Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
File: zW6So-uArGPuVwLA2XtOnwuCM_A.mft (raw, json)
Hash identifier: RkmIZxHmOJVjGZ8uo4nnfsFFum6X0sCRlwocyiYYIzY=
Subject key identifier: F1:17:96:F5:AF:2D:D9:8C:0F:E1:83:E7:48:18:8D:11:DA:34:26:64
Authority key identifier: CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
Certificate issuer: /CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Certificate serial: 01958EF377B150B71DAB87DB292CE5368270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
Manifest number: 0F6C
Signing time: Thu 13 Mar 2025 10:01:15 +0000
Manifest this update: Thu 13 Mar 2025 10:01:15 +0000
Manifest next update: Fri 14 Mar 2025 10:01:15 +0000
Files and hashes: 1: zW6So-uArGPuVwLA2XtOnwuCM_A.crl (hash: JSynfa/UxCqNx4yb0K+Sanq/2dGrHcdTJkUFUc64zNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:77:b1:50:b7:1d:ab:87:db:29:2c:e5:36:82:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6e92a3eb80ac63ee5702c0d97b4e9f0b8233f0
Validity
Not Before: Mar 13 10:01:15 2025 GMT
Not After : Mar 14 10:01:15 2025 GMT
Subject: CN=f11796f5af2dd98c0fe183e748188d11da342664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9f:f5:34:a2:2b:ab:f0:63:ef:c2:5e:49:84:
32:44:85:19:b7:62:31:71:c2:37:72:13:16:53:0a:
d6:4f:89:71:63:56:0a:3f:aa:9e:e8:7c:a8:99:34:
65:f4:b8:35:6f:70:95:e3:5e:2d:9a:f0:85:b0:83:
48:4b:f9:6f:33:db:01:00:34:13:73:ee:71:79:a6:
d7:83:6c:56:1c:72:0c:a3:98:36:65:2e:f6:89:78:
c3:50:26:4b:4c:0b:bf:ae:fe:2d:1a:8f:8a:95:66:
ea:70:d1:5d:ea:3a:bc:82:89:93:ec:68:54:07:e5:
d4:a1:10:78:69:3c:4f:0a:50:bc:fe:58:44:ea:8e:
70:b0:17:17:76:dd:24:7e:55:d0:ef:82:4d:d3:6d:
ff:67:ab:6e:d2:9e:fb:13:38:b2:cb:4e:20:59:6b:
2e:18:d9:65:dc:a8:2f:5e:c3:17:80:b9:09:47:07:
dc:e8:fc:40:0f:98:97:5a:1a:9a:3d:e0:c9:03:6a:
46:49:e5:32:d2:24:04:64:3d:35:0e:03:ac:81:c3:
3e:4c:56:a6:a7:67:03:cf:ed:75:2c:9e:a0:44:38:
d1:8f:5c:98:48:d7:3f:18:21:8c:0d:a7:41:17:0d:
8f:ab:97:c4:99:25:0d:4e:5f:b7:08:0f:c5:b6:1f:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:17:96:F5:AF:2D:D9:8C:0F:E1:83:E7:48:18:8D:11:DA:34:26:64
X509v3 Authority Key Identifier:
keyid:CD:6E:92:A3:EB:80:AC:63:EE:57:02:C0:D9:7B:4E:9F:0B:82:33:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zW6So-uArGPuVwLA2XtOnwuCM_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e7defb-5e41-4b24-8915-75bc4479029f/1/zW6So-uArGPuVwLA2XtOnwuCM_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:47:df:c5:49:50:d7:00:84:4a:cf:2b:23:88:1a:4b:26:df:
