Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: zD7fdyovMpPhmy7akOSZ5O8Fln3r1IUCH6yLmL983Ok=
Subject key identifier: DA:31:46:A8:C5:C9:1A:83:9A:DA:9B:73:B5:7D:BC:33:84:65:8C:8B
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 0196BB5AE968E992151AA1A03860ACCEB5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 107C
Signing time: Sat 10 May 2025 18:00:19 +0000
Manifest this update: Sat 10 May 2025 18:00:19 +0000
Manifest next update: Sun 11 May 2025 18:00:19 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: XiMBDh2wLew+OEn9V6jwbjcxJw7Na5FQemQUMyjLVMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5a:e9:68:e9:92:15:1a:a1:a0:38:60:ac:ce:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: May 10 18:00:19 2025 GMT
Not After : May 11 18:00:19 2025 GMT
Subject: CN=da3146a8c5c91a839ada9b73b57dbc3384658c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:f3:8d:c8:ff:97:aa:f6:39:0d:b8:b5:87:
4d:c2:48:9d:cb:61:9b:ac:bb:2b:7c:dd:41:4a:0d:
98:d1:dc:ea:f6:a3:a0:cd:65:7c:05:6a:bf:3b:f3:
ad:56:55:f5:55:89:73:29:c5:3b:36:6a:ef:c5:5a:
0e:7c:0e:a2:00:69:82:f0:cb:3c:35:ee:e8:11:53:
b4:01:06:57:a1:54:c6:6e:2d:17:60:2a:2c:9a:9d:
2a:82:72:a9:db:40:be:5e:98:b5:82:15:34:b2:84:
f9:d8:78:82:37:19:5c:de:61:fe:6a:1c:91:00:54:
a6:9d:91:89:b0:f0:85:00:c0:e1:d9:d2:06:8b:08:
23:90:8a:33:4f:5b:e4:77:87:b6:fa:3b:d0:81:03:
23:c3:da:79:f0:69:0c:22:c6:a9:ae:19:bd:24:6e:
7e:5b:7c:80:d7:d0:24:12:aa:42:13:f2:06:7d:ef:
8e:11:b6:1c:96:3f:30:be:54:33:ac:aa:f1:1b:4f:
49:42:98:50:62:f2:82:ba:e5:21:3e:77:32:10:71:
cf:31:80:0a:73:c4:d6:31:01:38:c3:8b:da:80:46:
68:97:26:25:d5:c7:83:5e:fa:54:ec:3f:57:2a:4e:
e7:8a:0d:cc:b4:30:61:78:ee:9c:06:e7:7c:40:0e:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:31:46:A8:C5:C9:1A:83:9A:DA:9B:73:B5:7D:BC:33:84:65:8C:8B
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:8b:1d:f1:e2:66:ce:d2:8e:f1:42:5d:a2:e1:09:17:b4:
6d:68:7a:f0:3c:0c:20:fc:5a:b7:c5:64:c5:9f:db:1b:81:08:
5b:5b:98:5e:49:56:7e:a8:b5:54:5e:94:d6:67:61:0f:25:2d:
75:20:d0:b6:76:24:68:c7:4d:5d:22:41:72:ec:9a:1a:62:c9:
6f:06:b0:f6:9a:7a:9b:6e:5f:05:e4:48:60:89:d7:cd:06:93:
8c:d1:98:af:c6:83:e8:fb:1c:f6:31:b5:12:81:ef:46:98:40:
33:b9:9e:5c:ba:59:3d:b4:2d:57:9c:72:b6:a9:b4:d4:8d:8b:
b7:cd:22:ec:53:22:1b:a4:3f:e9:8b:9d:ae:97:e4:00:e2:b9:
8d:c2:ca:89:f2:89:1d:d1:aa:72:52:a8:30:27:23:8a:3f:b1:
fa:72:5f:e8:27:57:ce:fd:76:48:0b:e5:99:4e:b9:3a:04:22:
71:7c:aa:dd:1e:cd:fa:41:09:26:25:fd:a2:3c:06:70:a1:14:
75:c7:30:62:7a:75:ac:9f:a5:39:0f:b7:d2:49:12:20:4e:e6:
9f:a0:44:15:34:f4:01:ca:73:c6:4f:c6:0f:ca:55:53:5b:5e:
ba:d6:30:e8:12:9a:9b:48:01:60:ed:a4:c5:7c:f7:e5:ab:a1:
dc:0e:20:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Wulo6ZIVGqGgOGCszrWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjUwNTEwMTgwMDE5WhcNMjUwNTExMTgwMDE5WjAzMTEwLwYDVQQD
EyhkYTMxNDZhOGM1YzkxYTgzOWFkYTliNzNiNTdkYmMzMzg0NjU4YzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxjzjcj/l6r2OQ24tYdNwkidy2Gb
rLsrfN1BSg2Y0dzq9qOgzWV8BWq/O/OtVlX1VYlzKcU7NmrvxVoOfA6iAGmC8Ms8
Ne7oEVO0AQZXoVTGbi0XYCosmp0qgnKp20C+Xpi1ghU0soT52HiCNxlc3mH+ahyR
AFSmnZGJsPCFAMDh2dIGiwgjkIozT1vkd4e2+jvQgQMjw9p58GkMIsaprhm9JG5+
W3yA19AkEqpCE/IGfe+OEbYclj8wvlQzrKrxG09JQphQYvKCuuUhPncyEHHPMYAK
c8TWMQE4w4vagEZolyYl1ceDXvpU7D9XKk7nig3MtDBheO6cBud8QA7QowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoxRqjFyRqDmtqbc7V9vDOEZYyLMB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASluLHfHi
Zs7SjvFCXaLhCRe0bWh68DwMIPxat8VkxZ/bG4EIW1uYXklWfqi1VF6U1mdhDyUt
dSDQtnYkaMdNXSJBcuyaGmLJbwaw9pp6m25fBeRIYInXzQaTjNGYr8aD6Psc9jG1
EoHvRphAM7meXLpZPbQtV5xytqm01I2Lt80i7FMiG6Q/6YudrpfkAOK5jcLKifKJ
HdGqclKoMCcjij+x+nJf6CdXzv12SAvlmU65OgQicXyq3R7N+kEJJiX9ojwGcKEU
dccwYnp1rJ+lOQ+30kkSIE7mn6BEFTT0Acpzxk/GD8pVU1teutYw6BKam0gBYO2k
xXz35auh3A4gLg==
-----END CERTIFICATE-----
Generated at Sun May 11 01:12:25 2025 by rpki-client