Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
File: z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft (raw, json)
Hash identifier: ReaF1Xs1RadY0RJ+VTwKEY4qVpO5SeVFKXUNLFFx7wA=
Subject key identifier: E0:8C:DE:8C:16:32:8C:4D:1F:0A:2F:A8:42:8C:3B:AE:54:55:CA:26
Authority key identifier: CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
Certificate issuer: /CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Certificate serial: 0196813455244269996D6BB7B0551D17416B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
Manifest number: 0215
Signing time: Tue 29 Apr 2025 11:00:12 +0000
Manifest this update: Tue 29 Apr 2025 11:00:12 +0000
Manifest next update: Wed 30 Apr 2025 11:00:12 +0000
Files and hashes: 1: z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl (hash: vW9Re5iF4557hQlquHZIokFq71pFAPKL+CJaVfehXrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:55:24:42:69:99:6d:6b:b7:b0:55:1d:17:41:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa752c32410c6cb3cca4fd9034730c9dc242ae4
Validity
Not Before: Apr 29 11:00:12 2025 GMT
Not After : Apr 30 11:00:12 2025 GMT
Subject: CN=e08cde8c16328c4d1f0a2fa8428c3bae5455ca26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:9a:3b:81:06:38:55:86:14:d8:c8:af:0e:
86:74:b8:ce:20:c2:f5:db:e6:76:10:a7:54:35:a1:
df:4f:de:75:b9:ec:80:5b:dd:11:1b:01:c0:72:6e:
ca:0d:a5:c1:ec:4e:40:ba:28:d5:d3:98:8b:8e:de:
84:2f:9c:17:e2:ff:b8:1d:fe:a7:57:a1:02:67:e8:
53:e4:71:c4:62:52:d4:73:0a:a1:d1:77:04:e1:ae:
0b:7b:30:f3:28:db:cc:16:23:a9:f8:4e:6d:59:12:
ee:66:4d:9c:61:80:51:75:2d:63:b7:90:e0:16:4e:
16:67:45:d7:df:a5:ab:40:f1:9c:8b:e8:c9:4b:31:
b6:d6:a0:f5:ea:ad:0c:3b:8e:bb:36:b7:7c:e4:40:
80:af:30:d0:3f:da:a6:54:25:e4:98:9d:99:2f:fc:
14:39:79:0a:57:cb:1a:b2:66:8d:5c:6e:ad:22:d1:
37:86:16:66:a7:26:d4:ae:f3:3a:e1:e0:4b:f5:c9:
af:2c:02:75:ed:54:ad:2a:44:24:cf:da:c0:9f:55:
dd:9f:91:5f:a2:40:68:3c:1e:7c:8a:a3:36:d7:5c:
d9:2d:58:01:f2:f7:57:09:f6:75:37:39:c2:b3:63:
d0:da:ce:a6:b2:ac:b9:48:d1:ae:94:0f:23:4f:23:
44:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8C:DE:8C:16:32:8C:4D:1F:0A:2F:A8:42:8C:3B:AE:54:55:CA:26
X509v3 Authority Key Identifier:
keyid:CF:A7:52:C3:24:10:C6:CB:3C:CA:4F:D9:03:47:30:C9:DC:24:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6dSwyQQxss8yk_ZA0cwydwkKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/85f9f4-b44d-4f59-aa1b-8247757cfb28/1/z6dSwyQQxss8yk_ZA0cwydwkKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:20:fb:c0:35:f1:77:2a:a3:ad:07:d4:3d:61:14:07:9a:3a:
