Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
File: zlv1IB8YtAK45ii8d_IlL3aecPI.mft (raw, json)
Hash identifier: vGFnWcMKb7y0bQoR+XeWzXLqNd7CISL9URc7cYO+jIo=
Subject key identifier: 73:B4:05:C4:11:62:08:BC:31:1C:5E:FA:25:A3:CB:70:87:A0:98:A2
Authority key identifier: CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
Certificate issuer: /CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Certificate serial: 0196A0F6E60CD3DE2944C6D2A05BDAAF92E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
Manifest number: 0176
Signing time: Mon 05 May 2025 15:00:57 +0000
Manifest this update: Mon 05 May 2025 15:00:57 +0000
Manifest next update: Tue 06 May 2025 15:00:57 +0000
Files and hashes: 1: k3iYLAwyPc2aObu9-B_F44ynmik.roa (hash: LrwFsWIjQZ+W2D90vgDv7dfPfE/Ui+QCFrdt8y4WIOo=)
2: uo2GXB4VHSmg2Ip5LPqoztARweE.roa (hash: B+nheQmzK7tIfpNsYNuajCXoKRHWvlQECSBdwwc2A0o=)
3: zlv1IB8YtAK45ii8d_IlL3aecPI.crl (hash: c6DC1tZRMb1vPQHC1UJWQO2vyo/RJLSENLfyWG3KvuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:e6:0c:d3:de:29:44:c6:d2:a0:5b:da:af:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5bf5201f18b402b8e628bc77f2252f769e70f2
Validity
Not Before: May 5 15:00:57 2025 GMT
Not After : May 6 15:00:57 2025 GMT
Subject: CN=73b405c4116208bc311c5efa25a3cb7087a098a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:91:1e:e0:66:6b:08:c9:53:ec:c4:ef:fa:
86:45:3a:c3:29:44:eb:b3:6c:a3:29:13:13:96:23:
6d:38:09:d5:c4:36:7d:d7:89:4c:6c:83:79:3c:c9:
af:d7:2c:72:ec:06:fe:d9:f6:75:45:75:91:10:95:
6e:47:93:2a:b7:34:d2:d0:b7:cb:f3:8d:d5:f5:4f:
d7:f7:31:bd:f5:bb:e6:0f:ac:5d:ee:48:e8:ec:e8:
0b:2f:55:38:cc:ef:1c:e6:75:0e:75:14:cc:b7:96:
72:46:77:3d:86:b4:26:24:d7:ed:6c:69:77:d3:cc:
70:59:78:c6:48:e8:21:8c:44:80:68:c0:db:71:9b:
3a:4c:3e:a4:f5:4c:5f:21:22:dc:b6:13:22:d7:48:
b9:c1:41:0b:13:5c:76:f9:c1:c4:e2:74:f6:8d:13:
54:27:72:09:ab:c3:99:17:9b:1f:2b:fa:fa:7b:fe:
b1:7e:cc:3f:8c:ad:92:82:af:3c:0d:b4:62:e6:31:
89:aa:3c:d4:64:49:7a:94:57:2e:de:88:b9:af:32:
32:e7:84:10:f4:ff:18:7f:00:54:d0:7d:1f:dd:6c:
bd:8c:2f:28:90:9a:27:9b:b6:5a:3a:49:43:42:e4:
de:2a:b3:c9:9c:e2:76:80:b5:8c:c5:41:aa:de:f4:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B4:05:C4:11:62:08:BC:31:1C:5E:FA:25:A3:CB:70:87:A0:98:A2
X509v3 Authority Key Identifier:
