Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File: 0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier: BKKN4xueRUgT1r/86Ovuf06UQ/9/kJhp9PVuX9ZsBhs=
Subject key identifier: 42:F3:E1:64:7A:62:D1:3D:D4:8A:C1:9B:22:E5:DE:4C:A6:DB:AC:F5
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer: /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial: 019657CB5F8CAAA05DA5657527D69E893E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number: 12C1
Signing time: Mon 21 Apr 2025 10:01:08 +0000
Manifest this update: Mon 21 Apr 2025 10:01:08 +0000
Manifest next update: Tue 22 Apr 2025 10:01:08 +0000
Files and hashes: 1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: MW+/SIu6CgyDV1P66b4S5hzRXVLAC5p0QtG505R1pGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:5f:8c:aa:a0:5d:a5:65:75:27:d6:9e:89:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Validity
Not Before: Apr 21 10:01:08 2025 GMT
Not After : Apr 22 10:01:08 2025 GMT
Subject: CN=42f3e1647a62d13dd48ac19b22e5de4ca6dbacf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:ab:a2:40:e3:40:f4:d3:cf:23:e6:c4:de:
5a:1e:be:6b:e0:be:df:42:07:5f:b3:f9:cb:73:59:
db:3b:31:ff:ce:67:06:bd:24:95:dd:c7:59:44:8f:
58:1a:c0:99:c3:32:e7:9d:b1:d7:b7:2e:5f:9e:94:
a1:e0:03:d0:bb:3f:71:f0:ca:9f:70:ac:0a:7f:ae:
8b:7e:e4:80:b3:42:12:39:f2:84:3b:4b:16:fa:1a:
f9:25:6a:1e:32:13:86:2d:d7:4e:e6:a9:e2:68:7a:
2a:d9:c1:79:54:8e:57:69:3a:40:6c:4f:60:5d:83:
1e:c8:e2:0f:8b:9c:ff:5e:be:19:8e:17:4c:6a:48:
fa:ad:54:c2:40:e1:19:2c:6c:56:e4:8c:59:94:60:
32:26:20:7a:07:a0:f6:ef:72:dc:db:ad:f0:b8:0a:
a1:e4:78:9d:39:bf:6f:b6:e6:f6:65:5c:f4:ba:ef:
b9:8f:2b:71:74:c5:c8:77:5e:c2:53:4a:f5:28:d0:
52:16:4e:a2:fd:fb:77:2a:b8:25:a2:65:77:b6:39:
ea:83:89:92:e6:17:a4:fa:4c:bf:2a:6c:c3:31:83:
93:22:01:72:53:9e:9b:22:6c:a9:5c:e6:7f:7c:69:
83:13:6d:39:9b:53:af:48:87:31:11:ac:25:c1:79:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F3:E1:64:7A:62:D1:3D:D4:8A:C1:9B:22:E5:DE:4C:A6:DB:AC:F5
X509v3 Authority Key Identifier:
keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e0:c1:4d:d4:60:9e:8e:98:68:0b:df:a0:e7:f7:95:3a:ad:
01:9a:18:2b:34:dc:0a:58:67:17:c7:36:80:73:9d:95:b5:d7:
c3:b0:49:ad:9d:ca:1f:6d:9e:06:26:4b:2f:11:c4:d6:7c:a5:
41:26:78:6c:be:7c:98:15:38:df:d9:21:54:a2:b1:25:c8:de:
d2:25:e3:65:2e:02:fa:3c:15:8a:4a:6a:cb:86:da:fb:f9:58:
62:cb:f5:0f:16:57:3b:76:ca:d7:02:35:57:10:84:8f:09:fa:
6e:bd:25:89:aa:a1:c2:31:db:6d:2c:7a:aa:bb:e6:97:0c:fc:
07:b1:47:0a:2f:74:a9:d2:a3:e1:50:07:01:df:35:c1:88:9a:
83:41:9f:f1:dc:fd:e0:89:0a:d2:b3:89:93:26:45:59:97:90:
ed:de:5a:52:48:14:9a:8f:18:e4:71:30:43:82:80:df:ab:80:
f7:09:0d:06:0f:cb:ca:8a:2a:86:2d:25:3a:07:68:bc:1e:a8:
48:21:88:1f:02:83:eb:2e:38:3b:dd:df:fd:db:4e:da:84:1d:
90:50:e8:b3:53:84:66:63:e8:f2:3b:52:3b:a4:77:f5:25:38:
f3:ba:08:d0:22:bf:33:c6:f9:07:6d:41:a7:17:da:d9:ee:88:
67:d1:b1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXy1+MqqBdpWV1J9aeiT5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2RlZTZkZGZkZGJmYTgxZWVhYmM0NDFjNTNlNzAyZjky
NTgxNjUwHhcNMjUwNDIxMTAwMTA4WhcNMjUwNDIyMTAwMTA4WjAzMTEwLwYDVQQD
Eyg0MmYzZTE2NDdhNjJkMTNkZDQ4YWMxOWIyMmU1ZGU0Y2E2ZGJhY2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI6rokDjQPTTzyPmxN5aHr5r4L7f
Qgdfs/nLc1nbOzH/zmcGvSSV3cdZRI9YGsCZwzLnnbHXty5fnpSh4APQuz9x8Mqf
cKwKf66LfuSAs0ISOfKEO0sW+hr5JWoeMhOGLddO5qniaHoq2cF5VI5XaTpAbE9g
XYMeyOIPi5z/Xr4ZjhdMakj6rVTCQOEZLGxW5IxZlGAyJiB6B6D273Lc263wuAqh
5HidOb9vtub2ZVz0uu+5jytxdMXId17CU0r1KNBSFk6i/ft3KrglomV3tjnqg4mS
5hek+ky/KmzDMYOTIgFyU56bImypXOZ/fGmDE205m1OvSIcxEawlwXlzcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELz4WR6YtE91IrBmyLl3kym26z1MB8GA1UdIwQY
MBaAFNM97m3f3b+oHuq8RBxT5wL5JYFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZWFlMTEtOGRjOC00YWEwLTg3ZmIt
MWJjYmIxMDZlY2ZiLzEvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZWFlMTEtOGRjOC00YWEwLTg3ZmItMWJjYmIxMDZlY2Zi
LzEvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+DBTdRg
no6YaAvfoOf3lTqtAZoYKzTcClhnF8c2gHOdlbXXw7BJrZ3KH22eBiZLLxHE1nyl
QSZ4bL58mBU439khVKKxJcje0iXjZS4C+jwVikpqy4ba+/lYYsv1DxZXO3bK1wI1
VxCEjwn6br0liaqhwjHbbSx6qrvmlwz8B7FHCi90qdKj4VAHAd81wYiag0Gf8dz9
4IkK0rOJkyZFWZeQ7d5aUkgUmo8Y5HEwQ4KA36uA9wkNBg/Lyooqhi0lOgdovB6o
SCGIHwKD6y44O93f/dtO2oQdkFDos1OEZmPo8jtSO6R39SU487oI0CK/M8b5B21B
pxfa2e6IZ9GxPQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:19 2025 by rpki-client