Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: IYxQtvimjbyiKLnA7CBjfqDeCadnVz6GdckNV2/Cf0o=
Subject key identifier: 1C:4B:2B:4B:5A:01:D8:97:AA:DF:79:47:3E:B8:78:C5:A9:DB:07:88
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 0196BCA479C139D12AC309F64F11177E1C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0AF1
Signing time: Sun 11 May 2025 00:00:17 +0000
Manifest this update: Sun 11 May 2025 00:00:17 +0000
Manifest next update: Mon 12 May 2025 00:00:17 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: HbLjHpJhR3mlck46JPftPwAXzIMN+9ln8jvXUUCs9xM=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:79:c1:39:d1:2a:c3:09:f6:4f:11:17:7e:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: May 11 00:00:17 2025 GMT
Not After : May 12 00:00:17 2025 GMT
Subject: CN=1c4b2b4b5a01d897aadf79473eb878c5a9db0788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:9f:16:5e:57:38:86:9d:da:d2:e1:60:22:
0b:f2:b8:d4:7a:b3:a9:28:ca:5e:24:e0:7b:1d:66:
bf:78:2c:7f:c1:f6:c8:e4:af:61:0d:49:95:1e:f9:
42:63:6d:2b:9d:3a:55:e7:cf:2a:87:3c:71:09:f5:
28:cb:98:97:4c:aa:ca:c7:be:fa:ca:bc:c4:c4:2e:
b2:b6:bd:db:54:dd:1b:d8:cf:14:5d:db:67:2c:fb:
e6:a4:40:d2:68:fd:c7:84:f3:6b:87:bd:53:c1:cc:
9d:58:77:73:8f:34:83:3f:cb:53:dd:ff:f3:ef:e9:
66:e8:0e:4b:55:23:09:93:9e:4c:7f:55:b7:59:f5:
a2:3d:e0:68:4b:83:d8:fc:d9:39:c4:f5:31:e8:91:
ee:43:0a:83:6c:30:3e:5c:49:57:49:90:29:cf:28:
48:28:f5:ce:69:9e:fa:e0:d8:ad:47:0d:52:fe:fd:
f8:3f:84:fc:26:9e:9b:55:81:ae:4d:79:29:c2:fe:
48:33:a0:15:a7:5a:00:2a:cb:32:4e:2e:21:75:66:
02:db:a5:ba:3e:05:07:73:a6:d2:23:d1:90:63:f8:
0a:dc:78:93:df:4e:70:81:16:d6:4c:41:59:a3:f7:
6b:4f:76:9a:ec:1e:da:47:37:9f:ff:c3:c1:62:fc:
eb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4B:2B:4B:5A:01:D8:97:AA:DF:79:47:3E:B8:78:C5:A9:DB:07:88
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d7:92:40:f2:29:89:19:14:07:91:24:9c:41:32:f9:b9:38:
cf:a3:5b:db:86:25:5c:12:ff:68:bd:69:d9:ce:fc:06:40:ce:
4f:84:87:bb:40:13:e5:ce:96:fc:af:86:b8:a5:98:0c:be:53:
af:e9:dd:66:b5:48:88:5e:f8:af:e3:16:6b:94:cc:a5:77:2b:
50:d8:d0:8b:60:e9:6e:69:af:97:c0:e1:e4:43:ba:45:af:dd:
19:ea:e5:88:25:17:1e:92:d1:4f:e9:95:5b:8f:97:8c:fb:51:
3a:ec:ce:cd:59:e5:91:38:ae:05:54:e1:46:ea:8a:29:be:17:
1e:dd:6c:b3:f5:74:d5:ac:79:14:11:ad:be:3b:20:0c:08:ab:
d3:20:7f:e2:b3:72:8b:0e:7c:9b:b7:aa:8b:78:57:19:85:bc:
44:23:81:4a:ed:7c:9f:4e:f3:de:06:85:9b:d2:40:16:9d:20:
c3:0e:be:e5:d8:ed:7d:3e:7c:81:2b:19:c2:d7:a4:ae:f3:24:
7f:e5:39:80:e0:9e:5c:43:c8:a3:9b:ac:04:42:c3:6b:9c:a9:
38:1b:83:3b:a4:9b:20:89:e6:1c:01:3f:06:e2:f3:af:4a:60:
fa:6f:f8:a3:42:c8:82:47:09:a3:28:b0:ab:3f:11:9b:6b:20:
55:54:84:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8pHnBOdEqwwn2TxEXfhw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjUwNTExMDAwMDE3WhcNMjUwNTEyMDAwMDE3WjAzMTEwLwYDVQQD
EygxYzRiMmI0YjVhMDFkODk3YWFkZjc5NDczZWI4NzhjNWE5ZGIwNzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwryfFl5XOIad2tLhYCIL8rjUerOp
KMpeJOB7HWa/eCx/wfbI5K9hDUmVHvlCY20rnTpV588qhzxxCfUoy5iXTKrKx776
yrzExC6ytr3bVN0b2M8UXdtnLPvmpEDSaP3HhPNrh71TwcydWHdzjzSDP8tT3f/z
7+lm6A5LVSMJk55Mf1W3WfWiPeBoS4PY/Nk5xPUx6JHuQwqDbDA+XElXSZApzyhI
KPXOaZ764NitRw1S/v34P4T8Jp6bVYGuTXkpwv5IM6AVp1oAKssyTi4hdWYC26W6
PgUHc6bSI9GQY/gK3HiT305wgRbWTEFZo/drT3aa7B7aRzef/8PBYvzrGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxLK0taAdiXqt95Rz64eMWp2weIMB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9eSQPIp
iRkUB5EknEEy+bk4z6Nb24YlXBL/aL1p2c78BkDOT4SHu0AT5c6W/K+GuKWYDL5T
r+ndZrVIiF74r+MWa5TMpXcrUNjQi2Dpbmmvl8Dh5EO6Ra/dGerliCUXHpLRT+mV
W4+XjPtROuzOzVnlkTiuBVThRuqKKb4XHt1ss/V01ax5FBGtvjsgDAir0yB/4rNy
iw58m7eqi3hXGYW8RCOBSu18n07z3gaFm9JAFp0gww6+5djtfT58gSsZwtekrvMk
f+U5gOCeXEPIo5usBELDa5ypOBuDO6SbIInmHAE/BuLzr0pg+m/4o0LIgkcJoyiw
qz8Rm2sgVVSECw==
-----END CERTIFICATE-----
Generated at Sun May 11 06:20:28 2025 by rpki-client