Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
File: lZCfz5xup2MAznHQlNMl9X1knL8.mft (raw, json)
Hash identifier: dij9yw8E1B0K7EeGSTL7w5NxzXjdyYK/ubS1oGbm4Eg=
Subject key identifier: 24:6B:87:33:38:C8:80:F7:79:5D:31:49:19:D3:7E:84:2C:6A:ED:7C
Authority key identifier: 95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
Certificate issuer: /CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Certificate serial: 01958C601ED346689683C5115F6FDF1ADE32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
Manifest number: 11CD
Signing time: Wed 12 Mar 2025 22:01:04 +0000
Manifest this update: Wed 12 Mar 2025 22:01:04 +0000
Manifest next update: Thu 13 Mar 2025 22:01:04 +0000
Files and hashes: 1: lZCfz5xup2MAznHQlNMl9X1knL8.crl (hash: pYYghfnbx/cxtkulFuiFrBjmDFJZou3sTwWXPAxQEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:1e:d3:46:68:96:83:c5:11:5f:6f:df:1a:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95909fcf9c6ea76300ce71d094d325f57d649cbf
Validity
Not Before: Mar 12 22:01:04 2025 GMT
Not After : Mar 13 22:01:04 2025 GMT
Subject: CN=246b873338c880f7795d314919d37e842c6aed7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:c6:42:37:ea:64:ef:91:80:d0:33:7e:34:
ad:ff:79:5b:14:e9:a5:be:4a:55:92:6b:dc:85:32:
c8:0b:fc:b5:3b:90:15:52:1e:46:5a:44:f5:4f:2a:
a9:4f:d8:18:19:ea:e1:5e:3b:f5:32:e8:40:fa:91:
c5:56:bf:94:cb:1c:0a:0c:02:5b:9c:a3:12:2c:e6:
bb:3d:5a:9a:10:d0:78:e8:a8:4c:16:2a:80:63:1e:
bb:f8:8c:81:93:23:69:c6:23:ff:8d:c6:00:52:38:
a9:23:50:44:ab:b1:4d:4c:c9:1a:dd:c1:2d:b9:a7:
55:89:91:ce:6b:cc:77:d7:05:da:8f:8d:b8:79:a1:
67:ad:00:ff:be:29:df:02:59:71:00:9e:e3:78:7c:
c3:97:a2:a5:57:0c:6c:0a:b9:bc:f9:d5:f0:45:49:
ac:b5:ea:f3:d9:73:aa:3d:8f:2a:bf:cb:5a:73:a3:
ff:0c:24:05:22:e5:6b:a2:22:39:7d:7a:99:2b:bc:
d6:fc:2d:ff:5d:7c:d1:82:7a:9f:79:14:f8:e8:86:
2f:6e:57:7d:4a:ab:34:42:b5:6f:1c:11:c8:07:b2:
a1:d8:b1:60:10:59:c5:ce:8c:ea:4b:32:ac:ec:7d:
3d:bd:5a:71:01:e0:56:b7:c6:91:45:34:f6:60:e3:
e0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6B:87:33:38:C8:80:F7:79:5D:31:49:19:D3:7E:84:2C:6A:ED:7C
X509v3 Authority Key Identifier:
keyid:95:90:9F:CF:9C:6E:A7:63:00:CE:71:D0:94:D3:25:F5:7D:64:9C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZCfz5xup2MAznHQlNMl9X1knL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/373e4c-d885-44fa-8c4b-a6eedfa9a4fc/1/lZCfz5xup2MAznHQlNMl9X1knL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:49:4c:1b:81:b8:00:dc:7a:12:5a:b0:07:c8:01:67:3d:
