Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: 44bL0y517Pj+rXgXZF/8L/8WA1pu+oVVyldIGLKMxeI=
Subject key identifier: D9:A4:2B:84:FC:C0:59:92:8A:8B:0F:83:3E:56:59:6C:F5:57:BD:79
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019679447D9D260965BDF946B030A6D4E59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 04AC
Signing time: Sun 27 Apr 2025 22:00:53 +0000
Manifest this update: Sun 27 Apr 2025 22:00:53 +0000
Manifest next update: Mon 28 Apr 2025 22:00:53 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: 9RoH6TOjwfhiJmPXIy3pDDoFWKDC/+dfZKgWQ7fDP+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:7d:9d:26:09:65:bd:f9:46:b0:30:a6:d4:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Apr 27 22:00:53 2025 GMT
Not After : Apr 28 22:00:53 2025 GMT
Subject: CN=d9a42b84fcc059928a8b0f833e56596cf557bd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:e5:1a:ad:13:93:c4:d8:bc:b7:b0:57:3c:
03:fe:80:f4:76:0b:7c:1c:40:bf:2b:38:eb:69:34:
80:46:8c:af:28:9c:e5:2f:03:37:de:3a:1c:63:b9:
77:42:92:df:ef:77:90:61:b8:64:fc:c1:d7:fa:67:
ab:1c:45:94:5e:a2:8e:74:c0:86:28:9e:97:ac:c9:
28:3c:5f:75:e3:8f:16:c3:1f:0f:73:29:0c:4d:17:
25:73:84:8f:3b:9b:7c:a2:0b:0c:6d:1a:c9:92:8f:
f0:ba:83:b9:ae:75:ca:f6:12:69:dc:ac:be:07:75:
11:04:e5:d8:55:62:c0:05:c2:9a:7b:52:b3:7e:b3:
c4:f7:57:c2:06:dc:a9:9e:45:6c:3c:96:c0:d7:cc:
14:7e:ce:14:cf:75:ef:ba:1b:1f:72:47:1a:e6:46:
11:e5:2f:01:72:66:1d:65:9c:f7:be:63:a7:55:fb:
b2:2c:90:de:74:a5:80:f0:6e:17:93:fa:de:99:7b:
11:06:54:ec:73:1c:bf:fc:64:48:bd:7f:6c:15:a4:
00:4f:7c:52:61:06:d7:10:14:98:66:2e:e5:e4:0b:
0a:01:e6:4e:26:c6:7f:28:8e:c2:53:6b:65:79:be:
9f:c4:c5:5f:aa:d9:10:5c:7a:32:bc:40:df:71:cf:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A4:2B:84:FC:C0:59:92:8A:8B:0F:83:3E:56:59:6C:F5:57:BD:79
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c8:5c:ab:db:0a:68:d9:6b:aa:f1:ba:d3:af:e6:5e:a7:84:
bb:ae:5e:a1:1d:18:0f:2f:33:0a:99:07:ae:35:a8:1c:e8:ba:
6c:ff:db:bf:51:dc:64:f3:a2:15:2d:52:15:46:e8:30:64:ae:
5d:86:ef:4d:9a:06:e3:9b:0f:43:61:1a:7a:38:e6:66:18:07:
8c:8c:50:eb:7a:98:da:0f:d0:2a:26:94:8d:4d:f7:87:4f:f8:
fd:52:b5:4a:79:41:47:23:35:d2:d2:fd:f0:f7:a9:81:96:a4:
96:bb:c0:02:e7:60:fa:e9:0c:2f:3c:df:4e:d8:21:e7:ae:7f:
5e:89:f8:9a:e3:e4:60:65:5e:ad:ad:5c:51:17:71:c7:98:d0:
33:e9:c5:61:85:6e:9c:11:ce:5c:33:8a:68:b6:1c:0b:33:49:
6d:c0:9f:de:fd:51:e9:b1:89:ee:35:60:f6:d5:54:d5:44:66:
10:9d:d0:10:66:0c:0a:3b:48:9d:44:82:02:bd:bb:dc:c7:ee:
4e:34:c3:22:8a:20:d6:85:ef:a4:3c:99:bc:7c:42:d5:73:31:
5b:7c:94:1d:88:74:d2:ee:90:53:42:e8:9e:8b:ef:81:ee:43:
5e:17:28:1c:ba:00:43:5d:38:1f:9b:1a:71:e5:4f:7a:40:19:
dc:55:92:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5RH2dJgllvflGsDCm1OWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjUwNDI3MjIwMDUzWhcNMjUwNDI4MjIwMDUzWjAzMTEwLwYDVQQD
EyhkOWE0MmI4NGZjYzA1OTkyOGE4YjBmODMzZTU2NTk2Y2Y1NTdiZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqTlGq0Tk8TYvLewVzwD/oD0dgt8
HEC/KzjraTSARoyvKJzlLwM33jocY7l3QpLf73eQYbhk/MHX+merHEWUXqKOdMCG
KJ6XrMkoPF91448Wwx8PcykMTRclc4SPO5t8ogsMbRrJko/wuoO5rnXK9hJp3Ky+
B3URBOXYVWLABcKae1KzfrPE91fCBtypnkVsPJbA18wUfs4Uz3Xvuhsfckca5kYR
5S8BcmYdZZz3vmOnVfuyLJDedKWA8G4Xk/remXsRBlTscxy//GRIvX9sFaQAT3xS
YQbXEBSYZi7l5AsKAeZOJsZ/KI7CU2tleb6fxMVfqtkQXHoyvEDfcc+jHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmkK4T8wFmSiosPgz5WWWz1V715MB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMhcq9sK
aNlrqvG606/mXqeEu65eoR0YDy8zCpkHrjWoHOi6bP/bv1HcZPOiFS1SFUboMGSu
XYbvTZoG45sPQ2EaejjmZhgHjIxQ63qY2g/QKiaUjU33h0/4/VK1SnlBRyM10tL9
8PepgZaklrvAAudg+ukMLzzfTtgh565/Xon4muPkYGVera1cURdxx5jQM+nFYYVu
nBHOXDOKaLYcCzNJbcCf3v1R6bGJ7jVg9tVU1URmEJ3QEGYMCjtInUSCAr273Mfu
TjTDIoog1oXvpDyZvHxC1XMxW3yUHYh00u6QU0Lonovvge5DXhcoHLoAQ104H5sa
ceVPekAZ3FWSQg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:10:28 2025 by rpki-client