keyid:CE:5B:F5:20:1F:18:B4:02:B8:E6:28:BC:77:F2:25:2F:76:9E:70:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlv1IB8YtAK45ii8d_IlL3aecPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/1c7917-8aa6-4c43-92dd-7476f42f2d9c/1/zlv1IB8YtAK45ii8d_IlL3aecPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8d:5d:6f:19:d5:4b:75:96:e1:e2:28:67:fe:c1:8d:64:dc:
cf:f2:21:90:f7:c1:66:cb:d3:4f:a1:5b:c2:39:64:02:7a:b3:
53:10:3a:cb:88:03:74:f0:5a:ac:ed:a3:47:89:82:d9:9a:86:
ad:2c:9d:46:5f:a8:f0:81:9a:87:10:78:ac:51:d1:a5:81:64:
9d:33:d5:0c:22:a2:76:78:81:63:ce:ba:ac:f5:56:8d:72:3d:
4f:57:d4:33:f5:e2:86:8b:62:2c:6c:f5:b0:27:ad:76:61:9f:
38:8d:f4:2d:82:00:0d:8a:b7:43:50:a6:5c:20:d3:a8:b1:b0:
2a:ed:8a:7f:d5:de:11:3d:15:78:ea:0b:56:b8:00:09:01:d3:
2c:9a:ee:9a:0c:c0:c5:b5:b5:9e:ad:92:3c:04:61:ef:d4:3b:
7e:de:86:8d:0d:52:49:a6:8d:0b:89:8a:a0:16:ae:ef:ad:0a:
ae:11:ae:e3:e1:08:c5:e6:7b:ac:45:e2:85:87:aa:b8:7c:b2:
2a:06:33:1e:8a:c2:d6:cc:70:f4:1c:6d:07:e5:bf:94:5a:a9:
b0:eb:9c:ba:28:63:22:32:48:49:97:08:2b:2b:aa:0e:f6:73:
b1:0a:89:f3:cb:27:30:4a:ba:66:fa:11:f4:94:f1:33:89:9a:
fb:e7:1e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9uYM094pRMbSoFvar5LkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNWJmNTIwMWYxOGI0MDJiOGU2MjhiYzc3ZjIyNTJmNzY5
ZTcwZjIwHhcNMjUwNTA1MTUwMDU3WhcNMjUwNTA2MTUwMDU3WjAzMTEwLwYDVQQD
Eyg3M2I0MDVjNDExNjIwOGJjMzExYzVlZmEyNWEzY2I3MDg3YTA5OGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZuRHuBmawjJU+zE7/qGRTrDKUTr
s2yjKRMTliNtOAnVxDZ914lMbIN5PMmv1yxy7Ab+2fZ1RXWREJVuR5MqtzTS0LfL
843V9U/X9zG99bvmD6xd7kjo7OgLL1U4zO8c5nUOdRTMt5ZyRnc9hrQmJNftbGl3
08xwWXjGSOghjESAaMDbcZs6TD6k9UxfISLcthMi10i5wUELE1x2+cHE4nT2jRNU
J3IJq8OZF5sfK/r6e/6xfsw/jK2Sgq88DbRi5jGJqjzUZEl6lFcu3oi5rzIy54QQ
9P8YfwBU0H0f3Wy9jC8okJonm7ZaOklDQuTeKrPJnOJ2gLWMxUGq3vSviwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHO0BcQRYgi8MRxe+iWjy3CHoJiiMB8GA1UdIwQY
MBaAFM5b9SAfGLQCuOYovHfyJS92nnDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQt
NzQ3NmY0MmYyZDljLzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xYzc5MTctOGFhNi00YzQzLTkyZGQtNzQ3NmY0MmYyZDlj
LzEvemx2MUlCOFl0QUs0NWlpOGRfSWxMM2FlY1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhI1dbxnV
S3WW4eIoZ/7BjWTcz/IhkPfBZsvTT6FbwjlkAnqzUxA6y4gDdPBarO2jR4mC2ZqG
rSydRl+o8IGahxB4rFHRpYFknTPVDCKidniBY866rPVWjXI9T1fUM/XihotiLGz1
sCetdmGfOI30LYIADYq3Q1CmXCDTqLGwKu2Kf9XeET0VeOoLVrgACQHTLJrumgzA
xbW1nq2SPARh79Q7ft6GjQ1SSaaNC4mKoBau760KrhGu4+EIxeZ7rEXihYequHyy
KgYzHorC1sxw9BxtB+W/lFqpsOucuihjIjJISZcIKyuqDvZzsQqJ88snMEq6ZvoR
9JTxM4ma++ceBA==
-----END CERTIFICATE-----
Generated at Mon May 5 22:29:04 2025 by rpki-client