Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
File: Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft (raw, json)
Hash identifier: wSkIetfYt6ZMRHcowrP/h6MG3Ovp++SDTOHc7vqEawA=
Subject key identifier: F1:BF:43:A2:D7:56:28:E0:A5:30:E0:AF:5D:80:E0:E9:8D:35:B8:53
Authority key identifier: 67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
Certificate issuer: /CN=6798580bb843519c104420e59c0b5c2403414607
Certificate serial: 0196B5FDF82659BD76C7118439261BCBB125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
Manifest number: 0B6D
Signing time: Fri 09 May 2025 17:00:42 +0000
Manifest this update: Fri 09 May 2025 17:00:42 +0000
Manifest next update: Sat 10 May 2025 17:00:42 +0000
Files and hashes: 1: GVUeOB4dXXqj9XML1jN57j3Df5M.roa (hash: Gudd1ItpySLdTVSh5GugJVCfXdpguWaKVtT1YrB4g6U=)
2: Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl (hash: X62V9OxPfrYRKzWPDfzg3CMUMaMb+GaHtO738HAJtEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fd:f8:26:59:bd:76:c7:11:84:39:26:1b:cb:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6798580bb843519c104420e59c0b5c2403414607
Validity
Not Before: May 9 17:00:42 2025 GMT
Not After : May 10 17:00:42 2025 GMT
Subject: CN=f1bf43a2d75628e0a530e0af5d80e0e98d35b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:d6:ff:f0:74:d9:cf:59:af:5a:90:31:e7:
5a:b2:e4:26:ef:b1:7d:2e:10:41:11:1a:ba:b9:0d:
e3:88:ef:9c:36:11:f5:4e:26:ab:07:64:51:c0:6e:
9b:f8:96:e0:22:6a:68:de:97:01:93:bf:14:0c:97:
49:06:26:a7:74:ff:da:76:ad:e4:53:4e:fc:15:d8:
21:41:ab:1c:41:8d:ae:78:c4:24:e7:dd:60:c2:d1:
39:32:02:96:be:8f:65:dc:3a:2f:f3:fc:60:d8:10:
56:3b:a2:98:15:d2:0b:7e:26:42:11:f2:5f:fc:69:
ef:96:a3:bd:cc:df:4d:eb:1a:52:2f:99:12:d3:40:
4d:f2:0d:49:88:dc:ea:80:cf:8c:92:38:07:6b:c6:
a2:9f:02:d8:4a:b9:ce:5f:23:dc:ba:fb:8e:ed:41:
13:48:af:60:60:53:11:7e:f9:c6:65:9a:11:48:93:
50:a7:1e:78:e3:6b:02:ef:69:bd:2f:20:ae:ba:06:
1e:2e:b2:64:6a:be:32:00:69:46:ae:f1:1d:bd:ad:
48:1c:36:22:86:c6:51:75:53:78:25:d1:8e:9a:99:
99:60:d7:32:a0:67:91:f7:61:11:73:54:99:68:f8:
08:3a:5a:28:cf:0b:93:ed:48:f5:7e:6e:2f:a0:a9:
56:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BF:43:A2:D7:56:28:E0:A5:30:E0:AF:5D:80:E0:E9:8D:35:B8:53
X509v3 Authority Key Identifier:
keyid:67:98:58:0B:B8:43:51:9C:10:44:20:E5:9C:0B:5C:24:03:41:46:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5hYC7hDUZwQRCDlnAtcJANBRgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a9f2b9-6e7d-4eea-a474-1f67d945b8b9/1/Z5hYC7hDUZwQRCDlnAtcJANBRgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:b4:86:85:84:3a:73:9b:b8:54:04:ce:80:6d:dd:3a:79:
