Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: w102QiM4r6XICpwQm2m6mMY5dcUHMFg/IMHcOEdvCJU=
Subject key identifier: C1:42:0B:6B:10:C3:23:D2:12:1C:65:54:E7:E7:20:AA:83:2E:AB:D3
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 01967567B05FF25C95E1635FFF2FFB10190D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0E20
Signing time: Sun 27 Apr 2025 04:00:51 +0000
Manifest this update: Sun 27 Apr 2025 04:00:51 +0000
Manifest next update: Mon 28 Apr 2025 04:00:51 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: GGJXI6QB3YPM+04rJoRIXQYE74Lf75zyc23GcGVLSko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:b0:5f:f2:5c:95:e1:63:5f:ff:2f:fb:10:19:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Apr 27 04:00:51 2025 GMT
Not After : Apr 28 04:00:51 2025 GMT
Subject: CN=c1420b6b10c323d2121c6554e7e720aa832eabd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:c6:ec:84:13:77:ab:44:6c:29:04:6e:7f:
0c:1c:1e:0d:25:d4:45:47:4d:68:6a:3d:8e:22:82:
82:e9:7f:52:47:b6:33:17:8e:9c:5b:c5:8a:97:0c:
3e:ae:32:99:7d:ff:43:9e:67:d6:c7:bf:ce:db:a1:
6a:35:12:24:c3:e7:34:a8:65:8e:20:15:bc:0b:bb:
8c:a5:d9:a4:cd:95:1c:4d:08:78:9e:a7:d7:08:d8:
49:e5:99:0b:46:62:a4:eb:1b:7c:8b:32:a3:4f:1b:
90:e1:c5:27:26:9f:2f:cc:b0:4d:85:f6:eb:fe:21:
f5:60:b3:26:2a:a1:14:ec:a5:a5:e2:d3:93:09:75:
dd:77:e3:2d:0a:44:d8:51:ab:94:e2:ae:80:21:8a:
47:d0:3a:f6:fa:30:85:bf:71:82:28:f7:23:e5:f0:
31:e2:56:81:be:0f:b3:8e:1b:b9:23:21:c6:6d:fa:
6a:27:44:b3:b1:f1:31:9c:76:7b:32:0d:d8:84:20:
fd:f8:9d:2e:5b:ff:8d:92:25:eb:eb:d7:cb:4f:01:
68:48:93:77:1a:7d:88:85:d7:1d:d2:82:54:f3:da:
89:e3:1a:25:f3:83:92:e2:d1:64:2d:0c:13:8f:61:
15:d1:1a:34:46:dd:4c:5b:d4:5e:56:f1:72:3a:d1:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:0B:6B:10:C3:23:D2:12:1C:65:54:E7:E7:20:AA:83:2E:AB:D3
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d1:41:ec:25:a6:b4:60:0c:26:d4:09:ea:e6:08:77:bd:90:
3f:18:71:d5:72:73:97:85:6a:be:c6:aa:b3:44:69:0a:04:da:
cb:56:e4:13:dd:b3:2a:66:61:af:8b:e0:da:ad:9f:4f:47:d8:
80:19:61:94:56:a3:6f:1a:7c:4f:0e:1b:08:85:ba:fa:74:18:
7b:72:b4:91:de:b6:db:94:e5:fe:6b:66:3f:7f:d3:8a:ae:af:
1c:be:4e:01:e6:bf:24:ee:c8:51:c0:0c:da:8e:ff:9c:30:af:
92:c3:8f:56:43:30:9c:b2:08:9a:21:8c:81:46:a6:87:9a:d7:
02:90:78:89:08:f2:66:58:c2:12:e7:fd:7a:00:ef:9c:22:e8:
4e:c4:28:02:0d:ad:7b:49:78:5f:20:f7:73:63:03:68:ff:de:
cb:b0:27:4d:5e:5a:c7:c8:97:3c:90:bc:ce:34:54:db:5c:87:
11:4c:37:f8:d8:92:56:65:93:7f:23:a9:5c:39:be:8d:af:6e:
9d:69:7b:4d:67:86:fb:cf:04:10:5c:9c:92:3e:d9:b9:27:57:
03:e3:22:c2:7b:67:5e:21:9b:52:c2:b4:a4:e6:ce:d1:f3:ac:
80:cf:c8:30:d9:12:a4:62:a6:e9:0a:67:5b:41:6b:14:eb:18:
25:75:37:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z7Bf8lyV4WNf/y/7EBkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2Q3NjU0ZTg3Y2U0Zjk2NzkyZDU2NWM1NmUxOTFmNDRk
ZTlmNWEwHhcNMjUwNDI3MDQwMDUxWhcNMjUwNDI4MDQwMDUxWjAzMTEwLwYDVQQD
EyhjMTQyMGI2YjEwYzMyM2QyMTIxYzY1NTRlN2U3MjBhYTgzMmVhYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5bG7IQTd6tEbCkEbn8MHB4NJdRF
R01oaj2OIoKC6X9SR7YzF46cW8WKlww+rjKZff9DnmfWx7/O26FqNRIkw+c0qGWO
IBW8C7uMpdmkzZUcTQh4nqfXCNhJ5ZkLRmKk6xt8izKjTxuQ4cUnJp8vzLBNhfbr
/iH1YLMmKqEU7KWl4tOTCXXdd+MtCkTYUauU4q6AIYpH0Dr2+jCFv3GCKPcj5fAx
4laBvg+zjhu5IyHGbfpqJ0SzsfExnHZ7Mg3YhCD9+J0uW/+NkiXr69fLTwFoSJN3
Gn2Ihdcd0oJU89qJ4xol84OS4tFkLQwTj2EV0Ro0Rt1MW9ReVvFyOtFgJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFCC2sQwyPSEhxlVOfnIKqDLqvTMB8GA1UdIwQY
MBaAFM99dlTofOT5Z5LVZcVuGR9E3p9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejMxMlZPaDg1UGxua3RWbHhXNFpIMFRlbjFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mYmEwZWMtZGU1Ni00MGE1LTg5Y2Yt
NzcwZDdlM2MwNjIwLzEvejMxMlZPaDg1UGxua3RWbHhXNFpIMFRlbjFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mYmEwZWMtZGU1Ni00MGE1LTg5Y2YtNzcwZDdlM2MwNjIw
LzEvejMxMlZPaDg1UGxua3RWbHhXNFpIMFRlbjFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNFB7CWm
tGAMJtQJ6uYId72QPxhx1XJzl4Vqvsaqs0RpCgTay1bkE92zKmZhr4vg2q2fT0fY
gBlhlFajbxp8Tw4bCIW6+nQYe3K0kd6225Tl/mtmP3/Tiq6vHL5OAea/JO7IUcAM
2o7/nDCvksOPVkMwnLIImiGMgUamh5rXApB4iQjyZljCEuf9egDvnCLoTsQoAg2t
e0l4XyD3c2MDaP/ey7AnTV5ax8iXPJC8zjRU21yHEUw3+NiSVmWTfyOpXDm+ja9u
nWl7TWeG+88EEFyckj7ZuSdXA+MiwntnXiGbUsK0pObO0fOsgM/IMNkSpGKm6Qpn
W0FrFOsYJXU3AA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:28:57 2025 by rpki-client