Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
File: zoip7Zmtl6w3FxISn-BU9pbcVn0.mft (raw, json)
Hash identifier: 47YCrRSkt8ddik+vGQcu4jemugZvgY54UhBqniGise8=
Subject key identifier: F3:22:81:E9:DA:D9:FB:76:83:B5:4F:04:55:34:C7:AB:D9:8D:05:5C
Authority key identifier: CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
Certificate issuer: /CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Certificate serial: 0194C35095207D4293C0FC5414C92759EAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
Manifest number: 0227
Signing time: Sat 01 Feb 2025 21:00:25 +0000
Manifest this update: Sat 01 Feb 2025 21:00:25 +0000
Manifest next update: Sun 02 Feb 2025 21:00:25 +0000
Files and hashes: 1: zoip7Zmtl6w3FxISn-BU9pbcVn0.crl (hash: GK+7HumplMusxk+sbNxYZEg9z6c11vS8JCNCDN86+7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:50:95:20:7d:42:93:c0:fc:54:14:c9:27:59:ea:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce88a9ed99ad97ac371712129fe054f696dc567d
Validity
Not Before: Feb 1 21:00:25 2025 GMT
Not After : Feb 2 21:00:25 2025 GMT
Subject: CN=f32281e9dad9fb7683b54f045534c7abd98d055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:5c:d1:2b:5b:ec:e7:50:c8:82:1e:ff:8a:
94:90:59:9e:06:b4:de:33:d5:b6:4a:bb:47:a1:57:
0d:24:24:e4:27:65:18:e4:cb:00:80:2a:7b:f4:53:
cf:ab:45:0c:1a:71:0c:5d:4c:99:6f:fe:03:80:da:
75:2f:85:51:ae:ea:c9:9a:18:84:3d:88:dc:6c:6f:
c8:4e:a0:e4:39:21:01:4e:31:78:78:d4:d4:4a:f9:
f3:2d:8e:88:d0:ce:50:60:2e:32:2d:4b:ee:85:6c:
a8:55:49:36:78:96:73:5f:98:56:ae:85:97:fb:a1:
74:b6:87:a5:b9:95:ea:4d:fa:04:d6:67:82:a3:fd:
9e:e4:27:7b:89:7b:39:cb:47:70:c3:4e:e6:b5:b9:
fd:95:49:55:64:21:16:62:8a:57:98:36:ab:1d:59:
f5:e0:3d:3d:f1:d5:0b:ad:bc:75:e2:b5:89:7a:1a:
90:fa:b1:51:cb:b2:bb:32:1c:7a:a4:be:27:ff:b7:
ea:83:b8:98:8f:fc:1e:c6:15:24:20:9a:6a:93:42:
1d:49:db:7a:96:f0:cf:29:1e:dd:0a:e7:6e:6d:9e:
64:80:b7:15:04:0a:0d:ab:bc:fd:59:40:5a:2f:2d:
7d:a0:9c:b2:b2:76:a3:55:b7:02:a1:ef:22:9c:7e:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:81:E9:DA:D9:FB:76:83:B5:4F:04:55:34:C7:AB:D9:8D:05:5C
X509v3 Authority Key Identifier:
keyid:CE:88:A9:ED:99:AD:97:AC:37:17:12:12:9F:E0:54:F6:96:DC:56:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zoip7Zmtl6w3FxISn-BU9pbcVn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/27f2a7-8e20-4fad-a201-1c6f035fb22c/1/zoip7Zmtl6w3FxISn-BU9pbcVn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:5d:b0:78:c4:8c:18:d7:78:8f:b0:4b:74:b3:7a:a5:4e:
