Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: YyYCjT9dt/JPrdLLqXTm6odtjHi8FK15TtiddA1WtT8=
Subject key identifier: 21:8B:95:D7:DC:50:27:91:9E:0A:9F:AA:17:7F:8E:6E:FB:8D:A0:44
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 0196C1CB0A335F99A3E78878F6437AD039BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: EB
Signing time: Mon 12 May 2025 00:00:31 +0000
Manifest this update: Mon 12 May 2025 00:00:31 +0000
Manifest next update: Tue 13 May 2025 00:00:31 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: BMuVfc4C5V117REwcHtEB3Zg/NntEEu6A6kW/jdJwI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:0a:33:5f:99:a3:e7:88:78:f6:43:7a:d0:39:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: May 12 00:00:31 2025 GMT
Not After : May 13 00:00:31 2025 GMT
Subject: CN=218b95d7dc5027919e0a9faa177f8e6efb8da044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:15:56:78:79:31:e8:b4:bf:24:1f:e9:7f:
46:eb:da:ae:12:d4:a6:27:ed:83:a1:a9:02:1e:e6:
24:8d:ec:11:20:bd:23:03:df:5c:a0:40:d1:ba:5c:
8d:d9:46:6a:52:96:de:f8:bc:e3:43:95:33:c0:8d:
e7:35:49:0c:47:71:ad:81:43:9d:9c:8f:9a:ae:ee:
70:24:3f:ec:97:81:df:a4:89:c4:e6:3d:cb:bf:74:
82:de:41:20:6e:b1:dc:69:2e:8d:a0:ec:17:28:9a:
d1:cc:48:5e:72:6a:2f:38:7c:56:c1:5c:72:f7:c1:
28:f3:47:a5:29:d2:2e:18:a3:bb:55:99:ed:fe:e2:
14:8b:31:d5:10:70:90:df:e5:99:4c:3e:b8:34:9e:
f6:c1:80:ad:b9:ed:1f:08:28:a4:61:02:ac:80:a3:
97:03:c9:66:84:63:0e:7d:9d:23:da:b3:85:78:dc:
be:a5:f5:72:38:9d:c4:5e:fd:24:b2:b7:a8:0d:c3:
ff:9c:5f:ff:8f:ad:f7:b6:52:63:cb:54:48:b5:b8:
a2:99:72:7e:bb:4c:65:a4:99:30:57:4a:0f:80:0d:
25:95:f6:0a:6b:c7:67:7a:e0:db:00:27:b5:51:b6:
e7:ca:0f:0c:0c:f9:7f:02:5b:66:8c:43:7e:ad:fe:
37:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8B:95:D7:DC:50:27:91:9E:0A:9F:AA:17:7F:8E:6E:FB:8D:A0:44
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:9b:fb:09:a1:2f:21:38:ed:26:d6:5e:e3:f5:cc:f2:fd:
e9:61:66:3b:89:7c:89:1f:ed:0d:53:c8:69:49:4e:33:be:a4:
6e:05:cb:bf:22:32:1a:dd:d2:a0:06:cc:12:26:8b:eb:04:96:
6c:e7:34:d5:52:96:f5:a6:fd:a3:20:65:56:74:4a:7a:ca:b6:
71:73:28:fd:dd:f1:67:9a:4d:63:86:58:21:17:a4:e4:70:9f:
ca:12:db:dc:fe:25:b3:43:b8:68:d0:e9:a4:cd:01:c7:48:1b:
d2:53:53:39:fd:35:4a:8b:a3:bc:e7:51:97:e6:5e:1d:a0:6f:
e1:93:23:0a:e5:a4:db:60:d5:74:3e:37:12:36:3b:5d:cd:0e:
74:4d:36:14:bb:19:12:a8:e7:53:8b:9c:f4:ff:e7:2d:80:00:
c9:73:f6:08:77:49:50:0e:e6:67:65:fb:b0:d5:7c:79:4b:4f:
36:f9:47:86:40:ae:b7:b8:da:5c:ba:d2:84:fa:b6:44:79:21:
18:52:2c:22:fe:f1:7a:ef:75:fc:a1:55:bf:a7:bd:7c:e0:e0:
c0:88:2c:e6:f3:a5:f4:50:a8:1c:93:aa:51:2b:40:5b:00:7b:
ce:71:38:53:0f:4d:5f:bf:db:6e:04:83:81:71:00:99:cb:59:
92:97:7f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBywozX5mj54h49kN60Dm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj
NGU4MzIwHhcNMjUwNTEyMDAwMDMxWhcNMjUwNTEzMDAwMDMxWjAzMTEwLwYDVQQD
EygyMThiOTVkN2RjNTAyNzkxOWUwYTlmYWExNzdmOGU2ZWZiOGRhMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuUVVnh5Mei0vyQf6X9G69quEtSm
J+2DoakCHuYkjewRIL0jA99coEDRulyN2UZqUpbe+LzjQ5UzwI3nNUkMR3GtgUOd
nI+aru5wJD/sl4HfpInE5j3Lv3SC3kEgbrHcaS6NoOwXKJrRzEhecmovOHxWwVxy
98Eo80elKdIuGKO7VZnt/uIUizHVEHCQ3+WZTD64NJ72wYCtue0fCCikYQKsgKOX
A8lmhGMOfZ0j2rOFeNy+pfVyOJ3EXv0ksreoDcP/nF//j633tlJjy1RItbiimXJ+
u0xlpJkwV0oPgA0llfYKa8dneuDbACe1Ubbnyg8MDPl/AltmjEN+rf43GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGLldfcUCeRngqfqhd/jm77jaBEMB8GA1UdIwQY
MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt
NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz
LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwmb+wmh
LyE47SbWXuP1zPL96WFmO4l8iR/tDVPIaUlOM76kbgXLvyIyGt3SoAbMEiaL6wSW
bOc01VKW9ab9oyBlVnRKesq2cXMo/d3xZ5pNY4ZYIRek5HCfyhLb3P4ls0O4aNDp
pM0Bx0gb0lNTOf01SoujvOdRl+ZeHaBv4ZMjCuWk22DVdD43EjY7Xc0OdE02FLsZ
EqjnU4uc9P/nLYAAyXP2CHdJUA7mZ2X7sNV8eUtPNvlHhkCut7jaXLrShPq2RHkh
GFIsIv7xeu91/KFVv6e9fODgwIgs5vOl9FCoHJOqUStAWwB7znE4Uw9NX7/bbgSD
gXEAmctZkpd/pQ==
-----END CERTIFICATE-----
Generated at Mon May 12 05:27:25 2025 by rpki-client