Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
File: zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft (raw, json)
Hash identifier: VhQOiSXxXirQf8j3CfMGQtASGGXUoBqvBErio0PPlEQ=
Subject key identifier: 76:A4:0E:46:27:8C:E2:D6:85:FD:68:27:1F:CB:06:BB:62:50:E8:99
Authority key identifier: CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
Certificate issuer: /CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Certificate serial: 0196C729103C653A009DB588B1090D7AA3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
Manifest number: 099E
Signing time: Tue 13 May 2025 01:01:19 +0000
Manifest this update: Tue 13 May 2025 01:01:19 +0000
Manifest next update: Wed 14 May 2025 01:01:19 +0000
Files and hashes: 1: cin36IkcVIQMWPjd44GqXKLQuWQ.roa (hash: OwdXlpnQGHCbD8dLSbClcbklFBICkGpHdsNc3VSAeno=)
2: xJ066uLw5CBis8gyryLoKkqRKLI.roa (hash: WiY+5aheCWzt8o2WuBVa4kjZbzzagp24qPWKgNtl8EM=)
3: zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl (hash: n+CdlpQ2gqXkNYDHnSyDLY+w+h8qc8zLyz279EOZBpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:10:3c:65:3a:00:9d:b5:88:b1:09:0d:7a:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e7c46b81ddab2744270c5bad986af86df4f60
Validity
Not Before: May 13 01:01:19 2025 GMT
Not After : May 14 01:01:19 2025 GMT
Subject: CN=76a40e46278ce2d685fd68271fcb06bb6250e899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:71:24:ca:b3:72:1e:3a:5a:5a:87:fe:6f:e5:
af:aa:39:a0:43:28:8a:e7:77:97:ec:eb:f1:60:31:
b7:da:1f:34:67:f2:e2:e7:43:a4:76:de:dc:97:b1:
17:8e:21:5f:f1:6a:81:37:dc:85:61:cc:20:11:0c:
46:bf:01:c5:76:be:b9:f8:ea:df:11:71:ee:55:4e:
67:bd:18:26:98:66:e7:89:1e:bc:2c:ea:6a:8c:22:
ea:fb:38:37:79:10:11:63:79:db:4a:85:bc:46:97:
dd:1c:a0:81:28:6d:4a:19:19:19:6e:97:e1:91:26:
1d:ff:5a:a4:de:f9:aa:cb:39:b3:00:81:7a:a2:bc:
e1:63:98:78:c3:1e:43:e7:8a:0a:8d:9d:42:3f:3b:
a6:69:3e:3b:c9:81:ab:dd:3c:bf:6d:53:fe:9e:40:
e9:ed:69:2b:ec:86:9f:3c:07:ca:08:e4:2c:cf:a3:
51:f6:77:88:aa:3f:04:c1:1f:b7:ed:2e:ca:9b:9b:
16:ae:0e:b5:91:c0:1f:a5:68:10:33:03:30:e5:f3:
02:7c:8f:ab:15:e0:7d:d2:c8:ff:bb:84:a7:88:aa:
05:51:45:6a:1b:06:75:eb:8c:99:67:5e:9c:b8:b3:
eb:62:eb:bd:e7:3a:37:89:b5:a1:8d:94:10:38:56:
50:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:0E:46:27:8C:E2:D6:85:FD:68:27:1F:CB:06:BB:62:50:E8:99
X509v3 Authority Key Identifier:
