Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json)
Hash identifier: gmRlEBbeQwTOZb+1SqltBZqk9KgGS/hTNtNSLxot3k4=
Subject key identifier: D2:46:34:86:8F:54:8A:A2:6B:BD:B8:14:43:E0:DA:A7:79:B6:9D:88
Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Certificate serial: 01974C32578C898539A9C492A1B95E4DB109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:56 +0000
Manifest this update: Sat 07 Jun 2025 21:00:56 +0000
Manifest next update: Sun 08 Jun 2025 21:00:56 +0000
Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: BCXcauMgWt+Z/vfvijwreN4NDwuvxe59aungkn8aWOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:57:8c:89:85:39:a9:c4:92:a1:b9:5e:4d:b1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540
Validity
Not Before: Jun 7 21:00:56 2025 GMT
Not After : Jun 8 21:00:56 2025 GMT
Subject: CN=d24634868f548aa26bbdb81443e0daa779b69d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:44:0b:5c:5a:cf:56:01:f5:05:6c:1e:97:51:
99:78:9f:c8:67:d2:f6:a3:79:10:34:be:b1:cc:a7:
86:07:96:e0:c0:a2:9f:6a:37:35:14:46:ce:8c:e8:
0a:9a:9c:33:89:c8:d6:58:79:92:2f:9f:81:9a:93:
e7:bb:a3:9e:42:f8:6c:03:4e:29:55:32:5d:29:85:
0f:b5:9c:2d:49:b9:57:96:35:56:e5:2e:bb:58:7a:
8e:b7:84:37:f2:f6:73:c4:3e:e9:71:0b:9d:27:e6:
cc:b0:88:ef:e4:d9:61:e2:e1:8c:fa:c7:31:c2:05:
d7:9f:ce:b5:4c:b9:25:e3:13:1a:66:44:e4:36:ac:
c7:35:6d:62:49:2f:04:67:29:e4:1f:08:95:af:db:
09:16:1f:49:8b:5e:57:a2:5e:10:25:fa:54:35:1a:
d3:20:37:5b:ce:8d:c7:8a:69:10:0b:4d:a5:d7:b3:
47:61:b5:fb:70:84:0d:ae:69:73:99:9d:84:3f:bd:
a7:05:46:77:e1:23:f0:51:fd:a1:2e:fd:b2:d1:02:
ad:a4:3d:a7:69:26:12:37:e6:cd:3f:0f:75:9f:cb:
99:3e:42:05:22:32:e4:c3:5f:90:9c:eb:7a:b4:5c:
64:68:51:dc:09:bb:fd:58:5e:5f:1e:27:71:6b:95:
2a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:46:34:86:8F:54:8A:A2:6B:BD:B8:14:43:E0:DA:A7:79:B6:9D:88
X509v3 Authority Key Identifier:
keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a0:aa:ff:cd:34:61:63:fb:81:0b:75:36:d4:66:19:60:56:
e0:23:4f:ee:13:42:6f:83:26:9a:1e:6f:a9:21:73:47:47:69:
10:db:59:64:99:fe:f6:9a:29:26:69:38:e7:9e:ce:6b:6a:13:
49:01:b9:be:02:90:e3:4d:9b:fb:2f:8e:3c:19:1d:5b:2f:b1:
30:cd:13:61:a0:96:b2:64:40:8c:b7:70:c6:72:6d:e3:d5:ef:
0c:8f:64:27:8f:58:9c:c0:da:e9:fa:7d:2c:fd:6b:ca:17:be:
d0:08:cb:9d:4a:07:8f:18:49:f2:92:20:be:62:b2:4c:f1:1b:
1b:d6:c1:f5:a7:37:60:e7:e2:4a:9b:c5:32:34:a8:b9:53:d8:
dd:56:09:b0:43:86:9b:47:55:4c:d5:bf:e4:a4:fc:91:6f:77:
10:32:7b:bb:3f:09:ca:a4:96:c8:a6:a9:13:9e:07:dc:e7:00:
64:b8:c1:e3:b0:d7:37:97:65:31:e1:35:59:60:9c:b7:8b:67:
f2:75:9b:08:63:c4:1d:5f:a1:4c:50:98:0a:c2:35:74:4b:89:
90:fc:5f:da:e6:ba:87:03:eb:d7:9a:25:6f:e0:e6:5f:0d:f1:
92:ab:7b:ed:47:ce:7d:2a:33:70:ab:72:ab:57:93:6f:63:63:
40:fb:ee:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMleMiYU5qcSSobleTbEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1
NzA1NDAwHhcNMjUwNjA3MjEwMDU2WhcNMjUwNjA4MjEwMDU2WjAzMTEwLwYDVQQD
EyhkMjQ2MzQ4NjhmNTQ4YWEyNmJiZGI4MTQ0M2UwZGFhNzc5YjY5ZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40QLXFrPVgH1BWwel1GZeJ/IZ9L2
o3kQNL6xzKeGB5bgwKKfajc1FEbOjOgKmpwzicjWWHmSL5+BmpPnu6OeQvhsA04p
VTJdKYUPtZwtSblXljVW5S67WHqOt4Q38vZzxD7pcQudJ+bMsIjv5Nlh4uGM+scx
wgXXn861TLkl4xMaZkTkNqzHNW1iSS8EZynkHwiVr9sJFh9Ji15Xol4QJfpUNRrT
IDdbzo3HimkQC02l17NHYbX7cIQNrmlzmZ2EP72nBUZ34SPwUf2hLv2y0QKtpD2n
aSYSN+bNPw91n8uZPkIFIjLkw1+QnOt6tFxkaFHcCbv9WF5fHidxa5UqgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJGNIaPVIqia724FEPg2qd5tp2IMB8GA1UdIwQY
MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt
NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2
LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKCq/800
YWP7gQt1NtRmGWBW4CNP7hNCb4Mmmh5vqSFzR0dpENtZZJn+9popJmk4557Oa2oT
SQG5vgKQ402b+y+OPBkdWy+xMM0TYaCWsmRAjLdwxnJt49XvDI9kJ49YnMDa6fp9
LP1ryhe+0AjLnUoHjxhJ8pIgvmKyTPEbG9bB9ac3YOfiSpvFMjSouVPY3VYJsEOG
m0dVTNW/5KT8kW93EDJ7uz8JyqSWyKapE54H3OcAZLjB47DXN5dlMeE1WWCct4tn
8nWbCGPEHV+hTFCYCsI1dEuJkPxf2ua6hwPr15olb+DmXw3xkqt77UfOfSozcKty
q1eTb2NjQPvu0A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:35:21 2025 by rpki-client