Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
File: ZpDQciFADjewHnSnEvrnxtcDFZU.mft (raw, json)
Hash identifier: UfwqOecDTLO4YeUkz7hq3tfsceTduosVwdgmqwwFdjI=
Subject key identifier: E1:27:7B:55:A9:18:C0:A7:56:4E:ED:82:74:58:9B:57:CC:29:50:98
Authority key identifier: 66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
Certificate issuer: /CN=6690d07221400e37b01e74a712fae7c6d7031595
Certificate serial: 01962A16FE6D6FB7C73AE9A868A07F251325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
Manifest number: 0F95
Signing time: Sat 12 Apr 2025 13:01:12 +0000
Manifest this update: Sat 12 Apr 2025 13:01:12 +0000
Manifest next update: Sun 13 Apr 2025 13:01:12 +0000
Files and hashes: 1: ZpDQciFADjewHnSnEvrnxtcDFZU.crl (hash: znY5TszW6x0F5QlkB4ropwa7Y9+HHq5i703GNqhcIc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:16:fe:6d:6f:b7:c7:3a:e9:a8:68:a0:7f:25:13:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6690d07221400e37b01e74a712fae7c6d7031595
Validity
Not Before: Apr 12 13:01:12 2025 GMT
Not After : Apr 13 13:01:12 2025 GMT
Subject: CN=e1277b55a918c0a7564eed8274589b57cc295098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:a8:ed:88:e6:2f:fa:51:df:dc:e6:74:f2:
dc:02:21:b8:a8:39:fd:24:c0:bf:f3:d0:8b:ee:dc:
3e:45:5e:6e:80:c9:4c:1d:25:f7:5d:4a:48:9e:c6:
48:b6:05:80:b5:7d:f4:48:dd:f2:49:f9:ac:86:34:
09:c9:02:45:00:85:00:cd:11:9e:f1:4f:41:91:94:
67:2e:87:20:5e:74:cf:1a:1c:12:2b:b6:44:31:2d:
fb:51:14:74:52:35:ab:42:83:b8:c9:90:27:13:b0:
6a:aa:34:d7:d4:79:d2:ce:b5:c1:57:1b:ea:b9:08:
b3:67:ed:fa:da:a0:bd:3d:45:a4:a9:f9:9d:ea:43:
f7:55:de:7c:53:26:5c:94:0e:45:10:86:97:5c:e7:
08:93:21:38:b4:ad:e0:fe:19:a2:32:84:36:40:ae:
78:40:7f:2e:56:82:b4:5c:36:b0:2e:11:dd:a3:5e:
0f:86:f8:df:8d:0d:fa:03:c9:2f:2b:fa:25:cb:dd:
45:e5:39:8c:c5:8e:3e:ca:95:83:74:47:a3:29:c2:
11:63:96:48:4e:39:13:4a:9d:f0:bb:92:1a:13:2f:
52:49:c5:ce:ae:22:bc:ec:d4:9e:cc:fc:ee:ca:33:
e0:9c:5f:d7:d2:62:f3:65:cd:d0:70:58:d7:20:97:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:7B:55:A9:18:C0:A7:56:4E:ED:82:74:58:9B:57:CC:29:50:98
X509v3 Authority Key Identifier:
keyid:66:90:D0:72:21:40:0E:37:B0:1E:74:A7:12:FA:E7:C6:D7:03:15:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpDQciFADjewHnSnEvrnxtcDFZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d565b2-dc18-4460-bf02-461acb8a1c9f/1/ZpDQciFADjewHnSnEvrnxtcDFZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:fb:8c:10:6b:62:65:e5:ef:f9:8b:68:c9:3b:b8:44:68:77:
