Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft (raw, json)
Hash identifier: dHzq6b9n1cbLMJU+abaaW5jAj+ZAlCq8q4W0dDOpquc=
Subject key identifier: 1C:AB:46:C9:71:B3:4E:AE:75:0A:E4:78:EB:8B:AE:3A:A9:58:E7:9A
Authority key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Certificate issuer: /CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Certificate serial: 0196989801E6F844DF55124BBD5306669C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
Manifest number: A3
Signing time: Sun 04 May 2025 00:00:20 +0000
Manifest this update: Sun 04 May 2025 00:00:20 +0000
Manifest next update: Mon 05 May 2025 00:00:20 +0000
Files and hashes: 1: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl (hash: UqSl0U4liA1hgI0TmQiSTRBLWGrEPp/lZ59Q++MxP+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:98:98:01:e6:f8:44:df:55:12:4b:bd:53:06:66:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Validity
Not Before: May 4 00:00:20 2025 GMT
Not After : May 5 00:00:20 2025 GMT
Subject: CN=1cab46c971b34eae750ae478eb8bae3aa958e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:01:29:e7:42:2b:ea:82:4e:75:8b:d7:e5:32:
b9:14:b3:e8:2e:0f:33:2f:82:4b:a6:99:6f:7f:bc:
14:ef:9a:71:13:1b:60:78:bb:39:64:4c:84:0d:8d:
f2:d9:53:d8:56:4f:e3:1c:ae:e6:2b:80:e2:87:04:
9a:5a:ec:d7:7e:a4:b8:be:b1:99:c5:6f:86:64:32:
f6:9d:7e:ac:0e:e4:95:06:7a:a4:dc:5b:ba:f3:41:
66:2e:9d:16:4b:ea:72:65:ab:9b:e0:86:3b:2c:c4:
d3:70:ea:a6:95:b9:3d:47:ad:ab:dc:7b:ef:09:1d:
35:0d:2d:9c:d7:f9:1a:95:f7:43:b7:19:1c:72:4c:
bb:72:02:15:15:b7:f4:67:1f:4a:98:eb:64:d7:d5:
79:e0:22:d2:bc:49:bc:f9:20:12:d9:da:73:7f:86:
f7:5b:e1:17:41:73:98:ba:11:f8:2b:46:36:5f:ea:
63:bb:83:4b:80:b9:6b:78:20:23:c8:91:2b:b2:1a:
bd:57:db:37:50:72:b3:68:0e:79:2b:79:1e:28:70:
93:b8:4f:6b:e3:b5:1c:bb:e3:35:50:5c:69:98:46:
ba:f0:11:2f:63:7d:c2:49:41:fe:14:bb:5e:74:34:
59:ba:de:06:99:73:92:b5:04:83:d1:02:74:51:68:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:46:C9:71:B3:4E:AE:75:0A:E4:78:EB:8B:AE:3A:A9:58:E7:9A
X509v3 Authority Key Identifier:
keyid:64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:97:1a:84:90:7b:47:31:b0:5b:92:a0:44:f2:fd:54:c4:e1:
18:85:61:9d:91:31:dc:71:2e:c4:2e:7a:43:da:6b:40:3f:87:
03:42:7e:33:fc:4a:3d:bd:ae:9d:9a:8b:4c:69:9d:41:f9:e8:
fc:45:29:9c:48:2d:d5:43:69:c7:54:cc:0b:fd:75:fa:d2:72:
23:38:48:a4:fb:bc:88:dd:b1:00:c9:33:26:b5:a6:54:cc:b5:
56:cd:d2:07:5d:6a:9a:d1:63:ae:f1:00:6a:4d:66:66:93:d6:
3f:92:26:d6:55:ab:a8:6e:62:43:24:a6:a2:2d:37:03:95:02:
84:29:ee:99:66:1c:4c:ff:8e:a3:99:81:aa:57:2a:89:1a:4b:
ce:ca:e8:17:fd:69:d6:05:0a:77:53:45:b7:ed:81:aa:57:1d:
a6:8a:99:5d:5b:8d:b6:78:07:3d:4a:6c:79:b0:d7:61:f1:56:
6d:78:7b:67:51:2c:48:7a:f6:b6:42:48:ba:30:a9:58:8c:5b:
13:c6:d3:7d:b4:65:dd:a9:f0:b4:de:71:c9:5a:8e:77:a3:fa:
e5:02:0e:a4:64:51:ad:fd:d6:62:58:10:47:7c:f6:1e:75:52:
cf:94:0f:e3:c4:ff:8f:0f:5c:f7:ef:59:86:d3:b1:78:f7:19:
15:81:1f:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaYmAHm+ETfVRJLvVMGZpyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Y2YxZWU5MDY1M2I3YjgxNGQ2YjU0NTk0OWJkOTRkZGUw
ZmM2YTEwHhcNMjUwNTA0MDAwMDIwWhcNMjUwNTA1MDAwMDIwWjAzMTEwLwYDVQQD
EygxY2FiNDZjOTcxYjM0ZWFlNzUwYWU0NzhlYjhiYWUzYWE5NThlNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gEp50Ir6oJOdYvX5TK5FLPoLg8z
L4JLpplvf7wU75pxExtgeLs5ZEyEDY3y2VPYVk/jHK7mK4DihwSaWuzXfqS4vrGZ
xW+GZDL2nX6sDuSVBnqk3Fu680FmLp0WS+pyZaub4IY7LMTTcOqmlbk9R62r3Hvv
CR01DS2c1/kalfdDtxkccky7cgIVFbf0Zx9KmOtk19V54CLSvEm8+SAS2dpzf4b3
W+EXQXOYuhH4K0Y2X+pju4NLgLlreCAjyJErshq9V9s3UHKzaA55K3keKHCTuE9r
47Ucu+M1UFxpmEa68BEvY33CSUH+FLtedDRZut4GmXOStQSD0QJ0UWgIZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByrRslxs06udQrkeOuLrjqpWOeaMB8GA1UdIwQY
MBaAFGTPHukGU7e4FNa1RZSb2U3eD8ahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjkt
ODgwNGRhZDc4MGExLzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yOTljYWEtOGNjZC00OWMxLTkwMjktODgwNGRhZDc4MGEx
LzEvWk04ZTZRWlR0N2dVMXJWRmxKdlpUZDRQeHFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5cahJB7
RzGwW5KgRPL9VMThGIVhnZEx3HEuxC56Q9prQD+HA0J+M/xKPb2unZqLTGmdQfno
/EUpnEgt1UNpx1TMC/11+tJyIzhIpPu8iN2xAMkzJrWmVMy1Vs3SB11qmtFjrvEA
ak1mZpPWP5Im1lWrqG5iQySmoi03A5UChCnumWYcTP+Oo5mBqlcqiRpLzsroF/1p
1gUKd1NFt+2BqlcdpoqZXVuNtngHPUpsebDXYfFWbXh7Z1EsSHr2tkJIujCpWIxb
E8bTfbRl3anwtN5xyVqOd6P65QIOpGRRrf3WYlgQR3z2HnVSz5QP48T/jw9c9+9Z
htOxePcZFYEfDg==
-----END CERTIFICATE-----
Generated at Sun May 4 09:45:43 2025 by rpki-client