Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: 6vuQxbbvv1j1aW+4fBISwB+PbdqqpMxw1DHkLTRgkmI=
Subject key identifier: 4A:14:13:72:0D:17:72:8B:D9:0C:AC:AA:16:1D:FE:80:AC:94:2D:4B
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 0196C8DFFBEA9E6D914587664DF7F2D1F8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0DEF
Signing time: Tue 13 May 2025 09:00:44 +0000
Manifest this update: Tue 13 May 2025 09:00:44 +0000
Manifest next update: Wed 14 May 2025 09:00:44 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: LzjSEYMyyasaLlVXVV2oAjTu/SA9V8yJctF86TLjFzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:df:fb:ea:9e:6d:91:45:87:66:4d:f7:f2:d1:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: May 13 09:00:44 2025 GMT
Not After : May 14 09:00:44 2025 GMT
Subject: CN=4a1413720d17728bd90cacaa161dfe80ac942d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:81:ac:06:5a:1c:d4:1b:02:d9:cb:3b:5d:
f2:8a:34:aa:c6:03:eb:02:5c:5e:6b:9d:bf:74:68:
5c:98:c4:fa:4a:eb:17:48:a9:1b:d7:06:08:12:dc:
e2:21:a6:38:ee:ea:8d:19:94:6a:04:22:f9:67:9a:
08:83:af:1b:44:a1:34:78:f2:82:96:d2:e3:21:3a:
61:3d:9f:19:a9:e2:0b:ec:16:2f:58:0d:12:34:0e:
87:79:9c:a3:90:66:64:30:2a:ec:2f:11:41:c5:96:
08:19:b1:d0:13:5a:d5:93:f6:f7:9a:8f:e0:0b:9c:
e0:fb:af:b1:31:fa:de:92:4e:2f:77:d2:24:ac:88:
76:4d:2f:0c:52:e3:1c:3c:42:2f:f0:47:95:ec:df:
78:99:dd:f8:7c:61:a5:48:ff:10:41:e8:df:29:ab:
78:7c:f3:55:bc:68:d8:99:63:e5:18:4c:a8:c2:e4:
01:e1:c9:54:d4:18:68:d3:38:f7:15:46:03:bc:ce:
60:1d:39:9a:8b:90:c6:fd:ff:6a:c0:d1:2f:2c:d8:
a9:4e:ca:08:e2:f1:06:83:f2:6d:8a:81:38:b4:f8:
80:f8:e9:2c:98:78:67:03:05:12:2f:95:45:9f:28:
57:85:ab:89:cd:f6:4f:d4:22:3c:0a:dd:5b:91:3b:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:14:13:72:0D:17:72:8B:D9:0C:AC:AA:16:1D:FE:80:AC:94:2D:4B
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:47:bd:11:c9:3d:4f:13:21:89:fd:22:d2:76:07:d1:56:5e:
68:c6:39:50:6f:76:51:20:13:3a:19:c2:73:96:58:1f:cb:5b:
6b:48:a2:21:07:43:f4:34:b6:69:09:52:07:bb:cb:5c:41:19:
e5:12:f3:c1:c5:90:bc:39:d9:e4:0b:41:8b:23:db:dd:41:27:
4d:f5:42:a4:50:75:26:8a:a9:d9:d6:c1:84:2e:37:c5:d7:64:
22:60:95:cb:db:eb:f3:e8:a1:3e:b0:f8:84:ee:a2:69:79:b6:
d1:9c:0b:35:9e:60:4b:04:97:12:7d:5b:5f:34:4d:54:fd:0e:
23:8a:c7:99:99:64:35:c7:d9:a2:9a:c3:96:5f:13:e1:ba:f0:
f0:af:16:b9:b8:a5:94:c0:00:d5:58:8a:c2:b9:bc:ac:40:23:
8f:ca:c2:dd:68:0c:00:90:68:90:9e:53:d7:d2:13:2e:97:58:
c8:2f:38:01:63:5f:ba:40:e7:53:3c:c3:9c:d3:7d:5f:d6:ec:
9c:74:d0:cb:7d:a7:24:ac:8e:d6:6c:22:c6:9f:c7:37:76:b2:
6e:03:b6:43:12:73:a0:c6:92:13:64:27:3e:8a:54:82:dd:40:
a2:76:16:7d:d1:70:f7:b1:ff:50:96:b0:8d:d3:0e:f5:8f:1b:
4a:06:25:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbI3/vqnm2RRYdmTffy0fjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk
OWRjYzgwHhcNMjUwNTEzMDkwMDQ0WhcNMjUwNTE0MDkwMDQ0WjAzMTEwLwYDVQQD
Eyg0YTE0MTM3MjBkMTc3MjhiZDkwY2FjYWExNjFkZmU4MGFjOTQyZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCBrAZaHNQbAtnLO13yijSqxgPr
Alxea52/dGhcmMT6SusXSKkb1wYIEtziIaY47uqNGZRqBCL5Z5oIg68bRKE0ePKC
ltLjITphPZ8ZqeIL7BYvWA0SNA6HeZyjkGZkMCrsLxFBxZYIGbHQE1rVk/b3mo/g
C5zg+6+xMfrekk4vd9IkrIh2TS8MUuMcPEIv8EeV7N94md34fGGlSP8QQejfKat4
fPNVvGjYmWPlGEyowuQB4clU1Bho0zj3FUYDvM5gHTmai5DG/f9qwNEvLNipTsoI
4vEGg/JtioE4tPiA+OksmHhnAwUSL5VFnyhXhauJzfZP1CI8Ct1bkTsluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoUE3INF3KL2QysqhYd/oCslC1LMB8GA1UdIwQY
MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEe9Eck9
TxMhif0i0nYH0VZeaMY5UG92USATOhnCc5ZYH8tba0iiIQdD9DS2aQlSB7vLXEEZ
5RLzwcWQvDnZ5AtBiyPb3UEnTfVCpFB1Joqp2dbBhC43xddkImCVy9vr8+ihPrD4
hO6iaXm20ZwLNZ5gSwSXEn1bXzRNVP0OI4rHmZlkNcfZoprDll8T4brw8K8Wubil
lMAA1ViKwrm8rEAjj8rC3WgMAJBokJ5T19ITLpdYyC84AWNfukDnUzzDnNN9X9bs
nHTQy32nJKyO1mwixp/HN3aybgO2QxJzoMaSE2QnPopUgt1AonYWfdFw97H/UJaw
jdMO9Y8bSgYltg==
-----END CERTIFICATE-----
Generated at Tue May 13 13:15:28 2025 by rpki-client