Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
File: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft (raw, json)
Hash identifier: s8AGAhsx2bm7aMrirGCZjl3Ry27yxvi4Spzm/VlvzaY=
Subject key identifier: B9:EB:88:1C:B1:76:A6:98:29:06:B2:F4:CB:A2:E7:0F:4F:3A:6D:03
Authority key identifier: CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
Certificate issuer: /CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Certificate serial: 0196778D0BC4A6FFE9D780113EFF51496F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
Manifest number: 0DC1
Signing time: Sun 27 Apr 2025 14:00:54 +0000
Manifest this update: Sun 27 Apr 2025 14:00:54 +0000
Manifest next update: Mon 28 Apr 2025 14:00:54 +0000
Files and hashes: 1: xWr5Uv-m_2n6jrRfiUwYnyQQGpc.roa (hash: i1R3GX2qn3HUs47acSt8qqkjUz+ff6QT9CroD89ajl8=)
2: zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl (hash: oab5ink2nFbsKgZDvcqyRVDQMTfJww97QnXU4pdgABk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8d:0b:c4:a6:ff:e9:d7:80:11:3e:ff:51:49:6f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce46ea629afb0c2d54200b5a65727be18cbb45a4
Validity
Not Before: Apr 27 14:00:54 2025 GMT
Not After : Apr 28 14:00:54 2025 GMT
Subject: CN=b9eb881cb176a6982906b2f4cba2e70f4f3a6d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:81:dd:e5:9d:ab:81:c9:ce:0b:ef:7d:68:
a5:db:6b:3f:d8:47:40:17:80:5e:76:06:66:62:cb:
29:71:e5:1d:34:dd:76:2c:80:11:fe:e4:8c:84:36:
53:89:8b:ff:bc:28:a3:d4:c5:b2:2d:09:42:73:77:
ce:b4:ae:59:88:97:64:80:c1:aa:d1:d5:6a:c3:6e:
53:96:61:cc:cf:66:68:4a:0a:aa:88:69:42:90:4c:
99:e9:4d:e0:e9:6e:88:0f:c7:cb:b8:01:33:21:9b:
0d:e8:9f:c5:73:8c:c9:2c:d5:4b:3d:18:fa:1c:32:
45:12:a4:27:1d:0b:5f:59:9a:6c:4b:74:ad:1e:09:
1f:88:b5:2d:01:42:98:88:88:d4:41:99:50:5d:f2:
c9:17:2b:ea:8c:9c:06:f7:ba:1a:b7:3c:bb:4e:7a:
02:bb:c4:75:19:66:10:d4:5d:be:de:53:1b:10:bc:
df:db:ac:42:c9:55:d4:aa:10:15:fd:48:6c:82:02:
02:88:d4:c8:d8:48:c5:ff:33:6f:9b:35:17:a7:aa:
05:95:e8:08:aa:db:d0:0a:55:09:75:df:3b:d2:71:
18:58:8f:d8:13:8f:5a:27:4f:51:58:1d:17:26:ec:
fb:fe:df:66:db:c0:aa:4c:b0:65:14:e9:90:02:9d:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:88:1C:B1:76:A6:98:29:06:B2:F4:CB:A2:E7:0F:4F:3A:6D:03
X509v3 Authority Key Identifier:
keyid:CE:46:EA:62:9A:FB:0C:2D:54:20:0B:5A:65:72:7B:E1:8C:BB:45:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2be009-1ef1-4d57-8f01-7e184b070bbd/1/zkbqYpr7DC1UIAtaZXJ74Yy7RaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:14:c0:e7:3c:76:b1:1b:a6:9d:ac:ba:ab:cc:ba:02:43:58:
