Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
File: zAGDPH7l80P_CTtsTmFR0ONkV2g.mft (raw, json)
Hash identifier: nc5qr/nLhT97sj/LrUuz1rWMzvTEZ1x/byFTwAFIboQ=
Subject key identifier: E8:9D:7D:92:F5:4F:4E:64:D3:F5:9D:04:D2:D3:7C:A8:E2:AF:4E:3E
Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Certificate serial: 0196A38A0636243C8F545D6655748C07BFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 03:00:53 +0000
Manifest this update: Tue 06 May 2025 03:00:53 +0000
Manifest next update: Wed 07 May 2025 03:00:53 +0000
Files and hashes: 1: 8B-49SRrYWj3BFm1FIacELaGu3s.roa (hash: laIZJXxS1vtVLt93zJEWrt+cjjvvJapngvXurJPqS7Y=)
2: v23lFIw4nxT1-duGpgMU0lSEXsw.roa (hash: 2n1Sc1V33Lym9tDfU6XAMI/RVBz4882qQ4ovgAYz3MY=)
3: zAGDPH7l80P_CTtsTmFR0ONkV2g.crl (hash: uW/87Y76My5DRoFThRJ0g9XuFXdahrTuFl3sVR6rVU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:8a:06:36:24:3c:8f:54:5d:66:55:74:8c:07:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768
Validity
Not Before: May 6 03:00:53 2025 GMT
Not After : May 7 03:00:53 2025 GMT
Subject: CN=e89d7d92f54f4e64d3f59d04d2d37ca8e2af4e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ae:4e:52:21:82:3f:8e:de:b4:ef:66:e7:5f:
38:a0:7c:fe:b9:23:75:87:b8:a9:20:99:a5:cb:57:
f8:2d:f5:52:1a:4d:2c:07:b8:02:dc:36:5f:30:ce:
b8:59:9c:75:13:1e:1e:b0:7b:41:40:90:23:4b:80:
13:0e:53:c2:6f:ab:d3:0b:ad:9f:a0:f5:e5:1d:df:
8c:0a:b8:96:ff:3a:d6:40:6f:88:77:a4:37:ba:dd:
5e:cd:d4:ca:66:e5:d2:d3:b4:cb:4c:74:c5:3b:25:
1e:d1:27:d6:71:f7:98:3d:33:09:80:f4:a4:0f:9b:
8b:37:1d:fd:c6:59:67:a5:9f:bf:68:b3:71:f5:4e:
1f:e0:6a:58:3f:a6:34:09:c0:06:a1:35:0a:0a:66:
6d:ab:49:ad:c7:41:d2:8f:e1:06:a8:23:52:78:2c:
87:2c:69:3f:c1:d6:9e:ea:77:09:58:3f:a1:17:45:
7c:66:c8:b8:44:7c:a3:4a:ba:fc:25:6f:d4:b3:c6:
78:6f:4b:88:a8:74:17:b4:95:a2:b2:c2:40:ee:46:
d8:6f:85:cb:80:32:aa:d5:c0:ca:f4:c0:ed:5e:05:
86:aa:fe:f7:27:79:59:db:94:93:ab:b4:95:19:74:
69:c9:3a:a2:46:62:07:7a:6d:3f:31:4e:e5:ca:e7:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9D:7D:92:F5:4F:4E:64:D3:F5:9D:04:D2:D3:7C:A8:E2:AF:4E:3E
X509v3 Authority Key Identifier:
keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:d5:2b:4d:8d:bf:e7:bd:ce:46:f1:fe:92:6d:b4:5c:0d:da:
f3:1f:db:63:69:7a:a1:53:51:ea:22:9a:55:42:52:8a:14:e3:
e2:13:e3:8a:75:3f:01:63:7e:6f:fe:fb:38:8a:f7:74:ac:15:
30:35:88:17:31:59:d2:36:bf:1c:43:e6:a1:93:f5:4e:3b:66:
0a:07:63:a3:c1:fa:9a:1b:17:5c:1e:21:a5:ab:da:fe:4c:6b:
4f:c4:a0:a5:39:1e:d2:83:d9:f1:2a:d5:43:ae:67:4e:9b:df:
5f:d3:c5:d5:d7:c6:d5:1f:7c:3c:dd:54:54:0f:1a:03:76:d6:
a8:88:13:56:43:0d:8a:73:03:1c:e9:41:0d:2c:d7:17:c1:21:
d2:30:76:af:dc:52:03:e4:ba:1c:86:bc:36:7a:14:88:a7:43:
00:b1:e4:8a:4b:f4:bd:bd:84:65:fe:da:c0:d6:ee:2a:86:06:
cd:0e:67:88:47:c6:38:35:a6:ae:0a:ad:d5:1e:50:d5:a4:12:
d6:91:95:b1:46:ae:be:e3:23:2a:e1:8a:74:79:27:65:4f:01:
fc:01:f2:98:e4:93:68:09:21:1b:a8:3d:47:fe:24:05:e8:5a:
58:5b:71:ea:00:ad:e1:eb:6e:c3:40:35:65:8e:3c:84:a6:f6:
0e:53:1e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajigY2JDyPVF1mVXSMB7/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2
NDU3NjgwHhcNMjUwNTA2MDMwMDUzWhcNMjUwNTA3MDMwMDUzWjAzMTEwLwYDVQQD
EyhlODlkN2Q5MmY1NGY0ZTY0ZDNmNTlkMDRkMmQzN2NhOGUyYWY0ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia5OUiGCP47etO9m5184oHz+uSN1
h7ipIJmly1f4LfVSGk0sB7gC3DZfMM64WZx1Ex4esHtBQJAjS4ATDlPCb6vTC62f
oPXlHd+MCriW/zrWQG+Id6Q3ut1ezdTKZuXS07TLTHTFOyUe0SfWcfeYPTMJgPSk
D5uLNx39xllnpZ+/aLNx9U4f4GpYP6Y0CcAGoTUKCmZtq0mtx0HSj+EGqCNSeCyH
LGk/wdae6ncJWD+hF0V8Zsi4RHyjSrr8JW/Us8Z4b0uIqHQXtJWissJA7kbYb4XL
gDKq1cDK9MDtXgWGqv73J3lZ25STq7SVGXRpyTqiRmIHem0/MU7lyud6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOidfZL1T05k0/WdBNLTfKjir04+MB8GA1UdIwQY
MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt
NzI3YWI2ZDA3ZmYyLzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy
LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotUrTY2/
573ORvH+km20XA3a8x/bY2l6oVNR6iKaVUJSihTj4hPjinU/AWN+b/77OIr3dKwV
MDWIFzFZ0ja/HEPmoZP1TjtmCgdjo8H6mhsXXB4hpava/kxrT8SgpTke0oPZ8SrV
Q65nTpvfX9PF1dfG1R98PN1UVA8aA3bWqIgTVkMNinMDHOlBDSzXF8Eh0jB2r9xS
A+S6HIa8NnoUiKdDALHkikv0vb2EZf7awNbuKoYGzQ5niEfGODWmrgqt1R5Q1aQS
1pGVsUauvuMjKuGKdHknZU8B/AHymOSTaAkhG6g9R/4kBehaWFtx6gCt4etuw0A1
ZY48hKb2DlMehw==
-----END CERTIFICATE-----
Generated at Tue May 6 09:43:21 2025 by rpki-client