Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
File: ZlBwd85_MPwGht0JNKiZl98x6Ew.mft (raw, json)
Hash identifier: n9SDdawi2TKtl0YGe1BGcwUV5wQ9XsXUjNvZ5o19Ojs=
Subject key identifier: 46:76:5E:1E:A8:BB:BE:B5:83:E2:A0:D1:99:D1:B2:66:B2:63:93:FF
Authority key identifier: 66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
Certificate issuer: /CN=66507077ce7f30fc0686dd0934a89997df31e84c
Certificate serial: 0196D2BF6E0159AA9BC609A67554AC33A0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
Manifest number: C1
Signing time: Thu 15 May 2025 07:01:22 +0000
Manifest this update: Thu 15 May 2025 07:01:22 +0000
Manifest next update: Fri 16 May 2025 07:01:22 +0000
Files and hashes: 1: CMAN4bcbFlE2ovL3BXKdvH4eTII.roa (hash: ZzFaJfQBLQmJT0k4QbFN8QUiuOCXpP8XehevhIAFTKY=)
2: ZlBwd85_MPwGht0JNKiZl98x6Ew.crl (hash: rvtFitB6QFRC2vXACPavaMZ+EpyorT9CM1ASQQZ2UAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:6e:01:59:aa:9b:c6:09:a6:75:54:ac:33:a0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66507077ce7f30fc0686dd0934a89997df31e84c
Validity
Not Before: May 15 07:01:22 2025 GMT
Not After : May 16 07:01:22 2025 GMT
Subject: CN=46765e1ea8bbbeb583e2a0d199d1b266b26393ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:20:da:27:85:27:a2:9d:12:03:57:af:17:
fb:c0:5b:a6:54:62:73:22:ce:95:a5:4f:c9:be:2c:
a1:34:95:dd:10:a6:f8:12:62:e9:a4:7e:17:5c:9e:
22:95:24:6c:38:35:72:ab:8f:6a:fe:69:bd:11:a2:
d8:17:12:9b:e1:fb:32:c7:72:8f:ac:ce:cc:96:10:
9d:9e:69:69:44:28:fb:dd:60:14:08:e4:76:1e:96:
c0:bd:c7:92:3a:dd:a0:e7:09:f5:18:fa:79:a9:d3:
90:55:ee:d0:0e:fc:54:13:ff:01:f7:25:45:b4:e4:
35:fc:78:21:4c:ba:a2:1f:9a:95:0f:a3:71:73:8b:
90:f7:31:13:d8:a3:17:e2:59:44:93:8d:c8:42:fd:
08:8c:80:3a:1a:0d:39:1e:79:99:35:7d:4a:75:76:
46:23:2a:84:1e:0e:fa:e4:e2:6f:42:53:ff:78:56:
29:f9:47:a9:85:9d:28:b0:a5:4b:24:f1:df:87:47:
3d:14:90:81:3a:78:bc:38:4d:a6:3a:e7:32:63:4a:
89:c0:65:e7:35:59:c9:24:b4:1b:3c:3b:11:1a:d2:
d8:b0:f9:6e:ba:24:21:30:b4:46:fb:2a:16:41:18:
af:9a:9d:f4:5f:5f:01:03:be:d7:50:4f:63:af:bb:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:76:5E:1E:A8:BB:BE:B5:83:E2:A0:D1:99:D1:B2:66:B2:63:93:FF
X509v3 Authority Key Identifier:
keyid:66:50:70:77:CE:7F:30:FC:06:86:DD:09:34:A8:99:97:DF:31:E8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlBwd85_MPwGht0JNKiZl98x6Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a36365-8552-4a97-8bfa-ccaf44d41648/1/ZlBwd85_MPwGht0JNKiZl98x6Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:19:fb:19:55:5b:de:ad:20:61:0f:f0:f5:0a:1c:23:e1:
