Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json)
Hash identifier: 4AjHCZvU7Ni7A0nuAIcCCfnGeeHRulBe3Vc2DpZ7X0U=
Subject key identifier: 1C:43:F1:B1:07:66:45:5C:AA:79:FA:E7:7F:93:51:13:FD:99:E6:EC
Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Certificate serial: 019657263647835403A1FA53B284D378A30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
Manifest number: 090B
Signing time: Mon 21 Apr 2025 07:00:44 +0000
Manifest this update: Mon 21 Apr 2025 07:00:44 +0000
Manifest next update: Tue 22 Apr 2025 07:00:44 +0000
Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: HlJxA2m8Erfj7rAlAXnPrymg7GXg5pwZHvV2ya4scxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:36:47:83:54:03:a1:fa:53:b2:84:d3:78:a3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3
Validity
Not Before: Apr 21 07:00:44 2025 GMT
Not After : Apr 22 07:00:44 2025 GMT
Subject: CN=1c43f1b10766455caa79fae77f935113fd99e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3c:df:e9:a4:65:0e:47:f4:be:bb:87:19:fa:
37:35:d2:6d:82:40:a2:de:22:73:c2:18:e5:72:cf:
56:22:3d:7f:bc:21:12:3a:aa:6f:75:2b:f2:9c:c9:
a5:b8:88:5a:0a:6b:50:35:ce:8e:b8:45:55:81:d7:
78:79:39:88:79:69:b8:c2:db:fb:a8:b6:5f:63:53:
82:31:7c:b4:c1:66:5a:60:22:be:4d:22:23:6b:60:
42:ae:b5:2e:1d:68:7f:48:b6:d4:b3:66:b1:85:40:
67:eb:d3:10:f0:bd:92:dd:a6:8e:6b:8a:7c:46:7a:
d6:68:98:9c:6c:ea:fb:06:d2:57:b7:2c:40:59:4c:
4f:34:7a:c1:66:6c:f4:75:05:7f:6f:1d:eb:cc:69:
24:3b:6b:f8:6c:46:fe:7d:8a:9c:b3:2c:09:d3:47:
0d:5a:30:0e:a4:70:26:ff:46:08:62:fe:e7:d9:b5:
99:93:b0:e3:12:fc:c5:83:d8:bd:76:14:02:eb:a8:
58:f0:af:23:d8:48:ef:f5:a4:12:e1:82:b0:ca:eb:
a4:ab:5d:54:4f:34:9a:bd:c3:06:d2:fb:65:b4:76:
73:41:ae:6b:4a:71:6c:ac:5e:36:54:3e:4e:78:b3:
98:b0:79:45:78:5c:e2:25:e3:bd:9f:19:5a:33:92:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:F1:B1:07:66:45:5C:AA:79:FA:E7:7F:93:51:13:FD:99:E6:EC
X509v3 Authority Key Identifier:
keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:4e:7b:b7:b6:da:e5:44:53:dd:69:43:2d:3d:37:77:a6:
fc:83:94:65:41:2f:b6:d5:63:fb:1b:1c:20:a7:e0:4c:a7:a2:
3d:83:9d:c2:1f:be:f8:e0:f6:0f:fc:e7:30:8f:fb:98:12:fa:
68:9f:51:8c:a1:74:f2:97:f0:04:b9:dd:fc:49:b6:d6:73:bb:
38:e2:98:2c:dd:7c:0a:ef:a7:8c:b3:60:e8:fc:bb:64:4b:a9:
28:dc:f3:34:e8:56:f7:3e:47:56:7d:67:da:61:79:1d:91:d6:
48:ea:50:1a:bd:67:0c:56:1e:ff:47:bb:46:28:d3:10:58:de:
51:20:45:22:af:0a:16:4c:1d:53:9d:3c:50:a0:e4:a5:d5:b7:
4a:30:d7:92:84:19:ab:3c:12:08:dd:20:ee:fd:73:a5:62:7f:
38:67:9d:c3:ce:ba:c0:78:bd:d2:6c:d0:38:aa:85:a9:88:53:
1f:b8:46:f4:95:bf:d6:6e:e2:85:f0:0a:ef:72:8c:00:4c:ae:
2f:f6:82:15:cb:1f:3b:a6:79:d5:22:01:50:a1:ad:bb:71:8d:
04:35:de:b8:32:41:99:d2:d7:f9:6a:3a:4f:08:46:ae:8a:f0:
a4:58:3a:05:ae:37:39:95:ff:a8:e6:2f:ab:59:64:52:77:d8:
99:59:a6:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJjZHg1QDofpTsoTTeKMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2
NDBhYzMwHhcNMjUwNDIxMDcwMDQ0WhcNMjUwNDIyMDcwMDQ0WjAzMTEwLwYDVQQD
EygxYzQzZjFiMTA3NjY0NTVjYWE3OWZhZTc3ZjkzNTExM2ZkOTllNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjzf6aRlDkf0vruHGfo3NdJtgkCi
3iJzwhjlcs9WIj1/vCESOqpvdSvynMmluIhaCmtQNc6OuEVVgdd4eTmIeWm4wtv7
qLZfY1OCMXy0wWZaYCK+TSIja2BCrrUuHWh/SLbUs2axhUBn69MQ8L2S3aaOa4p8
RnrWaJicbOr7BtJXtyxAWUxPNHrBZmz0dQV/bx3rzGkkO2v4bEb+fYqcsywJ00cN
WjAOpHAm/0YIYv7n2bWZk7DjEvzFg9i9dhQC66hY8K8j2Ejv9aQS4YKwyuukq11U
TzSavcMG0vtltHZzQa5rSnFsrF42VD5OeLOYsHlFeFziJeO9nxlaM5IVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxD8bEHZkVcqnn653+TURP9mebsMB8GA1UdIwQY
MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt
MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh
LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHItOe7e2
2uVEU91pQy09N3em/IOUZUEvttVj+xscIKfgTKeiPYOdwh+++OD2D/znMI/7mBL6
aJ9RjKF08pfwBLnd/Em21nO7OOKYLN18Cu+njLNg6Py7ZEupKNzzNOhW9z5HVn1n
2mF5HZHWSOpQGr1nDFYe/0e7RijTEFjeUSBFIq8KFkwdU508UKDkpdW3SjDXkoQZ
qzwSCN0g7v1zpWJ/OGedw866wHi90mzQOKqFqYhTH7hG9JW/1m7ihfAK73KMAEyu
L/aCFcsfO6Z51SIBUKGtu3GNBDXeuDJBmdLX+Wo6TwhGrorwpFg6Ba43OZX/qOYv
q1lkUnfYmVmmlg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:46 2025 by rpki-client