Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: iV1vcFt1y/c5fhmBgZUyDCRDRoYOcpL02xbBnQTGJ8U=
Subject key identifier: 2A:A0:AA:B2:2E:4E:D2:8B:A2:10:89:63:AA:DA:2F:48:B5:4D:AE:D3
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 0196BAED390B270726B788EBD82E9BA3FA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 1240
Signing time: Sat 10 May 2025 16:00:30 +0000
Manifest this update: Sat 10 May 2025 16:00:30 +0000
Manifest next update: Sun 11 May 2025 16:00:30 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: stI0okeVZz0f4dYPKbwc4/Kn4ANcCo7M0T3uwgDyZK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:39:0b:27:07:26:b7:88:eb:d8:2e:9b:a3:fa:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: May 10 16:00:30 2025 GMT
Not After : May 11 16:00:30 2025 GMT
Subject: CN=2aa0aab22e4ed28ba2108963aada2f48b54daed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:4b:ee:bd:6f:8e:7e:b1:5d:71:11:9c:2d:
f5:c4:aa:60:af:90:34:c8:00:c6:f1:6b:76:41:61:
a9:72:68:0b:4e:74:c6:9a:89:ae:4f:fa:69:85:7f:
ac:f0:16:81:8f:63:72:3d:df:bd:d6:e4:b7:ef:ac:
29:e5:eb:84:24:c3:94:2c:63:84:4e:0e:1c:12:eb:
90:11:70:15:b8:f2:18:0f:4a:9f:3e:21:af:2f:27:
a5:ee:ab:26:fe:8b:5a:17:d7:45:d4:a1:78:66:4e:
9c:2f:f6:ec:16:cf:16:38:14:d5:6d:b0:5d:8f:a9:
a0:2e:b5:03:0b:ec:8f:98:7d:5a:ae:39:47:08:95:
dd:0f:a0:ed:ee:3c:74:62:fe:ed:c4:75:e0:93:9d:
82:67:b6:e4:c4:e1:ea:2d:a9:c2:0a:a1:06:15:7c:
32:4d:b9:25:a0:e4:1d:01:01:fc:ef:f1:bf:e8:bb:
80:45:31:fe:62:69:c6:f7:99:57:7b:28:46:e5:23:
59:24:ec:fe:13:91:7a:45:d5:24:91:5c:b7:72:ea:
3c:5b:d5:2b:4a:a5:c6:a2:2f:47:20:26:79:26:0d:
dc:ad:cd:b0:2b:14:bd:53:22:01:c4:88:30:82:11:
96:de:7f:c0:63:e5:8a:f1:48:b8:af:d7:df:b8:61:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A0:AA:B2:2E:4E:D2:8B:A2:10:89:63:AA:DA:2F:48:B5:4D:AE:D3
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b9:ed:87:f9:43:3b:5b:db:fb:6c:7b:6f:d0:1f:80:f1:1a:
c5:74:d0:97:fd:4e:95:df:9d:0e:da:bb:e4:de:8a:78:b3:3f:
2e:82:1a:a3:84:96:d1:59:6b:64:d1:41:60:b9:89:91:b8:29:
bd:b5:15:cb:6b:24:a4:98:9b:27:95:6d:9f:6f:01:32:49:7d:
fe:e0:60:d1:7a:b6:26:d2:f1:51:82:f6:02:ea:85:2f:08:d8:
9d:db:fc:af:bd:bc:b3:5e:cf:0b:62:9e:5a:f5:8c:69:e0:6d:
c9:8f:39:76:1a:4d:98:2b:03:fc:5d:d9:2d:e8:d2:f9:82:01:
11:bd:ab:8f:c4:37:c5:77:c6:ce:a4:58:71:d6:b6:50:41:2d:
b7:74:85:46:df:27:7d:0d:21:e9:73:79:ca:a4:da:1a:48:bf:
20:d3:71:40:f2:8d:78:d4:08:a4:8c:17:0e:dc:c3:9c:33:eb:
5b:49:df:db:6b:b8:fb:34:68:2f:9d:12:d6:75:c0:22:05:63:
1b:98:f4:9b:9a:5e:b3:39:df:b3:14:bc:a6:84:3e:ce:dc:71:
1b:43:70:b9:3c:23:fe:71:a9:85:27:f2:2a:0d:8e:50:90:ae:
92:42:8c:9b:c0:23:98:a9:a9:55:62:ec:9f:4e:f3:41:26:dc:
ab:21:58:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa67TkLJwcmt4jr2C6bo/qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZmZlNjRmNDJhOWYwNGI5ZmQ2Y2Q3NTgzNzJhMWRiNWNk
OGIxOTEwHhcNMjUwNTEwMTYwMDMwWhcNMjUwNTExMTYwMDMwWjAzMTEwLwYDVQQD
EygyYWEwYWFiMjJlNGVkMjhiYTIxMDg5NjNhYWRhMmY0OGI1NGRhZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIdL7r1vjn6xXXERnC31xKpgr5A0
yADG8Wt2QWGpcmgLTnTGmomuT/pphX+s8BaBj2NyPd+91uS376wp5euEJMOULGOE
Tg4cEuuQEXAVuPIYD0qfPiGvLyel7qsm/otaF9dF1KF4Zk6cL/bsFs8WOBTVbbBd
j6mgLrUDC+yPmH1arjlHCJXdD6Dt7jx0Yv7txHXgk52CZ7bkxOHqLanCCqEGFXwy
TbkloOQdAQH87/G/6LuARTH+YmnG95lXeyhG5SNZJOz+E5F6RdUkkVy3cuo8W9Ur
SqXGoi9HICZ5Jg3crc2wKxS9UyIBxIgwghGW3n/AY+WK8Ui4r9ffuGHU1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqgqrIuTtKLohCJY6raL0i1Ta7TMB8GA1UdIwQY
MBaAFMz/5k9CqfBLn9bNdYNyodtc2LGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5Mjct
OWQyZTQyZjdmOWFjLzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNjRhYjUtZGU5NS00MjU5LTg5MjctOWQyZTQyZjdmOWFj
LzEvelBfbVQwS3A4RXVmMXMxMWczS2gyMXpZc1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbnth/lD
O1vb+2x7b9AfgPEaxXTQl/1Old+dDtq75N6KeLM/LoIao4SW0VlrZNFBYLmJkbgp
vbUVy2skpJibJ5Vtn28BMkl9/uBg0Xq2JtLxUYL2AuqFLwjYndv8r728s17PC2Ke
WvWMaeBtyY85dhpNmCsD/F3ZLejS+YIBEb2rj8Q3xXfGzqRYcda2UEEtt3SFRt8n
fQ0h6XN5yqTaGki/INNxQPKNeNQIpIwXDtzDnDPrW0nf22u4+zRoL50S1nXAIgVj
G5j0m5pesznfsxS8poQ+ztxxG0NwuTwj/nGphSfyKg2OUJCukkKMm8AjmKmpVWLs
n07zQSbcqyFYjQ==
-----END CERTIFICATE-----
Generated at Sun May 11 02:06:42 2025 by rpki-client