Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: 0AfCupUSeLSyLct/xOSOlzN4UzNcL472pu+6m2AVMgI=
Subject key identifier: 24:1A:60:69:38:0F:A4:30:5A:F9:22:90:CC:CA:55:34:9B:55:90:B0
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 0196BBC934CCF6C9E5CD1B596B1D0748A3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 067C
Signing time: Sat 10 May 2025 20:00:47 +0000
Manifest this update: Sat 10 May 2025 20:00:47 +0000
Manifest next update: Sun 11 May 2025 20:00:47 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: 7GZELK9jOMhL1Of+HkkeGyWXNCrhbDrbII2ouI0SDe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c9:34:cc:f6:c9:e5:cd:1b:59:6b:1d:07:48:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: May 10 20:00:47 2025 GMT
Not After : May 11 20:00:47 2025 GMT
Subject: CN=241a6069380fa4305af92290ccca55349b5590b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:50:b3:ea:0c:9c:a6:fe:2b:78:09:db:5a:
bf:25:59:2f:fb:5e:fe:f6:77:1d:24:d4:1a:18:fd:
62:db:09:49:59:69:62:b3:93:8e:7b:6a:88:11:24:
c8:90:3f:8b:8d:de:2d:39:58:f0:86:7e:af:bd:de:
e7:96:81:fb:cf:ad:55:db:6b:44:d7:f0:03:11:21:
42:2b:d7:88:b6:d7:14:91:f5:10:dc:f5:43:74:4f:
1a:92:7c:99:56:8b:07:8b:c6:79:a0:2f:cb:68:80:
a9:e6:78:7b:d4:9b:05:e3:6c:4e:cb:e0:05:13:46:
38:73:ef:40:ad:7b:f3:e7:bc:f0:ff:ad:69:67:63:
77:04:19:6f:65:e2:3c:3d:8d:b5:ef:59:8a:5b:27:
5c:e4:72:bb:53:3a:79:60:22:6b:73:c7:8b:96:67:
30:33:ac:c0:41:77:fb:f9:09:30:ac:2c:3c:59:05:
62:c4:7e:28:ab:8d:a2:1f:7b:a3:eb:8d:59:b0:3c:
94:44:e1:49:dc:68:c3:72:1f:4d:67:15:b7:fe:33:
95:fa:12:34:57:41:0f:5c:8c:7a:6d:0b:07:3d:dd:
69:76:08:93:01:3d:8b:91:81:ab:75:92:42:a0:ba:
c9:ba:35:4e:18:3e:15:9d:7a:ee:b6:e3:84:21:11:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1A:60:69:38:0F:A4:30:5A:F9:22:90:CC:CA:55:34:9B:55:90:B0
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:89:37:f6:7a:e9:ea:b4:0e:90:ca:46:81:20:cc:e9:2c:d7:
f9:5d:e1:ec:cc:ac:9b:ad:b4:6f:12:da:85:22:38:5a:de:50:
68:28:17:fe:78:bd:de:d8:5d:cc:1c:47:be:07:e6:d6:40:5a:
44:0d:a3:30:91:2b:fc:87:5f:53:4d:09:37:d9:d7:3a:da:f3:
a2:04:1e:7c:9a:9c:ae:bf:c2:57:92:0a:a6:36:32:df:19:2d:
9c:08:7c:07:b0:21:26:b1:89:b1:4c:dc:0b:4b:d2:cd:81:68:
29:91:59:46:30:00:9b:db:63:40:b9:0b:be:87:42:bc:51:86:
d5:fe:5a:ec:0b:17:47:fd:fe:a4:cd:69:b3:e4:cd:c3:55:9e:
ac:46:0c:d5:aa:f1:b2:e4:6e:1c:6f:40:f8:98:bf:6c:ee:b7:
3b:44:a2:7b:a5:b6:b6:28:d6:47:92:5a:d2:bd:b1:56:e6:55:
0d:8e:48:9d:ec:d6:f5:b8:1d:69:0f:18:81:e4:32:af:f5:8b:
dd:5b:c8:26:7b:fd:ce:9d:46:df:5d:21:9b:b6:42:aa:51:e3:
78:19:a6:cf:e1:88:46:a7:03:36:db:dd:ed:8e:fc:2d:6e:2b:
3c:ff:bc:37:35:e5:78:dd:b9:0c:64:53:24:c6:71:9d:af:e4:
f8:b9:52:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yTTM9snlzRtZax0HSKPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NjVhMjFiNTYxYmE4NjY1Y2Y3OWZiZjQ0YzMxOTU5ZGUy
OGYyMTYwHhcNMjUwNTEwMjAwMDQ3WhcNMjUwNTExMjAwMDQ3WjAzMTEwLwYDVQQD
EygyNDFhNjA2OTM4MGZhNDMwNWFmOTIyOTBjY2NhNTUzNDliNTU5MGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5Qs+oMnKb+K3gJ21q/JVkv+17+
9ncdJNQaGP1i2wlJWWlis5OOe2qIESTIkD+Ljd4tOVjwhn6vvd7nloH7z61V22tE
1/ADESFCK9eIttcUkfUQ3PVDdE8aknyZVosHi8Z5oC/LaICp5nh71JsF42xOy+AF
E0Y4c+9ArXvz57zw/61pZ2N3BBlvZeI8PY2171mKWydc5HK7Uzp5YCJrc8eLlmcw
M6zAQXf7+QkwrCw8WQVixH4oq42iH3uj641ZsDyUROFJ3GjDch9NZxW3/jOV+hI0
V0EPXIx6bQsHPd1pdgiTAT2LkYGrdZJCoLrJujVOGD4VnXrutuOEIRH5BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQaYGk4D6QwWvkikMzKVTSbVZCwMB8GA1UdIwQY
MBaAFGdlohtWG6hmXPefv0TDGVneKPIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYt
ZWFkMDQxNzc0ZTA3LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lOGI4OWMtODI2OC00MDJiLWFhMjYtZWFkMDQxNzc0ZTA3
LzEvWjJXaUcxWWJxR1pjOTUtX1JNTVpXZDRvOGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYk39nrp
6rQOkMpGgSDM6SzX+V3h7Mysm620bxLahSI4Wt5QaCgX/ni93thdzBxHvgfm1kBa
RA2jMJEr/IdfU00JN9nXOtrzogQefJqcrr/CV5IKpjYy3xktnAh8B7AhJrGJsUzc
C0vSzYFoKZFZRjAAm9tjQLkLvodCvFGG1f5a7AsXR/3+pM1ps+TNw1WerEYM1arx
suRuHG9A+Ji/bO63O0Sie6W2tijWR5Ja0r2xVuZVDY5InezW9bgdaQ8YgeQyr/WL
3VvIJnv9zp1G310hm7ZCqlHjeBmmz+GIRqcDNtvd7Y78LW4rPP+8NzXleN25DGRT
JMZxna/k+LlSOw==
-----END CERTIFICATE-----
Generated at Sun May 11 05:37:42 2025 by rpki-client