Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
File: zb7dtaniq1M0dBCLfIAPgTLxDiE.mft (raw, json)
Hash identifier: IYMDwg4LFEIdpqsOPfuHZ212PFmUoJBCTlzj98h7iZc=
Subject key identifier: 73:E9:C0:4E:73:07:FA:3A:7F:5F:68:FB:64:AA:2C:C1:08:FF:8E:4A
Authority key identifier: CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
Certificate issuer: /CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Certificate serial: 0196748C0870952E1503CDB0EEC7BF64A0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:56 +0000
Manifest this update: Sun 27 Apr 2025 00:00:56 +0000
Manifest next update: Mon 28 Apr 2025 00:00:56 +0000
Files and hashes: 1: zb7dtaniq1M0dBCLfIAPgTLxDiE.crl (hash: PixwgQX5IncbKl0FCoiQqOWzGGm65RAS0xA/rX7cucU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:08:70:95:2e:15:03:cd:b0:ee:c7:bf:64:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbeddb5a9e2ab533474108b7c800f8132f10e21
Validity
Not Before: Apr 27 00:00:56 2025 GMT
Not After : Apr 28 00:00:56 2025 GMT
Subject: CN=73e9c04e7307fa3a7f5f68fb64aa2cc108ff8e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:5a:d7:95:2a:75:6c:4c:6c:3f:e6:10:82:
71:bc:d4:8c:f1:e6:be:55:b9:42:e4:26:12:95:af:
33:40:f1:e9:a7:af:88:cd:24:ee:48:e4:9a:f7:fa:
da:e2:30:d6:cc:3e:ba:63:10:b5:28:bf:38:18:49:
08:7d:04:bc:c5:ad:8c:41:ca:e5:77:3f:b1:9e:27:
32:40:93:1c:d2:bf:b0:ba:b7:fb:7c:e8:0c:a0:3f:
e1:7f:85:87:24:03:19:c0:80:54:79:f5:6a:3f:c1:
38:11:01:f9:68:8f:b0:98:94:6b:36:fa:65:9a:ae:
96:e2:e9:dd:4c:b1:b5:8a:d1:21:4f:38:bd:79:1e:
99:c8:3e:05:5d:d3:0c:32:19:ab:3d:d1:7d:53:06:
e8:20:c3:c2:57:5f:b4:bf:e1:8a:b8:da:91:82:b3:
3d:66:e0:45:b2:36:94:b1:3a:59:0b:a1:db:4e:46:
57:fa:b2:9d:65:64:db:de:cd:b9:4d:ae:af:e9:ea:
78:fd:f2:72:5a:4b:0d:95:70:12:d8:66:a0:d7:73:
0c:09:c6:54:fc:6c:c2:23:20:37:3e:07:20:a0:ea:
88:c2:75:a1:93:e1:54:83:4c:23:e0:2c:4e:43:8e:
b1:8d:e0:c4:08:2c:a0:1e:d3:24:ce:dc:b4:72:6c:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E9:C0:4E:73:07:FA:3A:7F:5F:68:FB:64:AA:2C:C1:08:FF:8E:4A
X509v3 Authority Key Identifier:
keyid:CD:BE:DD:B5:A9:E2:AB:53:34:74:10:8B:7C:80:0F:81:32:F1:0E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zb7dtaniq1M0dBCLfIAPgTLxDiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a8fe73-8f95-49ba-861d-9e1433f93b4e/1/zb7dtaniq1M0dBCLfIAPgTLxDiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:1e:d6:4f:30:fd:de:1e:18:4d:68:84:6a:28:da:ae:d2:
