Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier: /51cFd+RxWuOrEQGi0mcyYnaLaIIU44O7Zsr25+DGuo=
Subject key identifier: 52:09:26:F3:7C:DB:38:64:E4:10:77:50:6E:ED:68:0D:55:FC:53:7E
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer: /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial: 0196A2E54C3FB6730B17BA782E86EDA2F513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number: 04C0
Signing time: Tue 06 May 2025 00:00:58 +0000
Manifest this update: Tue 06 May 2025 00:00:58 +0000
Manifest next update: Wed 07 May 2025 00:00:58 +0000
Files and hashes: 1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=)
2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: uG6YV/4s3oZg8bFpVpos/2twjR0mXsl2AYDXrMb9jkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:4c:3f:b6:73:0b:17:ba:78:2e:86:ed:a2:f5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Validity
Not Before: May 6 00:00:58 2025 GMT
Not After : May 7 00:00:58 2025 GMT
Subject: CN=520926f37cdb3864e41077506eed680d55fc537e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:15:e4:76:61:1a:77:af:66:14:a9:46:e9:
4e:ce:ca:1c:83:b5:8c:a2:82:28:c3:65:ce:78:9c:
7b:b7:59:c4:98:be:d3:84:69:14:ea:68:10:6f:62:
ba:5e:c6:3c:59:41:77:97:ee:dd:ca:5d:50:a4:86:
1b:7d:71:ed:fb:13:98:13:a2:b0:7d:9f:b2:f4:c8:
0f:22:dc:fa:70:34:ed:96:c0:54:61:21:f3:c6:ce:
45:78:f7:40:08:bb:1f:3e:4d:93:1b:be:c4:27:08:
5d:20:7a:65:03:15:df:80:5d:c5:f2:74:3e:2f:9f:
c7:59:9f:1b:af:90:e5:ca:93:57:d0:b8:fd:26:3e:
27:34:1f:67:72:aa:67:5e:05:e3:b2:7f:8a:b8:60:
e9:9e:4c:e4:23:d5:5c:92:9f:6a:fc:0b:ec:95:1c:
45:eb:17:ec:da:d8:57:4c:5e:39:2b:3f:bf:a8:06:
05:72:62:d6:ed:5f:5a:33:c2:e9:a8:6a:8e:6c:b2:
45:de:d0:6a:30:fa:20:a3:c6:4b:42:60:d8:06:80:
35:5f:ba:20:e6:f3:a0:43:5b:3f:f7:af:cd:b8:ad:
53:1e:c7:b9:df:7a:cb:fa:84:63:d6:55:db:0f:9b:
9e:37:68:ef:8e:40:ae:65:6a:1f:d0:ca:1d:f5:50:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:09:26:F3:7C:DB:38:64:E4:10:77:50:6E:ED:68:0D:55:FC:53:7E
X509v3 Authority Key Identifier:
keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:25:67:43:b4:ea:db:53:d8:92:6d:9e:a8:07:02:a5:e5:24:
5b:cc:6d:7f:88:f0:29:3c:2f:9e:8e:cd:80:8a:dd:7a:c5:b5:
fd:1c:3f:fe:f9:6c:53:d9:59:f7:2d:58:76:9b:9a:ea:8f:07:
33:73:7d:ad:9b:98:3e:91:5d:61:0c:18:0b:a2:04:a1:4c:7d:
97:01:96:8e:ff:a7:22:82:f9:19:28:f5:a8:9b:8f:1d:a0:b0:
63:73:ce:10:39:6a:37:08:93:8b:5d:4c:7d:a2:4a:f6:aa:87:
df:f0:ec:1d:57:0d:0f:4b:d8:d3:04:fc:f5:25:f2:51:c8:2e:
33:ed:75:a6:f2:85:8f:8b:4d:93:d2:57:eb:21:52:27:14:63:
43:88:99:6b:83:bf:5f:8c:c7:01:3f:d0:a0:6b:4a:92:0e:79:
59:d8:57:b7:56:df:ae:c2:3a:5d:99:c9:d4:c2:a8:bd:8a:45:
79:e4:20:f3:0e:78:f8:f4:03:73:2d:dc:df:24:3a:18:42:39:
f6:7c:2c:8a:7c:6d:bb:37:e2:97:7c:c8:eb:db:9d:e5:7a:51:
fa:13:14:54:95:ea:0e:33:12:12:d5:2a:a6:8e:9f:03:fb:f9:
8a:f0:ee:37:f5:67:aa:6f:84:32:94:0a:de:99:6a:ef:84:9b:
d7:4e:85:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5Uw/tnMLF7p4LobtovUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNmM2YxOTU5NzRmMGU5MDA4NGUwZTMyN2ZmNWI2Njdl
NmZkOTAwHhcNMjUwNTA2MDAwMDU4WhcNMjUwNTA3MDAwMDU4WjAzMTEwLwYDVQQD
Eyg1MjA5MjZmMzdjZGIzODY0ZTQxMDc3NTA2ZWVkNjgwZDU1ZmM1MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVsV5HZhGnevZhSpRulOzsocg7WM
ooIow2XOeJx7t1nEmL7ThGkU6mgQb2K6XsY8WUF3l+7dyl1QpIYbfXHt+xOYE6Kw
fZ+y9MgPItz6cDTtlsBUYSHzxs5FePdACLsfPk2TG77EJwhdIHplAxXfgF3F8nQ+
L5/HWZ8br5DlypNX0Lj9Jj4nNB9ncqpnXgXjsn+KuGDpnkzkI9Vckp9q/AvslRxF
6xfs2thXTF45Kz+/qAYFcmLW7V9aM8LpqGqObLJF3tBqMPogo8ZLQmDYBoA1X7og
5vOgQ1s/96/NuK1THse533rL+oRj1lXbD5ueN2jvjkCuZWof0Mod9VDlwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIJJvN82zhk5BB3UG7taA1V/FN+MB8GA1UdIwQY
MBaAFBCD8/GVl08OkAhODjJ/9bZn5v2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUt
M2IxYzU1ZTNkZTk3LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xMWRjYTgtMjNkNC00MjRhLTg5NjUtM2IxYzU1ZTNkZTk3
LzEvRUlQejhaV1hUdzZRQ0U0T01uXzF0bWZtX1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCVnQ7Tq
21PYkm2eqAcCpeUkW8xtf4jwKTwvno7NgIrdesW1/Rw//vlsU9lZ9y1Ydpua6o8H
M3N9rZuYPpFdYQwYC6IEoUx9lwGWjv+nIoL5GSj1qJuPHaCwY3POEDlqNwiTi11M
faJK9qqH3/DsHVcND0vY0wT89SXyUcguM+11pvKFj4tNk9JX6yFSJxRjQ4iZa4O/
X4zHAT/QoGtKkg55WdhXt1bfrsI6XZnJ1MKovYpFeeQg8w54+PQDcy3c3yQ6GEI5
9nwsinxtuzfil3zI69ud5XpR+hMUVJXqDjMSEtUqpo6fA/v5ivDuN/Vnqm+EMpQK
3plq74Sb106FpA==
-----END CERTIFICATE-----
Generated at Tue May 6 03:48:15 2025 by rpki-client