Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json)
Hash identifier: XydqYjvzp+R6ijLjDNooivak3/cAG81LionkF8is5hA=
Subject key identifier: 50:77:97:DD:04:D3:DE:F5:30:45:4E:90:81:DF:9F:66:04:2B:87:29
Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Certificate serial: 01967AC48429DC9A3F924003908AD86FC43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
Manifest number: 0C54
Signing time: Mon 28 Apr 2025 05:00:21 +0000
Manifest this update: Mon 28 Apr 2025 05:00:21 +0000
Manifest next update: Tue 29 Apr 2025 05:00:21 +0000
Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: KcHo3lW1JWF5tdj08dyNGvWpGB6hxloSKxz0hUioOPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:84:29:dc:9a:3f:92:40:03:90:8a:d8:6f:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a
Validity
Not Before: Apr 28 05:00:21 2025 GMT
Not After : Apr 29 05:00:21 2025 GMT
Subject: CN=507797dd04d3def530454e9081df9f66042b8729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b6:1f:60:39:79:2e:1b:a2:cf:85:cb:03:7c:
b5:27:d2:4f:c7:d3:bb:0d:14:33:0f:9d:01:17:fb:
7f:06:04:ad:75:cf:05:65:65:85:57:90:05:cf:ec:
81:ea:78:75:6e:9a:b2:e4:8a:67:6c:09:23:7a:98:
76:99:af:d7:e0:2f:bb:ac:52:60:a1:c8:50:87:44:
07:91:b3:ce:19:70:8e:f3:9c:4f:2f:16:c2:2d:d1:
09:92:2d:53:00:9c:d5:b1:45:78:1e:8f:bb:56:0a:
e3:71:77:2b:c7:50:2a:62:d7:01:11:4f:ea:6b:06:
a5:39:b7:15:98:11:57:00:9f:3c:ae:00:c1:a2:b8:
90:36:3a:2d:3a:8a:91:07:87:17:69:33:82:ae:9d:
34:bd:01:79:fc:4f:8a:d5:44:24:8b:44:b6:a1:f6:
d4:97:50:86:b1:78:15:c8:34:ac:83:48:03:dc:60:
b1:32:ad:42:ba:5c:52:57:32:f0:c0:8e:d9:2e:d5:
e6:67:4d:41:62:24:ef:42:43:d0:b5:40:d8:ef:77:
14:5d:b2:2d:cd:22:44:0d:17:34:1f:c5:5c:b5:b6:
9e:40:0c:c6:f7:d0:35:09:34:08:b3:ef:5e:36:6d:
3f:f0:e8:4c:d8:49:9f:ef:df:4d:e1:2a:ec:32:1c:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:77:97:DD:04:D3:DE:F5:30:45:4E:90:81:DF:9F:66:04:2B:87:29
X509v3 Authority Key Identifier:
keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:88:c2:97:57:d8:22:70:67:d7:da:e2:a9:d7:95:29:ce:1f:
4b:6e:a7:01:41:8a:bf:a9:b6:98:4d:e6:f7:c0:0c:d4:1f:38:
36:74:63:5f:5f:a2:a1:5a:6e:8c:a5:71:73:73:37:4c:3c:46:
33:7f:aa:75:0b:56:e8:39:23:e7:02:54:70:fe:85:40:c3:1d:
db:e3:72:84:35:46:52:36:84:ed:45:1e:a6:87:84:fc:4c:64:
68:c1:38:09:a5:c4:7d:b3:1d:fc:50:ff:7e:1b:be:83:6c:73:
81:d9:14:50:13:00:df:f9:3b:a0:5d:ee:6d:a6:cf:97:b3:a5:
cb:5f:4b:7a:77:65:9a:93:f0:0b:6f:3c:ee:e5:44:a5:05:98:
97:39:29:81:6c:c4:1a:8e:81:ec:d1:cc:f0:f4:32:9b:d6:cc:
3b:40:ad:a0:fc:55:dd:ed:20:f3:45:2f:d9:67:a0:6e:e0:48:
32:c0:0b:9f:b7:e7:bb:0a:e8:40:61:a1:71:fd:91:38:48:4b:
d8:d0:f5:54:0f:59:0b:32:1a:67:82:a2:c7:a1:71:d3:26:c0:
a4:ba:04:fa:13:2a:f6:6a:f4:fc:88:1c:b2:aa:03:13:c8:b7:
1f:25:82:83:18:a6:e7:83:00:87:32:ab:2b:d5:07:be:9e:d3:
eb:5a:c0:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xIQp3Jo/kkADkIrYb8Q+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1
YWNkNGEwHhcNMjUwNDI4MDUwMDIxWhcNMjUwNDI5MDUwMDIxWjAzMTEwLwYDVQQD
Eyg1MDc3OTdkZDA0ZDNkZWY1MzA0NTRlOTA4MWRmOWY2NjA0MmI4NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LYfYDl5Lhuiz4XLA3y1J9JPx9O7
DRQzD50BF/t/BgStdc8FZWWFV5AFz+yB6nh1bpqy5IpnbAkjeph2ma/X4C+7rFJg
ochQh0QHkbPOGXCO85xPLxbCLdEJki1TAJzVsUV4Ho+7VgrjcXcrx1AqYtcBEU/q
awalObcVmBFXAJ88rgDBoriQNjotOoqRB4cXaTOCrp00vQF5/E+K1UQki0S2ofbU
l1CGsXgVyDSsg0gD3GCxMq1CulxSVzLwwI7ZLtXmZ01BYiTvQkPQtUDY73cUXbIt
zSJEDRc0H8VctbaeQAzG99A1CTQIs+9eNm0/8OhM2Emf799N4SrsMhzvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFB3l90E0971MEVOkIHfn2YEK4cpMB8GA1UdIwQY
MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt
MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0
LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4jCl1fY
InBn19riqdeVKc4fS26nAUGKv6m2mE3m98AM1B84NnRjX1+ioVpujKVxc3M3TDxG
M3+qdQtW6Dkj5wJUcP6FQMMd2+NyhDVGUjaE7UUepoeE/ExkaME4CaXEfbMd/FD/
fhu+g2xzgdkUUBMA3/k7oF3ubabPl7Oly19LendlmpPwC2887uVEpQWYlzkpgWzE
Go6B7NHM8PQym9bMO0CtoPxV3e0g80Uv2WegbuBIMsALn7fnuwroQGGhcf2ROEhL
2ND1VA9ZCzIaZ4Kix6Fx0ybApLoE+hMq9mr0/IgcsqoDE8i3HyWCgxim54MAhzKr
K9UHvp7T61rAOQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:08:09 2025 by rpki-client