Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: LdkkbLmvx8iC/gsw3jS4k/L+kt4+eXM1hfeVJmMNVhQ=
Subject key identifier: C0:78:31:2A:98:42:6E:89:23:85:9E:40:5A:E7:B4:5E:97:E7:B6:47
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 0196AE0D3876751E486B973999F2593DC556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 04F5
Signing time: Thu 08 May 2025 04:00:23 +0000
Manifest this update: Thu 08 May 2025 04:00:23 +0000
Manifest next update: Fri 09 May 2025 04:00:23 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: wtw71App2SdzMBydgvl9mLzauyOW+HvyLBa7UOPu+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:38:76:75:1e:48:6b:97:39:99:f2:59:3d:c5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: May 8 04:00:23 2025 GMT
Not After : May 9 04:00:23 2025 GMT
Subject: CN=c078312a98426e8923859e405ae7b45e97e7b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:81:93:45:a9:64:e3:d7:0c:6d:ec:e1:5a:
f0:02:33:b4:39:60:a2:54:89:07:fe:0e:39:95:b5:
4a:e7:74:dc:e3:16:7f:c0:28:a1:be:76:59:cd:38:
b4:66:8f:f0:3c:bd:7e:75:f0:5e:b0:b1:4c:f9:82:
c2:36:b7:c1:c2:da:27:29:de:37:21:da:68:7e:df:
81:d6:54:31:eb:4c:5b:a6:80:63:70:45:9f:87:7e:
5e:1c:a3:1f:2c:de:25:44:9e:3a:6d:4f:1c:56:a8:
93:1f:4a:3d:af:0c:17:ee:c2:b1:51:49:45:e1:16:
c9:7b:03:2b:37:03:af:a6:2a:d0:0b:44:75:f7:46:
a8:9d:17:43:5a:22:d0:0c:c3:13:ad:8e:fc:1e:e8:
30:4b:e6:a1:dc:7a:0d:ed:37:94:a1:01:93:11:10:
6d:a7:39:c5:3e:61:60:5d:e3:6a:18:14:6a:63:0a:
71:fd:06:06:5c:3e:5e:3f:f2:84:bd:ca:95:22:40:
11:f3:ec:91:10:02:1f:fc:ad:a4:3d:30:1e:07:86:
ca:3c:4a:63:22:62:9c:64:f5:24:01:e6:3f:36:ca:
3e:11:8b:11:b8:ed:39:ea:e1:47:14:8b:0f:4a:0d:
ae:7e:9a:3e:83:49:34:84:06:57:03:ac:cd:e9:f6:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:31:2A:98:42:6E:89:23:85:9E:40:5A:E7:B4:5E:97:E7:B6:47
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:f0:5d:ec:e0:ef:8a:24:85:00:86:35:e6:b4:79:fc:c4:
70:8c:29:b5:d8:f8:e5:5a:09:a7:c7:de:12:93:89:52:a4:fd:
23:dc:43:60:38:1a:68:8b:f9:94:63:5d:cb:11:10:cf:c5:13:
3c:f0:4b:22:f2:e6:0f:de:59:2e:85:43:73:b2:63:57:d8:65:
c0:0b:b3:f6:66:56:bc:bd:ca:14:55:06:1f:c6:1c:8c:cd:f1:
dc:6e:1c:3c:90:d1:89:65:7b:e9:fc:43:e6:12:ab:d9:05:56:
60:27:63:44:9b:b8:92:1e:7a:99:58:3e:f6:58:28:72:23:e6:
41:8e:a7:17:05:3d:f8:20:33:eb:17:9d:13:3a:76:82:2c:5e:
f0:78:0f:2f:9f:7b:ea:a3:fa:ff:8b:be:b3:dc:5e:3f:3f:b7:
30:d8:5a:d7:de:ff:50:90:40:37:28:2e:e9:9f:6d:77:19:71:
c0:56:1f:0e:05:be:fe:d3:77:30:b8:a5:f1:5a:79:ee:5c:86:
81:54:75:c6:f6:6e:a2:9f:ce:5f:87:f3:ca:7e:e7:9d:19:74:
0a:05:fc:10:d3:0b:fd:6b:4b:b1:12:85:bf:c5:f7:0b:7c:d3:
8b:53:f8:c8:3d:c3:32:db:11:d9:57:63:24:24:6c:a5:e3:58:
fe:7e:ce:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDTh2dR5Ia5c5mfJZPcVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5
ZTkxMTkwHhcNMjUwNTA4MDQwMDIzWhcNMjUwNTA5MDQwMDIzWjAzMTEwLwYDVQQD
EyhjMDc4MzEyYTk4NDI2ZTg5MjM4NTllNDA1YWU3YjQ1ZTk3ZTdiNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4leBk0WpZOPXDG3s4VrwAjO0OWCi
VIkH/g45lbVK53Tc4xZ/wCihvnZZzTi0Zo/wPL1+dfBesLFM+YLCNrfBwtonKd43
Idpoft+B1lQx60xbpoBjcEWfh35eHKMfLN4lRJ46bU8cVqiTH0o9rwwX7sKxUUlF
4RbJewMrNwOvpirQC0R190aonRdDWiLQDMMTrY78HugwS+ah3HoN7TeUoQGTERBt
pznFPmFgXeNqGBRqYwpx/QYGXD5eP/KEvcqVIkAR8+yREAIf/K2kPTAeB4bKPEpj
ImKcZPUkAeY/Nso+EYsRuO056uFHFIsPSg2ufpo+g0k0hAZXA6zN6faBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB4MSqYQm6JI4WeQFrntF6X57ZHMB8GA1UdIwQY
MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt
ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2
LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9PwXezg
74okhQCGNea0efzEcIwptdj45VoJp8feEpOJUqT9I9xDYDgaaIv5lGNdyxEQz8UT
PPBLIvLmD95ZLoVDc7JjV9hlwAuz9mZWvL3KFFUGH8YcjM3x3G4cPJDRiWV76fxD
5hKr2QVWYCdjRJu4kh56mVg+9lgociPmQY6nFwU9+CAz6xedEzp2gixe8HgPL597
6qP6/4u+s9xePz+3MNha197/UJBANygu6Z9tdxlxwFYfDgW+/tN3MLil8Vp57lyG
gVR1xvZuop/OX4fzyn7nnRl0CgX8ENML/WtLsRKFv8X3C3zTi1P4yD3DMtsR2Vdj
JCRspeNY/n7OgA==
-----END CERTIFICATE-----
Generated at Thu May 8 14:12:41 2025 by rpki-client