Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: 78+HizxRlkdOamo2EaUQpGJe5+a/2988Uqp2ygy9Pfs=
Subject key identifier: 4C:6B:33:76:26:72:D0:C4:B3:8D:B1:BD:74:09:E2:A6:20:65:9A:0D
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 0196A76689FB642FE549D313E19F1968AA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 21:00:37 +0000
Manifest this update: Tue 06 May 2025 21:00:37 +0000
Manifest next update: Wed 07 May 2025 21:00:37 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: Gf2Fc2hBcvE20OKp/6WZYIjdOpUsePUgHgwCzE/qbQQ=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:66:89:fb:64:2f:e5:49:d3:13:e1:9f:19:68:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: May 6 21:00:37 2025 GMT
Not After : May 7 21:00:37 2025 GMT
Subject: CN=4c6b33762672d0c4b38db1bd7409e2a620659a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a9:21:12:4c:75:9e:0c:94:8d:28:46:fa:65:
6f:3b:32:e9:80:1c:53:35:57:72:3d:9d:c5:33:b0:
e9:13:c4:1e:cd:cb:d7:eb:98:fd:f6:d8:1e:8f:94:
2e:9e:ca:42:a3:0a:ac:66:ad:7f:34:b4:9c:1a:5f:
cd:7a:55:4b:c8:0c:e5:b3:e6:25:fe:d1:0f:10:b8:
17:74:2c:df:0c:6a:a6:f6:fa:19:7b:32:b8:85:d1:
7a:55:77:7a:79:5f:5d:d6:77:28:5e:bf:cc:1d:dc:
d6:f2:99:a2:52:e7:c8:f9:4e:85:86:9c:4c:2d:99:
86:00:37:24:47:03:35:71:94:09:80:d6:ce:8b:8f:
aa:4f:92:4c:81:07:cd:28:0c:ea:f3:0b:b1:81:4c:
dd:70:e7:30:33:95:ed:14:79:9e:dd:36:0a:d2:f3:
85:74:09:43:8c:b7:e8:f6:10:f2:7f:c1:2c:ce:cf:
4d:1c:b6:3c:8f:8b:48:41:ef:58:f8:e0:f7:0c:58:
fc:dd:86:97:ad:b8:cb:c0:13:6b:4d:84:21:14:24:
0c:63:99:28:52:5e:f5:2d:7a:2d:44:02:38:6a:f7:
5a:6b:d5:d5:73:b8:a5:4b:2b:a2:cd:8e:12:3f:60:
1f:f8:92:4f:11:05:5b:25:ac:b9:b8:1a:2e:02:1c:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:33:76:26:72:D0:C4:B3:8D:B1:BD:74:09:E2:A6:20:65:9A:0D
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e2:c8:5e:85:e5:e0:85:41:fc:49:80:4b:82:b6:1b:77:c0:
48:7f:de:27:f5:f2:4c:13:a5:98:89:91:58:9e:d8:5f:06:dc:
2a:5f:df:97:c4:0e:8b:e4:85:69:2a:6a:00:9a:44:86:fd:00:
f0:b1:32:c6:d8:2e:b6:5f:89:54:b9:15:e5:2f:bb:c8:df:04:
d5:4b:0d:28:5f:f7:c5:2a:71:dd:a4:ce:9e:c4:82:30:f9:c7:
08:8a:be:f0:d6:a7:dc:4d:68:fa:ee:ad:b2:89:da:17:40:43:
6f:2b:99:fc:b0:f8:82:d7:48:75:ad:f5:35:34:7c:9f:08:dd:
ff:8d:75:40:b1:b8:6a:ad:c9:e6:fc:4b:13:94:08:dc:b6:c5:
e1:29:d1:e0:b3:80:d2:ad:e6:da:3a:7d:2b:0e:93:f9:93:7b:
8f:d9:55:a5:5a:60:86:fd:f3:5f:fc:1d:2e:32:b0:47:ea:6a:
70:9f:9a:68:ea:0d:70:a3:8d:da:a4:dd:aa:27:30:df:e6:86:
ca:6b:09:d0:09:7c:07:c1:de:54:42:ed:c8:64:c0:4a:bb:3a:
44:35:48:72:3d:0e:17:1c:32:f3:e2:e5:0f:a0:42:ff:6a:a4:
7e:15:c3:c8:9d:22:39:80:1f:b3:ef:48:48:23:34:51:2b:40:
7c:63:a1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZanZon7ZC/lSdMT4Z8ZaKp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3N2I0M2Y1MzhmMGFlNzIwZTUyN2IyYTZjMGI4YTg3NmQ5
NmM5NDcwHhcNMjUwNTA2MjEwMDM3WhcNMjUwNTA3MjEwMDM3WjAzMTEwLwYDVQQD
Eyg0YzZiMzM3NjI2NzJkMGM0YjM4ZGIxYmQ3NDA5ZTJhNjIwNjU5YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqkhEkx1ngyUjShG+mVvOzLpgBxT
NVdyPZ3FM7DpE8QezcvX65j99tgej5QunspCowqsZq1/NLScGl/NelVLyAzls+Yl
/tEPELgXdCzfDGqm9voZezK4hdF6VXd6eV9d1ncoXr/MHdzW8pmiUufI+U6FhpxM
LZmGADckRwM1cZQJgNbOi4+qT5JMgQfNKAzq8wuxgUzdcOcwM5XtFHme3TYK0vOF
dAlDjLfo9hDyf8Eszs9NHLY8j4tIQe9Y+OD3DFj83YaXrbjLwBNrTYQhFCQMY5ko
Ul71LXotRAI4avdaa9XVc7ilSyuizY4SP2Af+JJPEQVbJay5uBouAhzmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExrM3YmctDEs42xvXQJ4qYgZZoNMB8GA1UdIwQY
MBaAFGd7Q/U48K5yDlJ7KmwLiodtlslHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGIt
Mjg3ODIwM2EwMDlkLzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81YTZlZWUtYTA5YS00NGUxLTg4ZGItMjg3ODIwM2EwMDlk
LzEvWjN0RDlUandybklPVW5zcWJBdUtoMjJXeVVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeLIXoXl
4IVB/EmAS4K2G3fASH/eJ/XyTBOlmImRWJ7YXwbcKl/fl8QOi+SFaSpqAJpEhv0A
8LEyxtgutl+JVLkV5S+7yN8E1UsNKF/3xSpx3aTOnsSCMPnHCIq+8Nan3E1o+u6t
sonaF0BDbyuZ/LD4gtdIda31NTR8nwjd/411QLG4aq3J5vxLE5QI3LbF4SnR4LOA
0q3m2jp9Kw6T+ZN7j9lVpVpghv3zX/wdLjKwR+pqcJ+aaOoNcKON2qTdqicw3+aG
ymsJ0Al8B8HeVELtyGTASrs6RDVIcj0OFxwy8+LlD6BC/2qkfhXDyJ0iOYAfs+9I
SCM0UStAfGOh6A==
-----END CERTIFICATE-----
Generated at Wed May 7 04:27:31 2025 by rpki-client