Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
File: z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft (raw, json)
Hash identifier: JCKTY16Mw7n8IprCTVbwMS3do2L2RGo4UYwBCKWc9XE=
Subject key identifier: 54:EF:25:73:E8:95:EB:A7:27:CC:F3:57:DD:06:FF:5A:0C:66:D9:FD
Authority key identifier: CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
Certificate issuer: /CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Certificate serial: 01968391B3A8E50E958F0B77A8EE6D701D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 22:01:26 +0000
Manifest this update: Tue 29 Apr 2025 22:01:26 +0000
Manifest next update: Wed 30 Apr 2025 22:01:26 +0000
Files and hashes: 1: z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl (hash: 2p1tyg3NteVjSwIVvm3t7EyEZsexILJcRLMijqGb6Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:b3:a8:e5:0e:95:8f:0b:77:a8:ee:6d:70:1d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf77301883be0d21abd9c6cc0bd7500a7ab47988
Validity
Not Before: Apr 29 22:01:26 2025 GMT
Not After : Apr 30 22:01:26 2025 GMT
Subject: CN=54ef2573e895eba727ccf357dd06ff5a0c66d9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:6f:db:ac:f6:b5:41:ca:21:4a:9f:49:da:
8a:59:06:e0:8f:00:c5:d5:0d:bc:cf:81:ec:13:67:
77:43:cd:e0:07:b2:5a:50:61:dd:5f:0b:66:4a:72:
96:b2:2f:91:be:77:6d:70:5f:d7:25:c7:72:3c:9a:
96:3a:1f:98:45:2b:37:d6:01:63:e0:41:1e:c3:8b:
96:fd:68:a3:44:60:41:7b:d0:69:7e:9a:99:d2:b5:
b5:5d:be:b7:4a:70:3f:86:03:ad:24:da:15:5c:3d:
0d:3f:ab:2e:5c:8e:f5:6e:06:46:3f:d5:d0:aa:da:
75:a7:07:45:7b:52:65:b8:c6:78:38:89:c9:19:e5:
04:5e:4a:aa:27:e7:77:43:23:bc:bb:79:ef:4a:7a:
b0:cc:b7:d9:c8:89:0a:6e:39:4f:ac:4c:41:e9:6d:
33:23:25:4b:87:df:a8:97:82:dc:d0:35:ca:bb:c2:
8f:6c:60:4e:7b:11:d3:71:f5:0a:a3:1d:da:8e:e6:
89:1a:09:ed:50:56:2c:b4:e4:34:82:1c:b9:ae:80:
24:73:84:14:f2:73:13:97:e1:83:af:db:9c:6b:ca:
d1:65:0c:6f:52:9d:61:bc:eb:0f:76:83:28:2a:d6:
52:41:0e:57:e9:11:ba:ed:a9:a1:14:04:81:c4:7d:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:25:73:E8:95:EB:A7:27:CC:F3:57:DD:06:FF:5A:0C:66:D9:FD
X509v3 Authority Key Identifier:
keyid:CF:77:30:18:83:BE:0D:21:AB:D9:C6:CC:0B:D7:50:0A:7A:B4:79:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3cwGIO-DSGr2cbMC9dQCnq0eYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5f42ca-e974-4ef0-96df-8fd60853cde0/1/z3cwGIO-DSGr2cbMC9dQCnq0eYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:d8:92:75:0b:19:e9:8c:f4:d1:c1:1b:0c:76:c4:89:ba:
c9:4b:ad:d3:ab:0a:fc:d3:5a:b9:db:c1:d7:6f:19:2d:82:57:
23:c9:3a:56:03:46:f1:41:51:08:54:0d:6a:49:7a:49:2c:36:
8b:a5:10:9e:aa:9e:1b:ec:99:43:05:39:97:8b:69:24:82:a3:
15:88:04:d3:18:a9:d2:d5:b9:36:f0:a7:58:9e:48:97:f0:e5:
59:db:dd:f1:c3:56:e5:33:8b:17:00:f0:3e:e2:58:2c:34:2e:
d8:2d:fa:d8:15:e8:7d:0c:6d:8d:57:54:2a:89:0e:f3:c4:cb:
2b:fa:e7:25:b1:12:13:d5:51:38:f8:e8:d2:e8:21:92:54:6d:
3e:36:a9:7f:e7:7a:8a:a8:93:fe:db:f3:51:15:89:b9:93:38:
f0:81:4d:26:04:a0:22:dc:98:c7:db:40:22:71:22:5d:b3:80:
b8:51:c7:52:2b:91:c4:ee:65:48:5c:57:7a:5e:ca:ed:5e:bf:
db:bf:f4:db:ae:ed:6b:90:ea:e5:1b:dd:3f:10:a3:3c:aa:12:
44:00:d3:e0:95:18:23:4e:30:ca:2a:c0:f2:ed:e1:ae:1e:82:
d9:d4:2e:2d:75:17:3b:d1:0f:78:d7:fb:13:4e:15:8a:3d:a0:
95:cf:cd:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkbOo5Q6Vjwt3qO5tcB0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzczMDE4ODNiZTBkMjFhYmQ5YzZjYzBiZDc1MDBhN2Fi
NDc5ODgwHhcNMjUwNDI5MjIwMTI2WhcNMjUwNDMwMjIwMTI2WjAzMTEwLwYDVQQD
Eyg1NGVmMjU3M2U4OTVlYmE3MjdjY2YzNTdkZDA2ZmY1YTBjNjZkOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VVv26z2tUHKIUqfSdqKWQbgjwDF
1Q28z4HsE2d3Q83gB7JaUGHdXwtmSnKWsi+RvndtcF/XJcdyPJqWOh+YRSs31gFj
4EEew4uW/WijRGBBe9BpfpqZ0rW1Xb63SnA/hgOtJNoVXD0NP6suXI71bgZGP9XQ
qtp1pwdFe1JluMZ4OInJGeUEXkqqJ+d3QyO8u3nvSnqwzLfZyIkKbjlPrExB6W0z
IyVLh9+ol4Lc0DXKu8KPbGBOexHTcfUKox3ajuaJGgntUFYstOQ0ghy5roAkc4QU
8nMTl+GDr9uca8rRZQxvUp1hvOsPdoMoKtZSQQ5X6RG67amhFASBxH3DnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTvJXPoleunJ8zzV90G/1oMZtn9MB8GA1UdIwQY
MBaAFM93MBiDvg0hq9nGzAvXUAp6tHmIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYt
OGZkNjA4NTNjZGUwLzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81ZjQyY2EtZTk3NC00ZWYwLTk2ZGYtOGZkNjA4NTNjZGUw
LzEvejNjd0dJTy1EU0dyMmNiTUM5ZFFDbnEwZVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACc7YknUL
GemM9NHBGwx2xIm6yUut06sK/NNaudvB128ZLYJXI8k6VgNG8UFRCFQNakl6SSw2
i6UQnqqeG+yZQwU5l4tpJIKjFYgE0xip0tW5NvCnWJ5Il/DlWdvd8cNW5TOLFwDw
PuJYLDQu2C362BXofQxtjVdUKokO88TLK/rnJbESE9VROPjo0ughklRtPjapf+d6
iqiT/tvzURWJuZM48IFNJgSgItyYx9tAInEiXbOAuFHHUiuRxO5lSFxXel7K7V6/
27/0267ta5Dq5RvdPxCjPKoSRADT4JUYI04wyirA8u3hrh6C2dQuLXUXO9EPeNf7
E04Vij2glc/Ntw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:27:31 2025 by rpki-client