Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: ZCThN5Fq/dAqy4ZY/SI3BnQTjo4oT0e4518f/bgpXR0=
Subject key identifier: E7:F8:C3:E8:DF:3F:B9:8A:4B:70:4E:20:37:25:6C:A8:E3:CD:41:98
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 0196B7B5B9B11CE8D8EBAD0AE870D9F2C108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: C7
Signing time: Sat 10 May 2025 01:01:02 +0000
Manifest this update: Sat 10 May 2025 01:01:02 +0000
Manifest next update: Sun 11 May 2025 01:01:02 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: kenlYgrvQ1hK1GkmvE0NFFB6aO4aXSzGX+kPgiznw1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:b9:b1:1c:e8:d8:eb:ad:0a:e8:70:d9:f2:c1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: May 10 01:01:02 2025 GMT
Not After : May 11 01:01:02 2025 GMT
Subject: CN=e7f8c3e8df3fb98a4b704e2037256ca8e3cd4198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:0a:ed:4f:36:9c:23:2c:de:09:ee:4d:73:
07:e2:7d:d5:6d:be:54:f3:ce:7b:4c:67:08:1a:e6:
48:22:89:44:55:07:e2:37:dc:ac:6b:fe:89:d3:0d:
7a:89:ad:15:0e:42:3a:e6:d4:bd:3d:ce:4a:7a:6b:
29:7f:f1:ce:f8:d4:45:d4:3f:f8:dd:88:2d:39:67:
d1:b5:86:0c:eb:4c:e4:99:3e:49:b6:94:2f:52:f2:
db:73:c4:1e:a7:21:16:a9:6c:f7:39:1b:f3:fd:0b:
27:1c:0c:fd:2e:61:e5:b9:e7:30:f2:40:68:58:b1:
f0:ed:18:48:3b:14:ab:73:d3:42:69:20:7f:1f:b4:
de:69:74:6f:b3:67:22:74:79:ef:b9:33:da:6b:8a:
4f:f9:b9:f2:d3:bb:c0:2f:bd:d7:ac:90:9c:f1:1d:
82:a0:8e:53:8b:08:6c:29:1d:0e:52:8a:0d:54:0e:
29:ca:ff:1f:2d:e8:0f:7d:24:50:27:80:fe:30:4b:
98:ae:aa:69:54:97:37:31:67:02:66:3b:d7:53:df:
b8:42:08:95:d2:0a:7f:b7:7d:c6:26:70:81:db:f7:
16:ba:d6:77:56:91:c6:57:1f:39:2d:fa:62:35:71:
97:8b:c4:ac:9a:e9:b7:af:2f:a8:25:ed:98:0b:d0:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:C3:E8:DF:3F:B9:8A:4B:70:4E:20:37:25:6C:A8:E3:CD:41:98
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:40:b0:87:b3:f8:75:91:8e:ff:5e:1d:6d:22:8d:96:cf:fc:
de:f5:72:05:5b:95:dc:82:00:99:6a:be:4c:63:b0:3b:46:6c:
1f:7e:74:04:b1:f9:04:4c:73:95:bb:b9:04:27:48:95:80:83:
81:81:1f:09:5b:7d:3a:8f:fc:a9:24:13:57:13:c2:b9:65:1f:
12:8e:4b:ce:f7:34:eb:17:c5:8e:58:40:3f:9e:bb:e3:7b:f1:
63:16:5b:37:5a:c7:c3:0e:59:b3:20:f4:54:52:64:9c:55:d8:
c8:f0:32:37:f3:1b:db:cd:bc:9a:3e:22:99:3e:80:2b:7a:76:
f9:48:ac:33:e3:da:c2:5b:68:ca:0e:48:4a:e0:a8:1d:9b:82:
95:8e:40:3a:fe:0b:14:fe:ee:d6:90:20:7a:20:95:b7:df:d0:
10:44:74:15:2a:f3:3f:5e:f2:0c:eb:31:67:77:9b:d8:82:cf:
5c:41:74:4d:a2:82:3f:0a:cc:f1:75:5a:49:55:4a:5b:15:e9:
13:0a:10:01:e8:b6:06:47:16:9e:1a:b5:23:fc:ff:36:4a:02:
65:39:2e:18:0b:8f:03:65:e3:b4:f0:87:78:f9:7e:59:c4:a2:
c5:fb:33:5b:f2:80:fe:7d:ec:a4:20:da:16:68:60:1c:90:66:
c0:5a:33:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tbmxHOjY660K6HDZ8sEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj
NTQ1YzMwHhcNMjUwNTEwMDEwMTAyWhcNMjUwNTExMDEwMTAyWjAzMTEwLwYDVQQD
EyhlN2Y4YzNlOGRmM2ZiOThhNGI3MDRlMjAzNzI1NmNhOGUzY2Q0MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJgK7U82nCMs3gnuTXMH4n3Vbb5U
8857TGcIGuZIIolEVQfiN9ysa/6J0w16ia0VDkI65tS9Pc5Kemspf/HO+NRF1D/4
3YgtOWfRtYYM60zkmT5JtpQvUvLbc8QepyEWqWz3ORvz/QsnHAz9LmHluecw8kBo
WLHw7RhIOxSrc9NCaSB/H7TeaXRvs2cidHnvuTPaa4pP+bny07vAL73XrJCc8R2C
oI5TiwhsKR0OUooNVA4pyv8fLegPfSRQJ4D+MEuYrqppVJc3MWcCZjvXU9+4QgiV
0gp/t33GJnCB2/cWutZ3VpHGVx85LfpiNXGXi8Ssmum3ry+oJe2YC9BbxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf4w+jfP7mKS3BOIDclbKjjzUGYMB8GA1UdIwQY
MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt
MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex
LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0Cwh7P4
dZGO/14dbSKNls/83vVyBVuV3IIAmWq+TGOwO0ZsH350BLH5BExzlbu5BCdIlYCD
gYEfCVt9Oo/8qSQTVxPCuWUfEo5Lzvc06xfFjlhAP56743vxYxZbN1rHww5ZsyD0
VFJknFXYyPAyN/Mb2828mj4imT6AK3p2+UisM+Pawltoyg5ISuCoHZuClY5AOv4L
FP7u1pAgeiCVt9/QEER0FSrzP17yDOsxZ3eb2ILPXEF0TaKCPwrM8XVaSVVKWxXp
EwoQAei2BkcWnhq1I/z/NkoCZTkuGAuPA2XjtPCHePl+WcSixfszW/KA/n3spCDa
FmhgHJBmwFozhA==
-----END CERTIFICATE-----
Generated at Sat May 10 04:54:49 2025 by rpki-client