54:cb:11:45:05:77:44:0a:93:0d:f7:2a:51:c9:af:07:c2:11:
53:02:1f:3c:62:d7:1b:16:91:ff:76:5d:ec:61:e2:1b:12:41:
e3:ee:ef:f4:6b:92:09:2a:a5:15:80:e5:0b:d1:25:8f:3e:49:
d2:bc:92:b2:c9:74:74:ac:60:f5:56:a4:dc:cb:2a:cc:2a:43:
45:ab:77:74:9a:d3:50:81:62:2c:95:48:f0:ba:74:e4:4e:b8:
f4:83:b6:93:05:b7:63:dc:6f:ca:d3:10:59:8c:fe:15:3e:6e:
1c:ec:f5:66:fa:04:02:65:37:9b:4e:b5:cd:87:43:62:92:1c:
1c:ad:54:a3:19:41:a5:e8:c7:39:8d:c7:19:19:47:c2:56:cd:
63:0c:e5:39:7d:df:3e:65:7b:40:b1:b4:1e:bd:a4:3d:42:35:
d4:39:de:c6:f2:4b:b2:b0:73:40:e5:32:77:90:23:c0:56:13:
93:d7:ff:57:77:b5:83:65:95:5c:d0:8b:0c:3f:e8:2e:53:c7:
c6:4a:ca:bf:f4:a1:b7:f6:64:72:b2:11:47:03:0b:93:2b:ef:
f4:f3:6e:18:48:a4:b9:47:ac:f0:55:39:02:98:25:fa:84:23:
8b:9d:6e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDUJUgfUKTwPxUFMknWeq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlODhhOWVkOTlhZDk3YWMzNzE3MTIxMjlmZTA1NGY2OTZk
YzU2N2QwHhcNMjUwMjAxMjEwMDI1WhcNMjUwMjAyMjEwMDI1WjAzMTEwLwYDVQQD
EyhmMzIyODFlOWRhZDlmYjc2ODNiNTRmMDQ1NTM0YzdhYmQ5OGQwNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/9c0Stb7OdQyIIe/4qUkFmeBrTe
M9W2SrtHoVcNJCTkJ2UY5MsAgCp79FPPq0UMGnEMXUyZb/4DgNp1L4VRrurJmhiE
PYjcbG/ITqDkOSEBTjF4eNTUSvnzLY6I0M5QYC4yLUvuhWyoVUk2eJZzX5hWroWX
+6F0toeluZXqTfoE1meCo/2e5Cd7iXs5y0dww07mtbn9lUlVZCEWYopXmDarHVn1
4D098dULrbx14rWJehqQ+rFRy7K7Mhx6pL4n/7fqg7iYj/wexhUkIJpqk0IdSdt6
lvDPKR7dCudubZ5kgLcVBAoNq7z9WUBaLy19oJyysnajVbcCoe8inH6txwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMigena2ft2g7VPBFU0x6vZjQVcMB8GA1UdIwQY
MBaAFM6Iqe2ZrZesNxcSEp/gVPaW3FZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEt
MWM2ZjAzNWZiMjJjLzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yN2YyYTctOGUyMC00ZmFkLWEyMDEtMWM2ZjAzNWZiMjJj
LzEvem9pcDdabXRsNnczRnhJU24tQlU5cGJjVm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt1dsHjE
jBjXeI+wS3SzeqVOVMsRRQV3RAqTDfcqUcmvB8IRUwIfPGLXGxaR/3Zd7GHiGxJB
4+7v9GuSCSqlFYDlC9Eljz5J0rySssl0dKxg9Vak3MsqzCpDRat3dJrTUIFiLJVI
8Lp05E649IO2kwW3Y9xvytMQWYz+FT5uHOz1ZvoEAmU3m061zYdDYpIcHK1UoxlB
pejHOY3HGRlHwlbNYwzlOX3fPmV7QLG0Hr2kPUI11DnexvJLsrBzQOUyd5AjwFYT
k9f/V3e1g2WVXNCLDD/oLlPHxkrKv/Sht/ZkcrIRRwMLkyvv9PNuGEikuUes8FU5
Apgl+oQji51uvA==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:46:51 2025 by rpki-client