Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
File: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft (raw, json)
Hash identifier: SuIoxXXBcX/KzGXK5ceKvI24fkyfPTNl/NoB+d7M8jw=
Subject key identifier: 58:C7:67:AD:A9:15:F8:9B:FB:68:A3:71:27:91:92:09:74:63:DF:5B
Authority key identifier: D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
Certificate issuer: /CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Certificate serial: 01969303C614DAFFAC807CC1FAED15B48204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
Manifest number: 0FB9
Signing time: Fri 02 May 2025 22:00:19 +0000
Manifest this update: Fri 02 May 2025 22:00:19 +0000
Manifest next update: Sat 03 May 2025 22:00:19 +0000
Files and hashes: 1: 2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl (hash: J/DHvnl+R4CXiq1DMqjWPiz6vpxcw+r5AFzjLmfFPS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:03:c6:14:da:ff:ac:80:7c:c1:fa:ed:15:b4:82:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d991d6890f91fb2cd77931b809bdb1eb05091349
Validity
Not Before: May 2 22:00:19 2025 GMT
Not After : May 3 22:00:19 2025 GMT
Subject: CN=58c767ada915f89bfb68a371279192097463df5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2f:3c:c8:93:96:05:2a:c1:26:af:ad:7e:72:
3c:09:f3:d4:f9:44:56:18:b0:ed:de:07:98:99:44:
5d:5a:39:8a:b8:43:64:30:15:1a:96:14:be:c0:f9:
c0:a2:bb:e6:29:bc:d9:b6:4b:54:bf:db:ff:85:b0:
00:63:de:11:39:57:2a:6e:18:96:ac:c0:dd:b2:c4:
c9:c1:f9:ba:46:94:77:49:01:3c:63:b8:f2:3e:b6:
9a:c8:97:ea:fd:27:29:d4:99:00:35:80:5c:93:25:
6c:1f:2d:44:2e:95:33:c7:1a:78:97:9b:84:e5:e9:
db:02:5c:56:97:98:24:a1:e9:95:af:d9:ba:51:3d:
40:2e:06:d4:7e:9f:2f:7e:bf:28:ae:3a:fe:17:24:
c3:e5:b2:9d:64:7f:9a:ee:b3:b6:08:d5:82:1d:42:
aa:08:b2:36:58:b3:ec:9b:d9:11:41:1b:9d:0b:57:
ba:72:1a:45:63:62:71:b4:69:68:4d:24:8f:3a:96:
db:2f:b4:29:7e:25:e3:1f:15:47:e8:d7:73:80:f0:
b4:2a:48:8d:4e:e7:7b:d6:2e:68:5e:56:3d:9a:ee:
35:ce:25:1c:b1:eb:52:85:48:39:d6:7b:61:67:ee:
53:86:6b:95:5c:97:51:a4:fc:70:6a:56:66:aa:8f:
16:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:67:AD:A9:15:F8:9B:FB:68:A3:71:27:91:92:09:74:63:DF:5B
X509v3 Authority Key Identifier:
keyid:D9:91:D6:89:0F:91:FB:2C:D7:79:31:B8:09:BD:B1:EB:05:09:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c77797-0ec7-4a0e-a542-c408576089b1/1/2ZHWiQ-R-yzXeTG4Cb2x6wUJE0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:46:94:73:bc:e4:29:4b:f6:22:43:96:4b:df:57:33:f1:
96:06:73:ab:10:c4:df:76:dd:c9:93:16:60:15:c6:43:00:c0:
9a:3e:a8:68:56:41:4b:fa:7f:2b:2e:12:2e:08:2c:9a:47:d1:
31:5d:4a:70:e5:41:b4:6c:c4:aa:1f:18:c1:1a:c6:7d:af:58:
63:d9:42:0a:a0:88:a1:b1:01:da:36:3a:d7:a5:44:4f:dc:c1:
c4:8e:0a:3b:8b:d2:71:ce:0c:43:5f:49:d9:c8:fe:b2:7e:89:
7c:b7:f5:d8:38:05:86:d6:eb:73:dc:52:f0:60:0e:46:1f:87:
58:52:92:5f:82:34:23:15:51:2d:bc:0d:45:b7:7f:24:ff:82:
6c:e3:c2:5b:c7:c5:1a:c5:f2:48:8d:1a:90:93:ca:1a:18:88:
f0:2b:b1:f1:70:0b:88:19:94:92:5a:18:7c:14:95:3c:fa:83:
dc:54:d5:1a:0d:0c:36:d5:eb:8a:d1:7e:0b:0a:e0:ad:dd:fa:
60:4a:36:0c:97:d2:7a:a5:46:38:fb:0b:23:3f:dc:b1:15:08:
ed:ad:d3:93:ba:55:77:f4:bc:37:3f:08:51:0b:98:9f:e4:1e:
54:47:f8:92:b3:1f:17:b5:f3:e7:42:d3:7f:90:4a:69:a9:4c:
b0:74:0f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTA8YU2v+sgHzB+u0VtIIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OTFkNjg5MGY5MWZiMmNkNzc5MzFiODA5YmRiMWViMDUw
OTEzNDkwHhcNMjUwNTAyMjIwMDE5WhcNMjUwNTAzMjIwMDE5WjAzMTEwLwYDVQQD
Eyg1OGM3NjdhZGE5MTVmODliZmI2OGEzNzEyNzkxOTIwOTc0NjNkZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC88yJOWBSrBJq+tfnI8CfPU+URW
GLDt3geYmURdWjmKuENkMBUalhS+wPnAorvmKbzZtktUv9v/hbAAY94ROVcqbhiW
rMDdssTJwfm6RpR3SQE8Y7jyPraayJfq/Scp1JkANYBckyVsHy1ELpUzxxp4l5uE
5enbAlxWl5gkoemVr9m6UT1ALgbUfp8vfr8orjr+FyTD5bKdZH+a7rO2CNWCHUKq
CLI2WLPsm9kRQRudC1e6chpFY2JxtGloTSSPOpbbL7QpfiXjHxVH6NdzgPC0KkiN
Tud71i5oXlY9mu41ziUcsetShUg51nthZ+5ThmuVXJdRpPxwalZmqo8WzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjHZ62pFfib+2ijcSeRkgl0Y99bMB8GA1UdIwQY
MBaAFNmR1okPkfss13kxuAm9sesFCRNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jNzc3OTctMGVjNy00YTBlLWE1NDIt
YzQwODU3NjA4OWIxLzEvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jNzc3OTctMGVjNy00YTBlLWE1NDItYzQwODU3NjA4OWIx
LzEvMlpIV2lRLVIteXpYZVRHNENiMng2d1VKRTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItJGlHO8
5ClL9iJDlkvfVzPxlgZzqxDE33bdyZMWYBXGQwDAmj6oaFZBS/p/Ky4SLggsmkfR
MV1KcOVBtGzEqh8YwRrGfa9YY9lCCqCIobEB2jY616VET9zBxI4KO4vScc4MQ19J
2cj+sn6JfLf12DgFhtbrc9xS8GAORh+HWFKSX4I0IxVRLbwNRbd/JP+CbOPCW8fF
GsXySI0akJPKGhiI8Cux8XALiBmUkloYfBSVPPqD3FTVGg0MNtXritF+Cwrgrd36
YEo2DJfSeqVGOPsLIz/csRUI7a3Tk7pVd/S8Nz8IUQuYn+QeVEf4krMfF7Xz50LT
f5BKaalMsHQP/w==
-----END CERTIFICATE-----
Generated at Sat May 3 06:54:30 2025 by rpki-client