Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: eP+EgAgNGrSyYQe8mKE5egqfhhzK+qaRugs+PXgZOZ0=
Subject key identifier: 62:93:43:F8:89:BF:57:38:4D:3F:39:B1:D9:58:A9:57:F7:B8:04:29
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 0196C34B8AEB14EF2A67E6490906DA253E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 121D
Signing time: Mon 12 May 2025 07:00:29 +0000
Manifest this update: Mon 12 May 2025 07:00:29 +0000
Manifest next update: Tue 13 May 2025 07:00:29 +0000
Files and hashes: 1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: PlLXqLWspQo6IzqLSjolbLjxOPBhwwyunjSW+E079N8=)
2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:8a:eb:14:ef:2a:67:e6:49:09:06:da:25:3e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: May 12 07:00:29 2025 GMT
Not After : May 13 07:00:29 2025 GMT
Subject: CN=629343f889bf57384d3f39b1d958a957f7b80429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:cc:84:18:ff:14:7d:b1:3c:91:1e:79:25:
9d:ec:3b:04:28:db:ab:34:a1:de:9f:ac:45:f6:2d:
86:60:49:f8:db:dc:e2:f3:9e:49:c4:20:ca:e9:3c:
b1:9f:ef:4b:33:fc:00:25:dd:5f:7d:1e:7c:aa:37:
ac:0f:9b:bc:0f:a3:1b:c3:f0:18:d8:7e:8b:3c:d6:
0c:8d:98:c4:e3:89:55:83:b6:a0:19:14:4b:53:60:
7b:e7:85:88:62:7d:50:54:0d:cc:44:a5:f5:f3:59:
5f:a2:05:59:a3:e2:29:ce:29:b0:7d:11:8c:91:d4:
c3:40:c1:95:f2:4f:66:4b:92:ed:9f:4f:08:4d:31:
45:59:3a:80:64:e2:8c:cb:66:ae:ee:ec:35:7a:10:
a2:d9:1a:63:b9:aa:02:64:a8:3b:52:a6:16:d3:29:
7e:9d:51:88:44:0e:5f:e2:91:7f:8c:f7:5c:c0:fc:
eb:a6:f1:21:af:c9:7e:5a:42:5e:dc:f9:92:dc:7f:
f7:6a:14:18:99:a3:3d:80:21:c3:47:f8:66:d9:45:
dd:f5:21:89:e3:1b:98:11:c8:78:3d:c9:62:4a:d6:
c4:61:ac:67:22:b2:1a:81:41:fa:b7:fb:a4:3b:76:
35:74:e7:62:f1:d3:27:98:29:87:71:2e:45:89:0e:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:93:43:F8:89:BF:57:38:4D:3F:39:B1:D9:58:A9:57:F7:B8:04:29
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e5:cb:1d:7f:8a:ef:a0:87:5e:ef:45:c0:2c:24:67:b7:c6:
e7:8f:52:ea:3e:a1:29:cd:76:62:32:83:da:d7:74:6b:40:46:
82:b6:84:81:43:c3:2d:bd:dd:76:21:d6:6a:dd:5a:95:10:dc:
a3:1b:09:14:b3:b6:3f:83:1f:f6:0f:9c:06:99:eb:a5:ff:1c:
94:0a:93:4e:ab:4b:49:cd:19:8b:70:bb:12:94:5a:d6:23:2f:
d9:d3:53:29:67:25:ae:17:9c:a4:3e:8f:be:68:3d:02:ec:55:
4e:18:2f:10:b1:d6:61:30:95:4c:d3:2c:fb:59:95:f2:89:9d:
c5:03:28:17:91:1f:d7:12:c3:9f:37:d2:93:41:13:78:f7:fd:
cd:b8:3a:f6:a1:24:62:dc:84:d7:93:c0:a5:70:ff:65:9e:49:
c1:c0:6e:97:d4:0f:24:2d:73:65:b6:e8:9c:ae:76:d4:cf:6c:
7e:2b:8c:c9:0f:59:4c:5f:95:0e:20:e0:46:73:e9:6a:98:7e:
18:a0:53:1f:07:e2:7e:41:59:c0:e4:f1:d9:53:1a:a3:88:6e:
9e:de:73:8b:ed:fb:dd:29:6a:1d:03:a0:79:cd:06:ed:d8:47:
84:9c:72:ce:18:9f:c5:e1:0b:2a:f8:93:8a:22:3b:34:fb:6c:
50:c4:4b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS4rrFO8qZ+ZJCQbaJT4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MDNlZDRjNzg0NTQyNTAxMTZmMTA1ZWI2OTYxZGMyOWUx
ZGJjNmMwHhcNMjUwNTEyMDcwMDI5WhcNMjUwNTEzMDcwMDI5WjAzMTEwLwYDVQQD
Eyg2MjkzNDNmODg5YmY1NzM4NGQzZjM5YjFkOTU4YTk1N2Y3YjgwNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QvMhBj/FH2xPJEeeSWd7DsEKNur
NKHen6xF9i2GYEn429zi855JxCDK6Tyxn+9LM/wAJd1ffR58qjesD5u8D6Mbw/AY
2H6LPNYMjZjE44lVg7agGRRLU2B754WIYn1QVA3MRKX181lfogVZo+IpzimwfRGM
kdTDQMGV8k9mS5Ltn08ITTFFWTqAZOKMy2au7uw1ehCi2RpjuaoCZKg7UqYW0yl+
nVGIRA5f4pF/jPdcwPzrpvEhr8l+WkJe3PmS3H/3ahQYmaM9gCHDR/hm2UXd9SGJ
4xuYEch4PcliStbEYaxnIrIagUH6t/ukO3Y1dOdi8dMnmCmHcS5FiQ41SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKTQ/iJv1c4TT85sdlYqVf3uAQpMB8GA1UdIwQY
MBaAFGYD7Ux4RUJQEW8QXraWHcKeHbxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEt
ZDI3NjNjMDA3NzUyLzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEtZDI3NjNjMDA3NzUy
LzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauXLHX+K
76CHXu9FwCwkZ7fG549S6j6hKc12YjKD2td0a0BGgraEgUPDLb3ddiHWat1alRDc
oxsJFLO2P4Mf9g+cBpnrpf8clAqTTqtLSc0Zi3C7EpRa1iMv2dNTKWclrhecpD6P
vmg9AuxVThgvELHWYTCVTNMs+1mV8omdxQMoF5Ef1xLDnzfSk0ETePf9zbg69qEk
YtyE15PApXD/ZZ5JwcBul9QPJC1zZbbonK521M9sfiuMyQ9ZTF+VDiDgRnPpaph+
GKBTHwfifkFZwOTx2VMao4hunt5zi+373SlqHQOgec0G7dhHhJxyzhifxeELKviT
iiI7NPtsUMRLag==
-----END CERTIFICATE-----
Generated at Mon May 12 16:15:22 2025 by rpki-client