Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: WrYmHleIzjFV3JESTeuWXbgRZbrvcdFYxAJt9GLul4o=
Subject key identifier: B8:A8:68:74:62:3E:A4:94:4F:6D:32:2B:71:29:36:2E:0B:4E:4F:AD
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 0196A088CED1B637211B14DE005E79DFC941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 13:00:42 +0000
Manifest this update: Mon 05 May 2025 13:00:42 +0000
Manifest next update: Tue 06 May 2025 13:00:42 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: qIKu/Y+8/1sVO/H5x6Azzl1wSZvTYC6AhoGJM9vsGJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:ce:d1:b6:37:21:1b:14:de:00:5e:79:df:c9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: May 5 13:00:42 2025 GMT
Not After : May 6 13:00:42 2025 GMT
Subject: CN=b8a86874623ea4944f6d322b7129362e0b4e4fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:0e:0d:f2:32:dd:c6:fb:87:79:47:77:2c:
97:2e:49:56:f6:a0:39:4a:82:44:a2:78:b6:4a:2c:
91:5b:b4:4a:78:ed:bd:db:d8:fc:56:ad:75:44:1f:
37:b9:d8:21:d4:27:54:cf:52:b1:d3:3c:50:ae:3b:
e0:ac:e4:91:fd:63:18:67:40:41:20:ad:5e:f1:90:
9c:5f:01:b3:42:05:a7:19:09:b8:43:10:db:f6:b4:
d7:61:d5:6c:0b:eb:de:8f:37:96:71:04:50:8f:72:
49:c3:bf:01:0a:2c:27:a9:f5:70:1d:60:79:fb:c1:
69:28:f8:ea:11:0a:dc:69:8d:8f:43:74:b8:a8:83:
18:b5:1e:56:e0:a2:b6:25:48:dd:dd:2e:08:01:ad:
86:44:ae:cc:f6:4c:4a:11:df:a4:de:40:8a:0b:b0:
1d:ea:ff:04:7d:40:67:c7:2b:26:29:57:3e:d8:c9:
c5:2c:76:2d:a4:81:f8:b4:db:20:da:33:75:fd:ec:
91:71:09:c5:84:d7:13:ef:ed:11:39:c9:d1:36:0d:
68:b7:8a:d2:8a:e0:72:73:2e:27:80:b2:8e:28:17:
b1:d4:df:9e:62:40:7d:cc:71:41:d7:80:bf:10:5f:
06:f6:18:3a:49:58:e7:9b:79:d7:76:d1:84:1d:2c:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A8:68:74:62:3E:A4:94:4F:6D:32:2B:71:29:36:2E:0B:4E:4F:AD
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:33:8e:3b:3b:a0:4d:e2:02:0b:0b:e1:79:c8:4d:68:dc:d0:
1e:6e:af:bd:3d:68:e4:62:80:7f:4d:5a:d1:29:0a:88:19:ce:
f8:d8:6b:41:c1:17:45:7e:9d:cf:b0:db:f6:2c:3d:ab:e6:6e:
bb:9f:18:cc:04:3f:63:3e:bc:66:a4:10:c1:54:43:1b:91:2b:
61:c7:42:8c:2e:94:93:37:92:29:23:30:4e:6a:7a:a0:b0:7f:
ce:5f:65:48:a7:fb:12:21:5c:84:4d:3e:40:e9:1e:2f:57:1d:
1c:98:d0:7a:d1:0a:7f:2f:97:35:55:93:da:79:0e:f6:b6:47:
bd:7f:0c:9d:e0:23:75:77:15:85:1d:6c:a9:4b:c0:17:ad:78:
dd:42:03:54:6e:57:85:c4:a8:37:00:fa:a5:4d:bf:16:a2:88:
1f:0b:9f:55:a0:a1:d8:11:c1:60:59:7f:b0:b9:72:15:94:e5:
d4:d4:72:4c:cc:53:56:c8:5b:4e:d5:6e:b8:51:f4:89:54:ad:
2f:1d:c2:a9:8d:e5:f9:7c:c6:b3:a6:2f:f7:d5:6c:e7:35:0a:
64:ce:7e:f0:00:dc:9d:ff:06:7d:03:d9:78:c3:f4:eb:d8:2c:
a5:97:9b:9a:45:81:9a:b9:14:dc:6b:81:98:ec:a6:ef:fb:27:
33:02:96:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagiM7RtjchGxTeAF5538lBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjUwNTA1MTMwMDQyWhcNMjUwNTA2MTMwMDQyWjAzMTEwLwYDVQQD
EyhiOGE4Njg3NDYyM2VhNDk0NGY2ZDMyMmI3MTI5MzYyZTBiNGU0ZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+4ODfIy3cb7h3lHdyyXLklW9qA5
SoJEoni2SiyRW7RKeO2929j8Vq11RB83udgh1CdUz1Kx0zxQrjvgrOSR/WMYZ0BB
IK1e8ZCcXwGzQgWnGQm4QxDb9rTXYdVsC+vejzeWcQRQj3JJw78BCiwnqfVwHWB5
+8FpKPjqEQrcaY2PQ3S4qIMYtR5W4KK2JUjd3S4IAa2GRK7M9kxKEd+k3kCKC7Ad
6v8EfUBnxysmKVc+2MnFLHYtpIH4tNsg2jN1/eyRcQnFhNcT7+0ROcnRNg1ot4rS
iuBycy4ngLKOKBex1N+eYkB9zHFB14C/EF8G9hg6SVjnm3nXdtGEHSzKGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLioaHRiPqSUT20yK3EpNi4LTk+tMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjOOOzug
TeICCwvhechNaNzQHm6vvT1o5GKAf01a0SkKiBnO+NhrQcEXRX6dz7Db9iw9q+Zu
u58YzAQ/Yz68ZqQQwVRDG5ErYcdCjC6UkzeSKSMwTmp6oLB/zl9lSKf7EiFchE0+
QOkeL1cdHJjQetEKfy+XNVWT2nkO9rZHvX8MneAjdXcVhR1sqUvAF6143UIDVG5X
hcSoNwD6pU2/FqKIHwufVaCh2BHBYFl/sLlyFZTl1NRyTMxTVshbTtVuuFH0iVSt
Lx3CqY3l+XzGs6Yv99Vs5zUKZM5+8ADcnf8GfQPZeMP069gspZebmkWBmrkU3GuB
mOym7/snMwKWSA==
-----END CERTIFICATE-----
Generated at Mon May 5 16:14:13 2025 by rpki-client