Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: Cb7PxHxs3GHb6sihnFVLHLqynCDHqoxQ06k1jF8jb/A=
Subject key identifier: BA:4F:18:DE:21:BB:8C:CE:60:A7:B7:41:7C:49:03:7E:26:A5:EE:FA
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0196A9550A077B79273F0DD22EA49B5E01A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 04AC
Signing time: Wed 07 May 2025 06:00:44 +0000
Manifest this update: Wed 07 May 2025 06:00:44 +0000
Manifest next update: Thu 08 May 2025 06:00:44 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: auQN4MdQubQQ13pKenfamVGCGWZ50N7tvKIvy59Q6rM=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:55:0a:07:7b:79:27:3f:0d:d2:2e:a4:9b:5e:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: May 7 06:00:44 2025 GMT
Not After : May 8 06:00:44 2025 GMT
Subject: CN=ba4f18de21bb8cce60a7b7417c49037e26a5eefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:dc:26:ff:4b:28:ca:73:38:bb:44:e6:5f:
94:50:62:75:72:35:ad:5b:e4:a2:d7:26:35:06:17:
37:17:1a:0f:f1:a6:4d:cb:5d:11:0c:69:88:d3:8d:
a3:0f:29:96:2e:11:98:8e:e5:f3:43:36:2a:e1:f2:
7b:cc:1c:90:47:bc:3f:1c:96:f9:cd:5a:15:9c:65:
26:e3:73:86:53:f1:1a:71:15:3c:71:82:37:e8:fe:
09:4e:78:01:89:89:10:03:07:06:b7:6b:77:66:91:
d1:90:cb:1e:64:a3:9b:f4:83:55:23:d5:52:8b:da:
c8:3b:59:ac:49:de:05:bb:32:19:07:47:c0:7c:b6:
98:de:55:4e:14:9b:b2:1c:cb:20:7c:c7:ad:84:a2:
f4:bb:1b:60:dd:8c:fe:37:30:2a:4d:52:73:16:94:
41:83:84:dd:32:92:16:3e:fb:76:1f:9f:ca:75:70:
4a:20:47:8e:b3:8c:69:55:cb:b4:a0:05:dc:58:2f:
75:11:69:05:34:fb:8f:ca:d3:83:d6:63:c8:8d:23:
74:5b:c1:3b:d8:0c:be:7a:47:9e:3c:84:97:4e:bc:
3a:33:bb:e6:cc:95:91:0c:ad:30:7f:5f:8a:f1:8d:
0f:15:e2:ef:17:1e:87:d5:91:18:1e:a2:35:a7:81:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4F:18:DE:21:BB:8C:CE:60:A7:B7:41:7C:49:03:7E:26:A5:EE:FA
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:d4:4f:71:48:9e:b1:a0:8e:4c:f0:ef:7f:21:05:f5:40:dc:
d5:68:b0:cf:55:02:27:c1:d7:34:cc:d3:e9:a6:88:80:27:cc:
89:0b:65:3e:71:15:b2:b9:41:c5:e2:da:9a:8e:55:94:bc:a9:
dd:d5:f1:f6:a9:ef:a4:3a:89:ab:03:98:a4:b1:38:ef:4c:9b:
a7:3c:6f:64:02:0f:e1:ca:11:15:ba:05:f0:99:cb:49:68:a0:
5f:91:c5:d4:d6:64:42:31:ae:dd:b4:e0:24:08:e7:0f:2e:43:
b3:16:17:8e:f0:c9:f5:15:e1:49:90:f5:d5:7f:83:2f:07:01:
be:a3:30:89:33:bf:63:e7:c8:7a:b6:c6:d3:03:3b:b3:d1:4e:
26:bb:1c:66:69:af:b9:ed:8d:fa:88:d3:7a:2c:e9:24:84:37:
e2:4b:50:c8:99:39:ba:92:bd:a9:e4:f8:b4:13:32:bc:c7:2b:
b0:8b:e6:4c:8c:c8:f8:3c:f0:c1:43:ef:1f:b8:bf:0a:f0:2d:
95:c6:af:9f:b7:ac:c7:fe:e1:42:b3:92:e6:7c:08:bc:85:d5:
7f:55:1b:a6:ec:d8:02:78:71:e9:9f:2b:92:8a:6f:56:4c:d4:
0d:87:74:ec:e2:45:1a:6c:0c:ec:08:16:62:3c:01:6f:ad:2d:
fe:16:f7:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVQoHe3knPw3SLqSbXgGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZTMwYzE3OWNkNDJhODY0MTU4MzIzNDUwMWIxOGVmZjI1
MTU1NDkwHhcNMjUwNTA3MDYwMDQ0WhcNMjUwNTA4MDYwMDQ0WjAzMTEwLwYDVQQD
EyhiYTRmMThkZTIxYmI4Y2NlNjBhN2I3NDE3YzQ5MDM3ZTI2YTVlZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RzcJv9LKMpzOLtE5l+UUGJ1cjWt
W+Si1yY1Bhc3FxoP8aZNy10RDGmI042jDymWLhGYjuXzQzYq4fJ7zByQR7w/HJb5
zVoVnGUm43OGU/EacRU8cYI36P4JTngBiYkQAwcGt2t3ZpHRkMseZKOb9INVI9VS
i9rIO1msSd4FuzIZB0fAfLaY3lVOFJuyHMsgfMethKL0uxtg3Yz+NzAqTVJzFpRB
g4TdMpIWPvt2H5/KdXBKIEeOs4xpVcu0oAXcWC91EWkFNPuPytOD1mPIjSN0W8E7
2Ay+ekeePISXTrw6M7vmzJWRDK0wf1+K8Y0PFeLvFx6H1ZEYHqI1p4HboQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpPGN4hu4zOYKe3QXxJA34mpe76MB8GA1UdIwQY
MBaAFGfjDBec1CqGQVgyNFAbGO/yUVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGIt
YzU2M2Y3MzRhYjc0LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9iMWExZjgtNmE1ZC00YTE2LTlmNGItYzU2M2Y3MzRhYjc0
LzEvWi1NTUY1elVLb1pCV0RJMFVCc1k3X0pSVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdRPcUie
saCOTPDvfyEF9UDc1Wiwz1UCJ8HXNMzT6aaIgCfMiQtlPnEVsrlBxeLamo5VlLyp
3dXx9qnvpDqJqwOYpLE470ybpzxvZAIP4coRFboF8JnLSWigX5HF1NZkQjGu3bTg
JAjnDy5DsxYXjvDJ9RXhSZD11X+DLwcBvqMwiTO/Y+fIerbG0wM7s9FOJrscZmmv
ue2N+ojTeizpJIQ34ktQyJk5upK9qeT4tBMyvMcrsIvmTIzI+DzwwUPvH7i/CvAt
lcavn7esx/7hQrOS5nwIvIXVf1UbpuzYAnhx6Z8rkopvVkzUDYd07OJFGmwM7AgW
YjwBb60t/hb3nw==
-----END CERTIFICATE-----
Generated at Wed May 7 13:44:25 2025 by rpki-client