Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json)
Hash identifier: yUdI4DMOu8KiXXNPabeH1AY976jZ79TJ0vttDay7SCw=
Subject key identifier: B0:87:63:25:1D:DD:1E:33:DF:4B:D8:2E:5B:81:91:1E:3D:C2:08:1A
Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Certificate serial: 01964CD9ADDAA76C376FE650E6FF3905F73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
Manifest number: 0D74
Signing time: Sat 19 Apr 2025 07:00:56 +0000
Manifest this update: Sat 19 Apr 2025 07:00:56 +0000
Manifest next update: Sun 20 Apr 2025 07:00:56 +0000
Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: bgBqUp6yJmhceUOHvT/HIKnHc+aYOUg20ZQ9/Fz6XE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:ad:da:a7:6c:37:6f:e6:50:e6:ff:39:05:f7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Validity
Not Before: Apr 19 07:00:56 2025 GMT
Not After : Apr 20 07:00:56 2025 GMT
Subject: CN=b08763251ddd1e33df4bd82e5b81911e3dc2081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:0d:2c:61:48:86:da:42:d9:fe:25:a3:19:
bc:1e:b6:4c:6a:cc:bc:d4:df:bf:98:22:e1:8e:40:
1f:ed:ae:71:94:c8:50:84:2c:8e:71:3f:d7:4e:11:
16:4c:3c:f5:a6:8f:a4:db:c9:4e:6e:4c:a7:1b:bb:
c1:10:a7:42:1a:bb:f9:1b:75:9d:aa:b4:6d:21:ee:
7a:d8:95:51:48:85:a2:68:eb:3d:b7:28:4f:59:55:
c2:96:56:c8:77:89:3b:61:7d:b8:4f:34:9c:62:50:
79:f2:a0:31:f9:79:e6:1a:30:c0:a5:e4:c9:5d:86:
51:57:91:47:d0:76:45:22:17:b5:fb:a1:44:81:09:
0a:aa:64:34:37:2f:81:38:d1:2e:df:e6:1e:4e:96:
33:9d:bd:73:35:aa:f7:68:32:63:7b:1f:6b:6c:d5:
f7:1f:59:12:10:25:ca:8e:d4:05:6e:e3:e0:f4:13:
be:3d:c4:d2:df:9c:62:d8:4c:d6:18:30:cf:ac:80:
c4:43:76:da:db:a2:73:1d:84:88:75:50:43:0d:a0:
ed:35:c9:a0:47:67:8b:cf:37:4e:2b:39:0e:59:2d:
3c:d7:98:78:4c:76:4b:56:7c:ef:55:d9:06:87:e4:
7a:53:ad:24:53:c8:19:56:6d:b4:fd:45:4f:1f:a3:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:87:63:25:1D:DD:1E:33:DF:4B:D8:2E:5B:81:91:1E:3D:C2:08:1A
X509v3 Authority Key Identifier:
keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:19:f1:4c:99:06:66:a4:70:b2:03:7b:66:b9:60:70:1e:57:
40:b3:a1:eb:27:94:ea:29:63:6e:35:2f:e7:d0:fd:ec:1b:f8:
e3:52:43:f7:b3:2e:d2:25:6d:20:fb:bb:32:ac:b4:b9:1c:22:
75:35:e2:b8:ca:52:a1:06:14:85:96:5d:46:9c:80:be:58:0c:
f0:01:ab:04:c0:57:87:41:93:02:d8:f9:8a:d2:ba:40:9e:2b:
38:5b:b1:c1:68:bb:93:e6:7a:61:3e:fd:f9:39:18:80:1e:92:
16:c7:c5:dc:4a:b2:51:fe:b2:14:4c:0b:c6:ef:10:c1:a2:4b:
cb:06:31:7e:06:d4:13:49:a8:09:72:18:59:3f:37:78:c1:97:
e3:37:e0:66:5c:03:e4:a4:c1:0b:f0:28:5a:0a:1a:0a:12:fc:
2f:db:59:06:53:3d:3e:e9:ab:4c:78:35:c5:71:3b:29:bf:18:
d2:43:81:c7:00:77:fa:ca:c5:44:fc:86:69:fd:f2:ab:2a:ee:
f9:1e:62:d9:f3:5c:f1:21:5f:fc:e7:84:4f:df:8d:29:33:29:
a1:c1:b4:28:d0:0d:01:e7:3d:69:60:71:a8:48:4d:94:f1:d2:
04:ea:87:0e:5e:c6:f4:88:6c:5f:4a:2e:71:06:e3:0d:5e:bc:
69:74:96:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2a3ap2w3b+ZQ5v85Bfc9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOWNlODMzNWZjMzc2NzZiMjBlYzE2NTVjNTNkNjdkYmM4
NmU4YjMwHhcNMjUwNDE5MDcwMDU2WhcNMjUwNDIwMDcwMDU2WjAzMTEwLwYDVQQD
EyhiMDg3NjMyNTFkZGQxZTMzZGY0YmQ4MmU1YjgxOTExZTNkYzIwODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8NLGFIhtpC2f4loxm8HrZMasy8
1N+/mCLhjkAf7a5xlMhQhCyOcT/XThEWTDz1po+k28lObkynG7vBEKdCGrv5G3Wd
qrRtIe562JVRSIWiaOs9tyhPWVXCllbId4k7YX24TzScYlB58qAx+XnmGjDApeTJ
XYZRV5FH0HZFIhe1+6FEgQkKqmQ0Ny+BONEu3+YeTpYznb1zNar3aDJjex9rbNX3
H1kSECXKjtQFbuPg9BO+PcTS35xi2EzWGDDPrIDEQ3ba26JzHYSIdVBDDaDtNcmg
R2eLzzdOKzkOWS0815h4THZLVnzvVdkGh+R6U60kU8gZVm20/UVPH6Mf6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCHYyUd3R4z30vYLluBkR49wggaMB8GA1UdIwQY
MBaAFP+c6DNfw3Z2sg7BZVxT1n28huizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMt
MjllNTNlZGE2ZTFjLzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMtMjllNTNlZGE2ZTFj
LzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBnxTJkG
ZqRwsgN7ZrlgcB5XQLOh6yeU6iljbjUv59D97Bv441JD97Mu0iVtIPu7Mqy0uRwi
dTXiuMpSoQYUhZZdRpyAvlgM8AGrBMBXh0GTAtj5itK6QJ4rOFuxwWi7k+Z6YT79
+TkYgB6SFsfF3EqyUf6yFEwLxu8QwaJLywYxfgbUE0moCXIYWT83eMGX4zfgZlwD
5KTBC/AoWgoaChL8L9tZBlM9PumrTHg1xXE7Kb8Y0kOBxwB3+srFRPyGaf3yqyru
+R5i2fNc8SFf/OeET9+NKTMpocG0KNANAec9aWBxqEhNlPHSBOqHDl7G9IhsX0ou
cQbjDV68aXSWgA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:47:32 2025 by rpki-client