Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: Co3XYbD3S7Qk4jNG2ZrG25i/4F+xNiEyCQJ8EX/Y/Ac=
Subject key identifier: 03:A6:51:E5:76:49:CB:8F:6D:F7:8A:B1:1F:E7:84:E9:73:2E:AC:6C
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 01967DC5F54CBFF858A8D9B6E04DBBA2A3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0108
Signing time: Mon 28 Apr 2025 19:00:47 +0000
Manifest this update: Mon 28 Apr 2025 19:00:47 +0000
Manifest next update: Tue 29 Apr 2025 19:00:47 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: u/ZJgve6F+5QoRrdqbg10s8LXVfIAUEPxW82DSsMeB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:f5:4c:bf:f8:58:a8:d9:b6:e0:4d:bb:a2:a3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Apr 28 19:00:47 2025 GMT
Not After : Apr 29 19:00:47 2025 GMT
Subject: CN=03a651e57649cb8f6df78ab11fe784e9732eac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:28:e1:3d:f4:60:cc:50:7e:16:61:7e:8c:
15:cc:fe:e4:a0:da:92:7b:e0:61:47:7b:43:66:a3:
97:52:2f:dd:08:a2:34:73:2b:be:b4:6f:f5:d7:d3:
a1:17:52:14:48:37:d4:d8:48:eb:96:8a:17:1d:76:
66:73:a5:c1:7e:d7:79:aa:11:00:e8:8f:f2:86:2c:
3f:08:6c:2a:cf:a3:c0:82:00:0c:ec:c9:1f:cc:8f:
26:b0:e4:52:f7:9a:ba:29:9b:9e:e7:47:9d:f3:6d:
c8:7e:f6:f6:f5:34:c6:7f:50:4a:45:a3:ac:3d:0d:
a5:b4:45:bb:48:f8:e5:d8:e8:3e:a2:ff:af:60:e9:
55:62:d1:ed:2e:ee:f4:13:f1:32:c3:0d:09:66:d5:
6a:1a:69:85:0d:18:5f:d4:8f:a9:2c:f3:62:a9:a2:
81:48:6d:14:8a:6f:47:b9:47:5d:2d:9d:1a:8b:9d:
4b:61:b5:b7:1d:9e:5f:a4:1e:35:0d:3d:09:d8:d2:
ed:02:65:dd:0e:5c:fb:e3:dc:f0:62:5b:b0:2d:4a:
1a:05:f4:d8:60:40:7a:c7:eb:b6:3e:0a:ec:35:7b:
fd:b7:78:48:84:32:46:90:5c:75:e9:e2:1e:c0:ce:
3b:02:86:83:12:8c:2f:79:6f:f2:4f:1c:9e:9c:4d:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:51:E5:76:49:CB:8F:6D:F7:8A:B1:1F:E7:84:E9:73:2E:AC:6C
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5e:1d:6c:0e:63:c0:9c:d9:0a:98:fa:72:99:4c:8b:33:44:
e5:7a:95:d6:8c:38:2b:73:36:1c:9c:34:df:b8:ba:f2:00:e2:
b8:cf:9d:bb:25:45:5a:59:45:1d:77:e0:73:4e:dd:72:9e:e3:
6f:7a:ac:b8:7a:09:52:aa:30:a7:7b:72:b8:06:ff:7c:cd:04:
a2:26:1c:97:c1:b9:dd:a8:25:67:80:dd:a4:e7:c6:67:d4:de:
7b:a3:d1:67:e8:09:a6:d4:fc:e3:36:42:25:7d:56:19:32:1b:
45:96:c8:54:47:95:e8:e0:32:a3:c8:b4:88:07:d5:5e:63:bb:
3a:8e:ad:e5:55:c7:8e:19:19:23:ef:59:36:ab:2a:7f:34:f2:
cf:4f:ec:36:a8:cf:16:44:d3:2b:2f:86:0c:01:7a:29:41:af:
f1:3a:2a:fa:4e:07:93:36:63:0b:e7:f3:7e:a8:97:d7:da:51:
5b:39:74:2e:38:5f:03:f9:65:62:99:4c:38:6f:25:de:d0:aa:
7b:8a:2b:b5:ae:69:46:02:85:fb:4c:05:7c:5a:5c:42:df:04:
22:c7:43:af:31:6e:41:83:f9:a7:a2:61:79:32:96:77:1f:dd:
09:81:a9:5f:d1:94:d8:f2:ad:2c:90:97:fe:be:6e:50:7f:ce:
9b:0c:b2:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xfVMv/hYqNm24E27oqOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj
NDE4NDMwHhcNMjUwNDI4MTkwMDQ3WhcNMjUwNDI5MTkwMDQ3WjAzMTEwLwYDVQQD
EygwM2E2NTFlNTc2NDljYjhmNmRmNzhhYjExZmU3ODRlOTczMmVhYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFQo4T30YMxQfhZhfowVzP7koNqS
e+BhR3tDZqOXUi/dCKI0cyu+tG/119OhF1IUSDfU2EjrlooXHXZmc6XBftd5qhEA
6I/yhiw/CGwqz6PAggAM7MkfzI8msORS95q6KZue50ed823Ifvb29TTGf1BKRaOs
PQ2ltEW7SPjl2Og+ov+vYOlVYtHtLu70E/Eyww0JZtVqGmmFDRhf1I+pLPNiqaKB
SG0Uim9HuUddLZ0ai51LYbW3HZ5fpB41DT0J2NLtAmXdDlz749zwYluwLUoaBfTY
YEB6x+u2PgrsNXv9t3hIhDJGkFx16eIewM47AoaDEowveW/yTxyenE2XdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOmUeV2ScuPbfeKsR/nhOlzLqxsMB8GA1UdIwQY
MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt
YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy
LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANl4dbA5j
wJzZCpj6cplMizNE5XqV1ow4K3M2HJw037i68gDiuM+duyVFWllFHXfgc07dcp7j
b3qsuHoJUqowp3tyuAb/fM0EoiYcl8G53aglZ4DdpOfGZ9Tee6PRZ+gJptT84zZC
JX1WGTIbRZbIVEeV6OAyo8i0iAfVXmO7Oo6t5VXHjhkZI+9ZNqsqfzTyz0/sNqjP
FkTTKy+GDAF6KUGv8Toq+k4HkzZjC+fzfqiX19pRWzl0LjhfA/llYplMOG8l3tCq
e4orta5pRgKF+0wFfFpcQt8EIsdDrzFuQYP5p6JheTKWdx/dCYGpX9GU2PKtLJCX
/r5uUH/OmwyyQA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:35:18 2025 by rpki-client