Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: i2E184rGbI6xzi7lEhBV7tYR5jdWsFA7+bZ3LLYsdnU=
Subject key identifier: DB:C0:8B:81:F1:FD:B6:48:A0:71:21:CE:EF:E0:D9:E1:E9:0F:7E:4D
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0196C8DFCA9A8A53F926D5A7AB3FEE8E66DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 13FA
Signing time: Tue 13 May 2025 09:00:31 +0000
Manifest this update: Tue 13 May 2025 09:00:31 +0000
Manifest next update: Wed 14 May 2025 09:00:31 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: lOVT2eTkM2gq3ymq4jyDrfFXqwOg3sT93dUgbgHEn8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:ca:9a:8a:53:f9:26:d5:a7:ab:3f:ee:8e:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: May 13 09:00:31 2025 GMT
Not After : May 14 09:00:31 2025 GMT
Subject: CN=dbc08b81f1fdb648a07121ceefe0d9e1e90f7e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:e2:c0:cb:42:63:24:0c:4e:85:ca:30:bb:
ae:e6:4c:c2:48:f8:5b:32:bc:d2:72:2d:5c:40:04:
6a:cf:fb:08:c9:49:04:db:1a:8f:fd:31:75:71:4d:
50:85:9d:85:e5:db:59:c7:7c:d2:01:ab:8b:fd:39:
ac:f0:b0:20:65:d0:67:06:63:46:86:84:29:ba:57:
3d:52:bf:92:13:bb:2a:ba:1d:d2:f1:ba:19:e7:b5:
05:02:da:06:57:d8:8d:9c:1a:ab:e6:bd:5c:14:d6:
7f:0a:07:90:b4:80:ad:f6:84:8c:26:af:be:c5:e2:
17:b5:76:4a:ed:09:86:e3:7c:cb:86:3c:46:2d:5b:
2d:d2:09:5d:29:13:e1:ab:64:9a:0d:c5:44:63:48:
60:77:81:f1:09:1a:8e:6d:48:2f:56:b4:50:1a:b1:
9b:38:29:53:72:8c:b8:33:29:44:a1:ec:88:ba:ba:
be:44:b3:b9:4d:4b:22:ba:cb:fa:15:96:f7:3d:1a:
f3:15:36:1b:89:81:2b:23:1f:56:8f:ae:6e:61:49:
3b:11:40:a0:3d:9e:9e:f5:bc:6e:08:9b:3f:d2:17:
59:96:0f:aa:f3:3d:10:1b:6f:fa:d3:77:31:0a:ed:
c3:2f:bd:d9:28:61:04:a5:46:3d:a7:d2:a9:c8:08:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C0:8B:81:F1:FD:B6:48:A0:71:21:CE:EF:E0:D9:E1:E9:0F:7E:4D
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:39:c9:db:5f:e2:1c:96:77:d2:2d:47:6c:cd:41:ea:3d:1f:
39:d5:aa:18:a6:02:56:e7:cd:9c:65:e1:1c:c0:13:fe:1e:9c:
3f:94:c3:2e:84:0b:5d:e4:34:d5:35:f6:f4:c2:f3:9c:f3:8a:
0a:5c:70:c9:0a:b3:d9:3c:d7:32:85:b7:31:ec:5e:b3:82:68:
c4:71:87:62:c9:ec:b3:37:fe:b0:7c:06:4d:29:47:cd:9e:a7:
08:ce:39:23:7b:36:93:ec:3f:93:e3:bc:ec:ee:70:b5:f8:4a:
b8:2b:e6:61:26:b5:09:53:e9:c9:0d:a7:99:db:3a:0c:f4:93:
ca:fb:00:b6:1d:46:02:45:3a:fd:1a:b7:a5:a8:c1:02:02:a0:
b5:a8:3b:a4:b2:c8:38:f2:ee:7b:b5:e5:fb:42:71:40:89:6d:
b7:3e:b0:96:79:f8:7d:e8:7c:31:44:bd:66:e7:43:f5:84:0e:
ac:46:29:07:c6:f3:98:66:df:6b:c6:2a:ef:ad:59:d5:7e:1e:
45:81:bd:ea:d1:19:42:33:c3:be:0e:21:de:e0:b6:94:1d:67:
72:51:78:2d:23:cc:2f:02:5f:05:a9:20:14:b4:1f:17:1d:6d:
be:d3:40:1b:a5:b2:86:b3:06:51:1d:99:e9:3b:6b:3d:68:c7:
48:56:7e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI38qailP5JtWnqz/ujmbcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl
MmUxMmUwHhcNMjUwNTEzMDkwMDMxWhcNMjUwNTE0MDkwMDMxWjAzMTEwLwYDVQQD
EyhkYmMwOGI4MWYxZmRiNjQ4YTA3MTIxY2VlZmUwZDllMWU5MGY3ZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FniwMtCYyQMToXKMLuu5kzCSPhb
MrzSci1cQARqz/sIyUkE2xqP/TF1cU1QhZ2F5dtZx3zSAauL/Tms8LAgZdBnBmNG
hoQpulc9Ur+SE7squh3S8boZ57UFAtoGV9iNnBqr5r1cFNZ/CgeQtICt9oSMJq++
xeIXtXZK7QmG43zLhjxGLVst0gldKRPhq2SaDcVEY0hgd4HxCRqObUgvVrRQGrGb
OClTcoy4MylEoeyIurq+RLO5TUsiusv6FZb3PRrzFTYbiYErIx9Wj65uYUk7EUCg
PZ6e9bxuCJs/0hdZlg+q8z0QG2/603cxCu3DL73ZKGEEpUY9p9KpyAjLewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvAi4Hx/bZIoHEhzu/g2eHpD35NMB8GA1UdIwQY
MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt
NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex
LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDnJ21/i
HJZ30i1HbM1B6j0fOdWqGKYCVufNnGXhHMAT/h6cP5TDLoQLXeQ01TX29MLznPOK
ClxwyQqz2TzXMoW3Mexes4JoxHGHYsnsszf+sHwGTSlHzZ6nCM45I3s2k+w/k+O8
7O5wtfhKuCvmYSa1CVPpyQ2nmds6DPSTyvsAth1GAkU6/Rq3pajBAgKgtag7pLLI
OPLue7Xl+0JxQIlttz6wlnn4feh8MUS9ZudD9YQOrEYpB8bzmGbfa8Yq761Z1X4e
RYG96tEZQjPDvg4h3uC2lB1nclF4LSPMLwJfBakgFLQfFx1tvtNAG6WyhrMGUR2Z
6TtrPWjHSFZ+DA==
-----END CERTIFICATE-----
Generated at Tue May 13 13:34:59 2025 by rpki-client