Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: mUjMQw/MrwijkmhkQtxhs9tC0VlAsTqFKwvwOGKLMUw=
Subject key identifier: B8:2A:11:F5:76:03:1E:87:7D:23:D8:97:39:5E:91:75:22:26:3A:86
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 0196BB921CA76E9CC1FFB1D04C89547E920C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: BB
Signing time: Sat 10 May 2025 19:00:36 +0000
Manifest this update: Sat 10 May 2025 19:00:36 +0000
Manifest next update: Sun 11 May 2025 19:00:36 +0000
Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: Q+CJW72K/RO0JSntxfrmSrU179refWXbr8oXFYwKxQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:1c:a7:6e:9c:c1:ff:b1:d0:4c:89:54:7e:92:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: May 10 19:00:36 2025 GMT
Not After : May 11 19:00:36 2025 GMT
Subject: CN=b82a11f576031e877d23d897395e917522263a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:62:a0:d0:3d:81:8e:a6:4c:32:18:6e:44:
fe:06:92:e3:af:88:6a:17:ba:32:18:69:41:ae:00:
2b:cd:67:8e:c5:f1:e3:de:77:97:82:90:00:b3:16:
90:dd:0c:2b:4d:48:8b:17:90:66:76:1f:fc:1b:9d:
16:fb:58:13:a9:fa:e8:22:aa:56:dd:61:1a:fc:fd:
64:3e:f5:d4:d1:ab:20:5d:5b:34:ee:03:84:43:87:
8e:b4:c9:7e:34:43:d5:c2:55:a8:fe:93:67:06:1c:
61:cc:dd:ba:4f:ea:05:35:be:f1:d1:e3:09:96:52:
aa:a1:df:e9:d9:43:13:a2:d1:e1:e5:fb:d3:b0:83:
fe:e2:b0:d6:2b:48:3d:d6:ca:65:c2:5d:34:12:35:
6b:5c:f2:0e:f3:48:bb:ef:62:ab:f0:13:26:ec:e9:
b9:89:71:12:d8:62:b3:c4:b1:e5:35:12:f1:f4:c8:
62:1f:5b:9a:c0:b6:78:04:e7:c0:99:62:e3:60:73:
88:e3:26:1f:02:2d:47:a0:e4:57:c3:e0:24:98:bb:
b9:fd:17:b2:24:64:65:40:78:d9:42:97:22:46:a7:
07:f0:23:e5:c4:d0:85:42:38:a8:bb:a4:17:d9:38:
74:ea:06:50:de:5f:dc:14:94:5a:80:5c:a5:35:9e:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2A:11:F5:76:03:1E:87:7D:23:D8:97:39:5E:91:75:22:26:3A:86
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7b:0e:c4:45:5a:a5:e0:1d:23:6d:a1:63:53:c3:b4:1a:62:
70:6e:ac:ff:2a:b9:f1:bf:58:c9:77:de:04:06:57:40:f6:9b:
2a:07:5b:1b:bb:a0:bc:a4:53:30:39:ad:25:ab:92:53:3f:06:
8e:bd:4b:d4:3f:2c:bb:2f:a9:7f:41:8b:23:e9:8f:12:6f:64:
ce:0c:88:ca:b8:3b:2c:9a:6e:b3:9f:fd:57:b7:84:93:e3:55:
16:ba:56:84:83:b9:90:d7:a7:49:18:0f:ae:0f:f7:20:86:8b:
3b:e0:9c:d3:b1:1c:b3:f3:4d:57:a7:e4:59:76:fe:f8:04:2f:
b3:82:f9:7e:a9:9d:2a:1c:97:94:0a:36:a5:7c:6d:bb:27:79:
70:a5:4c:b5:cf:9d:9a:28:90:4b:22:55:e4:b1:64:81:26:34:
d6:9d:cd:2e:b1:46:c5:ce:02:30:bc:30:94:3e:32:a1:4e:24:
7d:96:a3:01:0f:06:c6:41:9e:e3:1d:c5:09:22:11:55:03:34:
73:60:80:95:59:e4:99:52:04:8a:0c:aa:c2:bb:e2:86:5f:c5:
f1:5d:4e:21:fd:82:e4:86:ce:f2:92:1d:5f:88:0f:c5:bf:c2:
21:f8:4f:7a:d3:bb:df:9f:90:3f:8f:13:9d:fe:68:aa:c9:c2:
4c:a7:89:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7khynbpzB/7HQTIlUfpIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWE5ZjcyOTM4OGMxNjliYWNjMWNiYWY5OGUyMzZkNGU4
MDhhYjQwHhcNMjUwNTEwMTkwMDM2WhcNMjUwNTExMTkwMDM2WjAzMTEwLwYDVQQD
EyhiODJhMTFmNTc2MDMxZTg3N2QyM2Q4OTczOTVlOTE3NTIyMjYzYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooVioNA9gY6mTDIYbkT+BpLjr4hq
F7oyGGlBrgArzWeOxfHj3neXgpAAsxaQ3QwrTUiLF5Bmdh/8G50W+1gTqfroIqpW
3WEa/P1kPvXU0asgXVs07gOEQ4eOtMl+NEPVwlWo/pNnBhxhzN26T+oFNb7x0eMJ
llKqod/p2UMTotHh5fvTsIP+4rDWK0g91splwl00EjVrXPIO80i772Kr8BMm7Om5
iXES2GKzxLHlNRLx9MhiH1uawLZ4BOfAmWLjYHOI4yYfAi1HoORXw+AkmLu5/Rey
JGRlQHjZQpciRqcH8CPlxNCFQjiou6QX2Th06gZQ3l/cFJRagFylNZ4orQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgqEfV2Ax6HfSPYlzlekXUiJjqGMB8GA1UdIwQY
MBaAFMwan3KTiMFpuswcuvmOI21OgIq0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEt
N2ZmYzRmNDAzNjZhLzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NzFjNmItMGYyNi00YzQzLWEwYWEtN2ZmYzRmNDAzNjZh
LzEvekJxZmNwT0l3V202ekJ5Ni1ZNGpiVTZBaXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnsOxEVa
peAdI22hY1PDtBpicG6s/yq58b9YyXfeBAZXQPabKgdbG7ugvKRTMDmtJauSUz8G
jr1L1D8suy+pf0GLI+mPEm9kzgyIyrg7LJpus5/9V7eEk+NVFrpWhIO5kNenSRgP
rg/3IIaLO+Cc07Ecs/NNV6fkWXb++AQvs4L5fqmdKhyXlAo2pXxtuyd5cKVMtc+d
miiQSyJV5LFkgSY01p3NLrFGxc4CMLwwlD4yoU4kfZajAQ8GxkGe4x3FCSIRVQM0
c2CAlVnkmVIEigyqwrvihl/F8V1OIf2C5IbO8pIdX4gPxb/CIfhPetO735+QP48T
nf5oqsnCTKeJkQ==
-----END CERTIFICATE-----
Generated at Sun May 11 03:59:14 2025 by rpki-client