Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json)
Hash identifier: oPKwIsMC0gafSFlUCSu6waTss3QRYbNJAXPHISs9Jd4=
Subject key identifier: DB:E6:4A:DE:53:D5:DF:38:25:6A:85:2A:6C:25:94:99:7B:69:D0:1E
Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Certificate serial: 0195121094FDFF6D8FA8F352C50210ADC542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
Manifest number: 08A4
Signing time: Mon 17 Feb 2025 04:00:31 +0000
Manifest this update: Mon 17 Feb 2025 04:00:31 +0000
Manifest next update: Tue 18 Feb 2025 04:00:31 +0000
Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: 3h+hlgsfBkvuuqseIrej2p77amoZNU6H24Uzs0q19V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:94:fd:ff:6d:8f:a8:f3:52:c5:02:10:ad:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b
Validity
Not Before: Feb 17 04:00:31 2025 GMT
Not After : Feb 18 04:00:31 2025 GMT
Subject: CN=dbe64ade53d5df38256a852a6c2594997b69d01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:d8:bc:9f:bf:e9:66:69:37:07:af:75:60:
c2:1f:9d:4d:31:5a:28:67:54:32:3f:b4:b6:45:07:
ae:3f:7a:fe:54:a2:bd:fe:5c:6e:f2:c9:79:70:3a:
b1:d3:5c:a7:7b:3c:ce:28:00:88:39:d9:12:3d:7a:
07:46:f3:7f:63:4f:69:7c:ec:0e:4c:8b:03:eb:2b:
fb:ee:c6:9a:f1:3b:7a:57:63:e3:1c:94:9f:52:7b:
63:ab:fb:9a:50:3f:8f:5c:b5:aa:9a:85:15:ee:e0:
75:87:e4:0a:5d:91:b4:06:dd:de:a3:1c:db:c7:77:
12:01:56:86:22:fb:35:85:e2:30:74:c7:19:4e:fd:
22:a4:c0:df:28:6f:27:a6:5f:1b:d2:b4:f6:25:c6:
f3:0f:67:23:64:fd:5c:e4:a0:a2:d4:02:93:95:e0:
3b:9a:9a:04:9e:e1:c2:48:3b:da:f7:97:4d:8a:39:
42:5b:e1:76:02:32:7c:f3:d8:b5:41:ef:df:d0:60:
ee:da:29:d5:5d:1f:5d:ac:8e:53:b9:b2:55:98:f0:
d4:dc:9a:d0:b1:e4:14:52:26:40:dc:ab:1e:5c:48:
3e:be:13:78:4c:a4:fc:92:47:c3:c1:e8:1a:03:05:
7f:49:98:ab:40:60:b8:08:2e:55:f8:28:70:d3:e6:
4d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E6:4A:DE:53:D5:DF:38:25:6A:85:2A:6C:25:94:99:7B:69:D0:1E
X509v3 Authority Key Identifier:
keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:47:a2:27:56:aa:8a:7d:d1:76:3f:87:d9:27:11:af:db:
23:a0:7f:15:c5:73:69:12:1f:90:06:17:a7:e1:e3:3b:9d:9a:
01:08:4d:1c:da:3f:e7:c3:e2:49:65:fa:25:01:6e:81:c0:aa:
1c:43:44:28:fb:10:1a:99:5f:de:9d:43:3b:3e:68:56:ad:26:
52:7a:77:63:42:9b:f2:d4:a1:ff:60:7d:c4:cb:f0:6b:45:11:
26:68:f2:20:af:5e:65:6e:3d:80:8a:2c:b1:b2:e2:51:22:c0:
4a:34:81:03:8e:8e:5b:63:66:d9:10:87:f1:1f:02:0c:8e:97:
de:d3:c6:2f:75:9d:f6:db:17:97:54:85:15:a3:12:a9:4a:8a:
65:5e:8b:31:98:87:c6:c3:88:8b:ac:75:2d:d0:d8:f4:5b:62:
90:fe:bd:87:61:db:0f:10:0a:47:40:91:17:d5:d2:40:e1:67:
55:7f:80:13:b8:9b:b6:ab:25:c0:79:e6:ec:44:1d:ae:cd:73:
44:ba:a5:73:35:0e:a9:05:bb:d6:bd:2f:17:cb:15:56:c4:a0:
d1:0d:c0:3c:f0:4c:7c:a7:53:72:ed:7c:24:b4:ad:f7:c2:73:
99:e9:fa:3b:18:00:79:bc:7c:9f:a0:f0:78:00:03:ac:7a:a5:
9e:0b:0b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSEJT9/22PqPNSxQIQrcVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTIwOWEyMTY4YzQ4ZDM1MDkzYmI5YzA1MjBiMTlmYjBm
ZTE0M2IwHhcNMjUwMjE3MDQwMDMxWhcNMjUwMjE4MDQwMDMxWjAzMTEwLwYDVQQD
EyhkYmU2NGFkZTUzZDVkZjM4MjU2YTg1MmE2YzI1OTQ5OTdiNjlkMDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcfYvJ+/6WZpNwevdWDCH51NMVoo
Z1QyP7S2RQeuP3r+VKK9/lxu8sl5cDqx01ynezzOKACIOdkSPXoHRvN/Y09pfOwO
TIsD6yv77saa8Tt6V2PjHJSfUntjq/uaUD+PXLWqmoUV7uB1h+QKXZG0Bt3eoxzb
x3cSAVaGIvs1heIwdMcZTv0ipMDfKG8npl8b0rT2JcbzD2cjZP1c5KCi1AKTleA7
mpoEnuHCSDva95dNijlCW+F2AjJ889i1Qe/f0GDu2inVXR9drI5TubJVmPDU3JrQ
seQUUiZA3KseXEg+vhN4TKT8kkfDwegaAwV/SZirQGC4CC5V+Chw0+ZNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvmSt5T1d84JWqFKmwllJl7adAeMB8GA1UdIwQY
MBaAFM2SCaIWjEjTUJO7nAUgsZ+w/hQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYt
Y2Y0OGMwMzc0NGZhLzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYtY2Y0OGMwMzc0NGZh
LzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHpHoidW
qop90XY/h9knEa/bI6B/FcVzaRIfkAYXp+HjO52aAQhNHNo/58PiSWX6JQFugcCq
HENEKPsQGplf3p1DOz5oVq0mUnp3Y0Kb8tSh/2B9xMvwa0URJmjyIK9eZW49gIos
sbLiUSLASjSBA46OW2Nm2RCH8R8CDI6X3tPGL3Wd9tsXl1SFFaMSqUqKZV6LMZiH
xsOIi6x1LdDY9FtikP69h2HbDxAKR0CRF9XSQOFnVX+AE7ibtqslwHnm7EQdrs1z
RLqlczUOqQW71r0vF8sVVsSg0Q3APPBMfKdTcu18JLSt98Jzmen6OxgAebx8n6Dw
eAADrHqlngsLBA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:58 2025 by rpki-client