e3:78:a5:59:d2:8e:66:52:73:98:bd:29:76:73:05:fc:76:6c:
ae:f8:af:38:00:3d:4b:b7:96:72:26:4d:bf:12:53:6e:da:67:
24:52:74:f3:ca:80:86:45:e6:aa:35:5f:90:7c:88:00:68:2b:
fa:eb:7b:a0:9e:95:5f:2f:c5:50:4c:cf:79:83:51:07:8f:2b:
87:ef:d8:54:f4:57:81:8c:bc:75:53:42:7f:78:3c:ff:d0:27:
45:8a:39:3b:bc:ee:60:30:84:0e:fd:fa:ee:2c:84:b0:53:ca:
4b:4b:ae:ff:68:34:2d:fd:66:8d:31:fd:14:bd:f8:18:f3:69:
e0:f2:2a:29:4d:ae:1d:55:dc:85:01:5b:dc:ea:80:e1:a5:b7:
7d:4a:50:d7:12:03:15:34:96:a4:44:e4:8e:b5:39:01:1e:03:
d0:70:e2:53:e5:8c:50:13:a8:3c:8a:b2:c1:cd:76:79:38:c3:
83:e7:f9:c7:84:2e:d8:54:8a:1c:96:74:0a:05:0e:ec:bd:c1:
ed:48:29:45:ba:4d:b8:fc:19:5b:03:2e:ee:d0:96:62:f1:b8:
5d:0f:29:11:07:9e:e1:32:25:e2:9a:82:d4:db:c9:23:a5:ba:
c2:c5:bf:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYB7TRmiWg8URX2/fGt4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1OTA5ZmNmOWM2ZWE3NjMwMGNlNzFkMDk0ZDMyNWY1N2Q2
NDljYmYwHhcNMjUwMzEyMjIwMTA0WhcNMjUwMzEzMjIwMTA0WjAzMTEwLwYDVQQD
EygyNDZiODczMzM4Yzg4MGY3Nzk1ZDMxNDkxOWQzN2U4NDJjNmFlZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oXGQjfqZO+RgNAzfjSt/3lbFOml
vkpVkmvchTLIC/y1O5AVUh5GWkT1TyqpT9gYGerhXjv1MuhA+pHFVr+UyxwKDAJb
nKMSLOa7PVqaENB46KhMFiqAYx67+IyBkyNpxiP/jcYAUjipI1BEq7FNTMka3cEt
uadViZHOa8x31wXaj424eaFnrQD/vinfAllxAJ7jeHzDl6KlVwxsCrm8+dXwRUms
terz2XOqPY8qv8tac6P/DCQFIuVroiI5fXqZK7zW/C3/XXzRgnqfeRT46IYvbld9
Sqs0QrVvHBHIB7Kh2LFgEFnFzozqSzKs7H09vVpxAeBWt8aRRTT2YOPgIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRrhzM4yID3eV0xSRnTfoQsau18MB8GA1UdIwQY
MBaAFJWQn8+cbqdjAM5x0JTTJfV9ZJy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNzNlNGMtZDg4NS00NGZhLThjNGIt
YTZlZWRmYTlhNGZjLzEvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zNzNlNGMtZDg4NS00NGZhLThjNGItYTZlZWRmYTlhNGZj
LzEvbFpDZno1eHVwMk1Bem5IUWxOTWw5WDFrbkw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLhJTBuB
uADcehJasAfIAWc943ilWdKOZlJzmL0pdnMF/HZsrvivOAA9S7eWciZNvxJTbtpn
JFJ088qAhkXmqjVfkHyIAGgr+ut7oJ6VXy/FUEzPeYNRB48rh+/YVPRXgYy8dVNC
f3g8/9AnRYo5O7zuYDCEDv367iyEsFPKS0uu/2g0Lf1mjTH9FL34GPNp4PIqKU2u
HVXchQFb3OqA4aW3fUpQ1xIDFTSWpETkjrU5AR4D0HDiU+WMUBOoPIqywc12eTjD
g+f5x4Qu2FSKHJZ0CgUO7L3B7UgpRbpNuPwZWwMu7tCWYvG4XQ8pEQee4TIl4pqC
1NvJI6W6wsW/tQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:14 2025 by rpki-client