Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: hx7TE0Ur7YrLvDAp0PM5RClALdG+cFmOrhCC6kGanCk=
Subject key identifier: 21:2A:B3:51:3C:6C:5A:04:BB:C6:88:FB:0A:B4:CC:E9:4D:13:BA:AA
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 01958F615A699931F6390463C3921E0466AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 03F9
Signing time: Thu 13 Mar 2025 12:01:16 +0000
Manifest this update: Thu 13 Mar 2025 12:01:16 +0000
Manifest next update: Fri 14 Mar 2025 12:01:16 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: 3leFW6lpR10ByRViGmFqplCpK0Hx0DNR/EtY8DEMkd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:5a:69:99:31:f6:39:04:63:c3:92:1e:04:66:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: Mar 13 12:01:16 2025 GMT
Not After : Mar 14 12:01:16 2025 GMT
Subject: CN=212ab3513c6c5a04bbc688fb0ab4cce94d13baaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:93:82:c0:ed:53:9e:cf:a5:42:b3:dc:f4:
e4:ee:90:9a:d1:cc:5b:c6:82:7f:44:61:ba:d2:7c:
99:9b:af:23:3e:29:13:bf:d3:d5:87:11:78:9f:a1:
81:d3:4c:31:98:29:d2:73:08:ae:d4:d8:cd:c7:c4:
cb:6b:b1:59:87:6e:c4:17:f2:14:0e:03:d2:a4:a0:
18:b0:04:4b:e1:97:2c:8d:8b:cb:e9:f0:a6:3c:21:
f8:90:0e:23:72:db:c1:8b:98:b8:ac:05:ce:65:ac:
c4:73:19:9c:08:37:e6:b8:b7:2b:40:38:17:ea:02:
3d:7b:4d:b3:29:af:40:4e:42:b3:4c:41:85:4e:73:
e9:15:bf:6f:03:e8:97:21:e9:86:6b:cf:6b:02:a0:
8a:14:54:8b:7a:0f:f6:6e:48:0c:84:94:0b:e4:49:
90:3a:94:7e:47:45:a9:7f:89:ab:43:25:cb:22:4c:
bb:08:ba:32:82:c6:e2:17:6c:26:be:fc:4c:b4:16:
2e:24:60:c0:b6:a2:88:ec:48:13:d5:b4:db:48:d3:
71:6b:fb:80:8c:b7:d5:a6:b4:39:aa:b8:33:f2:af:
82:34:94:a3:ab:f4:66:84:74:05:90:6b:26:14:35:
19:d3:66:64:ce:5c:2b:5f:e1:00:7f:d2:36:ab:15:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2A:B3:51:3C:6C:5A:04:BB:C6:88:FB:0A:B4:CC:E9:4D:13:BA:AA
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:69:fc:6a:cd:07:86:a4:ed:34:bd:3b:f9:08:7e:4c:87:b0:
65:bd:06:de:64:43:c1:6f:43:00:f9:2c:eb:ee:34:83:25:99:
9b:6d:ac:cc:0e:93:6e:00:b8:ca:85:94:2f:c6:96:53:b4:e8:
a4:a8:db:3e:84:57:fa:e8:99:ec:c1:89:f8:7a:7b:8d:e1:da:
b0:25:ba:7f:c5:29:37:36:45:e5:91:b5:24:d3:68:b1:1e:e4:
83:82:4d:78:22:93:6e:fb:bc:f9:a6:fa:88:5c:83:4d:76:94:
ab:3f:cd:d8:ce:d5:09:31:df:59:93:c0:12:45:ec:93:17:24:
b1:df:79:c5:eb:e8:fa:78:2a:91:74:52:71:08:c0:eb:aa:54:
60:b6:12:45:35:51:71:b8:d3:a0:08:bc:79:dd:88:30:bb:74:
2a:7f:0c:4e:38:8d:63:d6:bb:b1:4d:64:81:5f:c9:d6:03:53:
ec:db:9a:5e:43:98:d3:8a:5c:31:9b:40:03:df:24:8e:be:20:
b3:eb:cf:8c:0e:45:cc:d7:b0:8a:5b:e3:89:74:e6:96:a2:b4:
40:be:d4:97:43:8b:90:86:ae:3f:cb:f9:11:a2:bc:45:8c:b9:
54:0f:2e:b5:56:94:23:a5:96:51:8b:6c:d1:d6:b7:7d:70:c5:
d9:c1:2a:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYVppmTH2OQRjw5IeBGaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz
OTk5OTgwHhcNMjUwMzEzMTIwMTE2WhcNMjUwMzE0MTIwMTE2WjAzMTEwLwYDVQQD
EygyMTJhYjM1MTNjNmM1YTA0YmJjNjg4ZmIwYWI0Y2NlOTRkMTNiYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAyTgsDtU57PpUKz3PTk7pCa0cxb
xoJ/RGG60nyZm68jPikTv9PVhxF4n6GB00wxmCnScwiu1NjNx8TLa7FZh27EF/IU
DgPSpKAYsARL4ZcsjYvL6fCmPCH4kA4jctvBi5i4rAXOZazEcxmcCDfmuLcrQDgX
6gI9e02zKa9ATkKzTEGFTnPpFb9vA+iXIemGa89rAqCKFFSLeg/2bkgMhJQL5EmQ
OpR+R0Wpf4mrQyXLIky7CLoygsbiF2wmvvxMtBYuJGDAtqKI7EgT1bTbSNNxa/uA
jLfVprQ5qrgz8q+CNJSjq/RmhHQFkGsmFDUZ02ZkzlwrX+EAf9I2qxXm5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEqs1E8bFoEu8aI+wq0zOlNE7qqMB8GA1UdIwQY
MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt
NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy
LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2n8as0H
hqTtNL07+Qh+TIewZb0G3mRDwW9DAPks6+40gyWZm22szA6TbgC4yoWUL8aWU7To
pKjbPoRX+uiZ7MGJ+Hp7jeHasCW6f8UpNzZF5ZG1JNNosR7kg4JNeCKTbvu8+ab6
iFyDTXaUqz/N2M7VCTHfWZPAEkXskxcksd95xevo+ngqkXRScQjA66pUYLYSRTVR
cbjToAi8ed2IMLt0Kn8MTjiNY9a7sU1kgV/J1gNT7NuaXkOY04pcMZtAA98kjr4g
s+vPjA5FzNewilvjiXTmlqK0QL7Ul0OLkIauP8v5EaK8RYy5VA8utVaUI6WWUYts
0da3fXDF2cEqAA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:50 2025 by rpki-client