Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: DDIhpWUgCK5ceuDmCIiY9MYyEe/PinKldY0NZ+lcyQk=
Subject key identifier: B9:11:65:84:FD:EA:69:80:59:4E:E7:AD:31:7E:94:E7:FF:39:41:A9
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 0196A98BE07CE224F67915D7F67523255C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 04C5
Signing time: Wed 07 May 2025 07:00:38 +0000
Manifest this update: Wed 07 May 2025 07:00:38 +0000
Manifest next update: Thu 08 May 2025 07:00:38 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: jszVVNLcUAq7LiuDmcoYb1cuZPPxoI0iSF7oYLJe0nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:e0:7c:e2:24:f6:79:15:d7:f6:75:23:25:5c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: May 7 07:00:38 2025 GMT
Not After : May 8 07:00:38 2025 GMT
Subject: CN=b9116584fdea6980594ee7ad317e94e7ff3941a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:3f:ff:01:0a:20:cd:37:ee:f6:19:e3:f9:
98:00:1d:4b:78:12:59:f5:74:70:56:59:36:a3:9a:
e1:ff:17:86:03:d0:84:f0:1b:51:25:e0:4f:da:de:
61:07:5d:2e:cf:a5:23:2b:71:6a:6e:60:8d:5e:4c:
65:26:ea:7a:05:9b:b6:20:ce:c6:ad:51:f6:3a:a6:
80:30:da:70:52:41:46:29:a6:ce:f5:16:46:06:68:
b7:e9:93:01:3e:09:eb:0d:37:7b:25:e8:be:cd:cb:
bb:be:a1:4d:cd:c1:88:c6:55:2a:db:ab:7f:de:4d:
a3:84:41:f1:9f:97:d6:35:8d:41:34:f0:b6:11:78:
9c:67:e2:26:44:98:a7:07:3b:94:81:e4:40:18:b7:
2b:e8:cf:b1:b2:78:ac:bc:21:fa:b2:62:bf:f7:54:
b9:fb:7e:31:6d:55:23:c6:bf:33:d1:18:3b:be:c0:
a9:64:fd:d6:66:a7:2e:d5:93:89:a5:c2:2a:30:72:
91:c4:13:1f:5d:d7:59:07:71:0f:c6:55:66:20:10:
92:74:d4:85:ca:c8:44:e9:9c:a3:8b:31:fc:97:72:
79:97:c9:76:dd:34:08:15:e2:fd:76:45:81:e5:17:
b2:83:9a:95:25:3d:ed:bb:cd:50:2a:24:a0:1c:ef:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:65:84:FD:EA:69:80:59:4E:E7:AD:31:7E:94:E7:FF:39:41:A9
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0a:c6:4b:f4:cd:58:14:05:32:7c:1e:9c:7f:d5:07:a4:96:
e3:76:8c:1f:b3:07:33:4d:bf:01:09:f5:f1:86:02:29:b7:9c:
18:c3:dc:c3:81:fa:98:02:31:50:11:b5:ed:9b:2f:11:9a:3e:
4c:df:2b:97:5a:72:44:b3:bf:9a:64:9b:af:ee:80:82:7b:27:
7b:b1:f2:4d:01:f7:2f:1c:85:86:79:c8:d0:e8:19:be:cf:e8:
46:0b:b8:97:d6:fb:7f:ce:7d:9a:02:fc:51:fc:9f:03:f1:0e:
4d:c8:60:a8:49:39:bc:59:1b:82:68:d0:06:dd:e8:24:76:65:
ed:c8:64:85:36:6c:c1:f5:73:d4:d0:c1:ba:8b:62:3b:b1:31:
09:35:7e:54:e9:a5:d2:f1:d1:19:21:cc:fc:98:1f:67:20:c1:
cf:1b:df:c4:eb:25:69:c1:98:0e:0d:94:e1:b2:d4:53:88:33:
43:9f:f6:4f:ce:32:b6:55:9e:60:30:24:ad:a2:25:69:7d:16:
6a:0b:c4:a8:f2:eb:b5:f3:84:e1:42:85:36:81:58:95:59:98:
3a:61:13:8e:64:67:fb:b5:05:5a:8a:7c:6f:a8:fd:e6:3a:a2:
a8:3b:96:2b:97:b7:5c:31:16:8e:70:06:7a:97:72:01:8a:09:
3f:78:d8:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapi+B84iT2eRXX9nUjJVxcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NWUxN2MwOGFjZGM3N2U5NDRiMjgzOTUwOGYxZmQ3MTFl
OGU5N2IwHhcNMjUwNTA3MDcwMDM4WhcNMjUwNTA4MDcwMDM4WjAzMTEwLwYDVQQD
EyhiOTExNjU4NGZkZWE2OTgwNTk0ZWU3YWQzMTdlOTRlN2ZmMzk0MWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQ//wEKIM037vYZ4/mYAB1LeBJZ
9XRwVlk2o5rh/xeGA9CE8BtRJeBP2t5hB10uz6UjK3FqbmCNXkxlJup6BZu2IM7G
rVH2OqaAMNpwUkFGKabO9RZGBmi36ZMBPgnrDTd7Jei+zcu7vqFNzcGIxlUq26t/
3k2jhEHxn5fWNY1BNPC2EXicZ+ImRJinBzuUgeRAGLcr6M+xsnisvCH6smK/91S5
+34xbVUjxr8z0Rg7vsCpZP3WZqcu1ZOJpcIqMHKRxBMfXddZB3EPxlVmIBCSdNSF
yshE6ZyjizH8l3J5l8l23TQIFeL9dkWB5Reyg5qVJT3tu81QKiSgHO+eNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkRZYT96mmAWU7nrTF+lOf/OUGpMB8GA1UdIwQY
MBaAFGZeF8CKzcd+lEsoOVCPH9cR6Ol7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTIt
MDBjZWViNmE0MTRmLzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80MDY1OGUtYzFhNS00ODU4LTg5MTItMDBjZWViNmE0MTRm
LzEvWmw0WHdJck54MzZVU3lnNVVJOGYxeEhvNlhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgrGS/TN
WBQFMnwenH/VB6SW43aMH7MHM02/AQn18YYCKbecGMPcw4H6mAIxUBG17ZsvEZo+
TN8rl1pyRLO/mmSbr+6Agnsne7HyTQH3LxyFhnnI0OgZvs/oRgu4l9b7f859mgL8
UfyfA/EOTchgqEk5vFkbgmjQBt3oJHZl7chkhTZswfVz1NDBuotiO7ExCTV+VOml
0vHRGSHM/JgfZyDBzxvfxOslacGYDg2U4bLUU4gzQ5/2T84ytlWeYDAkraIlaX0W
agvEqPLrtfOE4UKFNoFYlVmYOmETjmRn+7UFWop8b6j95jqiqDuWK5e3XDEWjnAG
epdyAYoJP3jYJQ==
-----END CERTIFICATE-----
Generated at Wed May 7 10:36:47 2025 by rpki-client