e0:c6:81:6e:54:0d:2e:42:ef:32:45:c9:80:2c:9f:c1:e6:58:
bb:d0:42:80:e6:fb:b1:d3:17:85:35:aa:4c:9f:8f:75:4f:a6:
b0:74:7e:73:6c:65:c8:f8:a9:18:0c:5b:86:1c:a7:97:36:1c:
8a:95:14:f8:78:e4:3a:72:fc:70:bf:b1:4a:a2:ae:28:b1:e1:
9a:a6:3f:f0:d0:8b:e9:b3:18:7f:66:fb:fa:2d:94:e2:c9:c2:
a7:9d:b3:78:d1:04:b5:45:9c:df:63:ce:25:e6:42:cd:3e:f3:
bc:a2:18:35:2d:83:0a:5d:c6:39:0d:d5:c0:2a:eb:45:80:9c:
9d:c6:d2:83:c2:b2:4e:e0:9a:2e:f7:cd:ae:07:fc:2c:e2:67:
a0:1f:1d:2d:e7:58:80:4d:86:35:ac:6f:f8:1f:58:2a:9a:ee:
f2:90:43:d0:fe:a1:d4:5a:55:e6:93:a4:7d:d2:9c:a9:4e:72:
82:32:24:c2:27:77:2b:15:13:47:f3:c8:40:0b:ed:f8:a6:48:
76:49:1f:88:17:d4:51:02:49:27:84:68:64:e8:36:c5:a5:0e:
f0:b9:3a:81:72:7f:d8:9e:57:8a:e2:48:50:95:00:5d:38:a3:
e1:27:88:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWO83exULcdq4fbKSzlNoJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNmU5MmEzZWI4MGFjNjNlZTU3MDJjMGQ5N2I0ZTlmMGI4
MjMzZjAwHhcNMjUwMzEzMTAwMTE1WhcNMjUwMzE0MTAwMTE1WjAzMTEwLwYDVQQD
EyhmMTE3OTZmNWFmMmRkOThjMGZlMTgzZTc0ODE4OGQxMWRhMzQyNjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5/1NKIrq/Bj78JeSYQyRIUZt2Ix
ccI3chMWUwrWT4lxY1YKP6qe6HyomTRl9Lg1b3CV414tmvCFsINIS/lvM9sBADQT
c+5xeabXg2xWHHIMo5g2ZS72iXjDUCZLTAu/rv4tGo+KlWbqcNFd6jq8gomT7GhU
B+XUoRB4aTxPClC8/lhE6o5wsBcXdt0kflXQ74JN023/Z6tu0p77Eziyy04gWWsu
GNll3KgvXsMXgLkJRwfc6PxAD5iXWhqaPeDJA2pGSeUy0iQEZD01DgOsgcM+TFam
p2cDz+11LJ6gRDjRj1yYSNc/GCGMDadBFw2Pq5fEmSUNTl+3CA/Fth/a3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEXlvWvLdmMD+GD50gYjRHaNCZkMB8GA1UdIwQY
MBaAFM1ukqPrgKxj7lcCwNl7Tp8LgjPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUt
NzViYzQ0NzkwMjlmLzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9lN2RlZmItNWU0MS00YjI0LTg5MTUtNzViYzQ0NzkwMjlm
LzEvelc2U28tdUFyR1B1VndMQTJYdE9ud3VDTV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0ffxUlQ
1wCESs8rI4gaSybf4MaBblQNLkLvMkXJgCyfweZYu9BCgOb7sdMXhTWqTJ+PdU+m
sHR+c2xlyPipGAxbhhynlzYcipUU+HjkOnL8cL+xSqKuKLHhmqY/8NCL6bMYf2b7
+i2U4snCp52zeNEEtUWc32POJeZCzT7zvKIYNS2DCl3GOQ3VwCrrRYCcncbSg8Ky
TuCaLvfNrgf8LOJnoB8dLedYgE2GNaxv+B9YKpru8pBD0P6h1FpV5pOkfdKcqU5y
gjIkwid3KxUTR/PIQAvt+KZIdkkfiBfUUQJJJ4RoZOg2xaUO8Lk6gXJ/2J5XiuJI
UJUAXTij4SeIzA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:41 2025 by rpki-client