Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File: RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier: 2T543gDjn6HKGg4AtkIqQ2JyOIGYEAZMC33z/TEA4kU=
Subject key identifier: 47:C0:14:6D:C3:15:68:68:DF:75:36:3A:98:0F:DD:73:66:E9:17:E3
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer: /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial: 019655A63E31C590BA7C53219F3700B68747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number: 0405
Signing time: Mon 21 Apr 2025 00:01:20 +0000
Manifest this update: Mon 21 Apr 2025 00:01:20 +0000
Manifest next update: Tue 22 Apr 2025 00:01:20 +0000
Files and hashes: 1: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: j2QR7NVqX9e4gwsDQyPYm+dgEvLl3EMzAryfrt25elg=)
2: kS0aNs1lx-O6EfwiKwOMofYyt2Q.roa (hash: nZGxHnLNLZrVTyKCjSNF3LxCV+ntfcbITfflKKEl2WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:3e:31:c5:90:ba:7c:53:21:9f:37:00:b6:87:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
Validity
Not Before: Apr 21 00:01:20 2025 GMT
Not After : Apr 22 00:01:20 2025 GMT
Subject: CN=47c0146dc3156868df75363a980fdd7366e917e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:32:8f:23:ff:1a:04:27:5e:fc:e7:c8:35:74:
1b:76:23:98:bb:fa:77:b0:db:e4:4e:2b:c1:ce:1b:
ec:b8:9e:c0:48:bc:70:89:3c:63:66:b9:75:82:96:
0d:52:0b:7f:91:b4:4c:51:19:6f:2d:d8:f3:b6:64:
d7:42:3b:af:3f:c2:e7:f4:d3:7a:6c:b4:ff:b1:8d:
fd:d8:e6:80:fe:fc:46:59:c6:17:62:ab:97:23:d7:
b5:87:d1:59:78:6c:66:d9:3d:9d:1f:9d:80:d7:7e:
d1:dd:e3:99:1f:31:29:b8:d7:9b:a1:c4:0a:7a:56:
91:a1:8c:ea:60:65:2f:14:3d:8f:f8:11:1b:21:01:
69:00:3f:23:23:18:dc:c4:93:08:0d:b9:b1:e1:e2:
ee:da:30:4d:59:a4:13:32:99:5b:eb:62:70:96:07:
0b:a1:3b:a2:a5:7b:9e:d4:4b:ba:a3:84:f7:e3:e0:
01:44:cf:1d:24:54:54:d2:ea:f5:d0:2d:22:04:47:
a4:e6:26:18:b6:fb:b6:db:64:c5:93:c4:93:77:a7:
ff:3a:f2:47:d4:25:fe:e2:eb:91:71:d3:8c:d5:c9:
7c:11:04:0b:db:92:dc:f0:2d:e1:c2:ed:51:a2:c4:
52:e8:bc:33:50:5c:20:3f:98:4c:77:cc:84:10:7e:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C0:14:6D:C3:15:68:68:DF:75:36:3A:98:0F:DD:73:66:E9:17:E3
X509v3 Authority Key Identifier:
keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a0:22:ae:3d:90:89:e1:fd:03:75:17:00:2a:c9:4f:d1:8c:
68:17:25:6b:5f:b6:82:e7:5b:d5:04:c8:1e:6e:69:cf:15:3b:
67:23:bc:19:71:94:79:0e:03:61:be:c3:ab:6a:18:09:28:c7:
f8:88:a1:01:3a:22:f9:37:46:30:02:7b:9f:18:69:65:83:35:
0a:e3:a3:44:94:da:1d:b4:ae:e3:80:2a:80:a6:97:03:c1:95:
b2:c5:91:2b:d5:95:4a:2e:4f:cc:6c:59:ec:be:46:f5:36:07:
2d:65:8a:bf:15:6d:9d:39:5e:5e:9f:16:a2:e0:4e:44:42:8a:
ac:14:a4:bf:76:2a:ab:c6:be:20:02:3c:1b:e7:d0:66:82:b9:
4f:5d:a5:8b:1f:ee:61:0e:e9:bf:4b:0c:d5:de:58:b0:26:2a:
ff:13:3e:b8:53:21:8e:2e:09:e3:de:fa:cc:0e:44:2c:46:63:
fb:a0:14:e7:8f:a5:34:ef:bf:bc:bf:37:04:e5:8f:00:ea:b0:
58:9e:36:74:33:d1:0c:a1:74:06:d6:ed:f9:96:63:0a:b1:c0:
24:d0:74:23:f3:24:dd:e2:bb:32:ee:60:e5:b7:fb:f7:fe:38:
a7:f9:e8:4b:79:c4:8a:c9:f6:70:18:95:3c:57:3b:41:35:5b:
23:c6:35:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpj4xxZC6fFMhnzcAtodHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTYwMmQ3YWY3YzM0OGM5NWFiMTFlZGQ2MTMyMDU2NzUz
ZWFiYjkwHhcNMjUwNDIxMDAwMTIwWhcNMjUwNDIyMDAwMTIwWjAzMTEwLwYDVQQD
Eyg0N2MwMTQ2ZGMzMTU2ODY4ZGY3NTM2M2E5ODBmZGQ3MzY2ZTkxN2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TKPI/8aBCde/OfINXQbdiOYu/p3
sNvkTivBzhvsuJ7ASLxwiTxjZrl1gpYNUgt/kbRMURlvLdjztmTXQjuvP8Ln9NN6
bLT/sY392OaA/vxGWcYXYquXI9e1h9FZeGxm2T2dH52A137R3eOZHzEpuNebocQK
elaRoYzqYGUvFD2P+BEbIQFpAD8jIxjcxJMIDbmx4eLu2jBNWaQTMplb62JwlgcL
oTuipXue1Eu6o4T34+ABRM8dJFRU0ur10C0iBEek5iYYtvu222TFk8STd6f/OvJH
1CX+4uuRcdOM1cl8EQQL25Lc8C3hwu1RosRS6LwzUFwgP5hMd8yEEH4K0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfAFG3DFWho33U2OpgP3XNm6RfjMB8GA1UdIwQY
MBaAFEWWAtevfDSMlasR7dYTIFZ1Pqu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUt
NjU2YzE2MmZiMjRlLzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80MDg2MmMtOTNhZi00YjI2LTgyNWUtNjU2YzE2MmZiMjRl
LzEvUlpZQzE2OThOSXlWcXhIdDFoTWdWblUtcTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKAirj2Q
ieH9A3UXACrJT9GMaBcla1+2gudb1QTIHm5pzxU7ZyO8GXGUeQ4DYb7Dq2oYCSjH
+IihAToi+TdGMAJ7nxhpZYM1CuOjRJTaHbSu44AqgKaXA8GVssWRK9WVSi5PzGxZ
7L5G9TYHLWWKvxVtnTleXp8WouBOREKKrBSkv3Yqq8a+IAI8G+fQZoK5T12lix/u
YQ7pv0sM1d5YsCYq/xM+uFMhji4J4976zA5ELEZj+6AU54+lNO+/vL83BOWPAOqw
WJ42dDPRDKF0Btbt+ZZjCrHAJNB0I/Mk3eK7Mu5g5bf79/44p/noS3nEisn2cBiV
PFc7QTVbI8Y1DQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:26 2025 by rpki-client