Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: 8Ri7OaemCpuV4fLvR52WZMkI0A8ZVRnI/nugzu+kk0s=
Subject key identifier: 76:D4:F5:47:FC:F8:C2:38:DD:DF:3D:B7:71:80:BA:02:C9:5A:4A:14
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 01963E78AD08AF2EAC31306B64EA5EC391D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0C13
Signing time: Wed 16 Apr 2025 12:00:17 +0000
Manifest this update: Wed 16 Apr 2025 12:00:17 +0000
Manifest next update: Thu 17 Apr 2025 12:00:17 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: 5Pqi07nw/joWOVClTLhYM8DpK4mPmvyqqULAQOF1Uk4=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:ad:08:af:2e:ac:31:30:6b:64:ea:5e:c3:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Apr 16 12:00:17 2025 GMT
Not After : Apr 17 12:00:17 2025 GMT
Subject: CN=76d4f547fcf8c238dddf3db77180ba02c95a4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:8a:97:e4:ea:48:af:cc:7b:f6:48:fa:a7:
38:b4:68:e9:f3:00:1d:8f:f0:61:e1:42:a0:c3:58:
6b:d1:77:ea:38:e8:3d:3a:17:da:9b:7a:ad:52:ac:
76:45:b7:21:48:4c:70:36:25:ae:71:21:da:ab:a7:
bc:3a:ba:12:06:e0:d7:dd:e2:b5:62:0f:b8:52:53:
ae:6a:0d:22:3b:91:b9:26:7b:f9:bc:c5:28:c5:b4:
a9:0c:fa:8c:6d:03:5a:eb:3d:c7:99:11:c4:77:df:
72:5c:8d:78:aa:46:fa:6b:93:fe:eb:0f:3d:e1:1b:
1b:97:30:51:04:ee:43:1c:e7:95:ff:df:b5:f7:c5:
ad:21:30:ff:fe:ac:6c:47:cd:ac:3a:47:19:bf:88:
5b:8f:6a:68:00:d7:c0:94:84:b5:86:2a:05:ee:3a:
cd:c8:b3:26:d1:7c:56:88:f8:2a:88:eb:68:b8:00:
bb:47:25:ba:67:85:7c:47:2a:64:ec:6a:c9:29:49:
aa:ed:93:9e:81:b9:a8:2f:3c:bb:b5:96:70:20:75:
29:f2:4e:4d:85:9e:ca:64:01:34:91:20:6c:57:66:
8c:41:9e:ee:bc:26:e6:f4:11:ab:a2:07:fd:cb:16:
bc:2f:ef:98:1b:e6:72:4b:61:18:79:4f:72:bb:9f:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D4:F5:47:FC:F8:C2:38:DD:DF:3D:B7:71:80:BA:02:C9:5A:4A:14
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:cf:66:81:4e:d0:d0:5c:11:01:31:e4:95:b7:ea:fe:89:e5:
96:c5:e4:fd:fc:d9:8b:d4:62:9a:7a:4f:3c:9d:c6:22:46:44:
e9:ff:0a:65:5f:f2:d5:49:db:67:f0:25:36:2c:4d:86:c7:92:
71:26:1f:31:31:e3:ca:4e:68:2d:26:4c:53:04:ee:a3:fe:aa:
a7:f3:5e:1f:07:de:59:64:c9:38:1d:9c:2e:a0:96:b4:a4:ef:
3b:7f:5d:81:ae:83:dd:0f:11:c9:5d:80:0f:e0:e4:93:0d:1a:
58:5b:e2:0a:05:5e:d9:eb:30:da:0d:d3:db:bc:70:ac:3d:f6:
8b:50:af:77:b7:ff:ab:7f:77:6e:95:1a:7e:04:c2:85:4a:db:
5a:da:a1:b0:c2:49:c4:11:ad:ef:7f:b1:93:c7:6a:dd:63:82:
ef:d5:b0:47:50:9d:42:27:98:a4:cb:cf:59:7c:79:e8:e5:f8:
91:34:87:6c:ae:4e:27:8b:7e:b4:14:6a:1c:1f:2f:e6:b4:cf:
77:3f:15:f1:45:f5:ec:5f:44:5e:de:55:16:c0:88:d0:d6:7e:
2e:64:f4:d5:b4:0f:fc:c7:fc:5d:a2:ba:04:72:00:c2:9a:b6:
a8:75:18:b2:3d:ed:d5:fc:fd:d7:97:6f:6b:8b:7b:db:4c:e5:
eb:14:42:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY+eK0Iry6sMTBrZOpew5HSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2Y4ODc0ZDk3MzFmNjc2ODJhMjEzZTZmZTVlMGIwZGYz
NGU2Y2IwHhcNMjUwNDE2MTIwMDE3WhcNMjUwNDE3MTIwMDE3WjAzMTEwLwYDVQQD
Eyg3NmQ0ZjU0N2ZjZjhjMjM4ZGRkZjNkYjc3MTgwYmEwMmM5NWE0YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIqKl+TqSK/Me/ZI+qc4tGjp8wAd
j/Bh4UKgw1hr0XfqOOg9Ohfam3qtUqx2RbchSExwNiWucSHaq6e8OroSBuDX3eK1
Yg+4UlOuag0iO5G5Jnv5vMUoxbSpDPqMbQNa6z3HmRHEd99yXI14qkb6a5P+6w89
4RsblzBRBO5DHOeV/9+198WtITD//qxsR82sOkcZv4hbj2poANfAlIS1hioF7jrN
yLMm0XxWiPgqiOtouAC7RyW6Z4V8Rypk7GrJKUmq7ZOegbmoLzy7tZZwIHUp8k5N
hZ7KZAE0kSBsV2aMQZ7uvCbm9BGrogf9yxa8L++YG+ZyS2EYeU9yu5+zCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbU9Uf8+MI43d89t3GAugLJWkoUMB8GA1UdIwQY
MBaAFGc/iHTZcx9naCohPm/l4LDfNObLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYt
OTg1MjMxNjM1NDIxLzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYtOTg1MjMxNjM1NDIx
LzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM9mgU7Q
0FwRATHklbfq/onllsXk/fzZi9RimnpPPJ3GIkZE6f8KZV/y1UnbZ/AlNixNhseS
cSYfMTHjyk5oLSZMUwTuo/6qp/NeHwfeWWTJOB2cLqCWtKTvO39dga6D3Q8RyV2A
D+Dkkw0aWFviCgVe2esw2g3T27xwrD32i1Cvd7f/q393bpUafgTChUrbWtqhsMJJ
xBGt73+xk8dq3WOC79WwR1CdQieYpMvPWXx56OX4kTSHbK5OJ4t+tBRqHB8v5rTP
dz8V8UX17F9EXt5VFsCI0NZ+LmT01bQP/Mf8XaK6BHIAwpq2qHUYsj3t1fz915dv
a4t720zl6xRCsg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:54:48 2025 by rpki-client