Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
File: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft (raw, json)
Hash identifier: i1UHk8pi+rv5tJifu3YuUm6MnVWAaRA3ZWah03npiTg=
Subject key identifier: FE:A6:D8:F3:E6:61:B4:9C:87:1F:C9:63:97:51:BF:D4:63:E6:2A:00
Authority key identifier: 64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
Certificate issuer: /CN=64a9856db1ab3b24f09e9cb92743768668301411
Certificate serial: 0196A91DCBBAD80BFB896F1B519B6587564D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
Manifest number: 1133
Signing time: Wed 07 May 2025 05:00:24 +0000
Manifest this update: Wed 07 May 2025 05:00:24 +0000
Manifest next update: Thu 08 May 2025 05:00:24 +0000
Files and hashes: 1: ID_lbNPN5Y-E-d8mbQhTW4YaucM.roa (hash: pqF3+TVfZVLtWeeY0X/7rX4dAra1r0f5BNTNZcfYgyw=)
2: ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl (hash: 22ZK+uzKSZjaLjC6mMctonxH0TrttT+6bNvEEch5JfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:cb:ba:d8:0b:fb:89:6f:1b:51:9b:65:87:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a9856db1ab3b24f09e9cb92743768668301411
Validity
Not Before: May 7 05:00:24 2025 GMT
Not After : May 8 05:00:24 2025 GMT
Subject: CN=fea6d8f3e661b49c871fc9639751bfd463e62a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:b1:eb:36:dd:11:c3:ca:5b:fb:3a:8c:c7:
f2:87:16:d4:f7:96:11:24:9a:5e:a7:9e:92:e3:4f:
ca:44:8a:40:72:20:e3:20:ae:b1:9a:c7:19:33:eb:
e8:42:56:93:6b:24:64:b6:b8:ef:61:16:8f:9a:56:
ef:66:2c:d8:68:93:1c:55:b8:bc:80:75:3f:a5:a7:
a1:f4:28:f9:c4:41:f1:f4:f3:2f:47:92:3d:89:9b:
4f:e4:cd:80:ca:91:75:08:a1:f3:1f:f2:51:9f:a2:
15:4f:ee:2f:1a:6d:88:77:05:b9:17:41:0c:2a:26:
8d:62:44:b4:e9:e1:c2:70:e0:5e:e8:65:40:f1:41:
50:e8:f1:a7:37:a3:0a:0f:cc:58:2c:6d:72:57:36:
9e:98:11:68:2d:11:89:94:af:c9:93:66:b3:cf:56:
20:13:c2:85:ba:8d:37:b3:30:38:33:e2:41:f4:12:
35:49:f3:ed:75:6a:7f:84:1b:76:c1:e4:28:71:1f:
ed:38:c0:3a:46:86:cf:2a:de:d7:82:56:cc:e9:4f:
98:b5:72:1a:ff:2e:f2:78:f9:a2:8c:06:4e:5f:ea:
36:06:21:c0:43:6c:b2:be:5f:a2:84:a3:38:fd:dc:
5b:be:88:58:e5:fe:d0:a4:fa:92:c4:e7:55:e1:f8:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:D8:F3:E6:61:B4:9C:87:1F:C9:63:97:51:BF:D4:63:E6:2A:00
X509v3 Authority Key Identifier:
keyid:64:A9:85:6D:B1:AB:3B:24:F0:9E:9C:B9:27:43:76:86:68:30:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cf7d5c-04a5-48a7-b8c6-37a442e65f18/1/ZKmFbbGrOyTwnpy5J0N2hmgwFBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:81:55:aa:81:cb:e8:53:14:b9:e3:cc:e4:c9:a5:28:c9:
