Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json)
Hash identifier: Ty88EbVH0rOWOmslVBg9wxe+PWTi+2KJGg63R7Uzc5s=
Subject key identifier: 68:5A:7F:07:D5:AE:B0:27:32:75:94:B5:F4:6E:78:75:A7:61:25:54
Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781
Certificate serial: 01964443E59423ED9690625D6D92CBB080EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
Manifest number: 049F
Signing time: Thu 17 Apr 2025 15:00:22 +0000
Manifest this update: Thu 17 Apr 2025 15:00:22 +0000
Manifest next update: Fri 18 Apr 2025 15:00:22 +0000
Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: Ltpg2eJBVfdN4fAw3Nre8xPy1AY+01NKBoP1N30bOAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:e5:94:23:ed:96:90:62:5d:6d:92:cb:b0:80:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781
Validity
Not Before: Apr 17 15:00:22 2025 GMT
Not After : Apr 18 15:00:22 2025 GMT
Subject: CN=685a7f07d5aeb027327594b5f46e7875a7612554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:c6:2a:26:0c:0b:fc:9c:6e:de:f9:23:04:
ab:9a:f6:3e:6a:e7:cb:41:a2:ee:52:05:24:30:6b:
f7:58:91:2e:bc:08:59:de:76:45:6f:42:76:b8:23:
d9:ac:60:72:76:dd:dd:70:ec:4d:db:8b:53:84:36:
cc:62:33:d9:8b:9e:6c:0c:e3:98:b2:ef:57:b7:e6:
1e:ac:7f:e0:29:dd:a4:f6:10:47:72:42:f8:e2:6e:
45:b1:9e:bc:b6:8d:7a:2b:c5:4f:d8:0c:dd:a8:1e:
28:00:dc:a1:a7:a7:1f:3b:cb:4c:19:16:6b:31:53:
71:23:d0:93:85:49:f6:56:4f:54:53:09:0b:87:d6:
da:30:a2:63:97:bb:9e:9c:7a:55:45:07:f5:9a:b5:
b9:4f:ac:25:fc:bb:2d:94:56:53:55:9c:6f:ee:08:
af:b4:57:e9:af:74:42:b6:30:e2:9a:f2:2f:68:db:
fb:af:b4:30:90:e2:e3:bb:e6:69:7d:0d:80:b2:f0:
47:1e:10:d5:01:92:93:9f:23:e1:3f:56:78:02:7e:
b2:d8:19:8e:f0:83:e5:3e:c8:a3:0f:79:df:38:cd:
a0:31:15:6d:bb:45:57:6f:ea:f9:24:1f:b4:3a:cb:
3b:c0:c2:b3:e2:ba:39:97:42:73:d2:ec:55:8d:8b:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:7F:07:D5:AE:B0:27:32:75:94:B5:F4:6E:78:75:A7:61:25:54
X509v3 Authority Key Identifier:
keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ae:e7:a2:e0:a5:bb:af:58:2c:f9:34:a0:c6:cb:6e:2b:88:
c6:9b:6e:28:38:9f:01:7c:a5:d5:62:ce:f6:c5:92:88:7a:47:
af:f4:b4:1b:57:85:54:fe:0a:74:60:3f:60:f3:f9:7b:1c:37:
32:63:c0:db:c5:3f:6c:84:0d:1a:1d:96:fa:25:bf:c7:9d:c0:
ea:62:27:4a:60:71:25:f5:11:82:9a:e3:a7:ae:b2:05:58:86:
5a:75:8a:83:e0:ec:0f:ed:51:89:e8:56:3e:12:3c:53:7d:c4:
52:f6:e4:89:9f:f0:3f:20:03:53:9e:e4:d6:3a:7c:d3:ac:79:
b3:d2:e8:d0:f5:f8:70:c7:72:ce:4b:7b:0a:f4:d2:da:b9:5e:
87:be:6e:26:6d:ab:c7:54:19:79:7f:ad:ad:c6:2e:d1:53:a9:
00:7a:12:7e:6b:ce:7d:34:d7:2d:d2:12:ea:45:ba:76:1a:74:
14:2d:65:8e:b7:80:b6:ee:a0:05:70:db:fc:03:64:e5:2b:8c:
54:c5:6c:2a:c1:b2:18:5e:2d:02:59:8b:16:98:c2:96:b5:c5:
6c:a3:4f:9f:15:eb:4d:bd:21:8d:3f:7b:27:4e:47:95:1d:ea:
7c:7e:e5:41:a0:be:d8:67:8b:fb:d3:79:47:9c:20:f3:0a:07:
2d:e3:b1:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEQ+WUI+2WkGJdbZLLsIDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm
Y2M3ODEwHhcNMjUwNDE3MTUwMDIyWhcNMjUwNDE4MTUwMDIyWjAzMTEwLwYDVQQD
Eyg2ODVhN2YwN2Q1YWViMDI3MzI3NTk0YjVmNDZlNzg3NWE3NjEyNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUHGKiYMC/ycbt75IwSrmvY+aufL
QaLuUgUkMGv3WJEuvAhZ3nZFb0J2uCPZrGBydt3dcOxN24tThDbMYjPZi55sDOOY
su9Xt+YerH/gKd2k9hBHckL44m5FsZ68to16K8VP2AzdqB4oANyhp6cfO8tMGRZr
MVNxI9CThUn2Vk9UUwkLh9baMKJjl7uenHpVRQf1mrW5T6wl/LstlFZTVZxv7giv
tFfpr3RCtjDimvIvaNv7r7QwkOLju+ZpfQ2AsvBHHhDVAZKTnyPhP1Z4An6y2BmO
8IPlPsijD3nfOM2gMRVtu0VXb+r5JB+0Oss7wMKz4ro5l0Jz0uxVjYsm1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhafwfVrrAnMnWUtfRueHWnYSVUMB8GA1UdIwQY
MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt
ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm
LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQq7nouCl
u69YLPk0oMbLbiuIxptuKDifAXyl1WLO9sWSiHpHr/S0G1eFVP4KdGA/YPP5exw3
MmPA28U/bIQNGh2W+iW/x53A6mInSmBxJfURgprjp66yBViGWnWKg+DsD+1RiehW
PhI8U33EUvbkiZ/wPyADU57k1jp806x5s9Lo0PX4cMdyzkt7CvTS2rleh75uJm2r
x1QZeX+trcYu0VOpAHoSfmvOfTTXLdIS6kW6dhp0FC1ljreAtu6gBXDb/ANk5SuM
VMVsKsGyGF4tAlmLFpjClrXFbKNPnxXrTb0hjT97J05HlR3qfH7lQaC+2GeL+9N5
R5wg8woHLeOx0A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:16:15 2025 by rpki-client