keyid:CC:1E:7C:46:B8:1D:DA:B2:74:42:70:C5:BA:D9:86:AF:86:DF:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB58Rrgd2rJ0QnDFutmGr4bfT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dd3f15-bbac-49d4-9435-399b7a3b20cf/1/zB58Rrgd2rJ0QnDFutmGr4bfT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d6:f5:f3:4e:6f:75:a0:f3:81:1e:14:97:58:3d:9a:7d:81:
e4:e6:8b:0e:db:ed:a4:44:2a:a3:e2:75:ba:37:26:2b:aa:92:
e3:8b:a6:a9:4c:d6:1c:89:77:06:a4:30:98:5c:8e:77:79:d3:
3e:8c:04:18:3d:f7:d2:dd:d2:20:7e:c1:9c:c0:13:1b:8e:d9:
00:b1:25:f6:84:8d:4f:ff:36:b6:17:fd:70:56:12:06:bd:29:
be:c0:4a:e5:24:09:ce:b1:90:f8:c7:5d:7c:5e:12:9c:56:73:
93:39:52:1f:92:16:37:65:1b:a4:bd:a5:3d:63:fd:ca:c3:34:
aa:a1:c5:a8:95:d8:8c:13:d6:aa:4f:e1:ce:cc:05:82:cc:10:
08:b7:22:39:39:d3:a4:63:32:75:5d:06:a3:85:ca:51:43:31:
77:e1:ae:ff:d3:0b:c9:57:27:ac:47:4a:df:1f:50:94:ce:8b:
a0:a1:0c:0c:2e:b4:22:0a:f9:bf:90:12:ff:64:81:55:48:78:
36:22:54:06:63:bd:d6:5f:74:6d:08:c0:86:2c:bc:b4:ea:24:
cb:2e:3c:d3:28:27:e0:85:73:92:d7:5d:53:a3:98:8e:f5:f3:
ed:03:94:a4:c4:58:65:c0:ea:2e:72:dd:46:67:a0:4d:1a:e7:
ad:ac:03:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKRA8ZToAnbWIsQkNeqOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3YzQ2YjgxZGRhYjI3NDQyNzBjNWJhZDk4NmFmODZk
ZjRmNjAwHhcNMjUwNTEzMDEwMTE5WhcNMjUwNTE0MDEwMTE5WjAzMTEwLwYDVQQD
Eyg3NmE0MGU0NjI3OGNlMmQ2ODVmZDY4MjcxZmNiMDZiYjYyNTBlODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HEkyrNyHjpaWof+b+WvqjmgQyiK
53eX7OvxYDG32h80Z/Li50Okdt7cl7EXjiFf8WqBN9yFYcwgEQxGvwHFdr65+Orf
EXHuVU5nvRgmmGbniR68LOpqjCLq+zg3eRARY3nbSoW8RpfdHKCBKG1KGRkZbpfh
kSYd/1qk3vmqyzmzAIF6orzhY5h4wx5D54oKjZ1CPzumaT47yYGr3Ty/bVP+nkDp
7Wkr7IafPAfKCOQsz6NR9neIqj8EwR+37S7Km5sWrg61kcAfpWgQMwMw5fMCfI+r
FeB90sj/u4SniKoFUUVqGwZ164yZZ16cuLPrYuu95zo3ibWhjZQQOFZQqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHakDkYnjOLWhf1oJx/LBrtiUOiZMB8GA1UdIwQY
MBaAFMwefEa4HdqydEJwxbrZhq+G309gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUt
Mzk5YjdhM2IyMGNmLzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kZDNmMTUtYmJhYy00OWQ0LTk0MzUtMzk5YjdhM2IyMGNm
LzEvekI1OFJyZ2QyckowUW5ERnV0bUdyNGJmVDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStb1805v
daDzgR4Ul1g9mn2B5OaLDtvtpEQqo+J1ujcmK6qS44umqUzWHIl3BqQwmFyOd3nT
PowEGD330t3SIH7BnMATG47ZALEl9oSNT/82thf9cFYSBr0pvsBK5SQJzrGQ+Mdd
fF4SnFZzkzlSH5IWN2UbpL2lPWP9ysM0qqHFqJXYjBPWqk/hzswFgswQCLciOTnT
pGMydV0Go4XKUUMxd+Gu/9MLyVcnrEdK3x9QlM6LoKEMDC60Igr5v5AS/2SBVUh4
NiJUBmO91l90bQjAhiy8tOokyy480ygn4IVzktddU6OYjvXz7QOUpMRYZcDqLnLd
RmegTRrnrawDoA==
-----END CERTIFICATE-----
Generated at Tue May 13 11:49:08 2025 by rpki-client