Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
File: zWmPVbQJWbF4987Lwgw16cE3k0Q.mft (raw, json)
Hash identifier: SkTatJ/6c3bSVynv/pVGfkDV224wzAf51t0oHP1aEio=
Subject key identifier: 82:23:BA:95:D6:4E:E6:9D:5B:4A:6F:AA:FA:80:B3:C7:DD:73:5C:D5
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Certificate issuer: /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial: 0196A9C2E6F98DE3F82817C9DD22306BFF21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 08:00:44 +0000
Manifest this update: Wed 07 May 2025 08:00:44 +0000
Manifest next update: Thu 08 May 2025 08:00:44 +0000
Files and hashes: 1: 4IRJfTOXaKsLO79AGo1JoJbZxnI.roa (hash: z5NYfWatjYuL33vBwldK4hifLGzdry9JPmtM091yFpE=)
2: zWmPVbQJWbF4987Lwgw16cE3k0Q.crl (hash: CMnP0o564098BR53iLw8/D585jQObLfQ9l255q3lbQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:c2:e6:f9:8d:e3:f8:28:17:c9:dd:22:30:6b:ff:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Validity
Not Before: May 7 08:00:44 2025 GMT
Not After : May 8 08:00:44 2025 GMT
Subject: CN=8223ba95d64ee69d5b4a6faafa80b3c7dd735cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:20:c3:d2:a1:48:9f:e8:19:db:78:c2:6c:
b5:94:44:08:ea:9e:f1:c4:6d:63:97:b8:96:af:75:
18:df:19:27:2a:24:8b:dd:49:73:e3:dd:ed:54:77:
94:9e:b2:83:5a:79:3e:58:c6:da:a5:c3:fc:1f:e9:
fa:2d:18:f4:12:2c:1e:4a:c9:da:5a:83:55:06:80:
0e:7c:fc:6f:a0:24:f6:c1:36:71:9c:78:06:f8:73:
b2:d7:0c:c4:2c:c5:1d:36:a2:62:63:1c:7a:d2:52:
a2:32:c3:1e:71:a1:50:df:e0:a3:9a:3b:d4:90:c6:
e9:24:9b:df:bf:30:89:90:30:c6:48:2e:e6:64:73:
fb:7d:bb:40:e3:b0:3a:25:16:d9:9c:f3:43:21:0c:
e1:16:19:ad:4f:8a:83:ae:88:e4:4c:4a:8f:eb:10:
0b:f8:12:22:c1:04:e7:71:75:fa:3a:46:1b:b7:b4:
53:4d:81:bb:30:06:22:30:fa:e5:4a:57:b5:83:e1:
9c:21:88:dc:cf:e3:2d:bf:c9:e1:d8:e6:23:39:fe:
cd:0c:83:34:80:e8:4f:49:81:f0:24:fb:90:c8:14:
ae:4b:82:65:58:2e:05:f1:91:9b:c2:1c:3e:59:51:
78:74:3e:bc:db:d1:c9:58:d9:03:1a:29:55:ed:47:
cd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:BA:95:D6:4E:E6:9D:5B:4A:6F:AA:FA:80:B3:C7:DD:73:5C:D5
X509v3 Authority Key Identifier:
keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:9c:83:82:40:c0:c5:bb:65:77:ed:31:91:3f:d3:46:2f:f0:
31:2a:da:d0:d0:4e:39:36:0f:a7:ee:9f:cb:11:21:72:4d:4a:
04:36:ea:93:65:b9:dd:af:1b:31:6c:bc:fa:e2:5b:f8:8c:92:
f1:c0:55:a5:c3:91:e4:78:a6:56:92:67:a7:06:aa:c0:54:55:
81:5c:3e:d5:0a:91:10:b7:05:4b:59:c6:96:50:b3:aa:55:c2:
d7:73:da:35:29:91:0d:06:9d:98:bc:95:4b:1d:b3:f5:43:20:
81:24:24:b0:0f:b4:bd:a2:54:4e:02:0f:a2:23:7e:05:b5:30:
59:54:89:ef:a1:63:fe:b6:24:42:6c:50:b1:8f:ab:a2:4d:74:
4a:6e:b3:c1:85:a2:e2:63:61:1d:1f:43:5d:f3:5f:1d:5b:74:
a0:46:a1:59:2f:3e:b7:a3:d8:b5:59:39:af:0c:b8:dd:6f:98:
64:85:57:67:15:07:0e:1d:98:7c:9e:cf:eb:1f:8a:bf:0c:6c:
f5:d9:0c:92:a4:c2:8c:8f:e1:68:43:e4:83:5d:55:09:de:b5:
ff:7a:35:a6:23:7e:89:2b:bf:35:cb:08:ec:5f:d9:07:f2:10:
99:38:d0:cc:23:48:47:c1:e1:2f:5c:1a:30:4b:01:0a:fc:9e:
42:75:39:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapwub5jeP4KBfJ3SIwa/8hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNjk4ZjU1YjQwOTU5YjE3OGY3Y2VjYmMyMGMzNWU5YzEz
NzkzNDQwHhcNMjUwNTA3MDgwMDQ0WhcNMjUwNTA4MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg4MjIzYmE5NWQ2NGVlNjlkNWI0YTZmYWFmYTgwYjNjN2RkNzM1Y2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzggw9KhSJ/oGdt4wmy1lEQI6p7x
xG1jl7iWr3UY3xknKiSL3Ulz493tVHeUnrKDWnk+WMbapcP8H+n6LRj0EiweSsna
WoNVBoAOfPxvoCT2wTZxnHgG+HOy1wzELMUdNqJiYxx60lKiMsMecaFQ3+CjmjvU
kMbpJJvfvzCJkDDGSC7mZHP7fbtA47A6JRbZnPNDIQzhFhmtT4qDrojkTEqP6xAL
+BIiwQTncXX6OkYbt7RTTYG7MAYiMPrlSle1g+GcIYjcz+Mtv8nh2OYjOf7NDIM0
gOhPSYHwJPuQyBSuS4JlWC4F8ZGbwhw+WVF4dD6829HJWNkDGilV7UfNnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIjupXWTuadW0pvqvqAs8fdc1zVMB8GA1UdIwQY
MBaAFM1pj1W0CVmxePfOy8IMNenBN5NEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2Mt
YmQ2ZDhiYWRjZGMwLzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hMTQ0OWUtMmFkYi00YjFhLWIyM2MtYmQ2ZDhiYWRjZGMw
LzEveldtUFZiUUpXYkY0OTg3THdndzE2Y0UzazBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopyDgkDA
xbtld+0xkT/TRi/wMSra0NBOOTYPp+6fyxEhck1KBDbqk2W53a8bMWy8+uJb+IyS
8cBVpcOR5HimVpJnpwaqwFRVgVw+1QqRELcFS1nGllCzqlXC13PaNSmRDQadmLyV
Sx2z9UMggSQksA+0vaJUTgIPoiN+BbUwWVSJ76Fj/rYkQmxQsY+rok10Sm6zwYWi
4mNhHR9DXfNfHVt0oEahWS8+t6PYtVk5rwy43W+YZIVXZxUHDh2YfJ7P6x+Kvwxs
9dkMkqTCjI/haEPkg11VCd61/3o1piN+iSu/NcsI7F/ZB/IQmTjQzCNIR8HhL1wa
MEsBCvyeQnU5pg==
-----END CERTIFICATE-----
Generated at Wed May 7 12:42:04 2025 by rpki-client