Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
File: zvcELPfCTHnXmEiy6MqzNXpkD9s.mft (raw, json)
Hash identifier: JNo8hKfJYZqlHkmLiaewZKtQxttFw2PfhcjWHmyViJs=
Subject key identifier: 5C:C7:5F:47:D7:CD:9E:19:47:B3:62:70:C9:0A:BB:C8:E4:3F:10:E4
Authority key identifier: CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
Certificate issuer: /CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Certificate serial: 0196741E1CAF1FAF1EA52EDC4E2A238E9E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
Manifest number: 072C
Signing time: Sat 26 Apr 2025 22:00:52 +0000
Manifest this update: Sat 26 Apr 2025 22:00:52 +0000
Manifest next update: Sun 27 Apr 2025 22:00:52 +0000
Files and hashes: 1: zvcELPfCTHnXmEiy6MqzNXpkD9s.crl (hash: ZgN9VxCEDAUFr/MZrGYL7hE6uboJqcyaUjJCmknpoyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:1c:af:1f:af:1e:a5:2e:dc:4e:2a:23:8e:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef7042cf7c24c79d79848b2e8cab3357a640fdb
Validity
Not Before: Apr 26 22:00:52 2025 GMT
Not After : Apr 27 22:00:52 2025 GMT
Subject: CN=5cc75f47d7cd9e1947b36270c90abbc8e43f10e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:7c:15:ac:b8:b9:a0:bd:98:02:ef:14:6a:
9c:f5:a3:f6:da:a6:39:da:f3:6c:87:b4:6c:bc:8c:
6d:c8:21:02:b5:f6:c2:20:91:30:be:93:72:95:33:
b9:5f:71:22:41:eb:5a:f8:dc:dd:06:76:6b:35:82:
0a:ee:4f:99:bb:ad:04:9f:e0:cd:44:c8:dd:1c:af:
01:51:86:14:b2:99:64:08:01:cd:a3:a4:1c:d3:07:
36:ab:44:bd:ef:1a:cf:b6:f5:46:c5:3d:7b:f6:52:
75:44:cd:7e:7b:ab:a7:1c:58:d3:c8:94:d4:8c:b4:
7e:34:c5:dd:fe:90:63:fb:1d:76:08:84:62:21:9d:
63:f7:9d:95:14:ed:0e:d8:d8:27:b4:6e:34:a6:79:
de:e9:a3:6a:7e:34:24:e4:15:24:63:ce:bd:83:48:
ca:27:2c:5e:87:fb:61:2f:bb:93:c1:f1:c2:23:30:
3c:0b:03:e9:17:29:e6:0b:95:b6:2d:fa:1e:26:dd:
36:66:c7:c2:54:20:83:42:58:5b:b0:6a:29:3b:10:
46:f0:d8:f2:72:3f:9d:25:db:e6:20:99:63:2a:73:
88:34:bb:bf:35:39:f7:7f:fe:5f:ca:cd:ff:c0:09:
15:fe:34:e5:4d:c1:59:be:f5:1b:f8:9f:59:7c:40:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:5F:47:D7:CD:9E:19:47:B3:62:70:C9:0A:BB:C8:E4:3F:10:E4
X509v3 Authority Key Identifier:
keyid:CE:F7:04:2C:F7:C2:4C:79:D7:98:48:B2:E8:CA:B3:35:7A:64:0F:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvcELPfCTHnXmEiy6MqzNXpkD9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b0d3ba-eedb-476e-ade4-66a6adb1dc91/1/zvcELPfCTHnXmEiy6MqzNXpkD9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:63:bd:8f:e6:5e:94:5d:e4:ec:47:17:87:cd:4c:c2:76:18:
