Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: CRz71/PDklwT0Q4WgX+ODR7FXyq+S0zSYn2Ij4CVziQ=
Subject key identifier: 85:CA:FB:C2:17:05:7C:D1:13:D4:CB:AB:2C:E4:FB:34:36:1D:AB:0B
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 0196C34B631C0ED6E017304ECF8C8FF1BBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 07F9
Signing time: Mon 12 May 2025 07:00:19 +0000
Manifest this update: Mon 12 May 2025 07:00:19 +0000
Manifest next update: Tue 13 May 2025 07:00:19 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: zPYhRU4Ya1aaNX9WsW6s90CuhQVPS06dGa68UwPHcvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:63:1c:0e:d6:e0:17:30:4e:cf:8c:8f:f1:bb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: May 12 07:00:19 2025 GMT
Not After : May 13 07:00:19 2025 GMT
Subject: CN=85cafbc217057cd113d4cbab2ce4fb34361dab0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:c7:19:c8:6c:b9:b9:68:0e:79:05:fc:64:
48:c7:e3:8c:71:cb:09:d7:0d:f6:fb:5f:a6:2e:aa:
fb:d6:a7:b3:7c:8a:c9:f1:35:ab:82:44:34:3b:d5:
d3:ff:1c:b1:ae:f7:46:db:6c:fa:8e:0c:e0:08:ae:
35:17:67:a7:a5:30:f7:91:a2:52:be:fc:70:cb:57:
49:ed:01:98:02:85:6d:b0:a1:68:46:2e:f2:36:a5:
74:21:3b:f2:ad:85:f4:92:93:80:af:0d:ea:28:2e:
dc:0d:6c:50:49:17:51:83:cb:3d:f3:7f:68:fe:90:
fc:09:6d:41:39:3b:35:30:ff:3b:bc:19:4f:dd:fc:
30:93:90:1d:50:7f:22:15:71:ac:63:59:a4:39:69:
28:6a:03:f6:43:c6:65:7f:ab:39:9a:de:4c:34:b5:
a2:eb:26:db:a0:b4:77:ac:3d:c2:c6:67:99:81:1d:
24:6c:ce:17:2a:72:9f:d8:8a:97:ed:84:c7:05:eb:
e3:e5:9e:47:f6:b2:b4:c8:bb:7b:78:f2:7e:45:9b:
1e:00:04:65:57:93:7a:06:90:00:b1:08:14:09:cd:
70:52:4f:42:67:82:e4:38:5d:ca:a6:c1:c7:94:af:
ca:39:2c:e5:05:be:78:72:e5:28:a6:08:cf:87:dc:
49:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CA:FB:C2:17:05:7C:D1:13:D4:CB:AB:2C:E4:FB:34:36:1D:AB:0B
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f7:87:f8:e8:45:70:f2:0b:09:f1:58:9d:b6:cb:85:0a:6f:
f2:43:07:f1:4e:77:0c:49:d7:96:f0:80:8e:b8:0c:b7:a8:8f:
46:df:bf:a2:69:45:45:58:31:c1:d5:82:be:af:3f:c7:b1:27:
0a:12:41:dd:39:79:67:3e:46:87:45:ac:28:91:d7:a7:10:a9:
d8:fd:bf:5c:f9:be:4f:d6:0e:de:76:b5:70:3e:11:82:d6:bf:
52:df:90:b9:c4:56:d8:0e:4a:e3:96:c6:42:7c:12:e9:d7:06:
cc:fc:0a:b6:34:13:47:1d:a9:45:93:1c:d5:5c:50:4c:f1:94:
e7:2a:75:0b:41:47:59:f2:57:d5:6e:ba:a9:8e:25:91:37:c8:
9f:cb:c2:de:c4:50:06:cb:81:91:e1:6f:7a:2a:a1:c7:6a:54:
ac:47:d2:f9:75:90:0e:fd:79:db:4f:0d:b8:99:7e:c6:b0:93:
a3:1d:28:f1:4a:52:20:dd:4d:aa:15:d8:d8:0a:a3:07:22:f1:
ee:0a:51:e7:e0:48:95:ae:95:83:0e:de:65:4e:18:cc:8f:c5:
f0:96:78:3c:77:12:71:b6:20:b8:55:7d:ba:c3:74:55:55:10:
54:89:80:32:6d:c3:7f:8a:b7:52:8d:33:f7:c8:12:3b:e6:38:
e6:5b:af:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS2McDtbgFzBOz4yP8bv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1
MGVmMGYwHhcNMjUwNTEyMDcwMDE5WhcNMjUwNTEzMDcwMDE5WjAzMTEwLwYDVQQD
Eyg4NWNhZmJjMjE3MDU3Y2QxMTNkNGNiYWIyY2U0ZmIzNDM2MWRhYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgrHGchsubloDnkF/GRIx+OMccsJ
1w32+1+mLqr71qezfIrJ8TWrgkQ0O9XT/xyxrvdG22z6jgzgCK41F2enpTD3kaJS
vvxwy1dJ7QGYAoVtsKFoRi7yNqV0ITvyrYX0kpOArw3qKC7cDWxQSRdRg8s9839o
/pD8CW1BOTs1MP87vBlP3fwwk5AdUH8iFXGsY1mkOWkoagP2Q8Zlf6s5mt5MNLWi
6ybboLR3rD3CxmeZgR0kbM4XKnKf2IqX7YTHBevj5Z5H9rK0yLt7ePJ+RZseAARl
V5N6BpAAsQgUCc1wUk9CZ4LkOF3KpsHHlK/KOSzlBb54cuUopgjPh9xJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXK+8IXBXzRE9TLqyzk+zQ2HasLMB8GA1UdIwQY
MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt
MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj
LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFveH+OhF
cPILCfFYnbbLhQpv8kMH8U53DEnXlvCAjrgMt6iPRt+/omlFRVgxwdWCvq8/x7En
ChJB3Tl5Zz5Gh0WsKJHXpxCp2P2/XPm+T9YO3na1cD4Rgta/Ut+QucRW2A5K45bG
QnwS6dcGzPwKtjQTRx2pRZMc1VxQTPGU5yp1C0FHWfJX1W66qY4lkTfIn8vC3sRQ
BsuBkeFveiqhx2pUrEfS+XWQDv15208NuJl+xrCTox0o8UpSIN1NqhXY2AqjByLx
7gpR5+BIla6Vgw7eZU4YzI/F8JZ4PHcScbYguFV9usN0VVUQVImAMm3Df4q3Uo0z
98gSO+Y45luvtA==
-----END CERTIFICATE-----
Generated at Mon May 12 16:51:45 2025 by rpki-client