Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: TUsT3N/hrJBx6wYRan2MvRwJk0CuoQ6Jj9m7M0ByHWE=
Subject key identifier: 1A:20:1F:D7:0F:9A:AC:B8:56:26:C1:36:AA:99:49:D9:E8:3A:DA:7A
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 019675677810671B523F85258888A8BBF3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 09C5
Signing time: Sun 27 Apr 2025 04:00:37 +0000
Manifest this update: Sun 27 Apr 2025 04:00:37 +0000
Manifest next update: Mon 28 Apr 2025 04:00:37 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: lu1R6bn9NUyimnLxMeSdf+wTVz1dR4DXiBO4T2jp2Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:78:10:67:1b:52:3f:85:25:88:88:a8:bb:f3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Apr 27 04:00:37 2025 GMT
Not After : Apr 28 04:00:37 2025 GMT
Subject: CN=1a201fd70f9aacb85626c136aa9949d9e83ada7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:9a:5c:7d:a6:8b:b1:6c:bc:a5:d2:f6:a9:
d8:b7:8c:ed:78:97:1e:2e:5b:39:bd:e8:f0:56:52:
6c:ef:d8:77:4c:8b:eb:10:f8:60:3a:02:46:2e:fd:
20:3e:80:ac:50:78:57:af:3d:5c:4e:c2:90:26:44:
e2:02:03:96:e4:e2:43:a4:e6:fb:5f:35:92:71:7b:
10:31:32:13:90:1b:85:e6:28:e3:df:35:84:ad:af:
7f:26:f2:ee:66:ca:48:dc:fd:85:b6:66:7a:91:b8:
f3:41:aa:b5:85:07:e2:74:18:5e:f6:82:a1:70:c3:
15:c5:26:c8:bf:d0:f7:25:4d:16:37:14:ca:8f:78:
b0:57:57:67:97:b0:d6:9c:2b:75:dc:fd:b7:a5:73:
74:3d:a7:be:02:55:e7:f9:b7:c7:21:2f:27:66:21:
3f:18:33:97:70:72:3e:04:83:42:f9:1a:16:76:64:
24:36:16:b3:5d:f1:0d:e5:10:67:ce:e0:2f:91:35:
f3:36:92:22:95:9f:e5:e7:58:5d:6a:c3:98:24:9f:
2b:75:98:ea:45:04:c1:d8:cb:7f:44:cc:52:66:1d:
07:c2:86:b2:13:27:4a:3b:48:ce:3a:1e:24:b0:06:
0f:46:2d:d8:47:2b:20:30:7f:ff:2d:df:d5:f7:0c:
d9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:1F:D7:0F:9A:AC:B8:56:26:C1:36:AA:99:49:D9:E8:3A:DA:7A
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:9a:54:bd:75:df:8b:f0:af:da:5a:f1:62:02:be:8e:65:
5b:89:92:ec:fc:a3:62:e7:b6:8c:1a:fe:7e:43:0a:c5:e4:05:
88:8e:3b:ff:d3:b3:a7:0c:d0:2f:04:40:70:57:d1:fb:07:64:
9c:3f:f8:47:0d:6f:b8:fc:5a:2b:df:ce:1e:31:82:fa:81:5d:
ce:52:24:59:97:cb:e5:1b:57:3a:f0:74:65:82:17:8e:79:c0:
64:65:75:3c:b1:38:a8:7c:c3:39:aa:79:13:84:18:d5:5d:2c:
35:76:a3:45:11:e2:69:1a:52:29:bd:ab:ac:2c:77:ac:d4:6e:
65:fc:08:ab:1a:2b:19:1d:33:6c:78:98:83:95:ee:62:e7:06:
0e:f7:96:2b:aa:9f:70:ca:2f:4e:75:35:0d:cf:d8:1b:3a:4e:
70:36:83:05:b6:67:5d:2c:35:66:76:50:d0:4d:e2:eb:4d:84:
a4:8e:ec:a3:5f:24:6e:a2:5a:0c:35:ff:2a:4b:2e:0f:6f:4e:
a4:68:06:5e:5b:73:8f:11:79:ac:8d:c2:08:c4:be:1a:2f:7c:
32:2d:32:b4:6e:57:93:71:9d:91:4f:1c:0c:35:d8:ba:6c:98:
d9:e5:69:4e:02:a1:68:c6:f9:53:1a:f9:9f:22:25:c6:ff:ca:
5f:2d:1f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1Z3gQZxtSP4UliIiou/P+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzJlYzBlOTFkYmJmOTRkZGExZDY1MDQ0N2QyNjg5NzZk
NjIwOWEwHhcNMjUwNDI3MDQwMDM3WhcNMjUwNDI4MDQwMDM3WjAzMTEwLwYDVQQD
EygxYTIwMWZkNzBmOWFhY2I4NTYyNmMxMzZhYTk5NDlkOWU4M2FkYTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaKaXH2mi7FsvKXS9qnYt4zteJce
Lls5vejwVlJs79h3TIvrEPhgOgJGLv0gPoCsUHhXrz1cTsKQJkTiAgOW5OJDpOb7
XzWScXsQMTITkBuF5ijj3zWEra9/JvLuZspI3P2FtmZ6kbjzQaq1hQfidBhe9oKh
cMMVxSbIv9D3JU0WNxTKj3iwV1dnl7DWnCt13P23pXN0Pae+AlXn+bfHIS8nZiE/
GDOXcHI+BINC+RoWdmQkNhazXfEN5RBnzuAvkTXzNpIilZ/l51hdasOYJJ8rdZjq
RQTB2Mt/RMxSZh0HwoayEydKO0jOOh4ksAYPRi3YRysgMH//Ld/V9wzZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBogH9cPmqy4VibBNqqZSdnoOtp6MB8GA1UdIwQY
MBaAFEcy7A6R27+U3aHWUER9Jol21iCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMt
Nzg4ZGIwOWQwZmU2LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMtNzg4ZGIwOWQwZmU2
LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7maVL11
34vwr9pa8WICvo5lW4mS7PyjYue2jBr+fkMKxeQFiI47/9OzpwzQLwRAcFfR+wdk
nD/4Rw1vuPxaK9/OHjGC+oFdzlIkWZfL5RtXOvB0ZYIXjnnAZGV1PLE4qHzDOap5
E4QY1V0sNXajRRHiaRpSKb2rrCx3rNRuZfwIqxorGR0zbHiYg5XuYucGDveWK6qf
cMovTnU1Dc/YGzpOcDaDBbZnXSw1ZnZQ0E3i602EpI7so18kbqJaDDX/KksuD29O
pGgGXltzjxF5rI3CCMS+Gi98Mi0ytG5Xk3GdkU8cDDXYumyY2eVpTgKhaMb5Uxr5
nyIlxv/KXy0f9A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:33:32 2025 by rpki-client