dc:c0:f4:dc:f0:45:fc:f6:de:81:58:a0:7e:da:f4:46:79:24:
62:dc:3b:df:59:56:28:ea:fa:fc:a6:ae:07:ea:c7:fa:8c:71:
d5:0c:1b:01:3e:82:e3:c8:d1:a1:35:5b:cb:03:b3:00:bc:ca:
50:b4:a0:cb:c2:65:d2:a8:6a:62:31:14:3b:30:c4:0b:d7:3b:
51:53:5e:58:0b:f2:73:d1:04:da:af:e1:c9:74:93:7b:54:8a:
81:c6:74:bc:d6:0e:e6:e5:57:f0:a2:30:58:6c:11:5b:c9:6e:
ad:c3:34:84:3b:14:61:7b:e2:11:e1:77:05:36:3e:3e:ca:8d:
b9:8f:4b:b3:6b:ba:96:ba:3b:58:18:28:6c:6b:99:20:47:ee:
3f:09:9a:c2:ce:c5:ce:03:7a:ed:ee:b5:3a:eb:e7:2e:be:76:
9d:bf:d8:52:30:4c:8e:22:21:c1:c4:97:4e:e2:99:30:4b:00:
ec:eb:09:ff:ad:d1:0d:82:ab:e7:95:85:8d:01:e7:61:86:27:
92:34:38:23:a4:af:9f:8e:74:0d:8b:a2:4e:66:fc:1a:a1:7b:
69:9d:a4:34:32:a8:0c:eb:ae:00:dd:9c:7c:d4:10:a9:21:9b:
0b:7c:74:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1/fgmWb12xxGEOSYby7ElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTg1ODBiYjg0MzUxOWMxMDQ0MjBlNTljMGI1YzI0MDM0
MTQ2MDcwHhcNMjUwNTA5MTcwMDQyWhcNMjUwNTEwMTcwMDQyWjAzMTEwLwYDVQQD
EyhmMWJmNDNhMmQ3NTYyOGUwYTUzMGUwYWY1ZDgwZTBlOThkMzViODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwDW//B02c9Zr1qQMedasuQm77F9
LhBBERq6uQ3jiO+cNhH1TiarB2RRwG6b+JbgImpo3pcBk78UDJdJBiandP/adq3k
U078FdghQascQY2ueMQk591gwtE5MgKWvo9l3Dov8/xg2BBWO6KYFdILfiZCEfJf
/GnvlqO9zN9N6xpSL5kS00BN8g1JiNzqgM+MkjgHa8ainwLYSrnOXyPcuvuO7UET
SK9gYFMRfvnGZZoRSJNQpx5442sC72m9LyCuugYeLrJkar4yAGlGrvEdva1IHDYi
hsZRdVN4JdGOmpmZYNcyoGeR92ERc1SZaPgIOloozwuT7Uj1fm4voKlW/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG/Q6LXVijgpTDgr12A4OmNNbhTMB8GA1UdIwQY
MBaAFGeYWAu4Q1GcEEQg5ZwLXCQDQUYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQt
MWY2N2Q5NDViOGI5LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hOWYyYjktNmU3ZC00ZWVhLWE0NzQtMWY2N2Q5NDViOGI5
LzEvWjVoWUM3aERVWndRUkNEbG5BdGNKQU5CUmdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ+0hoWE
OnObuFQEzoBt3Tp53MD03PBF/PbegVigftr0RnkkYtw731lWKOr6/KauB+rH+oxx
1QwbAT6C48jRoTVbywOzALzKULSgy8Jl0qhqYjEUOzDEC9c7UVNeWAvyc9EE2q/h
yXSTe1SKgcZ0vNYO5uVX8KIwWGwRW8lurcM0hDsUYXviEeF3BTY+PsqNuY9Ls2u6
lro7WBgobGuZIEfuPwmaws7FzgN67e61OuvnLr52nb/YUjBMjiIhwcSXTuKZMEsA
7OsJ/63RDYKr55WFjQHnYYYnkjQ4I6Svn450DYuiTmb8GqF7aZ2kNDKoDOuuAN2c
fNQQqSGbC3x0nQ==
-----END CERTIFICATE-----
Generated at Fri May 9 23:45:47 2025 by rpki-client