Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: 86/u8o6kbq06XSdC0ciB/YDKUZJPtZyWLCR62KmmYjs=
Subject key identifier: 22:00:FC:82:01:E6:E3:47:6F:A2:00:B0:82:82:92:F9:C3:F0:9C:32
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 0196C0B8B9C681A79C524A5B3CEE464201C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0849
Signing time: Sun 11 May 2025 19:00:53 +0000
Manifest this update: Sun 11 May 2025 19:00:53 +0000
Manifest next update: Mon 12 May 2025 19:00:53 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: j9U1eHvDALcZDzk04P6WXiv+HFyjRUC7aoOLscizvz8=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:b9:c6:81:a7:9c:52:4a:5b:3c:ee:46:42:01:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: May 11 19:00:53 2025 GMT
Not After : May 12 19:00:53 2025 GMT
Subject: CN=2200fc8201e6e3476fa200b0828292f9c3f09c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3c:89:b1:e1:ef:48:63:fc:f3:fb:65:52:b8:
02:60:a1:6e:eb:ef:80:99:85:21:74:1a:86:de:85:
e0:80:ae:68:11:29:c9:70:f7:c8:28:01:93:f0:45:
fe:0a:93:79:20:ed:1c:9d:ec:53:cb:6c:7c:bd:5a:
2c:ab:92:09:a2:23:8c:fe:d0:bd:84:01:dc:25:8b:
04:2d:33:f7:d1:ce:7a:df:7e:3e:e1:7b:f8:81:76:
bf:c0:13:e3:98:74:14:40:fc:89:92:3c:0f:6a:e6:
b6:6c:2f:ff:cb:11:03:c9:07:04:08:bf:b3:49:2b:
38:61:e8:db:c8:17:4c:09:66:4f:19:84:62:3b:59:
c8:92:40:ff:28:a3:8c:2a:8f:c0:d5:67:bb:6f:41:
72:86:27:ca:96:aa:e7:63:85:7d:48:f6:f9:5c:7f:
ff:76:82:07:51:c5:ed:0d:4e:85:43:68:f1:ef:cf:
15:19:71:45:42:e6:2c:37:7a:34:59:83:24:3c:07:
93:ce:ee:4f:6d:77:15:2a:09:79:4f:d8:1e:8c:39:
88:1e:af:63:ee:0e:2e:8c:e0:f4:95:f7:3c:ff:de:
d5:d9:f7:d8:34:fb:58:97:8c:0f:30:91:6f:8e:88:
30:15:de:db:de:5c:e5:36:82:9e:da:48:a3:28:79:
d0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:FC:82:01:E6:E3:47:6F:A2:00:B0:82:82:92:F9:C3:F0:9C:32
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:12:aa:55:87:29:f2:50:23:2b:b8:8e:da:47:57:b9:5f:
87:5e:48:35:c7:22:a4:c1:1b:a1:90:64:34:3a:e6:42:91:5a:
45:d4:dc:d9:26:b2:72:79:89:df:42:89:8f:41:91:6e:9f:82:
ee:0a:ba:c4:b3:43:31:b3:bf:50:24:f5:97:cc:4e:c0:38:95:
ba:87:2e:7e:25:dc:f7:66:bb:5c:9f:ec:07:e0:76:b1:18:3e:
be:15:fe:62:ac:e7:11:69:86:93:28:1b:33:03:c7:da:47:4a:
62:ae:48:fe:b4:f6:98:bf:e0:bb:47:1d:28:23:af:47:97:c4:
96:d8:8b:80:77:18:43:e8:98:e6:aa:db:b2:82:c8:de:58:9b:
8a:6b:12:52:36:52:8e:b1:81:7c:33:51:f0:c9:ee:5c:86:f5:
1c:a5:f9:fc:84:58:5a:f0:ba:dc:79:e4:d2:da:4f:43:44:fc:
a6:f9:23:76:84:5c:9f:88:c5:da:48:3d:6b:f0:c3:fa:82:3d:
83:2f:7a:57:1f:33:35:ba:1f:c8:3e:04:df:1f:78:bf:f0:bb:
df:d9:04:a6:db:cf:7f:20:9b:08:fd:68:7d:02:b2:36:cd:ef:
5a:b4:25:56:1a:15:1b:3d:45:d5:59:64:15:a0:d9:91:6d:78:
fc:73:2e:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuLnGgaecUkpbPO5GQgHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTFkMWEwMTc4MDJlNWM1N2RhNTk3ODU0NGZjNTM3NDAz
ZGE3M2EwHhcNMjUwNTExMTkwMDUzWhcNMjUwNTEyMTkwMDUzWjAzMTEwLwYDVQQD
EygyMjAwZmM4MjAxZTZlMzQ3NmZhMjAwYjA4MjgyOTJmOWMzZjA5YzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDyJseHvSGP88/tlUrgCYKFu6++A
mYUhdBqG3oXggK5oESnJcPfIKAGT8EX+CpN5IO0cnexTy2x8vVosq5IJoiOM/tC9
hAHcJYsELTP30c56334+4Xv4gXa/wBPjmHQUQPyJkjwPaua2bC//yxEDyQcECL+z
SSs4YejbyBdMCWZPGYRiO1nIkkD/KKOMKo/A1We7b0FyhifKlqrnY4V9SPb5XH//
doIHUcXtDU6FQ2jx788VGXFFQuYsN3o0WYMkPAeTzu5PbXcVKgl5T9gejDmIHq9j
7g4ujOD0lfc8/97V2ffYNPtYl4wPMJFvjogwFd7b3lzlNoKe2kijKHnQYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIA/IIB5uNHb6IAsIKCkvnD8JwyMB8GA1UdIwQY
MBaAFGah0aAXgC5cV9pZeFRPxTdAPac6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGIt
MTlmMmExZDE2MDMzLzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85MTU0OGItYmFiNS00NTRjLWI2MGItMTlmMmExZDE2MDMz
LzEvWnFIUm9CZUFMbHhYMmxsNFZFX0ZOMEE5cHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj8SqlWH
KfJQIyu4jtpHV7lfh15INccipMEboZBkNDrmQpFaRdTc2SaycnmJ30KJj0GRbp+C
7gq6xLNDMbO/UCT1l8xOwDiVuocufiXc92a7XJ/sB+B2sRg+vhX+YqznEWmGkygb
MwPH2kdKYq5I/rT2mL/gu0cdKCOvR5fEltiLgHcYQ+iY5qrbsoLI3libimsSUjZS
jrGBfDNR8MnuXIb1HKX5/IRYWvC63Hnk0tpPQ0T8pvkjdoRcn4jF2kg9a/DD+oI9
gy96Vx8zNbofyD4E3x94v/C739kEptvPfyCbCP1ofQKyNs3vWrQlVhoVGz1F1Vlk
FaDZkW14/HMujg==
-----END CERTIFICATE-----
Generated at Sun May 11 21:02:36 2025 by rpki-client