Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
File: zhBBHjnMnlhDTAu5dVTWBj53Auw.mft (raw, json)
Hash identifier: KNBGFPWx79Lea35/a7BvaNTbnWmijN5HtISqmcOkQ2A=
Subject key identifier: 5D:B0:19:E3:7E:C2:04:B7:F8:50:8F:12:57:BB:D2:07:7C:1A:B8:50
Authority key identifier: CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
Certificate issuer: /CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Certificate serial: 019691F1903BC7C403386A07310FA6C522F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
Manifest number: 089C
Signing time: Fri 02 May 2025 17:00:49 +0000
Manifest this update: Fri 02 May 2025 17:00:49 +0000
Manifest next update: Sat 03 May 2025 17:00:49 +0000
Files and hashes: 1: zhBBHjnMnlhDTAu5dVTWBj53Auw.crl (hash: 96iBe4ZtPxeD0KfLShAnnBN4CoyQuvTTw/6sNhUzlBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:f1:90:3b:c7:c4:03:38:6a:07:31:0f:a6:c5:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce10411e39cc9e58434c0bb97554d6063e7702ec
Validity
Not Before: May 2 17:00:49 2025 GMT
Not After : May 3 17:00:49 2025 GMT
Subject: CN=5db019e37ec204b7f8508f1257bbd2077c1ab850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:78:7c:ed:de:6e:10:73:5f:65:e8:80:a5:
b7:84:ef:4a:e9:f7:26:21:0c:43:21:1d:77:b1:02:
09:a5:f3:90:f3:76:6a:10:3f:37:c1:36:f7:62:cf:
d0:f1:1b:28:10:75:5d:13:cf:4c:89:36:e3:7e:d4:
38:3f:f9:f1:3b:04:ec:aa:cf:86:50:e7:61:8e:96:
05:8d:9d:90:ff:ef:46:3a:3f:d8:d5:91:59:26:2a:
67:25:fc:6e:c6:c5:6f:37:52:8d:d6:c7:61:34:0f:
cc:89:74:ad:84:51:e2:05:cb:d0:68:fc:f9:d5:d6:
a6:c2:28:81:5a:8e:b7:12:85:9e:3b:f8:60:52:bb:
e6:db:55:94:1b:92:3e:6b:b9:f1:8c:ea:f7:e6:d6:
81:57:a6:b1:e2:a4:a5:12:22:05:54:02:1c:33:d0:
d6:5d:47:b9:85:81:cd:eb:b0:ac:fe:26:8d:da:0c:
ed:ac:56:14:b2:2c:ef:7f:70:4c:e8:76:e3:b7:ae:
2b:5c:b8:7d:79:b7:86:b0:b8:f8:c0:44:06:3c:b2:
a9:d7:57:3d:8b:0d:77:73:2f:3e:2a:c0:29:90:6c:
3a:6e:d2:84:42:d0:9a:52:22:af:14:8f:72:7f:83:
9b:e9:6c:0e:a0:ca:a8:77:61:49:95:2a:ce:96:e4:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:19:E3:7E:C2:04:B7:F8:50:8F:12:57:BB:D2:07:7C:1A:B8:50
X509v3 Authority Key Identifier:
keyid:CE:10:41:1E:39:CC:9E:58:43:4C:0B:B9:75:54:D6:06:3E:77:02:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhBBHjnMnlhDTAu5dVTWBj53Auw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/bf9d7a-c605-4f64-be03-d908b0098614/1/zhBBHjnMnlhDTAu5dVTWBj53Auw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:93:3e:50:da:4f:74:2f:3d:97:69:58:92:0f:f5:2f:4f:24:
