Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
File: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft (raw, json)
Hash identifier: IID4rpGEBTpQDzSPTDXuihv+Fcv5ox7Tl0epYQsFyzY=
Subject key identifier: A1:3E:29:2F:44:F1:24:7D:09:73:F5:E0:CA:1F:D3:48:5F:46:F5:63
Authority key identifier: D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
Certificate issuer: /CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Certificate serial: 01969DBE8757A246C7BF8BA8B254A34ACB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 00:00:31 +0000
Manifest this update: Mon 05 May 2025 00:00:31 +0000
Manifest next update: Tue 06 May 2025 00:00:31 +0000
Files and hashes: 1: 1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl (hash: EfTiNnKEcKmjbier0TzeYOaJmhSHNvfhFhMujZ3qEFw=)
2: qflKZTF3zhSp7clCgQY6deaVcuQ.roa (hash: YrrT0H2VFpPiuVpFBvUMkkYVOwRQGbWJWicWDvr4Ns0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:87:57:a2:46:c7:bf:8b:a8:b2:54:a3:4a:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7367fc24d004f71dd2aef03f9cb4f2e3f9086aa
Validity
Not Before: May 5 00:00:31 2025 GMT
Not After : May 6 00:00:31 2025 GMT
Subject: CN=a13e292f44f1247d0973f5e0ca1fd3485f46f563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:41:99:fb:72:cb:6e:33:00:c3:8a:e5:9f:
c3:de:2e:ab:12:88:5f:4d:49:22:92:4b:c7:c7:9f:
35:fe:01:be:37:bd:90:34:63:b4:42:ab:5f:d8:19:
38:2a:df:b4:45:fd:24:60:4b:b7:36:c7:f5:45:8b:
fd:42:93:a1:38:9d:b1:5a:01:91:06:9f:31:b5:b0:
c1:cd:10:23:33:d4:7c:1a:1f:d8:4a:98:36:6f:35:
e1:90:e2:99:ed:f3:2c:6f:34:e9:43:db:03:06:f8:
82:d7:a5:50:5a:1d:64:f3:33:a6:0c:b1:97:0e:bb:
8b:01:e0:ab:47:c0:39:a4:ec:27:4c:57:cc:90:71:
db:6d:84:dc:82:58:91:e4:ac:44:ba:da:94:72:2a:
a6:30:72:d8:f0:41:28:71:3d:47:67:61:0a:33:b8:
b3:33:77:15:46:c6:14:74:b4:78:65:bd:f1:a9:4b:
09:c0:4e:f5:71:5e:64:60:93:17:8f:4a:ab:f6:ec:
f4:c4:83:b5:ca:0f:e8:e0:d5:98:24:d2:75:a9:af:
4b:ee:73:d3:e0:ab:60:1d:37:aa:0b:3a:d2:43:a1:
14:02:67:ba:df:19:48:5c:b6:81:c5:77:b1:93:04:
d2:2e:20:e8:a6:a9:0c:5a:02:7b:e7:0c:85:f4:57:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:29:2F:44:F1:24:7D:09:73:F5:E0:CA:1F:D3:48:5F:46:F5:63
X509v3 Authority Key Identifier:
keyid:D7:36:7F:C2:4D:00:4F:71:DD:2A:EF:03:F9:CB:4F:2E:3F:90:86:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d8c6b8-d14a-47d9-a054-b9c794e03cba/1/1zZ_wk0AT3HdKu8D-ctPLj-Qhqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1e:de:21:c7:f4:5a:b3:21:b5:f8:2d:65:13:3e:7d:94:fc:
