Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
File: Zz-IdNlzH2doKiE-b-XgsN805ss.mft (raw, json)
Hash identifier: bZe/BsGPz+VJctjVsTzunZobJQRFipcXkXQHJKipr8M=
Subject key identifier: 17:B4:DA:DD:23:2B:40:D6:F1:CE:C7:E9:77:5F:69:A6:42:64:6E:ED
Authority key identifier: 67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
Certificate issuer: /CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Certificate serial: 0196767A5691FA0DA8694A0DEF7EB092062A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
Manifest number: 0C30
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: Zz-IdNlzH2doKiE-b-XgsN805ss.crl (hash: h3jPQSUKpt7vSbzEcrm/ShWBm0UYYUzyNiJwqM/btt4=)
2: vodD5q0fJ3uk77fq2WmiOczAUPQ.roa (hash: fhadxFEW7gVWou0uR8dX2wBzxCkJiXR0SA1JvqSghzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:56:91:fa:0d:a8:69:4a:0d:ef:7e:b0:92:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=673f8874d9731f67682a213e6fe5e0b0df34e6cb
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=17b4dadd232b40d6f1cec7e9775f69a642646eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:20:22:5b:7f:c5:b9:37:ee:36:af:fa:be:
7b:f4:10:ef:27:18:7e:60:55:44:51:ab:77:70:76:
52:ec:ab:b6:a1:52:09:c8:d0:1a:c1:3f:bd:b3:7f:
6d:c3:b4:bc:5f:73:7f:ef:0a:1e:ac:18:10:cb:6d:
8c:fd:0d:7e:e4:84:cf:1a:60:c3:41:79:04:7c:a2:
fd:58:26:7b:21:56:9a:8b:ce:49:84:b0:e4:19:db:
17:d5:7a:60:bd:0b:16:fb:71:8b:cf:f4:b4:46:60:
2d:08:d3:7c:68:36:6a:2a:df:98:e1:81:6f:70:80:
43:81:8e:ae:0f:bc:1a:93:de:31:c7:45:0e:6f:66:
cc:ff:f2:69:d9:2d:3a:1d:2e:b5:b3:03:01:a6:cd:
d8:f3:47:d9:c3:0b:ed:f3:08:ae:6d:04:d0:c9:9b:
c7:cd:ef:ba:a5:61:6d:04:4e:7a:78:22:fd:3b:12:
0f:d8:37:b7:bc:b0:f2:78:27:62:24:53:cf:35:4b:
6f:d6:70:27:93:d7:52:17:3b:09:39:7f:2c:27:3d:
6b:91:0c:7d:4e:2d:b5:20:19:d5:a7:1b:04:2d:b5:
df:e7:98:43:a7:d2:44:48:ef:3f:d1:a1:59:9e:5f:
91:25:6a:b8:8d:4c:7a:b0:5b:4d:30:01:6a:63:b2:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B4:DA:DD:23:2B:40:D6:F1:CE:C7:E9:77:5F:69:A6:42:64:6E:ED
X509v3 Authority Key Identifier:
keyid:67:3F:88:74:D9:73:1F:67:68:2A:21:3E:6F:E5:E0:B0:DF:34:E6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zz-IdNlzH2doKiE-b-XgsN805ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8ec03-fb84-444e-a6ef-985231635421/1/Zz-IdNlzH2doKiE-b-XgsN805ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3b:18:68:91:58:76:85:6c:9e:19:27:e3:34:33:a7:6e:a2:
15:12:88:7a:1e:27:e9:a2:9f:8f:be:f2:17:6e:3f:6d:bf:b1:
a6:54:59:5f:c8:25:65:8f:a8:68:ca:5b:48:dc:34:fc:ef:c8:
7c:11:94:4c:b3:f4:e4:89:0b:53:07:24:d4:5e:2d:1a:ca:05:
c6:10:1f:d4:9e:3e:29:ee:82:95:76:91:78:4f:7b:f6:da:32:
2c:7f:db:08:c9:a0:63:4c:0b:7a:aa:11:58:6f:7d:18:12:ad:
ae:96:bd:1f:ce:da:c7:d5:b6:ec:b0:61:42:b3:9b:60:b9:b3:
84:84:4f:29:ee:a4:70:7d:f6:cc:87:2e:31:bf:61:b4:ad:8a:
a8:ab:70:92:e6:ba:9b:f8:aa:4b:ee:bc:82:49:b4:27:d3:f1:
51:a9:94:fa:c1:10:b1:61:4c:f0:94:20:7e:8c:2a:cd:06:96:
97:39:be:bd:92:2f:a7:0e:b6:16:be:92:de:58:93:0a:cf:ce:
91:f5:3d:7b:b0:14:6f:d5:41:61:f0:55:75:fe:83:b5:23:51:
81:71:e3:a7:eb:39:57:a5:56:1c:14:43:ae:c4:9e:71:bf:a5:
50:d0:ed:bf:63:c7:25:e7:f5:8a:c7:e8:5e:95:32:2d:50:5e:
a4:82:d8:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2elaR+g2oaUoN736wkgYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3M2Y4ODc0ZDk3MzFmNjc2ODJhMjEzZTZmZTVlMGIwZGYz
NGU2Y2IwHhcNMjUwNDI3MDkwMDUxWhcNMjUwNDI4MDkwMDUxWjAzMTEwLwYDVQQD
EygxN2I0ZGFkZDIzMmI0MGQ2ZjFjZWM3ZTk3NzVmNjlhNjQyNjQ2ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswogIlt/xbk37jav+r579BDvJxh+
YFVEUat3cHZS7Ku2oVIJyNAawT+9s39tw7S8X3N/7woerBgQy22M/Q1+5ITPGmDD
QXkEfKL9WCZ7IVaai85JhLDkGdsX1XpgvQsW+3GLz/S0RmAtCNN8aDZqKt+Y4YFv
cIBDgY6uD7wak94xx0UOb2bM//Jp2S06HS61swMBps3Y80fZwwvt8wiubQTQyZvH
ze+6pWFtBE56eCL9OxIP2De3vLDyeCdiJFPPNUtv1nAnk9dSFzsJOX8sJz1rkQx9
Ti21IBnVpxsELbXf55hDp9JESO8/0aFZnl+RJWq4jUx6sFtNMAFqY7IXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe02t0jK0DW8c7H6XdfaaZCZG7tMB8GA1UdIwQY
MBaAFGc/iHTZcx9naCohPm/l4LDfNObLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYt
OTg1MjMxNjM1NDIxLzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kOGVjMDMtZmI4NC00NDRlLWE2ZWYtOTg1MjMxNjM1NDIx
LzEvWnotSWRObHpIMmRvS2lFLWItWGdzTjgwNXNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDsYaJFY
doVsnhkn4zQzp26iFRKIeh4n6aKfj77yF24/bb+xplRZX8glZY+oaMpbSNw0/O/I
fBGUTLP05IkLUwck1F4tGsoFxhAf1J4+Ke6ClXaReE979toyLH/bCMmgY0wLeqoR
WG99GBKtrpa9H87ax9W27LBhQrObYLmzhIRPKe6kcH32zIcuMb9htK2KqKtwkua6
m/iqS+68gkm0J9PxUamU+sEQsWFM8JQgfowqzQaWlzm+vZIvpw62Fr6S3liTCs/O
kfU9e7AUb9VBYfBVdf6DtSNRgXHjp+s5V6VWHBRDrsSecb+lUNDtv2PHJef1isfo
XpUyLVBepILY2g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:48 2025 by rpki-client