Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: Ag+PFUMlEgLVoRyInzfqC3Kp7Odi6BOBC7ckBJ4BrjY=
Subject key identifier: BA:F9:69:B0:0D:4A:19:C8:76:0F:70:B3:62:A9:F3:55:CE:AD:FA:1F
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 01964EFE92DC1A3A5753A865E2309EE58C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 045C
Signing time: Sat 19 Apr 2025 17:00:28 +0000
Manifest this update: Sat 19 Apr 2025 17:00:28 +0000
Manifest next update: Sun 20 Apr 2025 17:00:28 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: W+9d5Hico+vEIwDhkJfP0u+0u+texj8V4aKIqaj2PXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:92:dc:1a:3a:57:53:a8:65:e2:30:9e:e5:8c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Apr 19 17:00:28 2025 GMT
Not After : Apr 20 17:00:28 2025 GMT
Subject: CN=baf969b00d4a19c8760f70b362a9f355ceadfa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:4f:98:0e:85:e9:bf:28:80:66:82:98:64:
34:a5:ed:db:39:d8:82:c3:dc:1a:aa:7d:43:d1:3f:
02:c5:7b:a9:72:a1:8a:d7:a6:50:a7:e6:77:a1:f7:
e8:71:d7:1d:f6:61:b4:5e:1d:fc:b0:c9:bb:1d:43:
af:1a:d1:96:f1:96:72:1b:b3:75:41:ba:ee:57:94:
fc:c0:dc:ab:c3:8e:0d:48:e3:9c:f9:a3:5b:a8:c7:
35:be:b6:4e:1b:b8:de:8c:75:1f:fd:75:1b:aa:63:
85:43:2b:46:ea:c6:64:eb:26:d1:30:02:93:79:d7:
4c:65:53:72:0a:cc:d6:7d:65:fa:1e:18:9d:e7:e8:
21:68:db:8e:c0:46:52:ea:28:4e:b5:29:24:3d:66:
95:17:93:7a:13:be:f5:bf:d2:0d:da:b0:35:19:4c:
87:d8:ae:af:10:f3:3c:58:4d:9e:10:76:71:20:54:
19:7e:d7:40:e3:ee:3d:e6:d3:a2:2d:e9:93:e0:aa:
81:c8:09:54:8f:46:af:a3:ea:42:01:63:6f:7f:9b:
f3:26:bc:a4:ee:bd:3a:bf:88:33:e7:3d:9b:c9:7a:
73:13:af:32:64:fc:b4:21:31:7d:c6:a6:85:de:83:
6f:70:0d:a4:9d:13:5e:12:dd:6f:b4:85:4b:a8:7c:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:69:B0:0D:4A:19:C8:76:0F:70:B3:62:A9:F3:55:CE:AD:FA:1F
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:02:fe:01:8e:cb:ba:01:13:ac:4a:80:a9:40:30:f9:97:d6:
a2:f4:53:15:19:46:da:1c:fb:61:bd:86:b2:c4:a1:a1:52:d4:
98:19:c0:11:52:99:4e:70:f8:f9:5c:77:25:ca:de:16:fc:08:
bd:4c:5a:4a:d0:27:39:f5:3d:1b:80:f7:25:bd:31:08:e5:97:
9b:35:a6:68:6a:70:78:11:39:a7:b1:77:3f:7f:a3:7a:5f:33:
2a:9d:89:0c:7b:84:90:f0:8c:b1:9b:2e:84:fa:44:5d:b2:90:
0b:cd:6a:db:ab:0b:1c:97:0b:f6:32:0e:9f:8e:b0:a3:c1:60:
32:96:ed:ea:54:27:d4:1d:48:29:66:ad:ba:02:bb:4e:4d:d7:
5b:be:60:ed:fc:bd:89:0a:0f:c6:bb:7b:35:6d:fa:e5:4b:ca:
45:cd:69:6c:f2:53:aa:f1:e9:82:52:1a:d6:1d:d7:c7:f7:28:
f3:ef:37:71:f6:44:06:46:ed:37:85:4c:64:d0:3d:a4:f9:21:
96:78:ee:5f:08:12:bd:4b:a4:d5:a4:23:0e:cb:bd:78:4e:ab:
fb:01:8e:38:f3:1f:ab:0a:cb:2b:d5:6c:95:b0:9c:31:d4:1d:
36:4e:66:15:b9:df:55:37:e4:cf:53:b5:84:b1:23:86:ba:71:
7e:a8:b6:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/pLcGjpXU6hl4jCe5YyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx
Zjc2NGUwHhcNMjUwNDE5MTcwMDI4WhcNMjUwNDIwMTcwMDI4WjAzMTEwLwYDVQQD
EyhiYWY5NjliMDBkNGExOWM4NzYwZjcwYjM2MmE5ZjM1NWNlYWRmYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL9PmA6F6b8ogGaCmGQ0pe3bOdiC
w9waqn1D0T8CxXupcqGK16ZQp+Z3offocdcd9mG0Xh38sMm7HUOvGtGW8ZZyG7N1
QbruV5T8wNyrw44NSOOc+aNbqMc1vrZOG7jejHUf/XUbqmOFQytG6sZk6ybRMAKT
eddMZVNyCszWfWX6Hhid5+ghaNuOwEZS6ihOtSkkPWaVF5N6E771v9IN2rA1GUyH
2K6vEPM8WE2eEHZxIFQZftdA4+495tOiLemT4KqByAlUj0avo+pCAWNvf5vzJryk
7r06v4gz5z2byXpzE68yZPy0ITF9xqaF3oNvcA2knRNeEt1vtIVLqHxGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr5abANShnIdg9ws2Kp81XOrfofMB8GA1UdIwQY
MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt
NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4
LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwL+AY7L
ugETrEqAqUAw+ZfWovRTFRlG2hz7Yb2GssShoVLUmBnAEVKZTnD4+Vx3JcreFvwI
vUxaStAnOfU9G4D3Jb0xCOWXmzWmaGpweBE5p7F3P3+jel8zKp2JDHuEkPCMsZsu
hPpEXbKQC81q26sLHJcL9jIOn46wo8FgMpbt6lQn1B1IKWatugK7Tk3XW75g7fy9
iQoPxrt7NW365UvKRc1pbPJTqvHpglIa1h3Xx/co8+83cfZEBkbtN4VMZNA9pPkh
lnjuXwgSvUuk1aQjDsu9eE6r+wGOOPMfqwrLK9VslbCcMdQdNk5mFbnfVTfkz1O1
hLEjhrpxfqi2LQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:28:48 2025 by rpki-client