Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json)
Hash identifier: rPS9dfBfDhqddohXCNFOZUKBfZaUoov0WhezvYEnbvA=
Subject key identifier: 96:FF:6B:2E:14:71:43:B1:AF:E8:BA:64:F8:C3:F7:3F:01:13:0F:F1
Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Certificate serial: 01964CD92B42B931E1616C1FBFCDE186A6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
Manifest number: 07D6
Signing time: Sat 19 Apr 2025 07:00:22 +0000
Manifest this update: Sat 19 Apr 2025 07:00:22 +0000
Manifest next update: Sun 20 Apr 2025 07:00:22 +0000
Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: uWDFSGKFOXczeNywTxMWPTyXY//3GpA2IFaLU9Ehrhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:2b:42:b9:31:e1:61:6c:1f:bf:cd:e1:86:a6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49
Validity
Not Before: Apr 19 07:00:22 2025 GMT
Not After : Apr 20 07:00:22 2025 GMT
Subject: CN=96ff6b2e147143b1afe8ba64f8c3f73f01130ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:98:1b:8f:4a:87:70:ee:96:d1:c4:ec:46:
48:53:a1:76:e6:3e:2b:ab:c2:c6:e0:84:c2:b6:77:
f1:31:48:88:2c:9c:a8:02:92:6c:40:97:fe:0d:08:
f9:84:7e:dd:50:7d:00:7e:7a:df:fa:5b:7a:54:dc:
64:7b:38:e1:8f:d5:a7:19:7d:d8:6a:3f:21:4a:bc:
97:f9:8f:e4:2f:2b:e4:4a:df:0a:03:3f:38:d8:f5:
37:78:a7:bd:a4:82:e9:1c:e9:82:10:0f:1d:6f:0f:
86:76:cd:e7:2f:95:ac:c4:8e:b7:ce:6d:47:70:bf:
24:0c:c0:0b:f0:d7:f6:e5:42:db:d6:c4:7f:6f:18:
47:7a:08:a2:59:14:2c:fd:52:ca:a0:76:0b:db:cd:
6d:0e:70:a8:fc:41:40:8d:7f:a1:6f:de:14:21:25:
f8:fa:9e:ed:ba:3b:c3:f4:74:c2:82:64:6a:f3:c6:
15:4c:b6:2c:86:30:6d:2a:7f:75:94:81:95:8f:9b:
e8:a5:20:a7:53:ad:bc:86:bd:1a:19:2c:14:46:77:
57:27:54:5a:b5:84:49:46:5e:0c:9f:74:73:15:f4:
fd:f6:01:10:40:a1:af:b2:e7:15:6d:e4:ec:8c:b5:
d1:15:2d:c2:a0:f6:0e:27:12:3d:23:fc:06:0e:8e:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:6B:2E:14:71:43:B1:AF:E8:BA:64:F8:C3:F7:3F:01:13:0F:F1
X509v3 Authority Key Identifier:
keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:76:f0:5a:50:78:d1:a6:1c:14:01:24:e1:58:17:64:21:3d:
51:41:f7:bc:fa:7d:ef:dc:ba:5e:bb:4b:13:6d:7f:97:1f:61:
47:a6:e0:9e:68:f1:16:95:91:32:d8:16:3a:b0:d8:7f:6c:a3:
28:f7:d9:c9:8e:6a:2f:67:29:16:95:f6:68:1e:a9:7d:d4:27:
01:b9:dc:d5:4c:20:38:96:29:bf:6a:80:c9:47:f3:6e:eb:5c:
6c:7a:54:02:9f:e2:c8:d0:24:fc:70:5c:b4:22:12:8c:a5:a8:
ae:00:bf:ed:69:7f:d3:92:9a:af:41:df:59:bb:9c:82:0f:36:
b0:8f:41:38:5d:79:9a:75:bb:64:28:04:6a:ed:3a:07:39:c3:
b6:58:58:44:3b:6d:68:4f:86:25:d7:a9:9e:3c:fd:e0:0f:75:
12:e3:72:75:72:23:3c:44:ed:63:6a:ec:de:8e:78:e5:c5:a0:
53:c8:04:d6:92:09:95:be:00:de:ac:3a:aa:35:82:92:cf:a7:
a6:51:f3:1a:93:a8:30:b5:e7:9c:bb:f5:f8:44:ff:ec:6f:1f:
78:ba:b0:04:82:3d:1c:5e:a4:82:df:c8:db:84:c7:f1:06:66:
5a:25:da:a0:cd:46:88:3c:fb:98:a6:61:ef:ee:24:85:4d:d9:
42:73:50:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2StCuTHhYWwfv83hhqbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMmUzZDFmZmY5YmQ1NDc5YTEzMzBmODhmYTJlYzA3YzBl
YWVjNDkwHhcNMjUwNDE5MDcwMDIyWhcNMjUwNDIwMDcwMDIyWjAzMTEwLwYDVQQD
Eyg5NmZmNmIyZTE0NzE0M2IxYWZlOGJhNjRmOGMzZjczZjAxMTMwZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgWYG49Kh3DultHE7EZIU6F25j4r
q8LG4ITCtnfxMUiILJyoApJsQJf+DQj5hH7dUH0Afnrf+lt6VNxkezjhj9WnGX3Y
aj8hSryX+Y/kLyvkSt8KAz842PU3eKe9pILpHOmCEA8dbw+Gds3nL5WsxI63zm1H
cL8kDMAL8Nf25ULb1sR/bxhHegiiWRQs/VLKoHYL281tDnCo/EFAjX+hb94UISX4
+p7tujvD9HTCgmRq88YVTLYshjBtKn91lIGVj5vopSCnU628hr0aGSwURndXJ1Ra
tYRJRl4Mn3RzFfT99gEQQKGvsucVbeTsjLXRFS3CoPYOJxI9I/wGDo7J+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/ay4UcUOxr+i6ZPjD9z8BEw/xMB8GA1UdIwQY
MBaAFM8uPR//m9VHmhMw+I+i7AfA6uxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMt
NTMxMjM1ZTU1YjIzLzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMtNTMxMjM1ZTU1YjIz
LzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnbwWlB4
0aYcFAEk4VgXZCE9UUH3vPp979y6XrtLE21/lx9hR6bgnmjxFpWRMtgWOrDYf2yj
KPfZyY5qL2cpFpX2aB6pfdQnAbnc1UwgOJYpv2qAyUfzbutcbHpUAp/iyNAk/HBc
tCISjKWorgC/7Wl/05Kar0HfWbucgg82sI9BOF15mnW7ZCgEau06BznDtlhYRDtt
aE+GJdepnjz94A91EuNydXIjPETtY2rs3o545cWgU8gE1pIJlb4A3qw6qjWCks+n
plHzGpOoMLXnnLv1+ET/7G8feLqwBII9HF6kgt/I24TH8QZmWiXaoM1GiDz7mKZh
7+4khU3ZQnNQVw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:11:57 2025 by rpki-client