Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: KkY0s3DwETl1oxjktS0Xres6caxTxHQek2xg8Gb1RqI=
Subject key identifier: 73:7C:C0:E0:60:07:2C:12:9A:70:BF:D9:16:18:2C:29:28:9B:BD:3F
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 01965538D5B19A0EC0421D329EA01E17ACD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 02BC
Signing time: Sun 20 Apr 2025 22:01:50 +0000
Manifest this update: Sun 20 Apr 2025 22:01:50 +0000
Manifest next update: Mon 21 Apr 2025 22:01:50 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: iTrWyktJnR5jzKL5PBWpCmhiwz/L2neGgQ71kiJ0VZE=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:d5:b1:9a:0e:c0:42:1d:32:9e:a0:1e:17:ac:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Apr 20 22:01:50 2025 GMT
Not After : Apr 21 22:01:50 2025 GMT
Subject: CN=737cc0e060072c129a70bfd916182c29289bbd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:d0:20:0b:e9:29:05:44:ae:6d:20:ea:bc:
27:f6:ed:c6:04:51:8a:f0:9b:9a:d1:31:cd:7b:b8:
8f:e0:62:72:80:ae:85:e2:1c:37:14:4e:ed:89:dd:
d4:2a:c1:e3:2b:74:56:16:60:f3:b7:be:e2:3f:68:
31:36:48:89:8d:e9:b6:55:18:35:3e:a2:76:f5:06:
08:c5:4d:cf:8c:d9:37:34:b6:14:7b:28:20:c1:38:
43:f4:26:49:55:cc:3d:39:08:9c:61:06:88:d2:bb:
69:f5:d0:86:74:8b:97:21:71:74:d3:11:65:40:c2:
0e:37:64:ff:48:d0:ae:3c:93:8b:63:d8:a0:dd:c3:
ed:c3:a8:d1:a1:0c:84:89:45:e7:6d:f0:26:fd:9b:
e4:13:4b:66:d0:9f:fe:c5:c5:fa:9b:a2:e3:05:17:
ae:b2:99:d8:4d:cb:9e:0b:1e:06:1e:fd:a0:bf:c1:
eb:e5:7b:6c:5d:b5:b2:13:a9:8d:9d:7c:ea:a0:13:
e2:d2:16:f5:63:c9:0b:44:2f:f9:d1:72:7c:73:75:
dc:8b:17:fe:9e:33:e9:9d:e7:61:c7:4e:b0:9d:57:
9f:ad:ff:80:01:a3:3f:6d:62:7c:73:09:ee:a8:84:
7f:f8:c7:84:ae:20:a7:e4:f0:bb:15:74:6c:70:39:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7C:C0:E0:60:07:2C:12:9A:70:BF:D9:16:18:2C:29:28:9B:BD:3F
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:49:49:18:2a:ad:6e:9a:f8:47:e9:c5:51:fb:ea:9e:f4:80:
1a:cc:04:7b:6e:98:9e:7a:a1:33:db:22:53:5f:bc:4a:de:ad:
49:c6:66:c7:ea:31:3a:fb:93:26:5e:80:bf:21:b2:91:19:d5:
83:4e:e2:b3:3c:0b:a1:40:52:2e:7f:3a:c3:d1:c0:3e:32:e3:
b1:3f:81:eb:61:6c:18:88:c4:28:07:9b:6d:5d:42:59:ba:85:
f6:fd:2e:77:eb:d5:5e:b7:7b:8e:00:99:b7:da:03:e9:7f:00:
4d:5d:ad:fa:ab:d9:b5:cc:d8:93:c4:07:87:cc:59:fd:51:67:
2d:61:b7:65:09:bb:24:8c:e7:8c:e5:b7:87:be:9a:e8:9e:89:
23:a5:f6:72:2b:27:1b:01:ad:26:41:82:08:95:52:54:d8:40:
84:a6:16:1b:d4:c8:69:20:9f:ab:4b:ba:90:dc:66:af:74:8c:
3d:29:49:35:77:5a:f0:4d:e0:ca:21:b9:c5:05:44:80:a5:53:
14:88:03:14:60:82:7d:d0:e2:c5:a6:d4:37:a8:9d:78:95:a9:
79:7f:32:a0:b1:e9:2c:b4:96:8d:12:b9:02:52:cb:e4:f3:d9:
a5:37:21:10:37:b6:e9:15:19:ac:8c:4e:e0:57:34:39:16:0c:
a9:65:fa:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVONWxmg7AQh0ynqAeF6zZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1
MmE3YWUwHhcNMjUwNDIwMjIwMTUwWhcNMjUwNDIxMjIwMTUwWjAzMTEwLwYDVQQD
Eyg3MzdjYzBlMDYwMDcyYzEyOWE3MGJmZDkxNjE4MmMyOTI4OWJiZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKXQIAvpKQVErm0g6rwn9u3GBFGK
8Jua0THNe7iP4GJygK6F4hw3FE7tid3UKsHjK3RWFmDzt77iP2gxNkiJjem2VRg1
PqJ29QYIxU3PjNk3NLYUeyggwThD9CZJVcw9OQicYQaI0rtp9dCGdIuXIXF00xFl
QMION2T/SNCuPJOLY9ig3cPtw6jRoQyEiUXnbfAm/ZvkE0tm0J/+xcX6m6LjBReu
spnYTcueCx4GHv2gv8Hr5XtsXbWyE6mNnXzqoBPi0hb1Y8kLRC/50XJ8c3Xcixf+
njPpnedhx06wnVefrf+AAaM/bWJ8cwnuqIR/+MeEriCn5PC7FXRscDmMvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHN8wOBgBywSmnC/2RYYLCkom70/MB8GA1UdIwQY
MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt
ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx
LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiklJGCqt
bpr4R+nFUfvqnvSAGswEe26YnnqhM9siU1+8St6tScZmx+oxOvuTJl6AvyGykRnV
g07iszwLoUBSLn86w9HAPjLjsT+B62FsGIjEKAebbV1CWbqF9v0ud+vVXrd7jgCZ
t9oD6X8ATV2t+qvZtczYk8QHh8xZ/VFnLWG3ZQm7JIznjOW3h76a6J6JI6X2cisn
GwGtJkGCCJVSVNhAhKYWG9TIaSCfq0u6kNxmr3SMPSlJNXda8E3gyiG5xQVEgKVT
FIgDFGCCfdDixabUN6ideJWpeX8yoLHpLLSWjRK5AlLL5PPZpTchEDe26RUZrIxO
4Fc0ORYMqWX6xQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:52:15 2025 by rpki-client