Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: XruDoOn7QAjStMbFhYbpcNwdmCOMARoPbUBGj3Snhok=
Subject key identifier: E0:A3:09:52:93:DE:9C:00:4C:DE:39:77:05:22:A7:58:D3:60:A7:5C
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 0196BA120CACF322A8AB77F2C4EC8E65E01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 086D
Signing time: Sat 10 May 2025 12:01:07 +0000
Manifest this update: Sat 10 May 2025 12:01:07 +0000
Manifest next update: Sun 11 May 2025 12:01:07 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: qAEpu82yrM6zr+LOzLUw1AnvY4IajT7Z8FaseVvMik4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:0c:ac:f3:22:a8:ab:77:f2:c4:ec:8e:65:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: May 10 12:01:07 2025 GMT
Not After : May 11 12:01:07 2025 GMT
Subject: CN=e0a3095293de9c004cde39770522a758d360a75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:76:c2:83:c0:d5:0d:33:b6:0a:e4:92:56:
fd:53:59:87:41:d7:03:2e:9e:d5:4a:d8:06:ba:e8:
36:c9:21:3a:93:55:90:34:45:53:84:05:c4:db:d9:
15:c4:f1:43:fd:a5:32:db:ce:0a:67:18:54:b3:23:
4e:69:53:03:59:35:fa:24:16:6d:f9:e2:cb:e7:9e:
da:2a:bb:6f:17:92:09:e9:3e:f1:24:6d:74:1e:fc:
af:35:ac:38:a7:9f:79:bb:7f:c4:c6:e7:6a:b1:d9:
58:7f:d9:4f:cf:66:53:61:27:d0:29:88:0e:d1:f7:
3d:81:e9:3f:44:4b:7c:64:df:02:e7:7d:82:ee:1a:
f5:23:f9:8d:85:c4:b6:59:e6:f0:5d:89:b4:0a:ce:
fe:03:60:e1:72:04:83:a5:03:bb:0b:70:12:78:88:
bb:e6:e4:dd:2f:16:49:e5:51:73:f1:1e:d6:40:11:
3d:1f:b1:04:40:d3:df:8c:a5:5c:3e:47:c2:31:78:
56:1b:93:3c:e0:c7:99:3e:e0:87:d9:c6:43:9d:eb:
ca:1c:53:7d:e2:a3:e8:54:1d:e4:85:f1:ab:b4:bf:
fa:5a:e1:55:5e:5a:1e:8b:8b:36:0f:8a:ef:ad:5f:
c9:ef:cc:ac:ad:c1:a0:c1:51:ef:2b:86:39:15:ad:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:09:52:93:DE:9C:00:4C:DE:39:77:05:22:A7:58:D3:60:A7:5C
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:74:e9:43:ac:9a:d3:dd:6b:6d:25:84:82:af:e7:6d:0e:71:
66:06:5d:93:97:6c:a9:8d:ab:f2:42:05:ff:e8:e0:ce:90:94:
a4:f5:2b:bd:8f:07:da:4f:75:a3:18:ba:18:f6:4b:5e:77:b9:
dd:91:c8:4d:9d:70:0e:9a:50:41:b0:2e:e2:0e:61:85:32:50:
fe:3d:00:d6:01:4c:d3:ae:ec:d9:93:d6:20:dd:05:be:8d:7c:
e3:17:c1:bd:87:fd:81:c9:80:de:69:c0:25:9e:8b:8f:e5:0a:
6f:e3:db:7b:93:f7:b3:bf:c9:86:12:02:20:78:53:30:40:98:
5d:2a:74:2e:9c:0d:c5:05:69:a9:4c:bb:68:81:e0:7e:62:ca:
4f:4e:1d:dd:04:99:57:43:19:ca:39:92:c7:0c:af:77:eb:16:
27:9f:2c:7f:42:df:37:d3:3d:01:28:4a:c7:33:94:eb:20:05:
f5:48:78:43:f1:c1:4b:bd:08:9b:7a:d3:49:8d:5b:cd:2e:0b:
ed:9a:a4:a0:b1:5c:87:f5:38:af:69:53:1b:e5:a3:f8:ae:39:
e8:2d:bc:61:88:f8:ef:36:02:6c:f8:a2:b4:2c:2b:30:e4:13:
72:05:3c:69:8e:c2:2c:d4:88:85:3d:d5:c1:c8:52:e0:6c:08:
eb:b8:f7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6Egys8yKoq3fyxOyOZeAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MjM5YTUxMDg0ZjFiMmI1YzY4NDY0M2NhYzE0NjIxN2M3
OWY4ZDEwHhcNMjUwNTEwMTIwMTA3WhcNMjUwNTExMTIwMTA3WjAzMTEwLwYDVQQD
EyhlMGEzMDk1MjkzZGU5YzAwNGNkZTM5NzcwNTIyYTc1OGQzNjBhNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3It2woPA1Q0ztgrkklb9U1mHQdcD
Lp7VStgGuug2ySE6k1WQNEVThAXE29kVxPFD/aUy284KZxhUsyNOaVMDWTX6JBZt
+eLL557aKrtvF5IJ6T7xJG10HvyvNaw4p595u3/ExudqsdlYf9lPz2ZTYSfQKYgO
0fc9gek/REt8ZN8C532C7hr1I/mNhcS2WebwXYm0Cs7+A2DhcgSDpQO7C3ASeIi7
5uTdLxZJ5VFz8R7WQBE9H7EEQNPfjKVcPkfCMXhWG5M84MeZPuCH2cZDnevKHFN9
4qPoVB3khfGrtL/6WuFVXloei4s2D4rvrV/J78ysrcGgwVHvK4Y5Fa2/GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCjCVKT3pwATN45dwUip1jTYKdcMB8GA1UdIwQY
MBaAFGQjmlEITxsrXGhGQ8rBRiF8efjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYt
NGU5MzA1Y2FmMWEzLzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8zMWRjMTAtNTY2My00NTU1LWE4MDYtNGU5MzA1Y2FmMWEz
LzEvWkNPYVVRaFBHeXRjYUVaRHlzRkdJWHg1LU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHTpQ6ya
091rbSWEgq/nbQ5xZgZdk5dsqY2r8kIF/+jgzpCUpPUrvY8H2k91oxi6GPZLXne5
3ZHITZ1wDppQQbAu4g5hhTJQ/j0A1gFM067s2ZPWIN0Fvo184xfBvYf9gcmA3mnA
JZ6Lj+UKb+Pbe5P3s7/JhhICIHhTMECYXSp0LpwNxQVpqUy7aIHgfmLKT04d3QSZ
V0MZyjmSxwyvd+sWJ58sf0LfN9M9AShKxzOU6yAF9Uh4Q/HBS70Im3rTSY1bzS4L
7ZqkoLFch/U4r2lTG+Wj+K456C28YYj47zYCbPiitCwrMOQTcgU8aY7CLNSIhT3V
wchS4GwI67j3ow==
-----END CERTIFICATE-----
Generated at Sat May 10 19:33:09 2025 by rpki-client