Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: bzxByt1+JmURWzO/IemAzbS8zT6TP3AZpA1wXKUVOZg=
Subject key identifier: A3:76:1A:56:55:21:43:8A:17:9B:F1:B9:8B:31:3E:F5:98:0B:3E:5B
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01967A56BEB3158369D45A563D9CCA023A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0CA2
Signing time: Mon 28 Apr 2025 03:00:27 +0000
Manifest this update: Mon 28 Apr 2025 03:00:27 +0000
Manifest next update: Tue 29 Apr 2025 03:00:27 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: Hj2EjSb0YEaHylJlvTPVlSHodeQJoZtLH27w0LFu150=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:be:b3:15:83:69:d4:5a:56:3d:9c:ca:02:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Apr 28 03:00:27 2025 GMT
Not After : Apr 29 03:00:27 2025 GMT
Subject: CN=a3761a565521438a179bf1b98b313ef5980b3e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:17:94:63:ca:7e:f4:9f:d5:6c:92:e8:b8:
73:21:92:1b:7e:a4:90:c4:5c:2a:d8:5c:43:1c:91:
36:53:10:78:3d:28:80:97:3d:1e:09:2e:cd:63:03:
6f:73:47:64:59:8a:f7:42:66:c3:b1:27:8b:98:04:
35:78:4e:ee:83:07:bb:c4:ff:0e:d8:5a:8c:68:41:
50:12:e0:07:73:15:34:a7:86:ab:d3:82:1b:0b:2e:
6c:6c:d2:8a:dc:f2:1c:56:bf:e8:0d:e5:29:c0:55:
23:4e:87:a2:52:e4:ea:3a:6f:90:61:4e:ba:47:ef:
55:81:c8:7d:76:4c:63:3d:3b:ef:43:5f:67:d3:d2:
ca:61:7c:b1:c5:9a:75:f7:20:da:32:10:f4:ff:89:
64:74:62:52:e0:29:68:39:bd:fb:e1:ea:cf:06:49:
e2:c1:df:67:95:66:8f:c9:4f:a6:d4:f1:73:54:98:
d9:0e:0b:32:34:4f:40:2d:04:43:0c:dc:a5:1d:8c:
ab:06:b3:fb:e5:b9:dc:fb:c2:7f:01:2a:01:cb:0e:
50:f9:41:ed:a6:70:43:08:a1:45:4c:a9:6d:2d:89:
5c:bf:b7:68:00:61:41:3a:a9:d4:2a:ba:0f:88:96:
79:33:0b:13:e9:30:42:19:c2:7a:21:fb:21:27:a7:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:1A:56:55:21:43:8A:17:9B:F1:B9:8B:31:3E:F5:98:0B:3E:5B
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:76:d0:8e:28:d8:a0:f8:eb:b0:a8:f0:36:f9:d6:03:00:49:
57:cf:c8:d0:da:18:69:4a:45:a2:4c:59:9b:07:59:bd:4a:d3:
b6:c3:66:03:ca:95:47:cd:67:8f:9d:06:2c:5e:1a:b1:9a:38:
1d:61:8b:d1:52:ed:73:3c:20:d0:db:19:6b:55:ef:88:37:19:
54:12:ad:bf:d2:54:b6:c9:a2:b6:96:89:a9:4d:1e:d3:a8:4e:
2a:27:d4:7b:90:f9:15:77:bd:87:0a:8f:a4:f8:e1:db:86:8f:
0c:cf:7c:03:c3:cd:b4:97:b2:f3:82:ad:ed:18:12:2b:85:a6:
fa:ea:02:28:21:3b:40:36:8b:43:65:68:d0:f2:5f:c8:95:5f:
4e:d1:c3:cf:b9:6a:a0:b0:64:4e:a3:18:cd:d9:97:85:0f:0c:
80:2f:1a:c0:5d:fd:c5:28:d2:7b:dc:57:c1:da:bb:f9:54:3d:
20:61:2b:3e:ee:cf:4b:08:ce:26:fa:d6:10:0d:79:ce:59:ef:
94:c7:88:dd:77:71:7c:da:21:c4:49:98:28:44:46:05:a1:cf:
4a:0d:8f:6e:c7:9b:e7:14:86:10:70:d1:b5:6c:e1:aa:28:71:
dc:95:7e:dc:ba:e3:ae:51:20:03:84:09:16:7c:1b:68:02:85:
1b:2e:0f:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6Vr6zFYNp1FpWPZzKAjocMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGI2ZjEwMDMwZTI3NmY4MzE2Mjc2ZjQwYjNkNGE0MTg0
ZDk0ZGQwHhcNMjUwNDI4MDMwMDI3WhcNMjUwNDI5MDMwMDI3WjAzMTEwLwYDVQQD
EyhhMzc2MWE1NjU1MjE0MzhhMTc5YmYxYjk4YjMxM2VmNTk4MGIzZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudsXlGPKfvSf1WyS6LhzIZIbfqSQ
xFwq2FxDHJE2UxB4PSiAlz0eCS7NYwNvc0dkWYr3QmbDsSeLmAQ1eE7ugwe7xP8O
2FqMaEFQEuAHcxU0p4ar04IbCy5sbNKK3PIcVr/oDeUpwFUjToeiUuTqOm+QYU66
R+9Vgch9dkxjPTvvQ19n09LKYXyxxZp19yDaMhD0/4lkdGJS4CloOb374erPBkni
wd9nlWaPyU+m1PFzVJjZDgsyNE9ALQRDDNylHYyrBrP75bnc+8J/ASoByw5Q+UHt
pnBDCKFFTKltLYlcv7doAGFBOqnUKroPiJZ5MwsT6TBCGcJ6IfshJ6fX+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKN2GlZVIUOKF5vxuYsxPvWYCz5bMB8GA1UdIwQY
MBaAFM3bbxADDidvgxYnb0Cz1KQYTZTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2Ut
ODBiMmQyNWJmOWM4LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iNWNiMTktYTI3YS00NGE3LWEzM2UtODBiMmQyNWJmOWM4
LzEvemR0dkVBTU9KMi1ERmlkdlFMUFVwQmhObE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHbQjijY
oPjrsKjwNvnWAwBJV8/I0NoYaUpFokxZmwdZvUrTtsNmA8qVR81nj50GLF4asZo4
HWGL0VLtczwg0NsZa1XviDcZVBKtv9JUtsmitpaJqU0e06hOKifUe5D5FXe9hwqP
pPjh24aPDM98A8PNtJey84Kt7RgSK4Wm+uoCKCE7QDaLQ2Vo0PJfyJVfTtHDz7lq
oLBkTqMYzdmXhQ8MgC8awF39xSjSe9xXwdq7+VQ9IGErPu7PSwjOJvrWEA15zlnv
lMeI3XdxfNohxEmYKERGBaHPSg2Pbseb5xSGEHDRtWzhqihx3JV+3LrjrlEgA4QJ
FnwbaAKFGy4PVw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:54 2025 by rpki-client