Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: hcL64ll2VGV/Y2Y4os0x2CL6DL/eDZDB5LMgCQX76kM=
Subject key identifier: B5:97:29:D2:91:2E:58:23:13:13:A7:57:34:99:40:EB:BC:B9:D3:C7
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 019688127749A36F978B5642E751CC1016C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0DD6
Signing time: Wed 30 Apr 2025 19:00:33 +0000
Manifest this update: Wed 30 Apr 2025 19:00:33 +0000
Manifest next update: Thu 01 May 2025 19:00:33 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: cB4tfiFIakFyPNjdpL6USbRbo/U4wJQVglWvCdOKY5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:77:49:a3:6f:97:8b:56:42:e7:51:cc:10:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: Apr 30 19:00:33 2025 GMT
Not After : May 1 19:00:33 2025 GMT
Subject: CN=b59729d2912e58231313a757349940ebbcb9d3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:a4:0a:fc:7b:af:eb:42:09:09:1d:0a:ef:
b0:f6:7e:42:cb:ad:d9:2e:7a:5e:eb:80:81:90:23:
58:ee:31:f7:2e:33:4c:58:be:3e:37:ab:9b:e6:9b:
a0:e3:e3:f6:dd:47:ee:dd:87:b5:fa:7e:de:49:f4:
62:0d:eb:6c:61:c4:f8:78:b5:44:e0:03:41:ce:fe:
82:9e:c0:f4:99:28:c5:ab:df:6b:13:ea:e1:ad:6d:
bd:40:38:7d:16:9b:8f:c3:2a:0e:a6:07:94:46:54:
30:8c:1f:fd:4e:07:f4:d7:9d:9a:15:38:26:c1:9d:
ea:8a:a5:70:c9:7d:fe:8c:9c:ea:14:10:a8:28:78:
72:af:cd:6a:42:f6:53:a3:bc:54:7e:40:e9:e2:e0:
90:95:7a:83:ff:45:d9:a6:e7:00:77:bf:12:ab:cb:
0f:ab:6f:02:79:72:32:cf:ec:8e:e3:5f:91:a9:ca:
e9:9c:bd:11:54:9e:b9:b1:e4:b3:41:c7:32:1c:e1:
a2:76:32:1a:53:a4:90:65:21:17:bd:fd:51:63:3c:
46:c1:b1:a9:83:92:45:cb:09:a5:5a:ac:b5:7a:eb:
ce:00:2f:ca:b3:59:6f:89:1a:ec:0a:10:3d:82:38:
92:70:e7:d7:40:bf:e9:6d:d2:93:d9:c6:7b:8f:90:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:29:D2:91:2E:58:23:13:13:A7:57:34:99:40:EB:BC:B9:D3:C7
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d9:50:2e:a3:11:96:76:f5:07:67:6c:a9:70:0d:5a:6c:e5:
2c:7d:7f:ed:49:37:ab:1d:82:cd:76:2d:51:8f:c8:f6:64:26:
32:b5:23:aa:80:bd:8d:b4:06:a7:9a:37:32:25:81:bc:71:0e:
80:54:ec:80:70:f2:fa:91:09:26:76:eb:e7:97:f7:bd:9f:6a:
96:96:53:45:80:f5:b0:cd:09:7b:74:73:f4:c2:cb:90:0e:d1:
0b:12:88:1d:8e:26:d7:ff:5b:c3:29:90:2c:f7:97:95:9d:6e:
72:d2:ad:d7:c2:4a:49:82:48:46:ce:b6:30:38:55:85:66:f2:
81:bf:c4:39:ea:04:33:d2:8b:ee:0e:f0:c6:35:b4:8a:03:73:
1c:69:8b:0a:10:31:e5:a3:3c:0c:54:7c:d0:5b:c1:7e:c9:dc:
a2:50:3a:e6:25:ed:be:65:2b:c4:1b:d6:fc:c8:03:32:91:09:
82:9e:ac:ed:3f:a6:0a:83:76:af:9e:83:84:9c:bd:20:76:9a:
28:84:31:04:1c:b7:82:3b:a3:0c:cd:a5:ab:d5:7e:32:27:b9:
19:ab:90:d3:cf:c4:18:ad:30:c7:7f:dd:8c:82:23:57:85:e9:
82:88:79:48:58:b3:9a:32:98:66:d2:19:b9:f5:a0:8d:28:ee:
13:f8:f5:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaIEndJo2+Xi1ZC51HMEBbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzE3OGY3YTAwNWY5Mzc3OWY0NjhkMzRiYWRiY2NjMWI5
Y2VhNTAwHhcNMjUwNDMwMTkwMDMzWhcNMjUwNTAxMTkwMDMzWjAzMTEwLwYDVQQD
EyhiNTk3MjlkMjkxMmU1ODIzMTMxM2E3NTczNDk5NDBlYmJjYjlkM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgmkCvx7r+tCCQkdCu+w9n5Cy63Z
Lnpe64CBkCNY7jH3LjNMWL4+N6ub5pug4+P23Ufu3Ye1+n7eSfRiDetsYcT4eLVE
4ANBzv6CnsD0mSjFq99rE+rhrW29QDh9FpuPwyoOpgeURlQwjB/9Tgf0152aFTgm
wZ3qiqVwyX3+jJzqFBCoKHhyr81qQvZTo7xUfkDp4uCQlXqD/0XZpucAd78Sq8sP
q28CeXIyz+yO41+RqcrpnL0RVJ65seSzQccyHOGidjIaU6SQZSEXvf1RYzxGwbGp
g5JFywmlWqy1euvOAC/Ks1lviRrsChA9gjiScOfXQL/pbdKT2cZ7j5Cn0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWXKdKRLlgjExOnVzSZQOu8udPHMB8GA1UdIwQY
MBaAFM9xePegBfk3efRo00utvMwbnOpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDIt
NWEzZDhmMGVjYmZkLzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8yNTliZWEtMjkzMS00ZGUwLWJlNDItNWEzZDhmMGVjYmZk
LzEvejNGNDk2QUYtVGQ1OUdqVFM2Mjh6QnVjNmxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9lQLqMR
lnb1B2dsqXANWmzlLH1/7Uk3qx2CzXYtUY/I9mQmMrUjqoC9jbQGp5o3MiWBvHEO
gFTsgHDy+pEJJnbr55f3vZ9qlpZTRYD1sM0Je3Rz9MLLkA7RCxKIHY4m1/9bwymQ
LPeXlZ1uctKt18JKSYJIRs62MDhVhWbygb/EOeoEM9KL7g7wxjW0igNzHGmLChAx
5aM8DFR80FvBfsncolA65iXtvmUrxBvW/MgDMpEJgp6s7T+mCoN2r56DhJy9IHaa
KIQxBBy3gjujDM2lq9V+Mie5GauQ08/EGK0wx3/djIIjV4Xpgoh5SFizmjKYZtIZ
ufWgjSjuE/j13Q==
-----END CERTIFICATE-----
Generated at Thu May 1 00:36:24 2025 by rpki-client