Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: XleSrNuVdkoht4LEsvHUOfL77B7kzAcQJEFZCCdbAM0=
Subject key identifier: F6:6D:62:4D:B3:61:8B:94:B9:44:45:88:40:01:F7:3F:2B:53:F2:8B
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 0196760C21B6BEAB8FEBD8EE935A1A44FF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 069D
Signing time: Sun 27 Apr 2025 07:00:28 +0000
Manifest this update: Sun 27 Apr 2025 07:00:28 +0000
Manifest next update: Mon 28 Apr 2025 07:00:28 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: qZy8gO4jRxDXTAMnJVcxuc4pYVypSb+CoI4PXQFS57o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:21:b6:be:ab:8f:eb:d8:ee:93:5a:1a:44:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Apr 27 07:00:28 2025 GMT
Not After : Apr 28 07:00:28 2025 GMT
Subject: CN=f66d624db3618b94b94445884001f73f2b53f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:81:4d:67:f3:c9:62:15:9d:0a:83:97:4b:
41:49:2f:ae:6b:12:6d:2b:72:1c:4a:c6:a1:6f:db:
62:12:51:ae:3f:28:5f:40:12:1c:99:42:cd:42:d7:
91:dd:51:96:af:cc:fc:da:f4:ea:5f:80:e8:50:8e:
72:4b:69:2e:9a:b4:90:a0:de:8a:67:7c:fc:80:fb:
bf:c2:bf:8a:23:bc:99:3e:87:92:b0:8c:1b:63:ed:
37:f3:4e:0c:f7:99:7c:50:f2:45:64:9c:ba:5a:df:
71:15:81:1b:3e:e7:55:a4:23:80:d0:0f:d2:77:d5:
5e:47:d0:25:9b:1b:f3:71:86:0b:b8:41:be:eb:f6:
99:8a:a3:da:a6:95:e6:0c:f4:06:db:7f:83:6d:f2:
d3:ee:ef:7c:e3:37:c4:b8:42:a9:a8:47:81:73:e3:
0d:7b:b5:ca:09:f8:60:c4:eb:e4:1e:a4:bc:9b:53:
3d:ed:0b:0f:e8:e8:0c:f7:8a:7e:30:cc:63:15:e1:
e8:3f:55:b8:c6:7a:28:1e:a8:8b:d8:7d:5e:83:d0:
83:dc:ca:e5:5d:f6:25:55:21:dd:7e:ce:0e:11:07:
e7:31:ca:22:06:aa:54:13:bd:d7:78:ca:3b:f7:8c:
08:8c:ee:e1:44:71:72:64:4d:a4:94:34:75:1b:fe:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:62:4D:B3:61:8B:94:B9:44:45:88:40:01:F7:3F:2B:53:F2:8B
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:6f:32:ab:91:f4:5d:01:eb:a9:c0:b3:91:10:92:05:75:aa:
75:b8:d4:6b:d1:59:d4:29:94:8a:55:8f:25:a6:e3:9c:24:38:
73:2d:e3:76:3e:a9:66:e1:6c:95:aa:5e:e4:b0:a5:85:67:20:
f5:1e:b0:0c:66:ab:d2:80:7b:63:67:22:cf:53:28:8c:16:b1:
7c:19:ba:f0:09:92:95:05:d9:04:27:19:00:2a:e0:20:77:07:
d4:f8:8e:4e:9d:af:4f:5f:af:9a:04:a5:bc:4f:fb:d8:d2:36:
2b:60:2d:9f:cf:57:10:8d:86:6f:65:46:ae:ec:4a:7e:73:62:
93:0a:e1:4b:26:20:58:df:e5:8f:4c:7b:df:c1:60:1f:a3:a4:
c5:28:fa:e8:92:e1:7e:69:ed:59:bc:3d:cd:a2:71:89:66:8e:
3e:6c:b6:9c:bf:09:a4:a0:8e:bd:86:d5:96:35:45:99:04:3d:
54:d0:09:6d:79:90:f1:8d:92:6b:95:16:4f:b7:b0:fa:7b:fd:
c1:25:80:b0:47:a2:45:ce:92:ce:e6:0d:9a:c8:e6:de:c3:4f:
24:e6:84:b1:1c:32:0e:67:30:a0:d4:1e:35:39:c5:02:3d:88:
d9:db:1d:90:61:f4:f6:8a:97:d2:19:1b:4d:c4:ba:a6:c0:a6:
e9:a1:09:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DCG2vquP69juk1oaRP+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OTBhZmNhNWZlYjRhYzM4YzFhNzM4NTdhZDc1NmY3ZjMz
ZTM2OGIwHhcNMjUwNDI3MDcwMDI4WhcNMjUwNDI4MDcwMDI4WjAzMTEwLwYDVQQD
EyhmNjZkNjI0ZGIzNjE4Yjk0Yjk0NDQ1ODg0MDAxZjczZjJiNTNmMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/6BTWfzyWIVnQqDl0tBSS+uaxJt
K3IcSsahb9tiElGuPyhfQBIcmULNQteR3VGWr8z82vTqX4DoUI5yS2kumrSQoN6K
Z3z8gPu/wr+KI7yZPoeSsIwbY+03804M95l8UPJFZJy6Wt9xFYEbPudVpCOA0A/S
d9VeR9AlmxvzcYYLuEG+6/aZiqPappXmDPQG23+DbfLT7u984zfEuEKpqEeBc+MN
e7XKCfhgxOvkHqS8m1M97QsP6OgM94p+MMxjFeHoP1W4xnooHqiL2H1eg9CD3Mrl
XfYlVSHdfs4OEQfnMcoiBqpUE73XeMo794wIjO7hRHFyZE2klDR1G/7bNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZtYk2zYYuUuURFiEAB9z8rU/KLMB8GA1UdIwQY
MBaAFKWQr8pf60rDjBpzhXrXVvfzPjaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYt
OGYwNjNhNWY2YTg2LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NzJiMjUtNjE5OC00ODNlLWEwNWYtOGYwNjNhNWY2YTg2
LzEvcFpDdnlsX3JTc09NR25PRmV0ZFc5X00tTm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx28yq5H0
XQHrqcCzkRCSBXWqdbjUa9FZ1CmUilWPJabjnCQ4cy3jdj6pZuFslape5LClhWcg
9R6wDGar0oB7Y2ciz1MojBaxfBm68AmSlQXZBCcZACrgIHcH1PiOTp2vT1+vmgSl
vE/72NI2K2Atn89XEI2Gb2VGruxKfnNikwrhSyYgWN/lj0x738FgH6OkxSj66JLh
fmntWbw9zaJxiWaOPmy2nL8JpKCOvYbVljVFmQQ9VNAJbXmQ8Y2Sa5UWT7ew+nv9
wSWAsEeiRc6SzuYNmsjm3sNPJOaEsRwyDmcwoNQeNTnFAj2I2dsdkGH09oqX0hkb
TcS6psCm6aEJcQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:26:10 2025 by rpki-client