Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json)
Hash identifier: rW36r5oVpsHYyoAJRumGKJOmhc0+84rjjar33rPmBrc=
Subject key identifier: CB:A2:DC:BC:FA:DB:B1:A8:C5:CC:2F:3E:AA:E5:C6:46:07:B7:3A:2C
Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Certificate serial: 01965914B5C82EB0DC18FBC2DA76CA76064A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 16:00:51 +0000
Manifest this update: Mon 21 Apr 2025 16:00:51 +0000
Manifest next update: Tue 22 Apr 2025 16:00:51 +0000
Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: 5/wtEoVIHnuTiRzQ9R3MKUaCkMF4oKoH+54G0YrRviw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:b5:c8:2e:b0:dc:18:fb:c2:da:76:ca:76:06:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a
Validity
Not Before: Apr 21 16:00:51 2025 GMT
Not After : Apr 22 16:00:51 2025 GMT
Subject: CN=cba2dcbcfadbb1a8c5cc2f3eaae5c64607b73a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:59:83:81:aa:9f:18:18:d6:a4:cf:5d:c8:
c8:b5:00:7d:88:a3:78:a9:7d:76:e2:74:03:4d:4b:
e5:0e:3d:59:55:3e:67:96:dd:d7:35:1d:b6:71:bd:
7b:fd:4a:2a:ea:39:71:16:52:57:8d:09:6e:b3:73:
a4:ab:97:b4:27:9c:6b:72:8f:eb:08:e3:c8:e4:12:
f2:f0:88:dd:86:d7:4b:77:3d:bc:61:a9:0a:06:52:
2b:a3:74:59:24:f5:4d:ec:58:27:cf:14:73:d0:de:
0c:00:25:23:d5:c4:60:e1:80:d9:8f:16:30:de:73:
88:ba:44:5d:03:d6:14:c8:3c:fb:22:2f:e8:b8:30:
bc:3a:7c:e0:ac:b9:d3:71:71:cb:11:b5:53:9f:0b:
cf:e3:1b:79:1b:f8:f9:16:ed:c1:9c:ee:df:31:d4:
1f:14:29:db:b1:fd:ea:35:7d:e9:cd:f0:f5:b4:38:
70:5a:11:2a:ae:ac:0c:86:7c:74:27:55:ac:3f:3b:
cb:6e:ad:22:0a:eb:2a:2e:ef:e8:4a:26:ae:79:75:
b4:ea:1a:82:b5:1f:b3:d7:14:92:91:c9:05:8b:ee:
d5:23:09:a4:b0:eb:77:a1:e2:c4:a0:b5:e0:da:06:
25:39:f2:6f:66:ba:56:df:78:a7:c6:32:db:b5:74:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A2:DC:BC:FA:DB:B1:A8:C5:CC:2F:3E:AA:E5:C6:46:07:B7:3A:2C
X509v3 Authority Key Identifier:
keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:5a:07:af:54:5c:40:79:87:78:48:9c:30:97:e0:96:87:
40:71:16:68:5a:94:60:36:1f:4a:f2:5e:6b:ef:a9:4c:5f:e5:
43:1a:c2:d8:52:dc:b2:97:d1:88:1a:73:01:e7:f8:7d:e1:2d:
2b:51:b1:5d:2c:0f:88:0d:64:27:67:da:fc:8b:c6:01:1b:dd:
fd:93:0b:bd:41:89:1d:d5:bf:35:1f:6a:47:09:7d:ec:b0:e6:
48:26:6a:d5:c4:86:cf:c4:1c:ae:2c:52:c4:f8:2a:2c:b7:f3:
12:34:e7:f3:47:cc:98:a6:8b:1a:3f:7f:05:45:c1:41:5d:ac:
04:94:e0:2f:64:ae:62:bd:d6:28:9d:46:61:88:7b:17:b4:73:
e5:89:2d:cd:e1:dc:2f:46:63:01:e2:df:44:de:21:82:89:24:
67:3f:e5:c8:35:70:45:fa:6e:e3:ff:2b:be:71:d9:8a:8a:5a:
8c:a9:7d:09:80:ff:6e:10:1c:07:4b:95:29:ac:fe:68:a5:c8:
e1:de:f0:85:31:0b:13:f2:07:13:87:af:4b:3c:19:75:9f:63:
4d:4e:b3:de:91:39:49:f4:6c:93:03:e4:20:a4:15:72:da:49:
80:96:f0:90:79:9f:2f:53:ca:14:7b:3f:e4:74:aa:df:38:41:
26:bb:95:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFLXILrDcGPvC2nbKdgZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz
NDE5NWEwHhcNMjUwNDIxMTYwMDUxWhcNMjUwNDIyMTYwMDUxWjAzMTEwLwYDVQQD
EyhjYmEyZGNiY2ZhZGJiMWE4YzVjYzJmM2VhYWU1YzY0NjA3YjczYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVhZg4GqnxgY1qTPXcjItQB9iKN4
qX124nQDTUvlDj1ZVT5nlt3XNR22cb17/Uoq6jlxFlJXjQlus3Okq5e0J5xrco/r
COPI5BLy8IjdhtdLdz28YakKBlIro3RZJPVN7FgnzxRz0N4MACUj1cRg4YDZjxYw
3nOIukRdA9YUyDz7Ii/ouDC8OnzgrLnTcXHLEbVTnwvP4xt5G/j5Fu3BnO7fMdQf
FCnbsf3qNX3pzfD1tDhwWhEqrqwMhnx0J1WsPzvLbq0iCusqLu/oSiaueXW06hqC
tR+z1xSSkckFi+7VIwmksOt3oeLEoLXg2gYlOfJvZrpW33inxjLbtXS8cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMui3Lz627GoxcwvPqrlxkYHtzosMB8GA1UdIwQY
MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt
MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz
LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTFaB69U
XEB5h3hInDCX4JaHQHEWaFqUYDYfSvJea++pTF/lQxrC2FLcspfRiBpzAef4feEt
K1GxXSwPiA1kJ2fa/IvGARvd/ZMLvUGJHdW/NR9qRwl97LDmSCZq1cSGz8QcrixS
xPgqLLfzEjTn80fMmKaLGj9/BUXBQV2sBJTgL2SuYr3WKJ1GYYh7F7Rz5YktzeHc
L0ZjAeLfRN4hgokkZz/lyDVwRfpu4/8rvnHZiopajKl9CYD/bhAcB0uVKaz+aKXI
4d7whTELE/IHE4evSzwZdZ9jTU6z3pE5SfRskwPkIKQVctpJgJbwkHmfL1PKFHs/
5HSq3zhBJruViw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:15 2025 by rpki-client