fd:f6:9f:1d:f5:33:d0:27:45:3b:a4:56:49:04:d8:90:78:86:
f7:80:61:cb:53:98:f5:51:ad:0b:bd:66:e9:50:c9:c6:58:6d:
80:0b:ef:e9:3b:6f:69:19:72:d0:77:6b:25:62:61:e3:b4:0f:
33:64:fa:59:f9:a2:14:ea:c0:f8:f9:bc:5d:ab:4c:7a:dc:3a:
eb:0c:a4:cc:7a:1a:27:c1:ea:b4:4f:40:f1:76:42:7e:74:b0:
d6:be:a1:64:71:0d:51:1a:4c:c5:9a:ef:9f:73:8e:2b:c5:dd:
e5:05:b7:5b:e4:f1:82:c0:51:2c:ab:cb:1d:11:ee:12:06:7f:
7d:f4:34:bd:67:4c:51:42:0d:fc:67:70:2a:53:ed:fe:8c:86:
00:4e:44:f4:94:60:2e:e6:d0:4a:49:f5:35:6c:ea:3a:bc:2c:
13:f7:37:2b:ba:32:3b:fe:5d:1e:93:07:11:9f:8f:1a:3b:8c:
92:9d:dd:36:41:1c:14:fa:7e:54:af:12:a4:20:d9:0d:76:80:
9b:c1:44:be:25:c9:cb:f2:92:5f:b5:bc:ae:d8:8a:ba:85:b8:
3a:ab:fb:de:55:8b:a6:a5:dc:e1:e6:2b:d4:d5:b8:c2:06:61:
3e:8b:02:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSv24BWaqbxgmmdVSsM6DBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTA3MDc3Y2U3ZjMwZmMwNjg2ZGQwOTM0YTg5OTk3ZGYz
MWU4NGMwHhcNMjUwNTE1MDcwMTIyWhcNMjUwNTE2MDcwMTIyWjAzMTEwLwYDVQQD
Eyg0Njc2NWUxZWE4YmJiZWI1ODNlMmEwZDE5OWQxYjI2NmIyNjM5M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTog2ieFJ6KdEgNXrxf7wFumVGJz
Is6VpU/JviyhNJXdEKb4EmLppH4XXJ4ilSRsODVyq49q/mm9EaLYFxKb4fsyx3KP
rM7MlhCdnmlpRCj73WAUCOR2HpbAvceSOt2g5wn1GPp5qdOQVe7QDvxUE/8B9yVF
tOQ1/HghTLqiH5qVD6Nxc4uQ9zET2KMX4llEk43IQv0IjIA6Gg05HnmZNX1KdXZG
IyqEHg765OJvQlP/eFYp+UephZ0osKVLJPHfh0c9FJCBOni8OE2mOucyY0qJwGXn
NVnJJLQbPDsRGtLYsPluuiQhMLRG+yoWQRivmp30X18BA77XUE9jr7uWOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ2Xh6ou761g+Kg0ZnRsmayY5P/MB8GA1UdIwQY
MBaAFGZQcHfOfzD8BobdCTSomZffMehMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEt
Y2NhZjQ0ZDQxNjQ4LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hMzYzNjUtODU1Mi00YTk3LThiZmEtY2NhZjQ0ZDQxNjQ4
LzEvWmxCd2Q4NV9NUHdHaHQwSk5LaVpsOTh4NkV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbucZ+xlV
W96tIGEP8PUKHCPh/fafHfUz0CdFO6RWSQTYkHiG94Bhy1OY9VGtC71m6VDJxlht
gAvv6TtvaRly0HdrJWJh47QPM2T6WfmiFOrA+Pm8XatMetw66wykzHoaJ8HqtE9A
8XZCfnSw1r6hZHENURpMxZrvn3OOK8Xd5QW3W+TxgsBRLKvLHRHuEgZ/ffQ0vWdM
UUIN/GdwKlPt/oyGAE5E9JRgLubQSkn1NWzqOrwsE/c3K7oyO/5dHpMHEZ+PGjuM
kp3dNkEcFPp+VK8SpCDZDXaAm8FEviXJy/KSX7W8rtiKuoW4Oqv73lWLpqXc4eYr
1NW4wgZhPosCTg==
-----END CERTIFICATE-----
Generated at Thu May 15 12:37:17 2025 by rpki-client