6:38:bc:91:b9:28:c1:
ae:46:10:58:42:23:da:55:7c:c9:9f:91:e2:bb:1f:8a:b6:94:
ec:08:b2:70:8a:e0:81:b0:5c:2b:22:be:0b:49:e0:91:cf:93:
93:76:b5:ce:6b:96:9f:b3:98:23:d5:eb:b1:03:73:59:f3:e4:
e2:74:a5:26:c1:4c:4d:1e:f2:48:0b:bb:90:15:f4:23:22:b9:
d6:a6:c9:71:bd:1f:c4:43:38:3a:d2:eb:19:07:ef:d9:17:5e:
99:28:4d:ec:29:fd:d3:1e:70:ec:b7:be:e5:af:45:45:68:cd:
d4:fa:9d:82:b3:5c:43:2f:a7:73:3d:b6:e7:db:d6:33:ef:f8:
8e:ab:21:39:36:e6:05:2f:5e:2b:44:2e:7c:b5:54:57:f9:30:
24:b1:b0:34:2d:7b:81:35:ea:49:2b:85:e4:a0:2c:24:50:ed:
e6:61:a1:05:5b:37:14:dd:08:02:67:cd:18:87:fa:09:14:5a:
92:24:d7:c7:f8:50:3b:34:73:44:24:cd:ac:ea:53:65:fc:cc:
c7:ce:2a:30:9d:f3:a4:2a:92:0f:b3:33:13:8d:a5:31:3d:a9:
33:aa:71:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u4A9MdyN9dUQPGafNbHAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTc5OGE4ZGE5OTk5ZGRmNTNhM2M4ZDM4ZjM2ZjE3ZWNk
NDU0MzIwHhcNMjUwMTMxMDUwMDM3WhcNMjUwMjAxMDUwMDM3WjAzMTEwLwYDVQQD
Eyg4ZTAxNjAzYjA1OGIzNjE4ODM0YTFkYzRkMjZlOWZmYTAwMWUxY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ERpc8KvV2pw8/Z0vJpwH9zXMp8
0MDEjh8tPuk0CMtdDVkGU3ka1gIv2DEhbQ8eMF+Y+bzegvdZA01ywQCE5i+9c+fx
LsHQE4GWIZFUkqZN+kqPGRHMAjtiUnLBlmtSsITaje6zJOOA/xeEbVupceorAjks
SXHEijKIQ9U3zlPGQq0fAuIBsqTqkQEiuPknucri291BqSDdzxm04IUc+yX7DCAT
ELJ4bxmd51q8UihUob7hZ1WJOg14qxb+hzZMaBeicXNlyUUJf7h9oVyRoMkw3Swg
os1d7MRV4VhdzqBlg1XGaefV5cwwCNbpz7QiMlqFO6Qar1ldP6YUWVfcSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4BYDsFizYYg0odxNJun/oAHhzkMB8GA1UdIwQY
MBaAFM6XmKjamZnd9To8jTjzbxfs1FQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYt
OThmY2IzYThiYzllLzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC80YmM4NjQtNzE4Yy00MjE3LWFiNWYtOThmY2IzYThiYzll
LzEvenBlWXFOcVptZDMxT2p5Tk9QTnZGLXpVVkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXZa8gkq
IjnVtvNffdhOj447CdX6034PFDGcTx/GOLyRuSjBrkYQWEIj2lV8yZ+R4rsfiraU
7AiycIrggbBcKyK+C0ngkc+Tk3a1zmuWn7OYI9XrsQNzWfPk4nSlJsFMTR7ySAu7
kBX0IyK51qbJcb0fxEM4OtLrGQfv2RdemShN7Cn90x5w7Le+5a9FRWjN1PqdgrNc
Qy+ncz2259vWM+/4jqshOTbmBS9eK0QufLVUV/kwJLGwNC17gTXqSSuF5KAsJFDt
5mGhBVs3FN0IAmfNGIf6CRRakiTXx/hQOzRzRCTNrOpTZfzMx84qMJ3zpCqSD7Mz
E42lMT2pM6pxZw==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:39:31 2025 by rpki-client on console-fra.rpki-client.org