Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: +I9AD86bbJlCYYiDTbkM2uk5YEYeqdU3pNrFIurmta0=
Subject key identifier: B0:97:31:34:AE:0A:31:8F:3E:E7:FF:92:FE:77:D8:C0:5A:25:DC:E3
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 0196C3B9BC553A7DF119DD6384231CEE612B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 09:00:51 +0000
Manifest this update: Mon 12 May 2025 09:00:51 +0000
Manifest next update: Tue 13 May 2025 09:00:51 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: Jo7jdbENCyGrFZ3jH0pzCOGxM5INBZdOA2Nwtml+zn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:bc:55:3a:7d:f1:19:dd:63:84:23:1c:ee:61:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: May 12 09:00:51 2025 GMT
Not After : May 13 09:00:51 2025 GMT
Subject: CN=b0973134ae0a318f3ee7ff92fe77d8c05a25dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:4e:bc:2d:cb:d5:f8:0e:35:16:22:47:83:
a7:dd:20:8a:f9:57:c5:43:71:f5:07:da:e4:d4:f3:
20:9b:16:d6:69:8d:43:9b:ab:aa:05:be:33:b5:3c:
ef:d6:ec:46:65:61:5b:d6:bf:40:78:51:63:d1:e4:
72:20:87:96:4d:6e:ca:60:ce:7c:d3:40:2d:25:c6:
4c:94:82:92:95:ca:fc:84:f4:b2:57:31:4e:4b:3f:
a6:40:42:95:c4:cb:1d:a3:82:53:d7:a2:8f:51:75:
ac:94:d9:04:02:de:bf:b3:5b:e9:19:82:46:26:b6:
c8:3d:e1:cc:d7:f7:84:c4:2a:54:e7:a5:7c:2d:18:
c5:e3:57:cb:8b:ae:3d:4d:d9:6e:90:88:1b:a4:cc:
0c:06:44:61:d7:0a:a7:c6:61:9f:db:db:9c:62:fb:
8e:a8:9d:1d:8a:2d:cc:4a:3d:12:88:e5:2c:c1:9b:
4c:b2:a9:88:ae:85:f1:06:d3:92:9e:b1:a0:c2:dd:
d0:30:4c:8f:b3:aa:3a:a5:1b:3e:88:2b:bb:23:17:
7c:c6:a4:ee:dc:72:1f:6f:10:d8:d5:38:f9:94:e8:
38:56:de:3b:ce:bc:42:57:e2:91:b5:44:ac:f7:aa:
cc:00:96:ff:0b:7f:0f:ec:6d:75:be:d2:3f:47:dc:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:31:34:AE:0A:31:8F:3E:E7:FF:92:FE:77:D8:C0:5A:25:DC:E3
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:16:16:98:c1:2f:ee:3c:a3:85:04:e1:46:2e:4f:d9:23:30:
dd:c9:9f:d5:33:1a:88:48:a1:d5:d4:3f:96:68:7b:64:55:c9:
50:c1:68:2a:3a:e2:93:bf:ca:b5:9c:9d:07:de:ec:88:28:b3:
25:49:4f:4a:21:95:c2:cb:65:ce:84:68:38:0a:26:d0:17:63:
da:9b:6b:6f:15:a5:19:a2:da:be:b9:a0:6a:aa:5c:11:fa:86:
f3:51:58:53:4e:fb:84:03:9a:e3:b2:a2:0e:0e:b1:5a:03:42:
74:98:d1:e0:47:33:1c:70:d5:37:fb:21:2b:b8:b0:47:e0:92:
d4:20:2e:11:8d:9b:76:85:ca:de:36:a3:79:63:9e:9e:a2:7c:
ba:00:ce:e4:93:5e:3a:0c:40:c2:ed:21:2e:5c:e9:e7:d8:14:
ec:2d:e6:30:13:32:13:53:22:79:d6:a0:53:71:df:79:89:ae:
51:3f:47:32:73:e6:aa:a4:25:5d:49:f5:3f:7a:a7:0f:38:60:
70:c0:d9:00:1b:03:9b:f8:30:48:3a:3e:6c:48:58:45:db:67:
df:15:c6:d0:32:a9:c3:f9:17:eb:32:08:9a:c9:f8:a1:68:43:
57:4a:d4:4a:9a:02:11:5e:b9:31:55:9b:a9:d4:5b:72:f3:7c:
1a:17:69:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDubxVOn3xGd1jhCMc7mErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjUwNTEyMDkwMDUxWhcNMjUwNTEzMDkwMDUxWjAzMTEwLwYDVQQD
EyhiMDk3MzEzNGFlMGEzMThmM2VlN2ZmOTJmZTc3ZDhjMDVhMjVkY2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxBOvC3L1fgONRYiR4On3SCK+VfF
Q3H1B9rk1PMgmxbWaY1Dm6uqBb4ztTzv1uxGZWFb1r9AeFFj0eRyIIeWTW7KYM58
00AtJcZMlIKSlcr8hPSyVzFOSz+mQEKVxMsdo4JT16KPUXWslNkEAt6/s1vpGYJG
JrbIPeHM1/eExCpU56V8LRjF41fLi649TdlukIgbpMwMBkRh1wqnxmGf29ucYvuO
qJ0dii3MSj0SiOUswZtMsqmIroXxBtOSnrGgwt3QMEyPs6o6pRs+iCu7Ixd8xqTu
3HIfbxDY1Tj5lOg4Vt47zrxCV+KRtUSs96rMAJb/C38P7G11vtI/R9yStQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCXMTSuCjGPPuf/kv532MBaJdzjMB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRYWmMEv
7jyjhQThRi5P2SMw3cmf1TMaiEih1dQ/lmh7ZFXJUMFoKjrik7/KtZydB97siCiz
JUlPSiGVwstlzoRoOAom0Bdj2ptrbxWlGaLavrmgaqpcEfqG81FYU077hAOa47Ki
Dg6xWgNCdJjR4EczHHDVN/shK7iwR+CS1CAuEY2bdoXK3jajeWOenqJ8ugDO5JNe
OgxAwu0hLlzp59gU7C3mMBMyE1MiedagU3HfeYmuUT9HMnPmqqQlXUn1P3qnDzhg
cMDZABsDm/gwSDo+bEhYRdtn3xXG0DKpw/kX6zIImsn4oWhDV0rUSpoCEV65MVWb
qdRbcvN8Ghdpqw==
-----END CERTIFICATE-----
Generated at Mon May 12 12:49:37 2025 by rpki-client