18:87:48:b1:13:fa:97:19:98:bb:ac:dc:b9:4c:a8:4d:0e:2e:
f6:e2:4d:1e:02:e2:54:d4:36:af:9c:dd:85:d0:88:99:5f:3f:
b8:b6:c1:ac:b2:02:b7:8a:76:73:55:13:4c:16:b0:05:0d:b3:
9a:f0:c1:a2:24:b8:60:82:be:f1:67:85:18:bb:47:ca:5d:7d:
c2:e8:d5:9d:a1:2b:77:1b:e5:7d:1f:97:10:8d:07:02:aa:f8:
ab:0f:96:ff:1c:de:9a:3a:b9:59:54:c9:c2:36:2a:45:43:46:
4b:f0:3e:62:a2:18:75:85:79:25:f7:b8:24:b9:3f:dd:32:f2:
35:da:27:4c:32:6c:bc:c7:ce:31:72:30:55:09:cf:4e:37:21:
b4:0d:d0:9c:b9:a1:34:19:81:12:7e:62:bc:b4:3e:0d:61:fd:
3f:16:aa:e7:da:6a:b1:5d:43:3a:28:8c:70:a0:f8:2d:43:ec:
e3:c1:85:14:47:79:1f:ae:28:34:b3:b6:3f:2e:ea:03:14:cd:
fa:2c:fc:e3:13:09:e2:ac:fd:39:c1:7d:7a:06:f4:89:3c:13:
ef:55:6c:bb:0d:a2:a5:b7:34:c0:33:f1:26:f3:20:a5:15:e6:
00:54:c6:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaR8ZA7x8QDOGoHMQ+mxSL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMTA0MTFlMzljYzllNTg0MzRjMGJiOTc1NTRkNjA2M2U3
NzAyZWMwHhcNMjUwNTAyMTcwMDQ5WhcNMjUwNTAzMTcwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZGIwMTllMzdlYzIwNGI3Zjg1MDhmMTI1N2JiZDIwNzdjMWFiODUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquV4fO3ebhBzX2XogKW3hO9K6fcm
IQxDIR13sQIJpfOQ83ZqED83wTb3Ys/Q8RsoEHVdE89MiTbjftQ4P/nxOwTsqs+G
UOdhjpYFjZ2Q/+9GOj/Y1ZFZJipnJfxuxsVvN1KN1sdhNA/MiXSthFHiBcvQaPz5
1damwiiBWo63EoWeO/hgUrvm21WUG5I+a7nxjOr35taBV6ax4qSlEiIFVAIcM9DW
XUe5hYHN67Cs/iaN2gztrFYUsizvf3BM6Hbjt64rXLh9ebeGsLj4wEQGPLKp11c9
iw13cy8+KsApkGw6btKEQtCaUiKvFI9yf4Ob6WwOoMqod2FJlSrOluSgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2wGeN+wgS3+FCPEle70gd8GrhQMB8GA1UdIwQY
MBaAFM4QQR45zJ5YQ0wLuXVU1gY+dwLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMt
ZDkwOGIwMDk4NjE0LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9iZjlkN2EtYzYwNS00ZjY0LWJlMDMtZDkwOGIwMDk4NjE0
LzEvemhCQkhqbk1ubGhEVEF1NWRWVFdCajUzQXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtpM+UNpP
dC89l2lYkg/1L08kGIdIsRP6lxmYu6zcuUyoTQ4u9uJNHgLiVNQ2r5zdhdCImV8/
uLbBrLICt4p2c1UTTBawBQ2zmvDBoiS4YIK+8WeFGLtHyl19wujVnaErdxvlfR+X
EI0HAqr4qw+W/xzemjq5WVTJwjYqRUNGS/A+YqIYdYV5Jfe4JLk/3TLyNdonTDJs
vMfOMXIwVQnPTjchtA3QnLmhNBmBEn5ivLQ+DWH9Pxaq59pqsV1DOiiMcKD4LUPs
48GFFEd5H64oNLO2Py7qAxTN+iz84xMJ4qz9OcF9egb0iTwT71Vsuw2ipbc0wDPx
JvMgpRXmAFTGqw==
-----END CERTIFICATE-----
Generated at Sat May 3 02:34:42 2025 by rpki-client