Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: QsjfEdqkaC4BjW/RG0gacJejpCYupT7Nt0hxkBsPqwo=
Subject key identifier: 07:EF:22:5B:D7:D5:74:B4:1C:97:FB:61:E3:D4:40:6B:89:3F:FC:02
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 019671F8420F77DF39D516500641A603F63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 12:00:17 +0000
Manifest this update: Sat 26 Apr 2025 12:00:17 +0000
Manifest next update: Sun 27 Apr 2025 12:00:17 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 4GUSaMMBIU3wzTtdjaIEvsx3CQPawntHFdEN4wqi10c=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:42:0f:77:df:39:d5:16:50:06:41:a6:03:f6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: Apr 26 12:00:17 2025 GMT
Not After : Apr 27 12:00:17 2025 GMT
Subject: CN=07ef225bd7d574b41c97fb61e3d4406b893ffc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:92:39:b7:b5:d4:46:4a:4d:d6:f3:97:d7:
93:49:4e:06:88:7a:3e:19:7f:fa:7f:99:f9:57:56:
97:56:75:ec:65:5d:db:a2:32:90:79:57:af:38:33:
d6:35:7b:6a:95:71:d6:1c:a8:ae:4b:3d:f8:9a:2a:
6f:c1:7a:c5:12:61:87:42:89:8a:74:c3:77:5c:93:
82:ef:c1:69:45:55:9c:ec:ec:c1:b7:bb:8f:09:7c:
b4:2d:73:e8:6d:cd:3d:91:aa:65:f6:c9:92:65:9a:
d4:fc:04:44:26:fe:1d:9e:4c:67:ff:6d:dd:f5:8d:
1f:ec:d4:50:c5:28:49:0d:b3:1f:e9:16:a5:2c:83:
2b:14:b4:a4:c8:fc:35:18:bc:9a:97:df:f5:57:56:
18:58:8c:b5:11:a4:59:7c:52:f5:06:6c:1f:11:90:
bb:c6:e4:17:1a:5c:65:4c:a2:87:bc:c8:ac:27:ba:
18:85:c4:bf:f5:4d:1f:36:80:95:fa:c3:90:99:cf:
06:48:a0:07:09:82:fc:86:ff:97:9b:f6:2b:6a:df:
67:bb:55:87:ac:cd:f8:6d:9a:1e:04:58:84:39:50:
6b:07:75:05:8b:aa:31:de:38:23:97:31:df:e3:f5:
eb:9d:c5:71:23:f1:3b:38:4a:55:e3:b9:9d:76:2d:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EF:22:5B:D7:D5:74:B4:1C:97:FB:61:E3:D4:40:6B:89:3F:FC:02
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:72:00:86:f0:57:4a:09:8a:01:7b:7c:9d:9b:29:66:bb:7e:
5e:78:4c:fb:00:a6:b3:bf:b0:b7:47:73:ad:91:43:16:8b:1a:
e4:4f:5a:fd:5d:fb:52:57:1d:31:46:66:b6:69:76:96:11:fa:
19:13:33:64:98:50:8c:ff:0c:db:8d:56:8a:27:1e:70:ce:e3:
5c:39:00:69:0c:d2:e7:92:7e:75:d7:c8:d1:e3:35:4d:c5:cb:
ac:17:5e:f4:7e:2f:28:0e:93:b4:e0:04:d2:d5:e6:87:bb:41:
c1:eb:e5:41:c7:9f:e9:a5:71:d5:58:53:99:42:60:b5:a8:81:
e7:63:c1:f3:5d:1c:1d:da:2c:10:f0:71:6d:37:72:a1:6e:30:
dd:6a:0f:4a:01:00:3a:8b:16:87:f8:05:08:45:11:fe:25:cf:
4b:3a:d8:b3:5b:51:e8:7f:4c:19:83:05:73:38:7f:a7:87:d9:
68:12:9b:77:f5:b9:b6:2a:73:53:2e:d4:61:51:74:cb:a4:a5:
df:bb:3a:23:a6:fb:07:54:97:36:d3:e3:6d:b9:6f:87:67:ea:
77:ad:13:bf:c0:af:0b:04:84:19:fc:83:d3:fc:76:a3:c4:a2:
44:de:45:57:79:6b:07:02:36:13:5c:5e:ed:68:3b:de:1b:aa:
1b:b3:5d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZx+EIPd9851RZQBkGmA/Y/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZWYzMWFkYWM2NjM4NTViM2RkZDE5MzFjNDRjZjgwNjRk
NmE2ZWIwHhcNMjUwNDI2MTIwMDE3WhcNMjUwNDI3MTIwMDE3WjAzMTEwLwYDVQQD
EygwN2VmMjI1YmQ3ZDU3NGI0MWM5N2ZiNjFlM2Q0NDA2Yjg5M2ZmYzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYKSObe11EZKTdbzl9eTSU4GiHo+
GX/6f5n5V1aXVnXsZV3bojKQeVevODPWNXtqlXHWHKiuSz34mipvwXrFEmGHQomK
dMN3XJOC78FpRVWc7OzBt7uPCXy0LXPobc09kapl9smSZZrU/AREJv4dnkxn/23d
9Y0f7NRQxShJDbMf6RalLIMrFLSkyPw1GLyal9/1V1YYWIy1EaRZfFL1BmwfEZC7
xuQXGlxlTKKHvMisJ7oYhcS/9U0fNoCV+sOQmc8GSKAHCYL8hv+Xm/Yrat9nu1WH
rM34bZoeBFiEOVBrB3UFi6ox3jgjlzHf4/XrncVxI/E7OEpV47mddi0z9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfvIlvX1XS0HJf7YePUQGuJP/wCMB8GA1UdIwQY
MBaAFGbvMa2sZjhVs93RkxxEz4Bk1qbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUt
ZGIwZGNjMDhmNDUyLzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lZDRkYTAtMDY0Ny00NDZmLWIwNjUtZGIwZGNjMDhmNDUy
LzEvWnU4eHJheG1PRld6M2RHVEhFVFBnR1RXcHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHIAhvBX
SgmKAXt8nZspZrt+XnhM+wCms7+wt0dzrZFDFosa5E9a/V37UlcdMUZmtml2lhH6
GRMzZJhQjP8M241WiicecM7jXDkAaQzS55J+ddfI0eM1TcXLrBde9H4vKA6TtOAE
0tXmh7tBwevlQcef6aVx1VhTmUJgtaiB52PB810cHdosEPBxbTdyoW4w3WoPSgEA
OosWh/gFCEUR/iXPSzrYs1tR6H9MGYMFczh/p4fZaBKbd/W5tipzUy7UYVF0y6Sl
37s6I6b7B1SXNtPjbblvh2fqd60Tv8CvCwSEGfyD0/x2o8SiRN5FV3lrBwI2E1xe
7Wg73huqG7NdgQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:01:44 2025 by rpki-client