Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
File: zfYsvWz36AgiT2z4cl424qllNSw.mft (raw, json)
Hash identifier: kcnO5eC9EXFYuU0OtxGNun4GnnQHyHnj3pwWtF3XXxU=
Subject key identifier: 9B:F6:E3:68:C7:A7:C3:F3:AC:20:A6:BD:F2:4F:B1:0D:6C:8D:8A:A5
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 0196C4951C906B9E87114C62C954DAB8EF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
Manifest number: 07BF
Signing time: Mon 12 May 2025 13:00:28 +0000
Manifest this update: Mon 12 May 2025 13:00:28 +0000
Manifest next update: Tue 13 May 2025 13:00:28 +0000
Files and hashes: 1: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (hash: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=)
2: zfYsvWz36AgiT2z4cl424qllNSw.crl (hash: NTadP9iOsT00p92DxoV89Ymi7ysA4HkSbqVsHAm48ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:95:1c:90:6b:9e:87:11:4c:62:c9:54:da:b8:ef:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: May 12 13:00:28 2025 GMT
Not After : May 13 13:00:28 2025 GMT
Subject: CN=9bf6e368c7a7c3f3ac20a6bdf24fb10d6c8d8aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:c3:64:8d:80:bd:2f:ca:1e:e2:e2:a7:ac:
73:4d:18:ae:e9:1c:b5:6e:d9:80:ac:1a:01:21:4f:
25:a8:8b:ee:10:4b:12:52:02:c3:af:2d:d8:21:e6:
9c:8f:61:2f:3f:a9:09:da:5d:a3:f8:58:ca:c0:7f:
81:ff:e7:d1:ce:91:86:d3:46:21:8f:69:c1:e4:e0:
c7:81:70:fd:c3:5c:f3:be:0d:a9:df:56:d8:2b:8e:
b6:af:01:c7:11:65:05:d7:05:19:42:81:31:d1:94:
9c:49:f9:64:0d:c0:b6:b3:72:dc:2b:a4:e4:33:f6:
d9:41:66:2d:a1:74:88:4e:2a:ef:d7:39:d9:37:1e:
68:5a:0c:de:28:4e:b5:7b:79:49:10:ea:1f:e8:d0:
63:77:c3:52:17:be:cd:53:a9:9b:bf:2d:e1:f1:36:
01:4e:f1:d1:5e:fc:24:ff:0a:32:86:d5:b7:cf:88:
8e:56:73:f8:d3:cb:ba:6a:85:3e:8d:15:08:23:aa:
72:7a:17:fa:42:de:5c:9f:5f:b9:af:8f:f6:33:2d:
33:35:a7:00:de:71:5d:a1:20:4a:03:ce:25:3b:7e:
94:9d:72:c4:13:e8:f0:cf:d6:b3:21:ee:e2:1b:2a:
60:fe:97:3c:58:1f:93:06:d0:26:0e:c6:52:d1:1d:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F6:E3:68:C7:A7:C3:F3:AC:20:A6:BD:F2:4F:B1:0D:6C:8D:8A:A5
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:f5:98:01:b4:3c:57:85:a1:1f:ee:1a:a8:4f:4f:77:d0:da:
72:22:d0:bc:88:f8:b3:32:20:19:fb:3f:af:ae:7c:28:fb:3b:
2e:9a:ad:d6:f6:12:3c:43:4e:0f:00:69:ee:38:31:05:e6:9c:
73:91:40:56:3f:f8:2d:22:a6:0f:c1:e2:4d:81:a8:af:b5:f1:
0e:91:4f:df:72:6e:20:45:fa:49:28:43:90:ef:09:9f:78:3d:
8f:83:f8:e3:66:2d:54:a3:cc:d5:a6:d1:22:6e:1a:1a:0b:25:
69:fc:b4:33:34:28:69:f9:13:07:4c:d8:64:08:b5:29:02:4a:
9e:f7:4a:c4:8d:80:bc:a1:32:4c:ce:04:96:fa:14:ae:f4:19:
85:89:00:51:24:f7:09:9e:fc:79:7a:d1:e3:64:c5:3e:55:54:
54:09:8e:2c:50:d3:d9:37:c2:74:5e:70:05:27:b2:e4:e4:f2:
ab:f7:0e:74:15:69:5a:4f:6a:08:04:49:2a:57:5e:40:87:65:
af:d9:b2:6d:1a:5e:68:6c:34:bb:72:18:9d:cc:6f:5b:06:b2:
4c:4c:36:f9:c4:c1:ba:b5:a0:64:c0:e1:4c:6f:53:d4:e7:02:
e2:87:30:6f:38:6c:da:53:82:72:10:e5:ca:d5:37:f4:61:e3:
9c:45:f1:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbElRyQa56HEUxiyVTauO8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjYyY2JkNmNmN2U4MDgyMjRmNmNmODcyNWUzNmUyYTk2
NTM1MmMwHhcNMjUwNTEyMTMwMDI4WhcNMjUwNTEzMTMwMDI4WjAzMTEwLwYDVQQD
Eyg5YmY2ZTM2OGM3YTdjM2YzYWMyMGE2YmRmMjRmYjEwZDZjOGQ4YWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIvDZI2AvS/KHuLip6xzTRiu6Ry1
btmArBoBIU8lqIvuEEsSUgLDry3YIeacj2EvP6kJ2l2j+FjKwH+B/+fRzpGG00Yh
j2nB5ODHgXD9w1zzvg2p31bYK462rwHHEWUF1wUZQoEx0ZScSflkDcC2s3LcK6Tk
M/bZQWYtoXSITirv1znZNx5oWgzeKE61e3lJEOof6NBjd8NSF77NU6mbvy3h8TYB
TvHRXvwk/woyhtW3z4iOVnP408u6aoU+jRUII6pyehf6Qt5cn1+5r4/2My0zNacA
3nFdoSBKA84lO36UnXLEE+jwz9azIe7iGypg/pc8WB+TBtAmDsZS0R1E2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv242jHp8PzrCCmvfJPsQ1sjYqlMB8GA1UdIwQY
MBaAFM32LL1s9+gIIk9s+HJeNuKpZTUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUt
ODQ5NDE3YWU2MzRkLzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lOTE2OWEtZWUwNi00ZTRhLWIyMWUtODQ5NDE3YWU2MzRk
LzEvemZZc3ZXejM2QWdpVDJ6NGNsNDI0cWxsTlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fWYAbQ8
V4WhH+4aqE9Pd9DaciLQvIj4szIgGfs/r658KPs7Lpqt1vYSPENODwBp7jgxBeac
c5FAVj/4LSKmD8HiTYGor7XxDpFP33JuIEX6SShDkO8Jn3g9j4P442YtVKPM1abR
Im4aGgslafy0MzQoafkTB0zYZAi1KQJKnvdKxI2AvKEyTM4ElvoUrvQZhYkAUST3
CZ78eXrR42TFPlVUVAmOLFDT2TfCdF5wBSey5OTyq/cOdBVpWk9qCARJKldeQIdl
r9mybRpeaGw0u3IYncxvWwayTEw2+cTBurWgZMDhTG9T1OcC4ocwbzhs2lOCchDl
ytU39GHjnEXxCw==
-----END CERTIFICATE-----
Generated at Mon May 12 20:37:34 2025 by rpki-client