43:f8:f6:b1:e4:1a:ca:05:67:96:40:3f:b8:0b:f6:93:6a:97:
c0:3a:4d:8a:4b:cf:9c:72:29:cc:24:98:ac:cb:c2:2a:a7:3b:
74:6d:d1:86:1f:95:b8:3b:83:c6:f4:82:a7:49:86:41:54:17:
14:85:8a:8b:8c:83:8b:51:6f:1d:53:e3:0e:c2:52:ac:f4:9e:
61:03:fc:43:c0:f5:e6:14:b0:a6:e8:61:a6:1b:d2:c6:3d:c3:
ab:42:78:77:44:06:70:e6:22:c1:2c:b9:f8:04:99:de:78:e1:
28:e3:36:7a:ea:2d:5c:7b:d6:05:a6:67:19:f9:4f:43:51:31:
5b:fb:38:83:2c:19:3c:e7:f7:14:0c:0d:0a:19:1d:8f:04:4f:
95:fb:f9:d8:c5:97:19:d7:c4:61:df:b7:2c:27:be:6b:f6:1f:
05:df:bc:ac:38:96:bf:47:1a:e8:7f:0c:1e:3c:5e:42:84:b6:
f1:37:bd:92:23:eb:93:73:ce:84:7e:da:0f:f9:96:0b:60:db:
08:5b:4b:1f:8a:b2:dc:bd:3a:58:02:fc:6d:87:5d:f2:f4:c8:
3c:7c:83:02:11:f6:85:ba:26:9c:f2:f8:f6:b8:c5:7b:3b:6d:
6a:95:d8:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadvodXokbHv4uoslSjSss5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzY3ZmMyNGQwMDRmNzFkZDJhZWYwM2Y5Y2I0ZjJlM2Y5
MDg2YWEwHhcNMjUwNTA1MDAwMDMxWhcNMjUwNTA2MDAwMDMxWjAzMTEwLwYDVQQD
EyhhMTNlMjkyZjQ0ZjEyNDdkMDk3M2Y1ZTBjYTFmZDM0ODVmNDZmNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51Bmftyy24zAMOK5Z/D3i6rEohf
TUkikkvHx581/gG+N72QNGO0Qqtf2Bk4Kt+0Rf0kYEu3Nsf1RYv9QpOhOJ2xWgGR
Bp8xtbDBzRAjM9R8Gh/YSpg2bzXhkOKZ7fMsbzTpQ9sDBviC16VQWh1k8zOmDLGX
DruLAeCrR8A5pOwnTFfMkHHbbYTcgliR5KxEutqUciqmMHLY8EEocT1HZ2EKM7iz
M3cVRsYUdLR4Zb3xqUsJwE71cV5kYJMXj0qr9uz0xIO1yg/o4NWYJNJ1qa9L7nPT
4KtgHTeqCzrSQ6EUAme63xlIXLaBxXexkwTSLiDopqkMWgJ75wyF9FfEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE+KS9E8SR9CXP14Mof00hfRvVjMB8GA1UdIwQY
MBaAFNc2f8JNAE9x3SrvA/nLTy4/kIaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQt
YjljNzk0ZTAzY2JhLzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kOGM2YjgtZDE0YS00N2Q5LWEwNTQtYjljNzk0ZTAzY2Jh
LzEvMXpaX3drMEFUM0hkS3U4RC1jdFBMai1RaHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKh7eIcf0
WrMhtfgtZRM+fZT8Q/j2seQaygVnlkA/uAv2k2qXwDpNikvPnHIpzCSYrMvCKqc7
dG3Rhh+VuDuDxvSCp0mGQVQXFIWKi4yDi1FvHVPjDsJSrPSeYQP8Q8D15hSwpuhh
phvSxj3Dq0J4d0QGcOYiwSy5+ASZ3njhKOM2euotXHvWBaZnGflPQ1ExW/s4gywZ
POf3FAwNChkdjwRPlfv52MWXGdfEYd+3LCe+a/YfBd+8rDiWv0ca6H8MHjxeQoS2
8Te9kiPrk3POhH7aD/mWC2DbCFtLH4qy3L06WAL8bYdd8vTIPHyDAhH2hbomnPL4
9rjFezttapXY3A==
-----END CERTIFICATE-----
Generated at Mon May 5 03:42:18 2025 by rpki-client