c0:2a:9c:47:f9:de:ca:fb:4b:e7:45:1c:58:70:63:9c:58:e0:
f9:55:48:de:06:da:9c:bf:54:04:f5:a9:d7:c1:f6:08:a4:78:
36:4e:bb:ad:47:77:f6:36:2c:16:62:38:fd:48:73:b0:d3:d2:
83:b0:4b:8b:af:0d:b0:5d:27:6e:c3:84:4d:31:f2:01:09:c7:
ee:86:77:2e:44:d6:63:c3:c4:71:e3:f3:cd:d6:c6:64:c1:43:
f0:b9:2d:eb:ec:16:55:9a:0c:d8:7d:22:ab:f5:5e:de:5e:d5:
71:c0:58:6d:15:22:c7:1b:6e:43:1e:a1:d4:eb:b5:78:cd:39:
4a:6c:55:5c:b3:cb:74:5c:6f:b2:94:fc:30:7b:72:23:db:62:
b8:14:f3:bb:0b:c9:7d:4d:86:9b:5b:9f:64:a4:cd:9b:c0:03:
8d:2e:ea:92:6c:d5:92:43:97:24:0d:7a:f5:a1:5a:fe:85:ab:
64:89:a5:ab:c2:f4:7c:14:1f:25:52:16:79:68:ba:2b:4c:33:
de:fc:73:8d:a5:c5:ee:56:32:b2:55:a1:fb:a3:cd:6d:05:29:
1d:5e:4c:d0:90:de:3b:ba:9d:0c:9c:f1:d1:9c:8f:99:f6:84:
e5:c2:0d:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0jAhwlS4VA82w7se/ZKDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmVkZGI1YTllMmFiNTMzNDc0MTA4YjdjODAwZjgxMzJm
MTBlMjEwHhcNMjUwNDI3MDAwMDU2WhcNMjUwNDI4MDAwMDU2WjAzMTEwLwYDVQQD
Eyg3M2U5YzA0ZTczMDdmYTNhN2Y1ZjY4ZmI2NGFhMmNjMTA4ZmY4ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIxa15UqdWxMbD/mEIJxvNSM8ea+
VblC5CYSla8zQPHpp6+IzSTuSOSa9/ra4jDWzD66YxC1KL84GEkIfQS8xa2MQcrl
dz+xnicyQJMc0r+wurf7fOgMoD/hf4WHJAMZwIBUefVqP8E4EQH5aI+wmJRrNvpl
mq6W4undTLG1itEhTzi9eR6ZyD4FXdMMMhmrPdF9UwboIMPCV1+0v+GKuNqRgrM9
ZuBFsjaUsTpZC6HbTkZX+rKdZWTb3s25Ta6v6ep4/fJyWksNlXAS2Gag13MMCcZU
/GzCIyA3PgcgoOqIwnWhk+FUg0wj4CxOQ46xjeDECCygHtMkzty0cmxCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPpwE5zB/o6f19o+2SqLMEI/45KMB8GA1UdIwQY
MBaAFM2+3bWp4qtTNHQQi3yAD4Ey8Q4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQt
OWUxNDMzZjkzYjRlLzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hOGZlNzMtOGY5NS00OWJhLTg2MWQtOWUxNDMzZjkzYjRl
LzEvemI3ZHRhbmlxMU0wZEJDTGZJQVBnVEx4RGlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6Qe1k8w
/d4eGE1ohGoo2q7SwCqcR/neyvtL50UcWHBjnFjg+VVI3gbanL9UBPWp18H2CKR4
Nk67rUd39jYsFmI4/UhzsNPSg7BLi68NsF0nbsOETTHyAQnH7oZ3LkTWY8PEcePz
zdbGZMFD8Lkt6+wWVZoM2H0iq/Ve3l7VccBYbRUixxtuQx6h1Ou1eM05SmxVXLPL
dFxvspT8MHtyI9tiuBTzuwvJfU2Gm1ufZKTNm8ADjS7qkmzVkkOXJA169aFa/oWr
ZImlq8L0fBQfJVIWeWi6K0wz3vxzjaXF7lYyslWh+6PNbQUpHV5M0JDeO7qdDJzx
0ZyPmfaE5cINww==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:41:53 2025 by rpki-client