Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
File: RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft (raw, json)
Hash identifier: FOFbenuToDOkN+66D2qFsbuptjibh5ysEFb4sKnZXpA=
Subject key identifier: 15:06:A9:6E:9A:2F:A0:2F:6C:D3:FE:72:9C:B6:AC:1E:77:43:5D:40
Authority key identifier: 47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
Certificate issuer: /CN=4735e807d349d31564f9fd546138e3598e2007ce
Certificate serial: 01965B0339ADF3A430AE2E2231DE6D34FF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
Manifest number: 0E12
Signing time: Tue 22 Apr 2025 01:01:00 +0000
Manifest this update: Tue 22 Apr 2025 01:01:00 +0000
Manifest next update: Wed 23 Apr 2025 01:01:00 +0000
Files and hashes: 1: RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl (hash: 8eP9WUc8WxLcHwQR5T6BGiMKx3Ru4s0I8NuiEjfznto=)
2: okKN99_kSuFiK1nEiQxwIj0skkI.roa (hash: BJdgdwQcgeiOTDLWh5HfcEvgJyNYUlctToI5pjHaF+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:39:ad:f3:a4:30:ae:2e:22:31:de:6d:34:ff:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4735e807d349d31564f9fd546138e3598e2007ce
Validity
Not Before: Apr 22 01:01:00 2025 GMT
Not After : Apr 23 01:01:00 2025 GMT
Subject: CN=1506a96e9a2fa02f6cd3fe729cb6ac1e77435d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:bf:71:8a:07:73:ed:58:ce:fe:fd:02:c2:
2a:c2:97:e3:f8:52:a4:8f:08:10:3d:21:89:ce:8e:
0d:17:5a:ce:f7:30:db:74:eb:41:97:62:be:cf:db:
7c:45:79:73:e1:37:25:68:d8:97:a1:30:48:68:05:
06:36:a0:72:8c:46:c0:35:00:dc:c0:53:ca:21:f8:
de:de:8d:b3:f8:66:47:b5:0b:54:0c:2d:2f:6a:9b:
26:38:78:10:7b:83:1b:76:6a:69:91:2d:0b:e7:1d:
08:65:f8:cb:ec:b2:ba:ab:ae:f5:51:a6:47:35:1f:
9c:bb:d0:1f:cc:07:c6:87:aa:e1:69:d8:bc:f3:5a:
b6:fe:dc:4a:45:81:64:00:95:61:18:65:f6:53:c6:
1c:a8:cf:b2:73:62:99:ea:df:62:64:de:45:b7:67:
1e:b4:fb:53:30:88:ea:2f:04:f7:61:16:74:95:cc:
30:7d:14:4c:f7:4b:c0:83:01:e3:2a:26:83:b4:36:
70:29:70:3a:95:5a:f2:20:d1:35:1c:4e:c2:fa:61:
74:28:06:47:92:09:88:e9:8c:b4:54:7b:7e:5c:d8:
55:0b:eb:4a:e9:16:3c:16:38:9f:fe:4c:bf:e8:6e:
c6:f0:0b:bc:3b:9a:9e:a8:01:8b:fb:35:b2:fc:e5:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:06:A9:6E:9A:2F:A0:2F:6C:D3:FE:72:9C:B6:AC:1E:77:43:5D:40
X509v3 Authority Key Identifier:
keyid:47:35:E8:07:D3:49:D3:15:64:F9:FD:54:61:38:E3:59:8E:20:07:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzXoB9NJ0xVk-f1UYTjjWY4gB84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5e1380-9dc6-4691-86b5-5b1b5d9940c1/1/RzXoB9NJ0xVk-f1UYTjjWY4gB84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1c:61:5c:da:18:a2:e5:54:9c:ba:24:fd:02:3e:81:9f:0b:
