Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
File: ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft (raw, json)
Hash identifier: KWiGf9NpKmJusa/pc039BIgMNLeXsMF+gmIJMBdNEk8=
Subject key identifier: BB:BB:93:F4:73:3E:79:FE:3F:0E:6A:E2:B0:0B:21:DA:7B:25:AC:1A
Authority key identifier: 65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
Certificate issuer: /CN=654d96672a59ec3895fc15847aca1b29db791244
Certificate serial: 01967AC528C13091E2735961AF257B8BFAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
Manifest number: 0494
Signing time: Mon 28 Apr 2025 05:01:03 +0000
Manifest this update: Mon 28 Apr 2025 05:01:03 +0000
Manifest next update: Tue 29 Apr 2025 05:01:03 +0000
Files and hashes: 1: 3tamc3sOw67HPVcPTfi-B2O8yU0.roa (hash: VKiy/+EDaLvbaW8IRlukGidMdNs6XDi7iV1i6VLWYS0=)
2: ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl (hash: 5KmbII78gPN6+94QeV39450Jm2QtY6Mir4h2McZiUZ8=)
3: oMFhnG_2Z4roWQc3WgoG1HgKdEc.roa (hash: QGs1HFAKixXlw1vT4Oet6ENYZoHU7usshB/hp90M1GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:28:c1:30:91:e2:73:59:61:af:25:7b:8b:fa:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654d96672a59ec3895fc15847aca1b29db791244
Validity
Not Before: Apr 28 05:01:03 2025 GMT
Not After : Apr 29 05:01:03 2025 GMT
Subject: CN=bbbb93f4733e79fe3f0e6ae2b00b21da7b25ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:9b:d6:d2:2f:85:11:7f:bc:82:8b:f9:3d:
d8:ab:98:ec:c8:c8:34:f8:ed:dd:7d:4f:f9:92:a6:
27:b8:74:3b:84:b4:5d:46:d3:66:d6:bd:ef:fe:fd:
2e:ef:8d:c9:80:10:91:f8:cc:c3:09:4f:65:7d:d3:
20:f3:96:14:49:34:8f:b5:c7:fe:f5:e1:d7:73:f7:
0c:85:45:dc:8e:df:31:ac:fc:07:e8:75:3f:58:d3:
f4:ef:f8:53:97:51:ce:77:c1:3e:15:50:98:23:bd:
52:86:29:59:52:36:2e:29:90:48:df:6b:9b:3e:b7:
87:58:b1:c2:81:90:43:e3:8f:05:3f:0b:ad:f4:12:
29:a7:0c:d6:70:c7:2d:22:17:81:9d:b1:2e:b1:39:
e8:2d:bf:0f:1e:6e:fc:c5:55:fe:2b:c9:ce:31:02:
d1:20:b3:88:f1:32:e8:cc:54:d0:46:e9:1b:8d:dc:
34:3d:23:c1:d2:9b:6a:10:21:c3:60:9d:0b:64:a1:
58:0a:47:4b:e5:81:7a:bb:07:0c:78:ec:98:56:04:
b0:16:14:be:9b:76:85:8c:f7:fb:15:44:cc:3e:59:
36:fe:d3:bf:84:19:a1:ba:4f:10:50:4d:1b:47:ca:
77:d3:c7:b0:1a:64:b5:46:c6:a3:c3:ec:9a:54:ae:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BB:93:F4:73:3E:79:FE:3F:0E:6A:E2:B0:0B:21:DA:7B:25:AC:1A
X509v3 Authority Key Identifier:
