Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: UJp3vdqKKuc4/VXDkpzVPUJ0zL0q+8AgJ57JPa+JtvY=
Subject key identifier: 58:AA:A2:A4:7D:5C:FD:FD:5B:C8:54:F9:53:00:24:75:C1:86:3E:B2
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 0196A577C00B4F9991AAF78DD32EAE5224F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 12:00:10 +0000
Manifest this update: Tue 06 May 2025 12:00:10 +0000
Manifest next update: Wed 07 May 2025 12:00:10 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: kZxhIOQT+ZUQ8P+pM9EARNfNcMPhpZP+KunUboZIt1w=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:c0:0b:4f:99:91:aa:f7:8d:d3:2e:ae:52:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: May 6 12:00:10 2025 GMT
Not After : May 7 12:00:10 2025 GMT
Subject: CN=58aaa2a47d5cfdfd5bc854f953002475c1863eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:97:a8:d7:4f:2f:8e:72:9d:49:b5:ab:dc:
e4:4f:23:82:00:94:ed:8b:6e:a3:01:9d:89:c6:b8:
c3:8a:f8:a5:c9:67:ae:25:6a:57:83:e8:93:d5:f2:
fb:0b:79:b2:a4:f0:d5:96:c9:56:fe:87:bf:c2:19:
62:b5:38:23:43:ee:9e:8d:a8:f7:48:5d:83:46:73:
36:60:51:22:b2:8a:50:46:b8:47:87:94:c1:1c:df:
35:96:36:22:47:0f:b3:b2:f5:90:f0:7c:6c:e0:97:
0a:f4:bd:bc:66:f3:62:6a:48:95:70:c0:4e:bc:e0:
c4:c0:eb:09:ba:a7:7b:6e:94:ad:9a:75:05:0c:b1:
25:cd:a0:84:86:5e:24:08:28:1a:29:05:75:9e:5b:
a3:97:62:b1:08:96:c5:b4:e2:bc:14:08:59:a7:18:
60:c1:5b:5d:84:3a:26:dc:a4:52:79:1f:9a:d4:2d:
76:a7:22:94:0c:b3:50:ed:6d:c8:5d:8a:01:4a:55:
35:b0:99:7e:1f:40:00:2e:d6:9b:34:4a:58:84:ed:
43:e8:b0:29:a5:c4:1a:9c:68:b6:57:7b:5e:bf:9a:
2f:29:43:99:4a:d5:88:9b:7f:54:b4:81:aa:1c:5c:
ee:9b:05:1e:77:ea:0d:da:80:4a:fd:38:ca:99:14:
2c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AA:A2:A4:7D:5C:FD:FD:5B:C8:54:F9:53:00:24:75:C1:86:3E:B2
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:25:ee:15:88:18:3b:01:fc:f4:4d:8a:dc:64:85:5d:0a:31:
29:56:32:c2:38:80:33:fd:7d:07:5d:06:31:2a:38:7c:91:16:
2a:59:98:20:79:4a:f0:08:12:8e:bf:21:f5:35:33:e9:90:c8:
21:5a:54:37:b7:d9:f5:d5:18:71:61:8d:d0:d6:24:ef:4c:39:
7f:15:82:1c:58:dd:9f:97:f2:44:5d:c4:00:0d:8f:a4:0d:31:
26:7c:8c:d6:74:9b:41:cc:de:2f:8c:91:a3:0d:91:fd:42:07:
33:e0:1d:90:e2:17:f5:a2:60:3d:50:cf:c6:d0:f6:4f:02:ec:
9c:0e:6d:16:8b:69:5a:5f:14:bc:46:95:15:0c:1a:a6:97:ed:
db:28:09:bb:92:6f:4e:1c:10:db:60:ea:1b:6b:6b:f9:8e:7f:
1d:46:92:f1:ef:17:51:44:8d:1d:db:86:65:90:ff:b8:ff:f5:
b2:45:e9:a5:ba:09:d6:91:92:2d:59:5a:39:f0:00:11:c6:90:
05:bb:88:f1:d4:06:c3:92:57:a4:2d:ba:e3:6f:e8:85:1d:3d:
37:c5:8f:af:33:20:f0:6b:9a:68:82:7e:4f:e4:c9:77:9c:1f:
84:12:6c:2a:e9:c8:b3:fa:ca:d1:d0:55:2f:07:d3:a8:01:1c:
c2:bc:c2:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZald8ALT5mRqveN0y6uUiT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NGE2MWE4YTljOTdjMDNjZGViZTA1ZjgyNTU4ZTUxZGJm
OTA4MjEwHhcNMjUwNTA2MTIwMDEwWhcNMjUwNTA3MTIwMDEwWjAzMTEwLwYDVQQD
Eyg1OGFhYTJhNDdkNWNmZGZkNWJjODU0Zjk1MzAwMjQ3NWMxODYzZWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UyXqNdPL45ynUm1q9zkTyOCAJTt
i26jAZ2JxrjDivilyWeuJWpXg+iT1fL7C3mypPDVlslW/oe/whlitTgjQ+6ejaj3
SF2DRnM2YFEisopQRrhHh5TBHN81ljYiRw+zsvWQ8Hxs4JcK9L28ZvNiakiVcMBO
vODEwOsJuqd7bpStmnUFDLElzaCEhl4kCCgaKQV1nlujl2KxCJbFtOK8FAhZpxhg
wVtdhDom3KRSeR+a1C12pyKUDLNQ7W3IXYoBSlU1sJl+H0AALtabNEpYhO1D6LAp
pcQanGi2V3tev5ovKUOZStWIm39UtIGqHFzumwUed+oN2oBK/TjKmRQsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiqoqR9XP39W8hU+VMAJHXBhj6yMB8GA1UdIwQY
MBaAFGdKYaipyXwDzevgX4JVjlHb+QghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmIt
NGM4NmNiZTAzNjEwLzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83MjQ4OGEtMDM1ZC00OTMxLThkZmItNGM4NmNiZTAzNjEw
LzEvWjBwaHFLbkpmQVBONi1CZmdsV09VZHY1Q0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyXuFYgY
OwH89E2K3GSFXQoxKVYywjiAM/19B10GMSo4fJEWKlmYIHlK8AgSjr8h9TUz6ZDI
IVpUN7fZ9dUYcWGN0NYk70w5fxWCHFjdn5fyRF3EAA2PpA0xJnyM1nSbQczeL4yR
ow2R/UIHM+AdkOIX9aJgPVDPxtD2TwLsnA5tFotpWl8UvEaVFQwappft2ygJu5Jv
ThwQ22DqG2tr+Y5/HUaS8e8XUUSNHduGZZD/uP/1skXppboJ1pGSLVlaOfAAEcaQ
BbuI8dQGw5JXpC2642/ohR09N8WPrzMg8GuaaIJ+T+TJd5wfhBJsKunIs/rK0dBV
LwfTqAEcwrzCCg==
-----END CERTIFICATE-----
Generated at Tue May 6 16:58:11 2025 by rpki-client