Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: Z66FJvt7f0bGMYLgivfmzNQaDmmEWClHfWr9LfA7zts=
Subject key identifier: FE:4C:BC:DF:73:7A:DB:6B:D8:7E:41:E5:B6:D9:71:EA:FE:16:0A:29
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0196C1260A1BF6A05BF7F8080C7A0D104396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 012C
Signing time: Sun 11 May 2025 21:00:17 +0000
Manifest this update: Sun 11 May 2025 21:00:17 +0000
Manifest next update: Mon 12 May 2025 21:00:17 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: 4xLAT3qh8YB59mcMwiiMnLZ4qvNyBpdMwk00PqOYN7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:0a:1b:f6:a0:5b:f7:f8:08:0c:7a:0d:10:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: May 11 21:00:17 2025 GMT
Not After : May 12 21:00:17 2025 GMT
Subject: CN=fe4cbcdf737adb6bd87e41e5b6d971eafe160a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:a6:25:35:6c:ff:03:fc:27:fa:b8:e2:a2:
a8:a7:89:25:e3:64:d1:7f:64:cd:df:72:b0:b9:b6:
a1:3b:eb:08:d3:5b:dd:c0:6a:64:8e:ef:84:25:e7:
f4:f9:a2:77:54:b8:6a:9b:ca:0d:9a:29:da:9e:bc:
fd:3d:f2:81:64:ff:c3:06:52:3c:76:cc:f8:57:09:
4d:c0:b0:a8:66:e6:18:f3:29:3a:18:60:c3:19:45:
ac:e5:a5:25:5a:e2:d5:8d:77:7f:5b:46:c5:29:d4:
ff:de:4e:0a:fc:b3:3d:de:77:db:44:24:9e:96:fe:
86:15:83:d7:92:52:66:24:8d:c9:29:c5:46:69:69:
83:2b:90:e9:07:20:a9:4e:1d:ee:b5:c2:48:db:49:
56:ed:ce:6c:a8:1b:4d:11:96:34:98:f5:9f:90:55:
cb:43:9c:db:23:a4:ba:d0:0b:99:7b:da:31:20:98:
2a:80:b5:11:73:29:b9:ff:8e:42:c3:65:89:0a:cc:
02:25:b3:d8:56:15:fa:5e:5d:d4:1a:cd:79:0a:a3:
5c:ac:b7:23:30:26:35:08:a1:01:7f:3d:02:c8:81:
b7:ca:3e:3d:b7:e0:5d:01:42:d4:ec:f6:65:13:8b:
f5:04:bc:81:bc:d9:88:56:64:38:2e:f3:87:38:f4:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4C:BC:DF:73:7A:DB:6B:D8:7E:41:E5:B6:D9:71:EA:FE:16:0A:29
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:20:03:1e:df:69:81:86:13:a4:24:16:90:78:31:d5:1c:0f:
42:44:55:6f:a5:95:8a:10:52:49:41:b3:c4:90:9d:db:d0:76:
93:cc:77:b4:7e:3f:c0:55:f0:1f:49:b3:1a:e2:f4:37:91:9e:
63:d1:7d:42:f5:19:a1:21:29:dd:b7:75:92:d9:56:a0:e8:13:
bf:b9:ce:68:d8:a4:81:8f:d9:29:7e:57:a9:9f:be:41:79:22:
a8:cf:8c:d4:a0:81:cd:4f:45:9d:46:5f:4e:0e:4a:ff:46:4f:
bb:bc:e0:1c:a0:bc:22:b4:83:f2:30:13:20:71:19:01:f4:a0:
67:9f:80:6c:c0:7e:96:4f:87:39:b9:4e:13:7d:21:ee:d9:ac:
45:4c:3d:b0:5f:87:b4:96:37:fa:af:67:e7:45:0f:ab:bf:85:
4f:e0:ea:29:2c:d3:df:04:0f:7f:f9:23:af:c0:03:59:8c:7b:
43:a1:b5:ec:f9:20:51:9f:a9:09:d5:ce:27:d7:22:6d:50:70:
59:fa:20:99:b7:2a:93:eb:69:44:c6:1a:69:f2:b7:d1:fa:df:
e2:5f:4f:05:a4:d0:00:52:b3:23:07:11:86:c5:6e:69:3f:22:
b4:5d:f9:40:54:60:77:6f:d6:16:19:99:07:b1:09:09:9e:72:
56:b3:06:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJgob9qBb9/gIDHoNEEOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YzBiYzU5NGFmODExNzUzZGZjMTE2YWY0NTliMWI4NzQ0
NzE0ODkwHhcNMjUwNTExMjEwMDE3WhcNMjUwNTEyMjEwMDE3WjAzMTEwLwYDVQQD
EyhmZTRjYmNkZjczN2FkYjZiZDg3ZTQxZTViNmQ5NzFlYWZlMTYwYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qmJTVs/wP8J/q44qKop4kl42TR
f2TN33KwubahO+sI01vdwGpkju+EJef0+aJ3VLhqm8oNminanrz9PfKBZP/DBlI8
dsz4VwlNwLCoZuYY8yk6GGDDGUWs5aUlWuLVjXd/W0bFKdT/3k4K/LM93nfbRCSe
lv6GFYPXklJmJI3JKcVGaWmDK5DpByCpTh3utcJI20lW7c5sqBtNEZY0mPWfkFXL
Q5zbI6S60AuZe9oxIJgqgLURcym5/45Cw2WJCswCJbPYVhX6Xl3UGs15CqNcrLcj
MCY1CKEBfz0CyIG3yj49t+BdAULU7PZlE4v1BLyBvNmIVmQ4LvOHOPQ+JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5MvN9zettr2H5B5bbZcer+FgopMB8GA1UdIwQY
MBaAFGTAvFlK+BF1PfwRavRZsbh0RxSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjIt
NDQzMTNiNDNlNTk0LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNDhiZmQtNzk3ZC00N2E5LThhNjItNDQzMTNiNDNlNTk0
LzEvWk1DOFdVcjRFWFU5X0JGcTlGbXh1SFJIRklrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0iADHt9p
gYYTpCQWkHgx1RwPQkRVb6WVihBSSUGzxJCd29B2k8x3tH4/wFXwH0mzGuL0N5Ge
Y9F9QvUZoSEp3bd1ktlWoOgTv7nOaNikgY/ZKX5XqZ++QXkiqM+M1KCBzU9FnUZf
Tg5K/0ZPu7zgHKC8IrSD8jATIHEZAfSgZ5+AbMB+lk+HOblOE30h7tmsRUw9sF+H
tJY3+q9n50UPq7+FT+DqKSzT3wQPf/kjr8ADWYx7Q6G17PkgUZ+pCdXOJ9cibVBw
Wfogmbcqk+tpRMYaafK30frf4l9PBaTQAFKzIwcRhsVuaT8itF35QFRgd2/WFhmZ
B7EJCZ5yVrMGNA==
-----END CERTIFICATE-----
Generated at Mon May 12 00:08:13 2025 by rpki-client