Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: 13sUYuMXcIjyoahnYFP9Bu/RvUwJjX4VythEEbQFrks=
Subject key identifier: 4C:E9:76:DE:13:1A:E9:C6:68:F7:98:5C:02:B9:C9:F8:04:64:58:72
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 01976DAB2A236E4EDBAA1A170BB404B56C3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 0455
Signing time: Sat 14 Jun 2025 09:00:23 +0000
Manifest this update: Sat 14 Jun 2025 09:00:23 +0000
Manifest next update: Sun 15 Jun 2025 09:00:23 +0000
Files and hashes: 1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: bw5lsZRXL7IoJjTtClbOzCp4WbC9QbVIrc3Ly2wtM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:2a:23:6e:4e:db:aa:1a:17:0b:b4:04:b5:6c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Jun 14 09:00:23 2025 GMT
Not After : Jun 15 09:00:23 2025 GMT
Subject: CN=4ce976de131ae9c668f7985c02b9c9f804645872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:9d:42:f8:1d:8e:8c:0e:34:69:59:b7:e8:
ed:66:fa:1c:f4:ad:1c:3f:db:a8:a3:16:95:c2:69:
c2:15:48:ea:11:22:c0:dc:ca:6e:d8:a2:0b:36:ae:
a0:47:d9:d7:71:5b:60:f7:1d:b0:f3:f4:0c:92:45:
5c:9c:c7:2b:30:cf:d6:c0:f7:37:df:25:9b:59:35:
f1:cc:ba:99:30:cb:aa:bc:83:c1:0b:9c:13:f3:26:
56:24:c6:0b:2e:5b:b1:c6:9c:59:81:8b:fc:26:8e:
c5:52:7a:7a:53:59:ca:89:cf:df:c5:ef:a4:27:3d:
6e:5a:92:26:67:8a:12:84:6e:ba:c5:19:a5:74:6c:
43:b4:0b:ce:12:f5:4a:a1:00:b5:a6:45:c8:98:bd:
a5:92:85:8f:76:da:a6:c0:26:84:fd:ac:9a:2f:72:
d0:33:6b:a8:ec:21:83:68:9e:c5:47:e4:0a:e7:52:
87:43:92:6f:67:54:07:fd:40:f5:c6:0d:cb:dc:cf:
fb:3f:06:43:18:27:44:67:41:34:c8:a2:40:66:e1:
f2:0c:39:6a:61:ba:f5:bf:50:ed:2c:6f:f5:15:f6:
b4:a6:bc:7f:41:b1:4b:fe:f0:e1:b2:fc:da:fe:92:
49:95:d2:a3:06:b6:9f:db:87:72:29:2e:a8:3b:42:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:76:DE:13:1A:E9:C6:68:F7:98:5C:02:B9:C9:F8:04:64:58:72
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:b5:07:4d:51:18:2e:b0:dd:eb:a6:be:5a:6f:16:32:69:
0d:61:95:db:25:ac:9a:a3:15:fa:56:95:f4:f0:b6:be:6f:5f:
d0:eb:f1:72:b5:66:00:b9:af:a1:53:eb:9d:1f:dd:94:09:13:
9c:55:43:58:7d:ad:c7:13:7c:42:cb:18:49:61:ad:f3:2f:e9:
02:25:09:29:82:a5:0f:22:63:8b:2d:d6:c3:69:49:04:ac:f7:
5a:d7:21:23:c7:7e:de:cc:d2:49:29:8d:3f:eb:b9:f6:85:96:
40:93:65:ac:23:1e:09:df:d4:dd:62:4e:2b:84:50:6f:d3:2e:
1e:d4:5c:6c:0a:60:73:24:a4:41:1d:ed:ab:27:e4:9d:ff:24:
0b:07:b8:60:89:7f:d3:7e:75:5a:e5:ff:4b:c5:69:41:8f:62:
7e:a9:b7:72:51:df:c7:73:b2:30:62:b0:6e:e5:90:9a:6f:0f:
67:2a:ac:cf:c2:e1:19:2a:dd:d1:7c:ed:17:17:80:f0:cf:6e:
c9:e0:3d:f2:c2:09:40:a1:ef:b7:f8:f4:36:fc:04:96:3b:3b:
3b:62:dd:c3:51:a6:44:fc:7c:99:97:ca:a0:1d:23:1e:10:d2:
b0:b8:9d:98:8e:dd:44:f9:b6:2d:85:92:e9:62:3b:36:33:79:
21:9c:82:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqyojbk7bqhoXC7QEtWw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2ZmM2IxYWNjZDgyMDFhNDExNmM5ODc1NzMzOTIzNDI4
OTgwMWUwHhcNMjUwNjE0MDkwMDIzWhcNMjUwNjE1MDkwMDIzWjAzMTEwLwYDVQQD
Eyg0Y2U5NzZkZTEzMWFlOWM2NjhmNzk4NWMwMmI5YzlmODA0NjQ1ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJCdQvgdjowONGlZt+jtZvoc9K0c
P9uooxaVwmnCFUjqESLA3Mpu2KILNq6gR9nXcVtg9x2w8/QMkkVcnMcrMM/WwPc3
3yWbWTXxzLqZMMuqvIPBC5wT8yZWJMYLLluxxpxZgYv8Jo7FUnp6U1nKic/fxe+k
Jz1uWpImZ4oShG66xRmldGxDtAvOEvVKoQC1pkXImL2lkoWPdtqmwCaE/ayaL3LQ
M2uo7CGDaJ7FR+QK51KHQ5JvZ1QH/UD1xg3L3M/7PwZDGCdEZ0E0yKJAZuHyDDlq
Ybr1v1DtLG/1Ffa0prx/QbFL/vDhsvza/pJJldKjBraf24dyKS6oO0LuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzpdt4TGunGaPeYXAK5yfgEZFhyMB8GA1UdIwQY
MBaAFKY/87GszYIBpBFsmHVzOSNCiYAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEt
NzdkMzE1Y2MxNmFhLzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yNmUyMWUtZGI4MS00NmM3LTk1NWEtNzdkMzE1Y2MxNmFh
LzEvcGpfenNhek5nZ0drRVd5WWRYTTVJMEtKZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh621B01R
GC6w3eumvlpvFjJpDWGV2yWsmqMV+laV9PC2vm9f0OvxcrVmALmvoVPrnR/dlAkT
nFVDWH2txxN8QssYSWGt8y/pAiUJKYKlDyJjiy3Ww2lJBKz3WtchI8d+3szSSSmN
P+u59oWWQJNlrCMeCd/U3WJOK4RQb9MuHtRcbApgcySkQR3tqyfknf8kCwe4YIl/
0351WuX/S8VpQY9ifqm3clHfx3OyMGKwbuWQmm8PZyqsz8LhGSrd0XztFxeA8M9u
yeA98sIJQKHvt/j0NvwEljs7O2Ldw1GmRPx8mZfKoB0jHhDSsLidmI7dRPm2LYWS
6WI7NjN5IZyCzQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:38 2025 by rpki-client