Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: /qFVElUGnNrxeGowfzBfxzOFO4vxKHPCRe6Oybzzhjw=
Subject key identifier: 1F:C0:26:8D:84:0F:EC:B1:DE:69:E2:BD:78:E2:98:7D:80:CF:0A:23
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 01969E9B064300C02D80E60A5CC9B718710A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0BB1
Signing time: Mon 05 May 2025 04:01:21 +0000
Manifest this update: Mon 05 May 2025 04:01:21 +0000
Manifest next update: Tue 06 May 2025 04:01:21 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: sY2a5a2/l823FJ3yQkJ10XB3o7K7VfySd23w9IeobTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9b:06:43:00:c0:2d:80:e6:0a:5c:c9:b7:18:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: May 5 04:01:21 2025 GMT
Not After : May 6 04:01:21 2025 GMT
Subject: CN=1fc0268d840fecb1de69e2bd78e2987d80cf0a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:cb:e2:8b:07:df:ae:0a:9c:27:77:8d:84:
54:b2:cb:da:cf:be:ea:46:be:79:f4:bc:13:08:73:
d7:5b:04:cb:ab:d4:ac:52:63:84:46:c4:a0:95:dd:
49:ed:14:dc:af:d4:f1:d6:4d:aa:67:96:80:5a:9b:
97:70:a2:7f:66:39:3c:1f:ba:6d:80:9e:8a:d9:a6:
e2:d0:34:d1:c9:ae:2e:d9:51:89:78:86:c3:e3:f2:
5a:1b:0f:19:96:1a:7b:b4:ce:79:7d:af:33:6b:77:
7a:5d:a7:ed:fe:52:05:fa:a6:0b:e3:aa:95:c3:39:
c9:a0:39:03:ac:c1:3a:21:77:75:8a:a7:01:ca:ab:
42:80:ce:2f:bf:4d:a2:35:d6:ac:e5:59:f0:8b:e7:
50:e8:87:f8:f0:4c:99:5f:a6:a3:6d:fe:3b:77:32:
92:91:4c:17:e8:35:fe:d1:86:4c:ed:f9:ba:fe:1c:
e7:26:ad:14:63:61:28:e5:1f:45:e7:0c:94:53:f0:
01:2c:3e:d4:d6:be:32:8c:95:6d:07:3e:33:8d:7a:
cf:9a:ae:85:f3:ee:6f:87:20:1c:8c:82:cd:16:70:
e5:38:12:18:6d:5c:72:b9:aa:14:78:ef:8f:8e:1e:
0d:02:2b:d1:a4:c6:9f:79:8d:e5:61:29:79:5d:62:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:26:8D:84:0F:EC:B1:DE:69:E2:BD:78:E2:98:7D:80:CF:0A:23
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:92:41:27:e1:bb:5f:5f:e5:9e:18:5b:00:25:a1:ec:ba:fb:
d3:cf:30:3d:33:75:01:f5:74:30:12:55:11:13:2c:62:29:6f:
ae:90:96:b3:56:1b:65:e0:3b:11:65:30:d1:4e:20:43:11:de:
08:58:18:a8:34:0f:f8:ad:3b:ab:b6:90:2e:83:9b:02:d7:7c:
c7:78:60:51:8f:9a:03:22:08:10:e4:3a:43:c2:35:08:d5:c6:
5e:f7:a6:5c:6c:94:e0:56:a8:02:59:95:ce:70:fa:bd:4b:a6:
5f:94:19:ea:d0:31:f4:fa:c9:06:66:ab:af:44:58:15:14:61:
5d:c8:f1:97:73:40:4b:92:60:80:2a:36:93:8b:5b:6a:a4:84:
dc:45:24:59:9b:13:62:59:c5:c8:02:45:e5:82:4a:ec:ed:5f:
eb:bd:0c:1a:08:f0:cc:f0:0e:fa:c5:2e:dd:bb:25:39:f1:23:
b4:d4:31:a6:c5:86:1f:7d:12:4f:cb:a9:3e:e6:eb:89:7c:9c:
28:4a:d7:32:da:31:66:af:14:b5:c0:6f:c6:25:ec:dd:69:1d:
99:ab:7f:85:c3:ae:0f:b8:c4:53:8e:af:03:bb:64:95:3b:7d:
ba:a7:14:5f:ac:b9:45:96:70:0d:44:6b:23:8d:ac:82:6a:d5:
eb:43:7d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemwZDAMAtgOYKXMm3GHEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGJkNjQ5MDczNjQ2YzFmNGMzYjAxY2FjYWE3MmUyMDll
OWRhZmYwHhcNMjUwNTA1MDQwMTIxWhcNMjUwNTA2MDQwMTIxWjAzMTEwLwYDVQQD
EygxZmMwMjY4ZDg0MGZlY2IxZGU2OWUyYmQ3OGUyOTg3ZDgwY2YwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklzL4osH364KnCd3jYRUssvaz77q
Rr559LwTCHPXWwTLq9SsUmOERsSgld1J7RTcr9Tx1k2qZ5aAWpuXcKJ/Zjk8H7pt
gJ6K2abi0DTRya4u2VGJeIbD4/JaGw8Zlhp7tM55fa8za3d6Xaft/lIF+qYL46qV
wznJoDkDrME6IXd1iqcByqtCgM4vv02iNdas5Vnwi+dQ6If48EyZX6ajbf47dzKS
kUwX6DX+0YZM7fm6/hznJq0UY2Eo5R9F5wyUU/ABLD7U1r4yjJVtBz4zjXrPmq6F
8+5vhyAcjILNFnDlOBIYbVxyuaoUeO+Pjh4NAivRpMafeY3lYSl5XWJaOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/AJo2ED+yx3mnivXjimH2AzwojMB8GA1UdIwQY
MBaAFGeL1kkHNkbB9MOwHKyqcuIJ6dr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2Ut
ZWQ3OGNiNzY2NjFjLzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzM0NDEtM2U4Zi00NGVkLTkxM2UtZWQ3OGNiNzY2NjFj
LzEvWjR2V1NRYzJSc0gwdzdBY3JLcHk0Z25wMnY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJJBJ+G7
X1/lnhhbACWh7Lr7088wPTN1AfV0MBJVERMsYilvrpCWs1YbZeA7EWUw0U4gQxHe
CFgYqDQP+K07q7aQLoObAtd8x3hgUY+aAyIIEOQ6Q8I1CNXGXvemXGyU4FaoAlmV
znD6vUumX5QZ6tAx9PrJBmarr0RYFRRhXcjxl3NAS5JggCo2k4tbaqSE3EUkWZsT
YlnFyAJF5YJK7O1f670MGgjwzPAO+sUu3bslOfEjtNQxpsWGH30ST8upPubriXyc
KErXMtoxZq8UtcBvxiXs3Wkdmat/hcOuD7jEU46vA7tklTt9uqcUX6y5RZZwDURr
I42sgmrV60N9xw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:56:30 2025 by rpki-client