Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: ZPHt0BhcAShD34hdICj8RodQpY7xC0QQFKL6eAM9LRA=
Subject key identifier: 97:99:DC:08:4C:00:A2:D8:27:EE:0B:74:69:FC:C9:D0:D7:CD:D7:CF
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 01969F3F02423DDB3467615B7FCD08824D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 05C3
Signing time: Mon 05 May 2025 07:00:28 +0000
Manifest this update: Mon 05 May 2025 07:00:28 +0000
Manifest next update: Tue 06 May 2025 07:00:28 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: kSfdG65hDOUgxiHdzXpG1mSiuJVAz5zlA+J+EcEU1tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:02:42:3d:db:34:67:61:5b:7f:cd:08:82:4d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: May 5 07:00:28 2025 GMT
Not After : May 6 07:00:28 2025 GMT
Subject: CN=9799dc084c00a2d827ee0b7469fcc9d0d7cdd7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:77:82:3a:cb:39:e4:37:ff:44:18:c6:29:
77:b6:6b:56:f9:41:3b:cc:09:5a:43:9f:f3:1d:39:
19:0c:d7:a9:4b:35:59:03:10:7d:db:b0:37:45:d8:
78:8b:9d:19:b2:c1:1b:81:62:fe:9b:54:53:0e:a6:
8f:ea:19:6c:89:ad:06:79:14:d4:dd:1f:a7:4b:9a:
98:37:52:8a:16:38:81:55:56:ed:88:3e:2e:1d:72:
6a:ae:5e:4a:46:d3:37:4d:8d:ef:d6:48:40:55:ff:
bc:b6:a3:de:34:f9:54:03:8c:32:71:f7:fe:68:80:
7c:51:1f:a4:5f:8f:e4:cf:90:26:fd:60:c0:8e:ad:
cb:02:54:04:0a:40:ed:46:eb:3f:10:b4:97:42:ea:
ee:fe:67:5f:32:8e:7d:e3:b7:20:24:7d:49:1a:d1:
be:1e:df:32:6d:ea:5b:78:20:44:e1:0c:b9:5e:85:
bc:f9:e1:3d:63:ca:17:64:5f:53:fb:9c:b4:37:73:
ff:f7:66:9f:40:0c:6e:5c:d8:c3:16:3c:4a:dd:22:
12:31:bb:74:1c:4c:50:b9:d6:66:81:0c:d4:68:e4:
23:ee:3f:47:b8:b4:6a:f8:18:15:73:f1:fd:54:98:
57:7e:75:04:36:10:bf:a9:dc:49:c2:f9:58:d3:5e:
38:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:DC:08:4C:00:A2:D8:27:EE:0B:74:69:FC:C9:D0:D7:CD:D7:CF
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:24:b8:25:7a:d0:8c:35:44:d9:6e:04:29:db:f6:69:22:fa:
ef:c4:59:a9:1a:4e:22:b8:c1:d3:5e:dc:0b:ba:9b:cb:91:e7:
1b:b6:95:a7:ca:62:b9:d1:d8:b6:d4:78:d2:08:94:60:c2:f0:
dc:b5:29:f4:6f:c5:84:11:25:ef:ff:39:e3:3f:45:ed:96:b6:
0f:0b:d6:1a:d2:a3:21:0c:dd:f4:86:7b:65:19:af:af:7d:38:
e5:eb:95:3c:6c:02:9e:86:f4:2a:8f:dd:5a:ff:44:fc:8f:0d:
a4:ae:47:db:b5:0b:4b:74:98:8b:74:7e:8a:87:87:b6:19:2e:
a2:c1:52:fa:5c:87:31:78:cb:09:ca:59:fd:88:ff:48:b0:84:
31:42:72:e4:9b:ba:bf:06:b8:dd:a3:ca:83:cb:fa:c9:3e:f6:
03:ba:8d:b6:bb:7a:72:8b:31:5d:a4:05:e9:a5:f1:2b:34:c4:
c1:e9:f0:a1:03:76:4b:25:76:c0:cf:8b:00:1a:b1:cb:fa:ae:
30:a3:a7:ed:95:3f:25:c3:ac:e2:d8:da:e7:b2:b5:9b:ab:37:
4e:f7:2b:8f:90:7b:e6:d4:d0:93:9f:57:14:b9:03:c1:fe:7c:
a6:1a:56:7c:3b:76:10:e6:ca:11:c6:84:37:a7:25:9d:2f:95:
d4:16:05:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafPwJCPds0Z2Fbf80Igk0rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTQ3OGU5ZjFmMzBiMjRmZDE3MTk4ZDFjYWM4MzViYzFl
NGRmYWYwHhcNMjUwNTA1MDcwMDI4WhcNMjUwNTA2MDcwMDI4WjAzMTEwLwYDVQQD
Eyg5Nzk5ZGMwODRjMDBhMmQ4MjdlZTBiNzQ2OWZjYzlkMGQ3Y2RkN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGh3gjrLOeQ3/0QYxil3tmtW+UE7
zAlaQ5/zHTkZDNepSzVZAxB927A3Rdh4i50ZssEbgWL+m1RTDqaP6hlsia0GeRTU
3R+nS5qYN1KKFjiBVVbtiD4uHXJqrl5KRtM3TY3v1khAVf+8tqPeNPlUA4wycff+
aIB8UR+kX4/kz5Am/WDAjq3LAlQECkDtRus/ELSXQuru/mdfMo5947cgJH1JGtG+
Ht8ybepbeCBE4Qy5XoW8+eE9Y8oXZF9T+5y0N3P/92afQAxuXNjDFjxK3SISMbt0
HExQudZmgQzUaOQj7j9HuLRq+BgVc/H9VJhXfnUENhC/qdxJwvlY0144jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeZ3AhMAKLYJ+4LdGn8ydDXzdfPMB8GA1UdIwQY
MBaAFEWUeOnx8wsk/RcZjRysg1vB5N+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYt
Njc3ZjUxZWJiZDg1LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NWE5YzgtYTI1Ny00N2MzLWJlNmYtNjc3ZjUxZWJiZDg1
LzEvUlpSNDZmSHpDeVQ5RnhtTkhLeURXOEhrMzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiS4JXrQ
jDVE2W4EKdv2aSL678RZqRpOIrjB017cC7qby5HnG7aVp8piudHYttR40giUYMLw
3LUp9G/FhBEl7/854z9F7Za2DwvWGtKjIQzd9IZ7ZRmvr3045euVPGwCnob0Ko/d
Wv9E/I8NpK5H27ULS3SYi3R+ioeHthkuosFS+lyHMXjLCcpZ/Yj/SLCEMUJy5Ju6
vwa43aPKg8v6yT72A7qNtrt6cosxXaQF6aXxKzTEwenwoQN2SyV2wM+LABqxy/qu
MKOn7ZU/JcOs4tja57K1m6s3Tvcrj5B75tTQk59XFLkDwf58phpWfDt2EObKEcaE
N6clnS+V1BYF9Q==
-----END CERTIFICATE-----
Generated at Mon May 5 16:17:23 2025 by rpki-client