61:63:86:3a:94:d3:a0:96:f9:c3:37:b8:e8:df:5f:c4:d9:44:
be:35:06:d6:76:02:fc:bb:9f:a8:f4:b6:60:88:89:19:b8:56:
a6:91:30:ed:84:df:76:c9:25:f2:95:e4:d2:a8:a8:17:e5:64:
96:37:74:82:8f:03:77:52:88:f7:96:40:9d:be:a4:96:8c:83:
3a:87:81:cb:7e:88:70:a3:b2:42:5d:04:97:14:7f:2e:7f:26:
df:85:48:26:7e:a6:d6:2d:64:07:ba:cc:6d:63:86:ba:b0:0d:
58:87:5e:df:2b:ef:2f:16:08:75:cb:6b:ce:c4:d2:b4:ca:7d:
8c:59:43:1d:5d:6b:9e:97:6d:b6:5e:55:15:f2:86:51:e8:dc:
78:56:3c:ba:67:d1:2b:89:aa:a1:8d:a3:e4:e2:2f:55:06:33:
79:ac:cf:93:58:01:07:bb:89:53:05:8c:b1:d2:93:fd:98:ea:
f9:f8:2c:c2:a9:5e:38:08:c5:cd:1d:95:1b:96:e9:cd:1b:b9:
0f:c2:dc:17:74:2f:4b:7c:a1:02:29:cd:25:b0:3b:0a:73:45:
ac:37:69:51:e0:35:72:88:79:42:43:40:3b:54:8c:65:c9:c1:
a7:7d:c5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3jQvEpv/p14ARPv9RSW+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNDZlYTYyOWFmYjBjMmQ1NDIwMGI1YTY1NzI3YmUxOGNi
YjQ1YTQwHhcNMjUwNDI3MTQwMDU0WhcNMjUwNDI4MTQwMDU0WjAzMTEwLwYDVQQD
EyhiOWViODgxY2IxNzZhNjk4MjkwNmIyZjRjYmEyZTcwZjRmM2E2ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxSB3eWdq4HJzgvvfWil22s/2EdA
F4BedgZmYsspceUdNN12LIAR/uSMhDZTiYv/vCij1MWyLQlCc3fOtK5ZiJdkgMGq
0dVqw25TlmHMz2ZoSgqqiGlCkEyZ6U3g6W6ID8fLuAEzIZsN6J/Fc4zJLNVLPRj6
HDJFEqQnHQtfWZpsS3StHgkfiLUtAUKYiIjUQZlQXfLJFyvqjJwG97oatzy7TnoC
u8R1GWYQ1F2+3lMbELzf26xCyVXUqhAV/UhsggICiNTI2EjF/zNvmzUXp6oFlegI
qtvQClUJdd870nEYWI/YE49aJ09RWB0XJuz7/t9m28CqTLBlFOmQAp0XXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnriByxdqaYKQay9Mui5w9POm0DMB8GA1UdIwQY
MBaAFM5G6mKa+wwtVCALWmVye+GMu0WkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEt
N2UxODRiMDcwYmJkLzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yYmUwMDktMWVmMS00ZDU3LThmMDEtN2UxODRiMDcwYmJk
LzEvemticVlwcjdEQzFVSUF0YVpYSjc0WXk3UmFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxTA5zx2
sRumnay6q8y6AkNYYWOGOpTToJb5wze46N9fxNlEvjUG1nYC/LufqPS2YIiJGbhW
ppEw7YTfdskl8pXk0qioF+Vkljd0go8Dd1KI95ZAnb6kloyDOoeBy36IcKOyQl0E
lxR/Ln8m34VIJn6m1i1kB7rMbWOGurANWIde3yvvLxYIdctrzsTStMp9jFlDHV1r
npdttl5VFfKGUejceFY8umfRK4mqoY2j5OIvVQYzeazPk1gBB7uJUwWMsdKT/Zjq
+fgswqleOAjFzR2VG5bpzRu5D8LcF3QvS3yhAinNJbA7CnNFrDdpUeA1coh5QkNA
O1SMZcnBp33FKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:48:09 2025 by rpki-client