Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: WxaDPp4vPfR5vFxnfyVjysFuYJyOBr+kp7I5tMlPJLA=
Subject key identifier: 7C:EB:70:E9:39:F0:EE:F0:68:4A:57:79:D8:60:1E:24:D2:AB:A6:6A
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 0196CA977458E03D34BB41274C8AE80AC04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 07C8
Signing time: Tue 13 May 2025 17:00:45 +0000
Manifest this update: Tue 13 May 2025 17:00:45 +0000
Manifest next update: Wed 14 May 2025 17:00:45 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: B5+y1mpDICjgIkpUQXMMd29eaLnjxRpIuorZeBdkvQs=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:74:58:e0:3d:34:bb:41:27:4c:8a:e8:0a:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: May 13 17:00:45 2025 GMT
Not After : May 14 17:00:45 2025 GMT
Subject: CN=7ceb70e939f0eef0684a5779d8601e24d2aba66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:3a:37:ea:cc:b3:a0:42:f7:d8:0f:be:f3:
42:04:6d:57:da:1d:29:0a:9f:af:37:ac:e8:5b:d7:
d0:3d:6f:17:61:36:b1:86:d8:4d:77:37:cf:e3:f5:
c7:6a:99:3e:af:cd:ac:9b:8c:eb:12:6a:99:9f:48:
57:81:01:f1:2e:22:1c:2a:21:f6:27:bd:1c:3f:7c:
4e:52:9f:04:6d:6d:2d:32:b2:52:2d:23:bc:eb:f9:
b9:a3:47:25:25:99:e9:3f:4a:f6:80:35:9c:c8:a6:
de:dd:0e:d4:b1:0b:9f:61:c8:44:73:1a:ff:2d:10:
68:f6:e7:37:d9:65:59:14:79:74:b1:a1:1e:7f:7f:
c2:cb:76:e7:e1:5c:4d:93:80:b4:70:18:f4:cb:a0:
9e:ca:11:28:7b:65:e1:12:5d:53:b8:9b:c9:d1:31:
95:1c:5d:6e:e0:69:01:b3:b7:de:d2:19:1d:30:59:
e3:db:50:b6:34:b9:3c:ee:57:b9:35:fe:0e:b5:d3:
84:f4:ae:8e:33:64:aa:e4:d9:66:47:71:0c:1d:fc:
b0:82:1f:de:27:f1:68:04:8e:e0:27:39:7a:3a:8b:
2e:4f:d7:0c:56:56:9c:60:dc:6b:24:3b:73:5a:69:
89:90:1d:13:bd:d6:20:72:7d:2c:c5:b5:aa:29:ed:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EB:70:E9:39:F0:EE:F0:68:4A:57:79:D8:60:1E:24:D2:AB:A6:6A
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:49:cb:24:c8:0b:04:bf:9f:b5:85:64:16:43:30:02:cc:c0:
fc:f3:df:d7:e3:a6:33:da:04:9e:b6:41:dd:5f:b0:9f:5d:21:
54:82:61:93:dc:4d:84:89:42:2b:e2:f7:dd:f6:dc:b0:73:a7:
31:11:a4:aa:0e:e1:85:2c:e9:98:e0:c7:8b:4c:0f:d0:4d:5f:
d9:06:39:12:6f:0b:eb:b2:a5:d5:37:46:80:29:1b:6c:c7:08:
86:5a:9f:68:c9:52:b1:90:0e:b9:f5:ed:fa:98:7e:35:a0:24:
0f:45:6e:29:d6:bf:f1:e4:f4:ed:7e:fd:01:a1:9e:57:cd:14:
19:7e:d5:29:b5:03:73:eb:a4:c0:f6:24:d0:89:ba:f1:b3:c1:
ca:46:72:dd:58:a6:08:62:c2:7e:68:90:c1:00:d2:0a:43:af:
ad:73:34:26:e0:36:e6:d7:1c:03:08:c6:f0:11:e1:5c:7a:24:
2e:4d:53:cf:23:b7:59:ff:b2:36:84:6d:58:73:ab:28:bf:69:
29:f0:1b:34:60:db:ad:32:07:35:26:54:cb:95:2c:ab:bd:7e:
2a:cc:e9:ea:2d:f0:b2:a9:72:f1:67:5a:3a:b7:f1:51:5a:55:
0e:c8:c1:06:42:f2:43:04:a0:67:39:5a:8d:6e:f8:10:6d:5b:
91:4a:9c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKl3RY4D00u0EnTIroCsBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGM1MGQxZGFkZjhiODRiMTc0ZmRiMDU4N2FmYjVmNDJk
ZjhhNWYwHhcNMjUwNTEzMTcwMDQ1WhcNMjUwNTE0MTcwMDQ1WjAzMTEwLwYDVQQD
Eyg3Y2ViNzBlOTM5ZjBlZWYwNjg0YTU3NzlkODYwMWUyNGQyYWJhNjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyg6N+rMs6BC99gPvvNCBG1X2h0p
Cp+vN6zoW9fQPW8XYTaxhthNdzfP4/XHapk+r82sm4zrEmqZn0hXgQHxLiIcKiH2
J70cP3xOUp8EbW0tMrJSLSO86/m5o0clJZnpP0r2gDWcyKbe3Q7UsQufYchEcxr/
LRBo9uc32WVZFHl0saEef3/Cy3bn4VxNk4C0cBj0y6CeyhEoe2XhEl1TuJvJ0TGV
HF1u4GkBs7fe0hkdMFnj21C2NLk87le5Nf4OtdOE9K6OM2Sq5NlmR3EMHfywgh/e
J/FoBI7gJzl6OosuT9cMVlacYNxrJDtzWmmJkB0TvdYgcn0sxbWqKe1DFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzrcOk58O7waEpXedhgHiTSq6ZqMB8GA1UdIwQY
MBaAFGRMUNHa34uEsXT9sFh6+19C34pfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEt
ZDM4ZDg0M2JmYTFkLzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yOGJkZTMtYTRjYS00ODhkLTgwNjEtZDM4ZDg0M2JmYTFk
LzEvWkV4UTBkcmZpNFN4ZFAyd1dIcjdYMExmaWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0nLJMgL
BL+ftYVkFkMwAszA/PPf1+OmM9oEnrZB3V+wn10hVIJhk9xNhIlCK+L33fbcsHOn
MRGkqg7hhSzpmODHi0wP0E1f2QY5Em8L67Kl1TdGgCkbbMcIhlqfaMlSsZAOufXt
+ph+NaAkD0VuKda/8eT07X79AaGeV80UGX7VKbUDc+ukwPYk0Im68bPBykZy3Vim
CGLCfmiQwQDSCkOvrXM0JuA25tccAwjG8BHhXHokLk1TzyO3Wf+yNoRtWHOrKL9p
KfAbNGDbrTIHNSZUy5Usq71+Kszp6i3wsqly8WdaOrfxUVpVDsjBBkLyQwSgZzla
jW74EG1bkUqczA==
-----END CERTIFICATE-----
Generated at Wed May 14 02:39:17 2025 by rpki-client