keyid:65:4D:96:67:2A:59:EC:38:95:FC:15:84:7A:CA:1B:29:DB:79:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZU2WZypZ7DiV_BWEesobKdt5EkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebe30-ee89-48de-874c-b469db10b68a/1/ZU2WZypZ7DiV_BWEesobKdt5EkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b8:f2:c7:05:47:15:c1:bd:56:3a:df:0c:6b:34:6e:41:f3:
a5:d5:83:c9:52:e3:e2:aa:fc:53:ee:2e:a0:2c:9f:e5:2c:e8:
95:f2:d0:54:26:47:78:4c:89:33:e8:66:03:3b:ab:f2:d4:02:
b2:3a:37:4c:26:22:8d:b4:4e:01:94:be:06:e9:d0:2a:36:a2:
b2:c6:b0:ee:c4:61:87:72:14:ec:6b:61:b5:2d:c8:2b:34:92:
cc:dc:66:8d:8c:20:96:ac:90:7a:ab:75:53:11:02:da:1f:a9:
7d:48:53:1b:e1:01:60:70:1c:f7:73:b9:57:df:86:ea:1d:dd:
1e:12:da:b2:2c:aa:79:82:f1:7c:01:51:ee:81:6f:c0:3a:fe:
df:cc:a4:b3:c0:34:0f:e4:37:e3:82:57:89:45:8c:66:ad:7c:
c5:ad:66:65:c6:e1:d2:7b:5a:85:53:d0:b3:e6:67:2f:5d:fa:
0a:6e:6e:0e:25:78:5d:80:5a:ba:3c:56:aa:9a:15:94:48:a2:
93:b6:20:9e:e8:a0:ba:ad:23:17:93:62:59:04:30:f3:10:95:
7c:23:e9:39:d0:25:3b:5a:0a:d8:9b:fb:fb:42:2f:94:70:92:
c7:b0:64:b6:10:f2:a8:1d:fe:1c:7e:71:b1:42:2e:72:90:6f:
e3:7a:c2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xSjBMJHic1lhryV7i/qzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NGQ5NjY3MmE1OWVjMzg5NWZjMTU4NDdhY2ExYjI5ZGI3
OTEyNDQwHhcNMjUwNDI4MDUwMTAzWhcNMjUwNDI5MDUwMTAzWjAzMTEwLwYDVQQD
EyhiYmJiOTNmNDczM2U3OWZlM2YwZTZhZTJiMDBiMjFkYTdiMjVhYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hab1tIvhRF/vIKL+T3Yq5jsyMg0
+O3dfU/5kqYnuHQ7hLRdRtNm1r3v/v0u743JgBCR+MzDCU9lfdMg85YUSTSPtcf+
9eHXc/cMhUXcjt8xrPwH6HU/WNP07/hTl1HOd8E+FVCYI71ShilZUjYuKZBI32ub
PreHWLHCgZBD448FPwut9BIppwzWcMctIheBnbEusTnoLb8PHm78xVX+K8nOMQLR
ILOI8TLozFTQRukbjdw0PSPB0ptqECHDYJ0LZKFYCkdL5YF6uwcMeOyYVgSwFhS+
m3aFjPf7FUTMPlk2/tO/hBmhuk8QUE0bR8p308ewGmS1Rsajw+yaVK4eNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu7k/RzPnn+Pw5q4rALIdp7JawaMB8GA1UdIwQY
MBaAFGVNlmcqWew4lfwVhHrKGynbeRJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMt
YjQ2OWRiMTBiNjhhLzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zZWJlMzAtZWU4OS00OGRlLTg3NGMtYjQ2OWRiMTBiNjhh
LzEvWlUyV1p5cFo3RGlWX0JXRWVzb2JLZHQ1RWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbjyxwVH
FcG9VjrfDGs0bkHzpdWDyVLj4qr8U+4uoCyf5SzolfLQVCZHeEyJM+hmAzur8tQC
sjo3TCYijbROAZS+BunQKjaissaw7sRhh3IU7GthtS3IKzSSzNxmjYwglqyQeqt1
UxEC2h+pfUhTG+EBYHAc93O5V9+G6h3dHhLasiyqeYLxfAFR7oFvwDr+38yks8A0
D+Q344JXiUWMZq18xa1mZcbh0ntahVPQs+ZnL136Cm5uDiV4XYBaujxWqpoVlEii
k7Ygnuiguq0jF5NiWQQw8xCVfCPpOdAlO1oK2Jv7+0IvlHCSx7BkthDyqB3+HH5x
sUIucpBv43rCMw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:29:37 2025 by rpki-client