c5:00:04:70:66:38:b4:30:2a:d1:8e:da:d8:40:0b:b1:dc:60:
4c:31:84:ed:43:09:a0:63:4c:03:e4:01:a2:52:86:69:27:3a:
dd:1c:7e:83:17:e4:bb:b3:8c:86:00:19:a5:a7:36:77:8f:74:
26:5b:4e:f2:ee:1e:f0:fb:b2:2d:c0:62:c5:72:24:f7:5a:e9:
2d:56:3d:9a:e1:72:0f:36:6c:45:d4:2a:bf:46:91:79:d4:85:
93:83:bc:d2:61:8f:71:52:48:f2:db:a5:d8:cd:5b:73:49:12:
e9:0b:3a:e2:9c:2e:96:d1:2c:1d:57:06:89:08:b2:39:a7:bb:
ea:18:9a:4a:7a:3d:47:4f:07:16:99:0c:24:8f:21:be:b6:eb:
3f:01:0f:14:e7:3b:ab:7c:e9:85:9c:7f:c7:3a:ad:62:8c:49:
61:41:d1:44:a9:03:29:12:b3:8d:3f:63:b4:84:05:dc:93:8c:
9b:19:f1:86:5a:ba:9a:9a:a2:c1:1d:ad:80:12:19:9c:60:54:
82:8e:73:61:8c:21:0b:fc:c2:ca:c6:53:05:a6:4b:b7:da:4d:
8c:32:bb:29:d6:0c:40:27:21:67:25:f9:c9:08:9d:b4:60:cd:
e5:a2:8e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HhyvH68epS7cTiojjp5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjcwNDJjZjdjMjRjNzlkNzk4NDhiMmU4Y2FiMzM1N2E2
NDBmZGIwHhcNMjUwNDI2MjIwMDUyWhcNMjUwNDI3MjIwMDUyWjAzMTEwLwYDVQQD
Eyg1Y2M3NWY0N2Q3Y2Q5ZTE5NDdiMzYyNzBjOTBhYmJjOGU0M2YxMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsal8Fay4uaC9mALvFGqc9aP22qY5
2vNsh7RsvIxtyCECtfbCIJEwvpNylTO5X3EiQeta+NzdBnZrNYIK7k+Zu60En+DN
RMjdHK8BUYYUsplkCAHNo6Qc0wc2q0S97xrPtvVGxT179lJ1RM1+e6unHFjTyJTU
jLR+NMXd/pBj+x12CIRiIZ1j952VFO0O2NgntG40pnne6aNqfjQk5BUkY869g0jK
Jyxeh/thL7uTwfHCIzA8CwPpFynmC5W2LfoeJt02ZsfCVCCDQlhbsGopOxBG8Njy
cj+dJdvmIJljKnOINLu/NTn3f/5fys3/wAkV/jTlTcFZvvUb+J9ZfEDygwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzHX0fXzZ4ZR7NicMkKu8jkPxDkMB8GA1UdIwQY
MBaAFM73BCz3wkx515hIsujKszV6ZA/bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9iMGQzYmEtZWVkYi00NzZlLWFkZTQt
NjZhNmFkYjFkYzkxLzEvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9iMGQzYmEtZWVkYi00NzZlLWFkZTQtNjZhNmFkYjFkYzkx
LzEvenZjRUxQZkNUSG5YbUVpeTZNcXpOWHBrRDlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmO9j+Ze
lF3k7EcXh81MwnYYxQAEcGY4tDAq0Y7a2EALsdxgTDGE7UMJoGNMA+QBolKGaSc6
3Rx+gxfku7OMhgAZpac2d490JltO8u4e8PuyLcBixXIk91rpLVY9muFyDzZsRdQq
v0aRedSFk4O80mGPcVJI8tul2M1bc0kS6Qs64pwultEsHVcGiQiyOae76hiaSno9
R08HFpkMJI8hvrbrPwEPFOc7q3zphZx/xzqtYoxJYUHRRKkDKRKzjT9jtIQF3JOM
mxnxhlq6mpqiwR2tgBIZnGBUgo5zYYwhC/zCysZTBaZLt9pNjDK7KdYMQCchZyX5
yQidtGDN5aKOQg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:13:46 2025 by rpki-client