Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: UkdxfmtkbUbcAYSVgOyXBEovYTSWW3r+tV3yURbi9RA=
Subject key identifier: 94:41:02:4E:D1:2B:73:99:B4:47:09:8A:7E:98:1E:E3:38:E6:06:E3
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 0196CB7392CED865083DBAFA60410A7D610E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 1202
Signing time: Tue 13 May 2025 21:01:11 +0000
Manifest this update: Tue 13 May 2025 21:01:11 +0000
Manifest next update: Wed 14 May 2025 21:01:11 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: Y8spNl824FZZpMnC2vRhtojrKmnrYcLJTjmWdsY3UWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:92:ce:d8:65:08:3d:ba:fa:60:41:0a:7d:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: May 13 21:01:11 2025 GMT
Not After : May 14 21:01:11 2025 GMT
Subject: CN=9441024ed12b7399b447098a7e981ee338e606e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:b4:5e:3a:30:97:cb:11:bc:0e:45:f2:a2:
64:92:2a:4d:b9:b4:7c:51:dd:f1:d5:97:a6:bc:bf:
56:e3:70:fa:94:6c:2b:8c:52:8b:f8:de:6c:63:02:
49:fa:8d:6b:09:cf:74:ef:57:4e:4c:94:dd:7e:7c:
da:ef:d2:06:6f:3a:77:0b:20:17:c4:96:09:1d:02:
de:80:2a:6c:ac:3c:49:6e:b7:fa:3a:cf:fd:0a:0e:
8e:57:26:26:10:d2:2c:18:cb:b9:42:6a:a7:a8:a6:
1e:09:34:b1:c3:2b:bd:5b:d8:10:43:a9:74:af:0c:
6e:ca:a4:ce:e5:24:dc:db:f4:b7:6b:6b:89:48:d1:
1a:47:6a:83:16:6f:e0:4e:d3:2f:81:f8:16:28:bb:
af:d2:a3:d5:15:17:72:6e:6c:cd:85:86:40:9a:51:
2b:9a:c8:1f:c7:27:f3:2a:fe:75:9d:55:de:db:40:
b1:92:16:c3:0b:dd:eb:4b:a6:14:39:7f:c4:86:eb:
9b:06:ae:e1:9e:55:0c:2e:66:92:dd:2b:16:00:98:
1e:99:42:79:33:99:49:21:88:42:2d:03:a5:ec:fa:
f8:3c:a5:30:7a:8e:5e:c3:67:2a:ed:66:28:15:d4:
ad:9a:60:8f:22:f0:43:37:df:26:63:83:fc:db:a5:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:02:4E:D1:2B:73:99:B4:47:09:8A:7E:98:1E:E3:38:E6:06:E3
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:d9:9b:80:cb:1f:1f:30:47:22:a0:99:d4:ee:f7:2b:bc:
66:c5:eb:b8:6e:4e:49:03:c0:44:d5:19:40:45:1d:a0:51:83:
8e:74:54:60:cf:c2:10:f3:57:ee:06:28:94:84:15:a3:6d:84:
c4:01:8d:fa:91:ed:7f:7c:fe:17:88:34:ee:98:17:27:e6:d3:
17:20:52:bd:03:43:62:40:6d:ce:10:a0:31:f8:fa:fb:c2:21:
18:56:4a:be:a1:cb:33:04:52:27:67:49:9f:51:7c:6a:ab:db:
a7:03:b4:31:ed:2f:6d:24:83:34:cd:d7:5f:75:05:e1:52:42:
14:f8:87:b9:1e:9a:20:22:79:b1:d9:9b:75:e7:1f:d3:3c:17:
ab:a0:c1:88:0f:bf:58:5d:5e:01:8a:56:2b:7c:52:9f:a2:4b:
3f:78:f8:74:d4:1b:6a:1a:8b:56:bd:99:7c:c3:e5:5f:5c:57:
ad:68:e1:56:51:fd:47:c6:3f:c0:24:40:79:3a:eb:d5:f1:2f:
8c:4a:15:54:ce:e8:bd:10:0b:20:50:e2:b4:b5:b0:df:3c:bb:
13:70:ea:86:a7:33:8c:61:f6:e9:a9:3d:ec:8c:60:f5:bb:0c:
84:2b:cf:67:5c:6f:13:86:6c:10:79:9f:67:ff:db:a4:eb:01:
ab:ad:0b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLc5LO2GUIPbr6YEEKfWEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU5YzhhMWU2NGZjNjRmZjY2NmJkOTIxOWRjZTE3NDM3
M2NhZjIwHhcNMjUwNTEzMjEwMTExWhcNMjUwNTE0MjEwMTExWjAzMTEwLwYDVQQD
Eyg5NDQxMDI0ZWQxMmI3Mzk5YjQ0NzA5OGE3ZTk4MWVlMzM4ZTYwNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrq0Xjowl8sRvA5F8qJkkipNubR8
Ud3x1ZemvL9W43D6lGwrjFKL+N5sYwJJ+o1rCc9071dOTJTdfnza79IGbzp3CyAX
xJYJHQLegCpsrDxJbrf6Os/9Cg6OVyYmENIsGMu5QmqnqKYeCTSxwyu9W9gQQ6l0
rwxuyqTO5STc2/S3a2uJSNEaR2qDFm/gTtMvgfgWKLuv0qPVFRdybmzNhYZAmlEr
msgfxyfzKv51nVXe20CxkhbDC93rS6YUOX/EhuubBq7hnlUMLmaS3SsWAJgemUJ5
M5lJIYhCLQOl7Pr4PKUweo5ew2cq7WYoFdStmmCPIvBDN98mY4P826U8hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRBAk7RK3OZtEcJin6YHuM45gbjMB8GA1UdIwQY
MBaAFMwVnIoeZPxk/2Zr2SGdzhdDc8ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYt
NjQ4MjA0MWE4MjQ2LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zZTMxMDktY2VjMy00NmJiLWI4ZDYtNjQ4MjA0MWE4MjQ2
LzEvekJXY2loNWtfR1RfWm12WklaM09GME56eXZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQDZm4DL
Hx8wRyKgmdTu9yu8ZsXruG5OSQPARNUZQEUdoFGDjnRUYM/CEPNX7gYolIQVo22E
xAGN+pHtf3z+F4g07pgXJ+bTFyBSvQNDYkBtzhCgMfj6+8IhGFZKvqHLMwRSJ2dJ
n1F8aqvbpwO0Me0vbSSDNM3XX3UF4VJCFPiHuR6aICJ5sdmbdecf0zwXq6DBiA+/
WF1eAYpWK3xSn6JLP3j4dNQbahqLVr2ZfMPlX1xXrWjhVlH9R8Y/wCRAeTrr1fEv
jEoVVM7ovRALIFDitLWw3zy7E3DqhqczjGH26ak97Ixg9bsMhCvPZ1xvE4ZsEHmf
Z//bpOsBq60LNw==
-----END CERTIFICATE-----
Generated at Wed May 14 01:22:29 2025 by rpki-client