Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: iyWQ7bB2oZrmpJhUcGpoBIzeEmaJQJ/bedEDOsSjWKM=
Subject key identifier: D1:68:46:7B:26:5D:0E:7E:DB:CC:AF:37:4F:D7:68:9B:2F:EE:89:53
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 0196A164A8157BE681916BF6FA2E1C9E26A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 034A
Signing time: Mon 05 May 2025 17:00:50 +0000
Manifest this update: Mon 05 May 2025 17:00:50 +0000
Manifest next update: Tue 06 May 2025 17:00:50 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: r1W+l6zav+y5jFUO4IoKQMA5xaXepNapuBkkP3yCunk=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:a8:15:7b:e6:81:91:6b:f6:fa:2e:1c:9e:26:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: May 5 17:00:50 2025 GMT
Not After : May 6 17:00:50 2025 GMT
Subject: CN=d168467b265d0e7edbccaf374fd7689b2fee8953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:3f:3a:8c:23:03:bf:72:ce:b3:47:2d:d5:
44:d0:2c:74:0f:70:ce:f2:77:24:bd:d5:b3:45:bf:
5e:09:b8:0e:5e:22:72:c0:f8:58:46:e2:be:33:59:
69:41:8f:2e:64:ba:02:c6:8e:c0:9f:cb:7f:bf:d4:
b9:53:02:01:18:e8:25:28:10:b5:10:54:98:0f:bc:
fa:93:ae:25:67:c9:8c:ff:a2:04:8e:21:ed:2a:f9:
b0:90:e1:1f:d2:87:00:b0:ad:7c:7b:e6:e4:82:f8:
e6:98:3b:2d:38:20:e1:df:06:fb:3e:ac:0c:63:3c:
13:c6:86:e4:1a:6a:88:cc:37:9b:ce:6a:81:d4:59:
95:90:a0:9a:a2:94:de:79:77:f5:8b:e4:15:93:22:
fa:b5:5a:62:a5:48:4b:1c:a1:23:1a:3d:6d:bc:db:
fd:c5:75:19:4f:b2:96:38:3c:7f:6e:b1:cc:01:3d:
ee:0c:14:1f:eb:40:71:e1:cc:ec:9d:e3:7b:92:90:
4d:cc:37:33:1e:a1:46:49:69:0a:5e:60:72:70:60:
05:7c:eb:1a:b6:a6:67:20:4d:73:bc:95:15:e7:fd:
0e:cb:84:00:a5:2c:58:76:a5:44:ca:60:8d:ec:7a:
09:78:36:58:1c:20:55:64:fd:31:b0:0d:8a:ed:1a:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:68:46:7B:26:5D:0E:7E:DB:CC:AF:37:4F:D7:68:9B:2F:EE:89:53
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ac:43:67:af:4f:bb:ff:c2:1a:a4:e7:8f:f6:5c:7b:17:3f:
1d:4b:8b:0d:d2:19:0d:5d:93:47:26:f6:bf:f8:45:11:ee:e5:
53:72:b7:92:38:5b:15:c2:49:77:60:f5:0a:c1:f4:c1:5f:62:
b4:44:d5:7e:60:a3:0f:70:e6:d0:2a:db:5d:1c:07:ee:bc:51:
02:97:1a:03:c8:96:93:7b:07:7f:71:b7:0d:2b:c4:ca:b1:7b:
0d:99:aa:93:33:8e:9d:ed:a6:54:69:3a:1b:f2:d1:96:d5:ad:
c6:98:7d:ce:27:fb:74:da:1f:e8:58:c4:fb:b0:ce:c4:28:a4:
49:3c:22:bc:ae:6e:1b:2c:f9:84:91:51:28:a3:1c:09:f9:93:
6f:92:55:75:6c:d7:81:03:32:26:5d:63:18:15:c7:67:c5:0d:
aa:ff:b5:3c:cc:19:93:de:12:d9:0e:8c:6b:2d:45:2a:72:f0:
1d:1b:c7:e2:4a:8c:74:a1:2d:92:ac:ea:3b:2f:88:23:66:a0:
22:b5:09:0e:79:21:23:b1:78:4e:23:d7:8c:50:76:45:dc:05:
05:6b:7d:13:0b:43:e0:e5:b6:9b:bd:07:c0:ca:69:51:b1:a4:
0c:4c:81:c4:2c:c6:fe:1a:bb:b5:9d:ca:8b:30:6a:ee:fe:9d:
9e:c7:cf:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahZKgVe+aBkWv2+i4cniahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZmYTNmZTQwY2Y3NzA4NTFjODNhZGNhZmFmYjdhNDEw
NzY3OGYwHhcNMjUwNTA1MTcwMDUwWhcNMjUwNTA2MTcwMDUwWjAzMTEwLwYDVQQD
EyhkMTY4NDY3YjI2NWQwZTdlZGJjY2FmMzc0ZmQ3Njg5YjJmZWU4OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5g/OowjA79yzrNHLdVE0Cx0D3DO
8nckvdWzRb9eCbgOXiJywPhYRuK+M1lpQY8uZLoCxo7An8t/v9S5UwIBGOglKBC1
EFSYD7z6k64lZ8mM/6IEjiHtKvmwkOEf0ocAsK18e+bkgvjmmDstOCDh3wb7PqwM
YzwTxobkGmqIzDebzmqB1FmVkKCaopTeeXf1i+QVkyL6tVpipUhLHKEjGj1tvNv9
xXUZT7KWODx/brHMAT3uDBQf60Bx4czsneN7kpBNzDczHqFGSWkKXmBycGAFfOsa
tqZnIE1zvJUV5/0Oy4QApSxYdqVEymCN7HoJeDZYHCBVZP0xsA2K7RrZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFoRnsmXQ5+28yvN0/XaJsv7olTMB8GA1UdIwQY
MBaAFGaW+j/kDPdwhRyDrcr6+3pBB2ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQt
Y2U2OTE1YjQ3MzZmLzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQtY2U2OTE1YjQ3MzZm
LzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKxDZ69P
u//CGqTnj/Zcexc/HUuLDdIZDV2TRyb2v/hFEe7lU3K3kjhbFcJJd2D1CsH0wV9i
tETVfmCjD3Dm0CrbXRwH7rxRApcaA8iWk3sHf3G3DSvEyrF7DZmqkzOOne2mVGk6
G/LRltWtxph9zif7dNof6FjE+7DOxCikSTwivK5uGyz5hJFRKKMcCfmTb5JVdWzX
gQMyJl1jGBXHZ8UNqv+1PMwZk94S2Q6May1FKnLwHRvH4kqMdKEtkqzqOy+II2ag
IrUJDnkhI7F4TiPXjFB2RdwFBWt9EwtD4OW2m70HwMppUbGkDEyBxCzG/hq7tZ3K
izBq7v6dnsfPfg==
-----END CERTIFICATE-----
Generated at Mon May 5 20:22:38 2025 by rpki-client