2c:eb:3d:f6:54:4d:3a:b5:4a:2a:7f:e7:a2:ff:25:fa:c3:45:
dd:71:76:3c:a3:aa:77:d3:2e:45:8d:eb:08:57:ba:68:6c:99:
94:16:f1:5a:e5:6f:f1:0f:09:a7:ca:59:b4:bb:44:5b:ea:c4:
c5:6a:6c:bd:a9:62:d3:c1:9b:4f:b4:fc:c0:7c:a6:8c:1b:5b:
78:62:28:56:70:1e:5d:f1:0c:ef:be:df:f5:d4:1b:ae:ed:f0:
8a:66:da:7c:6c:ec:8b:27:f0:3f:a9:a8:13:19:1c:3a:49:19:
57:50:63:5d:8e:4c:c2:a5:8b:eb:32:0e:3a:4f:69:27:db:d8:
06:48:f9:e6:66:81:f4:2a:d8:ac:eb:48:2b:d8:91:7b:b9:29:
48:4c:05:e0:5f:82:7c:6f:d4:91:f7:92:cd:36:f2:b9:8d:52:
b6:f7:43:5d:a2:70:83:44:7d:3e:fa:ca:62:56:de:70:a4:55:
a1:47:54:a8:7a:31:bb:99:10:f8:e7:37:91:15:1a:e7:1b:9f:
38:ea:d5:e8:51:a7:c4:1e:95:09:36:ca:93:ee:a1:fd:2f:e3:
73:0a:15:c1:6a:b5:88:1a:cb:c0:98:ab:1a:92:ca:b2:2a:ab:
83:f2:c1:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapHcu62Av7iW8bUZtlh1ZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTk4NTZkYjFhYjNiMjRmMDllOWNiOTI3NDM3Njg2Njgz
MDE0MTEwHhcNMjUwNTA3MDUwMDI0WhcNMjUwNTA4MDUwMDI0WjAzMTEwLwYDVQQD
EyhmZWE2ZDhmM2U2NjFiNDljODcxZmM5NjM5NzUxYmZkNDYzZTYyYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ex6zbdEcPKW/s6jMfyhxbU95YR
JJpep56S40/KRIpAciDjIK6xmscZM+voQlaTayRktrjvYRaPmlbvZizYaJMcVbi8
gHU/paeh9Cj5xEHx9PMvR5I9iZtP5M2AypF1CKHzH/JRn6IVT+4vGm2IdwW5F0EM
KiaNYkS06eHCcOBe6GVA8UFQ6PGnN6MKD8xYLG1yVzaemBFoLRGJlK/Jk2azz1Yg
E8KFuo03szA4M+JB9BI1SfPtdWp/hBt2weQocR/tOMA6RobPKt7XglbM6U+YtXIa
/y7yePmijAZOX+o2BiHAQ2yyvl+ihKM4/dxbvohY5f7QpPqSxOdV4fhh9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6m2PPmYbSchx/JY5dRv9Rj5ioAMB8GA1UdIwQY
MBaAFGSphW2xqzsk8J6cuSdDdoZoMBQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYt
MzdhNDQyZTY1ZjE4LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZjdkNWMtMDRhNS00OGE3LWI4YzYtMzdhNDQyZTY1ZjE4
LzEvWkttRmJiR3JPeVR3bnB5NUowTjJobWd3RkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvaBVaqB
y+hTFLnjzOTJpSjJLOs99lRNOrVKKn/nov8l+sNF3XF2PKOqd9MuRY3rCFe6aGyZ
lBbxWuVv8Q8Jp8pZtLtEW+rExWpsvali08GbT7T8wHymjBtbeGIoVnAeXfEM777f
9dQbru3wimbafGzsiyfwP6moExkcOkkZV1BjXY5MwqWL6zIOOk9pJ9vYBkj55maB
9CrYrOtIK9iRe7kpSEwF4F+CfG/UkfeSzTbyuY1StvdDXaJwg0R9PvrKYlbecKRV
oUdUqHoxu5kQ+Oc3kRUa5xufOOrV6FGnxB6VCTbKk+6h/S/jcwoVwWq1iBrLwJir
GpLKsiqrg/LBvg==
-----END CERTIFICATE-----
Generated at Wed May 7 09:33:03 2025 by rpki-client