49:ff:a7:7f:4e:68:19:ac:91:91:dd:48:20:de:d6:e5:25:74:
cc:0d:64:16:57:e8:4f:cc:3e:3b:ea:87:38:39:6b:7e:79:8b:
6b:85:a0:9e:b7:27:e2:b0:79:34:19:8b:cd:52:8c:6d:a2:85:
f7:d1:64:ec:05:db:7d:3a:8a:fa:d6:62:9f:df:2e:d6:95:67:
3f:f1:46:db:0e:ce:a2:ee:51:eb:a6:b0:b4:ed:12:78:64:5b:
50:db:18:f1:dc:e5:39:1c:53:9f:d5:76:85:7f:cd:12:c3:e0:
5f:bf:39:b5:51:23:50:82:0b:0f:ff:8a:cd:11:7f:71:8d:cc:
f6:a3:25:4c:aa:8f:c8:c8:ca:d0:15:d7:08:ad:38:0e:d8:4d:
9f:10:c8:c0:2f:a3:b3:fa:b3:8d:be:bc:42:1d:4b:c7:42:93:
c4:06:0f:c6:9e:bd:76:ac:6c:a3:55:13:68:24:e5:16:81:4d:
19:54:d1:36:1b:d4:a2:75:a6:f7:42:51:52:c6:54:8c:64:f5:
f8:53:1f:3e:a9:11:cc:2f:51:c9:12:93:19:be:a3:a8:09:c4:
83:22:5c:ed:51:12:de:27:a1:cc:2a:01:60:6b:0f:c1:a2:e7:
69:e7:0c:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAzmt86Qwri4iMd5tNP8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzVlODA3ZDM0OWQzMTU2NGY5ZmQ1NDYxMzhlMzU5OGUy
MDA3Y2UwHhcNMjUwNDIyMDEwMTAwWhcNMjUwNDIzMDEwMTAwWjAzMTEwLwYDVQQD
EygxNTA2YTk2ZTlhMmZhMDJmNmNkM2ZlNzI5Y2I2YWMxZTc3NDM1ZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TS/cYoHc+1Yzv79AsIqwpfj+FKk
jwgQPSGJzo4NF1rO9zDbdOtBl2K+z9t8RXlz4TclaNiXoTBIaAUGNqByjEbANQDc
wFPKIfje3o2z+GZHtQtUDC0vapsmOHgQe4MbdmppkS0L5x0IZfjL7LK6q671UaZH
NR+cu9AfzAfGh6rhadi881q2/txKRYFkAJVhGGX2U8YcqM+yc2KZ6t9iZN5Ft2ce
tPtTMIjqLwT3YRZ0lcwwfRRM90vAgwHjKiaDtDZwKXA6lVryINE1HE7C+mF0KAZH
kgmI6Yy0VHt+XNhVC+tK6RY8Fjif/ky/6G7G8Au8O5qeqAGL+zWy/OV5swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUGqW6aL6AvbNP+cpy2rB53Q11AMB8GA1UdIwQY
MBaAFEc16AfTSdMVZPn9VGE441mOIAfOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUt
NWIxYjVkOTk0MGMxLzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZTEzODAtOWRjNi00NjkxLTg2YjUtNWIxYjVkOTk0MGMx
LzEvUnpYb0I5TkoweFZrLWYxVVlUampXWTRnQjg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBxhXNoY
ouVUnLok/QI+gZ8LSf+nf05oGayRkd1IIN7W5SV0zA1kFlfoT8w+O+qHODlrfnmL
a4Wgnrcn4rB5NBmLzVKMbaKF99Fk7AXbfTqK+tZin98u1pVnP/FG2w7Oou5R66aw
tO0SeGRbUNsY8dzlORxTn9V2hX/NEsPgX785tVEjUIILD/+KzRF/cY3M9qMlTKqP
yMjK0BXXCK04DthNnxDIwC+js/qzjb68Qh1Lx0KTxAYPxp69dqxso1UTaCTlFoFN
GVTRNhvUonWm90JRUsZUjGT1+FMfPqkRzC9RyRKTGb6jqAnEgyJc7VES3iehzCoB
YGsPwaLnaecMXw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:42:31 2025 by rpki-client