89:ae:5c:cb:de:da:83:f1:64:b2:94:15:28:cc:cc:21:cc:b2:
32:32:2c:5c:98:35:3c:b6:7b:a8:08:04:38:ec:4d:f9:0a:1a:
92:32:62:c3:f2:bc:62:29:ff:6d:ba:c7:5e:d1:79:09:6c:b8:
33:e7:f9:7a:80:8f:17:2d:6b:e6:24:c3:1e:28:fc:8c:7b:be:
c5:3c:61:f3:93:0e:a7:99:d1:3b:e8:81:b6:1b:07:d4:4f:a7:
c7:eb:e3:53:b7:d2:11:78:d8:f8:0a:1e:f2:f9:61:86:5c:ab:
24:fa:cc:d5:a5:96:d8:0c:45:7d:13:c1:30:10:1f:1f:b5:8e:
3a:6b:41:34:a9:0a:dd:98:b9:8c:3d:2f:71:80:4e:ea:92:89:
85:57:3d:81:eb:70:e0:7f:80:71:1f:cd:8e:32:86:2f:5d:6e:
42:15:b3:1b:d8:d6:da:b7:05:1d:5b:7c:5e:9e:a5:db:6c:e9:
98:e9:8a:66:cb:73:ea:0a:f5:45:2c:3c:bc:11:2b:bb:2d:7f:
a5:97:a9:7c:46:b9:8b:23:ab:4f:fd:d6:9d:0b:e1:04:e9:8c:
6c:d4:c2:c1:ef:c1:7e:1a:07:d8:21:6f:d6:25:39:38:7b:ed:
eb:0a:54:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYqFv5tb7fHOumoaKB/JRMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTBkMDcyMjE0MDBlMzdiMDFlNzRhNzEyZmFlN2M2ZDcw
MzE1OTUwHhcNMjUwNDEyMTMwMTEyWhcNMjUwNDEzMTMwMTEyWjAzMTEwLwYDVQQD
EyhlMTI3N2I1NWE5MThjMGE3NTY0ZWVkODI3NDU4OWI1N2NjMjk1MDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgeo7YjmL/pR39zmdPLcAiG4qDn9
JMC/89CL7tw+RV5ugMlMHSX3XUpInsZItgWAtX30SN3ySfmshjQJyQJFAIUAzRGe
8U9BkZRnLocgXnTPGhwSK7ZEMS37URR0UjWrQoO4yZAnE7BqqjTX1HnSzrXBVxvq
uQizZ+362qC9PUWkqfmd6kP3Vd58UyZclA5FEIaXXOcIkyE4tK3g/hmiMoQ2QK54
QH8uVoK0XDawLhHdo14PhvjfjQ36A8kvK/oly91F5TmMxY4+ypWDdEejKcIRY5ZI
TjkTSp3wu5IaEy9SScXOriK87NSezPzuyjPgnF/X0mLzZc3QcFjXIJcGOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEne1WpGMCnVk7tgnRYm1fMKVCYMB8GA1UdIwQY
MBaAFGaQ0HIhQA43sB50pxL658bXAxWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDIt
NDYxYWNiOGExYzlmLzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kNTY1YjItZGMxOC00NDYwLWJmMDItNDYxYWNiOGExYzlm
LzEvWnBEUWNpRkFEamV3SG5TbkV2cm54dGNERlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfuMEGti
ZeXv+YtoyTu4RGh3ia5cy97ag/FkspQVKMzMIcyyMjIsXJg1PLZ7qAgEOOxN+Qoa
kjJiw/K8Yin/bbrHXtF5CWy4M+f5eoCPFy1r5iTDHij8jHu+xTxh85MOp5nRO+iB
thsH1E+nx+vjU7fSEXjY+Aoe8vlhhlyrJPrM1aWW2AxFfRPBMBAfH7WOOmtBNKkK
3Zi5jD0vcYBO6pKJhVc9getw4H+AcR/NjjKGL11uQhWzG9jW2rcFHVt8Xp6l22zp
mOmKZstz6gr1RSw8vBEruy1/pZepfEa5iyOrT/3WnQvhBOmMbNTCwe/BfhoH2CFv
1iU5OHvt6wpUZg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:32:16 2025 by rpki-client