Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: MIX90Cja2ImW5e6nO+ok1bjMGFi/DS0b83BVS++E5Fk=
Subject key identifier: 8C:C3:D1:D8:5B:04:02:22:A2:46:3F:94:BA:7A:64:9C:C8:EC:41:44
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 0196C4273080E1750928A9F80A02E6855EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 11:00:24 +0000
Manifest this update: Mon 12 May 2025 11:00:24 +0000
Manifest next update: Tue 13 May 2025 11:00:24 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: vBzVmYtcDgWVs8naUdHISmij3jH/8Qjq1EwvPsxniLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:30:80:e1:75:09:28:a9:f8:0a:02:e6:85:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: May 12 11:00:24 2025 GMT
Not After : May 13 11:00:24 2025 GMT
Subject: CN=8cc3d1d85b040222a2463f94ba7a649cc8ec4144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:2d:bb:ad:c3:31:d3:b7:ba:5c:6a:c3:86:
36:6a:f4:0d:fb:54:71:34:3e:f0:61:e6:f0:c3:58:
61:54:35:c3:f9:d9:b6:e0:b4:0e:60:84:e8:86:fd:
b7:c5:dc:a3:79:76:47:bb:12:ed:24:14:39:dd:29:
4c:ca:ce:dd:b9:05:43:0a:5e:83:6c:fd:a8:a8:43:
0a:da:d3:22:57:b6:dd:f9:16:ce:44:a2:bd:c8:6b:
e7:09:80:1a:ed:5a:11:dd:f5:e7:66:f9:8f:f7:34:
dc:f0:cf:16:f4:56:34:60:9d:d2:a6:e6:de:f0:24:
fe:9c:c8:1c:c9:5d:25:e2:bf:6d:ac:8b:b0:e6:42:
df:78:41:6c:fb:b5:0c:45:e1:49:6c:99:8a:7c:c5:
a1:11:46:17:ef:a1:b1:4d:23:f6:d3:20:61:25:ac:
99:c7:ca:fd:11:2b:8b:a1:9a:af:aa:66:5b:b7:05:
41:7c:d0:09:ae:b2:c2:11:97:bb:a8:d0:00:54:1b:
1f:4a:25:b3:fd:77:38:48:44:3a:b5:d5:e5:ed:d0:
33:4c:f1:98:d4:af:9f:ff:a7:f2:34:6b:2d:71:f9:
09:b4:a0:65:50:5b:ab:08:3c:cc:f3:95:f2:0b:19:
a2:67:11:39:17:5e:05:5e:92:45:e3:ef:b9:d7:e9:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:D1:D8:5B:04:02:22:A2:46:3F:94:BA:7A:64:9C:C8:EC:41:44
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c3:d8:34:2a:dc:99:29:13:25:a2:1f:08:2c:93:b7:03:f7:
c0:9f:f2:c1:d5:74:aa:f9:cd:4d:0a:48:42:24:3f:70:f1:a5:
fb:ca:dc:02:71:f5:b1:cf:71:ba:98:bf:52:2b:58:3f:34:d3:
f3:4d:93:14:f8:8b:fc:c0:a3:42:4b:70:0c:53:67:57:09:18:
24:07:a1:af:4e:26:7d:77:c2:69:99:ff:ba:a9:07:02:42:e1:
cd:95:aa:eb:e1:00:f7:4f:51:97:5b:d8:aa:c2:50:65:15:96:
68:d9:f6:92:ed:a5:b6:de:b1:65:1b:5e:c4:c6:7c:fa:ff:c1:
f1:8d:ff:c1:9b:64:08:36:29:b3:31:29:c4:8a:09:87:6b:8b:
1a:e2:ae:d7:0a:98:76:2b:59:06:6b:7c:82:6e:28:fd:c6:e8:
e6:01:68:fb:f0:be:59:d3:fc:c7:a7:7d:6b:5d:df:84:e5:27:
ef:44:1b:d3:92:23:3a:e8:53:df:db:e8:8b:5c:f7:6f:db:8a:
00:b0:ab:81:24:3d:37:40:df:3c:5e:de:a2:5f:1c:d2:3e:88:
8e:60:f8:8b:94:20:b1:28:13:f0:10:e4:0b:ee:82:1b:4c:42:
e2:9a:f3:90:95:0f:fb:0d:81:7e:9a:2a:6d:35:c1:00:c2:09:
38:5d:e0:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJzCA4XUJKKn4CgLmhV65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh
OTA4YTYwHhcNMjUwNTEyMTEwMDI0WhcNMjUwNTEzMTEwMDI0WjAzMTEwLwYDVQQD
Eyg4Y2MzZDFkODViMDQwMjIyYTI0NjNmOTRiYTdhNjQ5Y2M4ZWM0MTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwktu63DMdO3ulxqw4Y2avQN+1Rx
ND7wYebww1hhVDXD+dm24LQOYITohv23xdyjeXZHuxLtJBQ53SlMys7duQVDCl6D
bP2oqEMK2tMiV7bd+RbORKK9yGvnCYAa7VoR3fXnZvmP9zTc8M8W9FY0YJ3Spube
8CT+nMgcyV0l4r9trIuw5kLfeEFs+7UMReFJbJmKfMWhEUYX76GxTSP20yBhJayZ
x8r9ESuLoZqvqmZbtwVBfNAJrrLCEZe7qNAAVBsfSiWz/Xc4SEQ6tdXl7dAzTPGY
1K+f/6fyNGstcfkJtKBlUFurCDzM85XyCxmiZxE5F14FXpJF4++51+ljuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzD0dhbBAIiokY/lLp6ZJzI7EFEMB8GA1UdIwQY
MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt
MzdlODBkYWI5MzAyLzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy
LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8PYNCrc
mSkTJaIfCCyTtwP3wJ/ywdV0qvnNTQpIQiQ/cPGl+8rcAnH1sc9xupi/UitYPzTT
802TFPiL/MCjQktwDFNnVwkYJAehr04mfXfCaZn/uqkHAkLhzZWq6+EA909Rl1vY
qsJQZRWWaNn2ku2ltt6xZRtexMZ8+v/B8Y3/wZtkCDYpszEpxIoJh2uLGuKu1wqY
ditZBmt8gm4o/cbo5gFo+/C+WdP8x6d9a13fhOUn70Qb05IjOuhT39voi1z3b9uK
ALCrgSQ9N0DfPF7eol8c0j6IjmD4i5QgsSgT8BDkC+6CG0xC4przkJUP+w2Bfpoq
bTXBAMIJOF3gvQ==
-----END CERTIFICATE-----
Generated at Mon May 12 17:46:30 2025 by rpki-client