Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: 6Fx/IZQdRcH6foAD2YgVb9SWzpTzetLsiAfW19KVNRY=
Subject key identifier: C7:B6:5F:61:C5:A1:1A:12:60:F7:75:0C:4D:DA:B5:20:8B:4D:E3:5F
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 01967BD80E18F413E9610604E682206B08F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 10:01:18 +0000
Manifest this update: Mon 28 Apr 2025 10:01:18 +0000
Manifest next update: Tue 29 Apr 2025 10:01:18 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: w9EkFG8FTNh6x0eFNRHvvDJBErN9iyZBcUJM5VxZS0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:0e:18:f4:13:e9:61:06:04:e6:82:20:6b:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Apr 28 10:01:18 2025 GMT
Not After : Apr 29 10:01:18 2025 GMT
Subject: CN=c7b65f61c5a11a1260f7750c4ddab5208b4de35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:8c:97:85:22:63:0d:51:32:a3:c0:42:1e:
51:f1:da:11:56:49:49:4e:3e:77:8c:1e:b2:88:c6:
c9:b4:f2:c6:4e:0d:04:b6:b9:50:44:53:ec:35:5b:
65:cf:29:00:d8:01:70:63:ae:95:23:7f:19:19:e6:
b9:20:8d:39:6b:ef:5d:02:33:99:ce:1f:5a:97:88:
3f:65:89:05:58:68:a9:a0:14:83:71:58:59:8c:74:
e4:43:d6:b3:68:2c:24:35:b3:f4:57:d2:23:07:dc:
33:1c:5c:f9:94:7e:2e:c0:20:4d:e4:54:24:84:26:
15:77:5e:5b:9d:68:c5:7b:9e:7e:8c:83:fe:c3:7d:
85:34:3d:09:38:43:f8:08:dc:57:23:9d:95:9e:7e:
86:ad:41:0c:bc:a4:fc:34:ec:5d:1a:54:25:bc:7e:
da:48:8e:72:b6:3a:d4:69:49:78:f0:7f:20:b1:53:
82:0a:29:2a:c3:b7:ed:c6:01:96:9a:52:75:1f:4f:
66:9a:96:f4:f8:86:b0:32:8e:92:76:5e:63:4a:69:
82:01:93:b9:b8:20:87:42:89:9a:9e:5d:ab:58:1a:
8a:f0:b0:66:1f:81:a2:28:0b:56:82:51:7c:2d:b5:
eb:91:63:d1:b4:b9:06:d8:e8:ec:1b:67:22:35:a3:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:5F:61:C5:A1:1A:12:60:F7:75:0C:4D:DA:B5:20:8B:4D:E3:5F
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:2f:ce:5b:a1:63:b0:19:5c:ee:e3:b2:7b:26:df:84:fe:6f:
7c:64:1c:ce:a8:63:51:ec:52:23:2d:e2:95:78:c4:76:6c:05:
ac:4e:98:dd:26:f3:ba:b4:1c:81:7c:ea:41:78:f6:dc:01:9d:
6e:70:e3:fa:0d:e1:3b:dc:37:5e:6a:8b:9a:ee:fb:3d:d1:f1:
b2:54:2f:fb:3d:a7:b0:a9:c4:24:ce:2a:6c:d1:68:dd:9a:49:
b0:94:81:67:73:fd:a4:9e:a9:83:fc:d3:bb:f3:ca:23:49:9c:
57:9c:9a:fc:a1:92:39:e3:86:ec:68:f7:79:ed:c9:94:b8:74:
00:fe:2d:32:f2:10:ab:ad:8a:79:0b:1f:19:5b:de:6e:33:8e:
25:6b:32:18:82:da:c7:12:96:86:63:9a:c1:19:87:88:85:fb:
d4:0d:53:21:0c:b7:0a:0c:f8:cd:35:97:55:0c:66:3b:48:7c:
43:82:a2:33:79:cb:50:e5:41:a6:48:d0:83:e4:78:c0:3d:bd:
de:74:89:44:77:c8:17:a9:88:a0:ef:d2:94:3b:99:2e:3b:1f:
ba:cb:9b:98:90:fb:34:cb:16:94:2d:27:5f:d9:31:44:c2:5b:
76:ad:00:d1:ff:80:c3:99:e2:ae:c6:9c:3a:48:e6:48:a8:67:
4f:36:df:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72A4Y9BPpYQYE5oIgawjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy
YzAwMjMwHhcNMjUwNDI4MTAwMTE4WhcNMjUwNDI5MTAwMTE4WjAzMTEwLwYDVQQD
EyhjN2I2NWY2MWM1YTExYTEyNjBmNzc1MGM0ZGRhYjUyMDhiNGRlMzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeWMl4UiYw1RMqPAQh5R8doRVklJ
Tj53jB6yiMbJtPLGTg0EtrlQRFPsNVtlzykA2AFwY66VI38ZGea5II05a+9dAjOZ
zh9al4g/ZYkFWGipoBSDcVhZjHTkQ9azaCwkNbP0V9IjB9wzHFz5lH4uwCBN5FQk
hCYVd15bnWjFe55+jIP+w32FND0JOEP4CNxXI52Vnn6GrUEMvKT8NOxdGlQlvH7a
SI5ytjrUaUl48H8gsVOCCikqw7ftxgGWmlJ1H09mmpb0+IawMo6Sdl5jSmmCAZO5
uCCHQomanl2rWBqK8LBmH4GiKAtWglF8LbXrkWPRtLkG2OjsG2ciNaOgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe2X2HFoRoSYPd1DE3atSCLTeNfMB8GA1UdIwQY
MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et
M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5
LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOy/OW6Fj
sBlc7uOyeybfhP5vfGQczqhjUexSIy3ilXjEdmwFrE6Y3SbzurQcgXzqQXj23AGd
bnDj+g3hO9w3XmqLmu77PdHxslQv+z2nsKnEJM4qbNFo3ZpJsJSBZ3P9pJ6pg/zT
u/PKI0mcV5ya/KGSOeOG7Gj3ee3JlLh0AP4tMvIQq62KeQsfGVvebjOOJWsyGILa
xxKWhmOawRmHiIX71A1TIQy3Cgz4zTWXVQxmO0h8Q4KiM3nLUOVBpkjQg+R4wD29
3nSJRHfIF6mIoO/SlDuZLjsfusubmJD7NMsWlC0nX9kxRMJbdq0A0f+Aw5nirsac
OkjmSKhnTzbfiQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:18 2025 by rpki-client