Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: eR2DN0jsaYbee58PLKeZKYt2jZh/flXU/2fiSKwPaXs=
Subject key identifier: 32:F9:33:58:37:36:07:A6:BA:EA:DD:91:E6:C4:2A:5B:D2:57:16:10
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0196BD4972C33DB88D6841C8F4579BC92E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 12A1
Signing time: Sun 11 May 2025 03:00:29 +0000
Manifest this update: Sun 11 May 2025 03:00:29 +0000
Manifest next update: Mon 12 May 2025 03:00:29 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: rTxy8Q7xCnZGfS5mNkVo9/bKMPeq7TZ+dX6h1sQMqqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:72:c3:3d:b8:8d:68:41:c8:f4:57:9b:c9:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: May 11 03:00:29 2025 GMT
Not After : May 12 03:00:29 2025 GMT
Subject: CN=32f93358373607a6baeadd91e6c42a5bd2571610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:c9:67:c5:e6:e2:51:87:d8:57:47:5b:05:
3c:31:db:82:81:5a:c9:a9:f4:ac:29:a5:43:c6:e1:
0a:84:07:f7:76:bb:fd:df:61:bb:aa:d3:b4:ef:84:
ee:bb:50:19:34:c3:cb:da:02:ef:1b:08:b6:00:b1:
ef:b9:8c:8a:ae:d4:b8:d0:73:d2:33:1f:4e:cb:1b:
d1:88:e4:dd:ac:ba:9c:04:b8:7f:9d:26:ac:37:99:
68:ba:9c:60:73:2b:25:82:71:20:1e:5c:8c:79:66:
07:64:5c:01:77:bb:a6:c2:af:8f:4d:b6:b3:2a:c5:
96:08:94:78:df:34:f1:94:ba:5c:3f:24:2c:47:f9:
61:be:5a:04:d4:ce:fe:b0:90:04:db:03:a1:30:07:
18:9c:b4:8b:3e:14:39:39:7d:89:6d:63:67:15:e9:
25:ad:e4:b2:bb:4f:13:fc:4a:93:19:20:e9:95:ab:
93:fb:7f:fa:cf:83:03:1e:b4:f7:9c:49:68:12:b3:
d1:5a:72:48:70:5f:bf:6e:52:9a:00:85:99:f1:ff:
9d:ea:19:6c:d0:3a:cc:8a:e8:ce:ca:a5:6f:f0:ca:
15:ae:02:b0:cf:da:ec:c2:07:34:96:08:e6:4b:a9:
99:8a:94:8c:28:b2:de:6b:b6:01:2a:cb:e5:d5:a7:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:33:58:37:36:07:A6:BA:EA:DD:91:E6:C4:2A:5B:D2:57:16:10
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:cb:c0:9f:3a:c4:4f:77:c1:b5:91:80:7c:9c:d5:e4:80:
dc:7a:fd:0a:b5:23:b5:5d:d6:e0:a4:85:48:de:df:9b:f5:66:
d3:c7:15:e2:6d:dd:7a:82:45:81:71:39:3b:ae:7a:ff:7c:cd:
1d:ee:8b:f1:74:24:ac:7a:01:b3:9b:9b:3a:b1:09:10:50:0b:
9e:c8:a4:e2:01:18:60:f0:7e:5f:40:78:11:cb:6f:c6:1d:01:
e7:26:36:da:ef:76:74:36:b6:38:0f:6d:24:f3:5a:f2:4a:a2:
9e:02:09:d5:41:20:d5:33:17:de:7c:22:12:23:19:ad:a8:7a:
e9:5f:ea:8b:27:6f:1b:dd:1b:ed:dd:fe:05:f9:b3:35:3c:01:
8d:f3:54:73:d3:16:90:05:41:ab:99:fa:27:99:90:78:18:bf:
4b:2f:bb:76:ee:3b:9b:0c:b1:1f:66:e2:f0:cf:79:2e:f0:4e:
bb:44:2b:3e:ad:a5:06:8a:b6:29:23:5c:72:74:1f:1e:59:5b:
76:cc:91:8d:5a:e1:50:d2:d2:3c:3d:53:8e:82:1e:5f:85:f8:
50:db:40:17:90:c1:12:f2:57:2b:ef:01:03:23:54:55:5b:1e:
c2:f4:78:c5:cc:6f:3d:54:da:32:4f:8a:be:e9:34:fc:a9:20:
93:c7:9c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SXLDPbiNaEHI9FebyS4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0
NWRiYzgwHhcNMjUwNTExMDMwMDI5WhcNMjUwNTEyMDMwMDI5WjAzMTEwLwYDVQQD
EygzMmY5MzM1ODM3MzYwN2E2YmFlYWRkOTFlNmM0MmE1YmQyNTcxNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvznJZ8Xm4lGH2FdHWwU8MduCgVrJ
qfSsKaVDxuEKhAf3drv932G7qtO074Tuu1AZNMPL2gLvGwi2ALHvuYyKrtS40HPS
Mx9OyxvRiOTdrLqcBLh/nSasN5loupxgcyslgnEgHlyMeWYHZFwBd7umwq+PTbaz
KsWWCJR43zTxlLpcPyQsR/lhvloE1M7+sJAE2wOhMAcYnLSLPhQ5OX2JbWNnFekl
reSyu08T/EqTGSDplauT+3/6z4MDHrT3nEloErPRWnJIcF+/blKaAIWZ8f+d6hls
0DrMiujOyqVv8MoVrgKwz9rswgc0lgjmS6mZipSMKLLea7YBKsvl1acAjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDL5M1g3NgemuurdkebEKlvSVxYQMB8GA1UdIwQY
MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt
NGViMjY5NWE4NjhkLzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk
LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1zLwJ86
xE93wbWRgHyc1eSA3Hr9CrUjtV3W4KSFSN7fm/Vm08cV4m3deoJFgXE5O656/3zN
He6L8XQkrHoBs5ubOrEJEFALnsik4gEYYPB+X0B4Ectvxh0B5yY22u92dDa2OA9t
JPNa8kqingIJ1UEg1TMX3nwiEiMZrah66V/qiydvG90b7d3+BfmzNTwBjfNUc9MW
kAVBq5n6J5mQeBi/Sy+7du47mwyxH2bi8M95LvBOu0QrPq2lBoq2KSNccnQfHllb
dsyRjVrhUNLSPD1TjoIeX4X4UNtAF5DBEvJXK+8BAyNUVVsewvR4xcxvPVTaMk+K
vuk0/Kkgk8ecLQ==
-----END CERTIFICATE-----
Generated at Sun May 11 09:03:44 2025 by rpki-client