26:10:c0:ea:e3:29:d8:93:7a:b3:a8:34:14:2c:be:30:6f:65:
2d:c7:ce:d7:29:d4:f9:81:d7:80:23:1c:0b:5e:5c:fa:8b:ae:
da:27:8c:3f:ab:ed:51:30:fe:83:ce:88:b5:7d:56:0a:3d:ce:
67:e4:b5:2f:89:61:2a:00:77:7c:40:d7:57:53:c2:15:39:70:
ac:7a:b7:71:9b:12:8f:89:42:b6:61:38:6e:9d:39:e9:19:87:
a6:4b:cc:ad:32:fa:98:58:18:a5:e4:e2:d9:2e:2a:87:7e:8d:
2d:35:a9:57:91:ac:60:60:d9:d5:48:0a:97:18:1c:a7:60:18:
0c:25:57:bc:f3:24:8f:19:cb:0f:a0:d3:c3:40:02:a5:11:d8:
7d:a2:56:90:c7:7c:ae:37:61:41:3f:76:05:04:6a:33:07:db:
d8:2d:07:d5:5f:ff:7d:00:ca:f5:89:f6:85:4f:a8:fd:e8:ca:
c1:39:d1:e2:cc:c7:ba:b6:6c:ee:e2:46:d3:e2:07:fa:00:98:
72:61:e6:58:f0:c3:56:40:bc:db:c5:7c:be:0b:12:87:4d:23:
a2:73:f0:a6:21:2b:7c:e7:2c:80:6d:3b:7b:45:37:75:cb:6f:
9e:47:41:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBNFUkQmmZbWu3sFUdF0FrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTc1MmMzMjQxMGM2Y2IzY2NhNGZkOTAzNDczMGM5ZGMy
NDJhZTQwHhcNMjUwNDI5MTEwMDEyWhcNMjUwNDMwMTEwMDEyWjAzMTEwLwYDVQQD
EyhlMDhjZGU4YzE2MzI4YzRkMWYwYTJmYTg0MjhjM2JhZTU0NTVjYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZeaO4EGOFWGFNjIrw6GdLjOIML1
2+Z2EKdUNaHfT951ueyAW90RGwHAcm7KDaXB7E5AuijV05iLjt6EL5wX4v+4Hf6n
V6ECZ+hT5HHEYlLUcwqh0XcE4a4LezDzKNvMFiOp+E5tWRLuZk2cYYBRdS1jt5Dg
Fk4WZ0XX36WrQPGci+jJSzG21qD16q0MO467Nrd85ECArzDQP9qmVCXkmJ2ZL/wU
OXkKV8sasmaNXG6tItE3hhZmpybUrvM64eBL9cmvLAJ17VStKkQkz9rAn1Xdn5Ff
okBoPB58iqM211zZLVgB8vdXCfZ1NznCs2PQ2s6msqy5SNGulA8jTyNEJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCM3owWMoxNHwovqEKMO65UVcomMB8GA1UdIwQY
MBaAFM+nUsMkEMbLPMpP2QNHMMncJCrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84NWY5ZjQtYjQ0ZC00ZjU5LWFhMWIt
ODI0Nzc1N2NmYjI4LzEvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84NWY5ZjQtYjQ0ZC00ZjU5LWFhMWItODI0Nzc1N2NmYjI4
LzEvejZkU3d5UVF4c3M4eWtfWkEwY3d5ZHdrS3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABiD7wDXx
dyqjrQfUPWEUB5o6JhDA6uMp2JN6s6g0FCy+MG9lLcfO1ynU+YHXgCMcC15c+ouu
2ieMP6vtUTD+g86ItX1WCj3OZ+S1L4lhKgB3fEDXV1PCFTlwrHq3cZsSj4lCtmE4
bp056RmHpkvMrTL6mFgYpeTi2S4qh36NLTWpV5GsYGDZ1UgKlxgcp2AYDCVXvPMk
jxnLD6DTw0ACpRHYfaJWkMd8rjdhQT92BQRqMwfb2C0H1V//fQDK9Yn2hU+o/ejK
wTnR4szHurZs7uJG0+IH+gCYcmHmWPDDVkC828V8vgsSh00jonPwpiErfOcsgG07
e0U3dctvnkdBAA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:19:34 2025 by rpki-client