Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: atUIjR+rILLeRS1gdT7+wtspqUqty1Nn/tp9KC8hjdc=
Subject key identifier: 4C:35:F5:86:69:93:28:E6:44:4E:E6:EA:56:5D:3E:E1:28:A5:C9:8F
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 0196B10E1926E96301C0BB2A530D94D19E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 09E4
Signing time: Thu 08 May 2025 18:00:13 +0000
Manifest this update: Thu 08 May 2025 18:00:13 +0000
Manifest next update: Fri 09 May 2025 18:00:13 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: WZdKXuX8EBWlehpdV8ISMQbVvOp3qxERTWwz10Opl8E=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:19:26:e9:63:01:c0:bb:2a:53:0d:94:d1:9e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: May 8 18:00:13 2025 GMT
Not After : May 9 18:00:13 2025 GMT
Subject: CN=4c35f586699328e6444ee6ea565d3ee128a5c98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:d2:f5:5f:f7:d8:f8:8c:ce:e0:8b:4a:39:
7a:13:a9:44:69:6f:25:97:63:aa:0e:cf:24:3e:65:
07:56:eb:9e:8a:19:40:bf:ca:c4:a5:e3:25:5a:81:
35:9e:be:5f:34:26:84:96:03:91:68:88:46:6e:15:
23:70:2e:3b:92:c4:ee:d4:8b:14:f4:d7:58:a3:12:
66:fe:c8:ea:67:bf:f5:0c:19:81:36:90:18:3b:ba:
8c:13:d6:3d:f2:03:2f:bf:7f:fc:3d:bf:3a:51:62:
49:3d:8a:0b:0e:26:b9:3e:f3:6d:c7:6d:ec:9f:cd:
bc:24:2e:8f:55:d3:d6:28:01:57:98:5d:b7:59:89:
b4:ed:f7:ac:45:0f:27:da:bc:90:29:8f:34:cd:95:
ea:99:c0:49:d7:aa:a8:63:2b:87:e2:04:ea:84:f0:
b7:82:84:11:c7:e2:ec:c2:bb:ba:57:e9:8e:0b:a4:
32:ba:06:8e:dc:7f:2c:91:7f:23:9e:a2:67:35:06:
ba:2e:fd:40:9c:d7:a0:19:9d:05:c5:e1:19:31:e0:
56:67:b6:6c:80:10:ae:38:28:65:9b:49:37:13:21:
77:4a:3c:f8:3c:80:45:9d:97:e6:cf:8d:7c:aa:3f:
42:75:56:50:5c:ad:06:f0:08:28:6e:31:95:9a:81:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:35:F5:86:69:93:28:E6:44:4E:E6:EA:56:5D:3E:E1:28:A5:C9:8F
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:23:98:32:92:c9:78:c7:26:62:a9:4a:a6:2c:8a:36:25:28:
1f:1a:a1:27:f8:4d:b0:22:09:91:7e:ca:f8:d2:62:7e:8b:03:
65:64:04:a1:76:2a:ea:03:39:97:9a:0a:01:ef:c0:b2:97:a7:
f0:c5:22:b6:05:03:0c:21:b2:19:d0:a9:44:6e:65:24:9e:5a:
8d:a9:25:15:1d:fe:50:e3:ad:53:b9:f0:1b:c3:31:39:99:1b:
db:6a:35:c1:a0:95:79:37:5d:cb:86:5d:e4:89:43:77:a6:b8:
0c:a3:f7:38:62:5e:85:16:c8:75:39:c3:cf:b8:3d:92:fd:9a:
1c:ea:ab:ce:6e:36:00:b1:66:15:78:0a:3f:89:48:e6:03:c7:
7a:b6:c8:b5:7f:d8:b0:24:61:bd:8f:06:20:69:b1:f0:76:d5:
67:9a:ee:51:21:b5:58:b0:04:99:8c:d6:2c:43:d7:5e:b5:f1:
22:e3:7e:a4:5a:b6:22:3c:49:77:d4:82:9f:bd:fb:ab:c7:aa:
2e:c7:0f:ce:b6:eb:dd:14:ff:44:07:38:88:04:0e:63:b3:33:
56:2d:ad:68:a8:6d:cd:38:ce:b0:62:50:3a:ee:14:21:b4:63:
86:8e:29:40:a2:1e:45:fd:63:d9:0e:ca:db:0c:0e:e0:4e:0e:
b2:89:3f:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxDhkm6WMBwLsqUw2U0Z5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjUwNTA4MTgwMDEzWhcNMjUwNTA5MTgwMDEzWjAzMTEwLwYDVQQD
Eyg0YzM1ZjU4NjY5OTMyOGU2NDQ0ZWU2ZWE1NjVkM2VlMTI4YTVjOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0brS9V/32PiMzuCLSjl6E6lEaW8l
l2OqDs8kPmUHVuueihlAv8rEpeMlWoE1nr5fNCaElgORaIhGbhUjcC47ksTu1IsU
9NdYoxJm/sjqZ7/1DBmBNpAYO7qME9Y98gMvv3/8Pb86UWJJPYoLDia5PvNtx23s
n828JC6PVdPWKAFXmF23WYm07fesRQ8n2ryQKY80zZXqmcBJ16qoYyuH4gTqhPC3
goQRx+Lswru6V+mOC6QyugaO3H8skX8jnqJnNQa6Lv1AnNegGZ0FxeEZMeBWZ7Zs
gBCuOChlm0k3EyF3Sjz4PIBFnZfmz418qj9CdVZQXK0G8AgobjGVmoGA/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEw19YZpkyjmRE7m6lZdPuEopcmPMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyOYMpLJ
eMcmYqlKpiyKNiUoHxqhJ/hNsCIJkX7K+NJifosDZWQEoXYq6gM5l5oKAe/Aspen
8MUitgUDDCGyGdCpRG5lJJ5ajaklFR3+UOOtU7nwG8MxOZkb22o1waCVeTddy4Zd
5IlDd6a4DKP3OGJehRbIdTnDz7g9kv2aHOqrzm42ALFmFXgKP4lI5gPHerbItX/Y
sCRhvY8GIGmx8HbVZ5ruUSG1WLAEmYzWLEPXXrXxIuN+pFq2IjxJd9SCn737q8eq
LscPzrbr3RT/RAc4iAQOY7MzVi2taKhtzTjOsGJQOu4UIbRjho4pQKIeRf1j2Q7K
2wwO4E4Osok/CA==
-----END CERTIFICATE-----
Generated at Thu May 8 23:16:27 2025 by rpki-client