Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json)
Hash identifier: 5IvRy7kI4AnxCs4SWqbGJ/LyI+SPnCtiVAfwJZNIilc=
Subject key identifier: 88:E6:12:D3:18:B1:B4:24:35:70:B5:D9:37:05:79:76:04:75:ED:F1
Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Certificate serial: 01967BA0381596E139B46193868A47E24AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
Manifest number: 1061
Signing time: Mon 28 Apr 2025 09:00:19 +0000
Manifest this update: Mon 28 Apr 2025 09:00:19 +0000
Manifest next update: Tue 29 Apr 2025 09:00:19 +0000
Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: kmaNe8QPRmM/RDmMUkXz27rx9Pk1qXVnaWnh6jDwuxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:38:15:96:e1:39:b4:61:93:86:8a:47:e2:4a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032
Validity
Not Before: Apr 28 09:00:19 2025 GMT
Not After : Apr 29 09:00:19 2025 GMT
Subject: CN=88e612d318b1b4243570b5d9370579760475edf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:47:7f:5f:ca:41:d2:8f:70:5e:7f:79:08:
bc:8b:6b:7e:fe:c7:25:ff:2c:3c:34:f9:f5:65:01:
ad:13:76:32:73:c5:e8:4f:6b:69:ca:b5:18:b1:49:
48:e4:e1:d4:ed:a7:6c:14:df:79:27:4c:17:8d:41:
81:52:f2:aa:2a:7b:f5:03:8c:20:bb:f2:ce:b2:d5:
05:8f:1b:2d:1d:57:75:92:ca:ec:90:4b:2e:5c:bd:
61:79:d1:91:34:94:37:16:5e:29:a4:e9:1d:6b:ec:
36:a1:76:bf:bb:d9:4d:51:47:d7:ae:a2:38:67:6f:
46:b1:88:39:df:a1:87:ab:c9:3e:c5:ad:3d:92:0c:
7f:7d:4d:40:97:75:fc:93:f7:db:1f:7d:29:56:41:
34:4b:19:fb:ca:d1:91:fd:12:41:f7:57:ef:70:db:
54:3e:21:b2:ab:28:e0:8f:6f:cf:e5:f2:79:57:fd:
b7:02:e2:b9:35:30:9b:03:68:1f:18:2b:b4:e4:6a:
fe:db:d2:01:f4:07:b3:57:58:b8:a1:01:a5:da:d6:
d1:6f:0b:89:82:e7:cb:4e:45:a0:05:d3:4e:8c:19:
ca:8a:ea:5a:f1:de:27:70:c5:30:be:fc:c1:45:3b:
fa:02:4d:fa:c9:8f:2c:c1:b0:81:43:59:06:69:6e:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E6:12:D3:18:B1:B4:24:35:70:B5:D9:37:05:79:76:04:75:ED:F1
X509v3 Authority Key Identifier:
keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e0:de:86:52:c0:0f:3c:dc:0b:76:9e:b8:c2:8e:e6:ed:7b:
23:b9:d9:5a:62:1e:5d:69:54:d1:ee:97:98:5f:be:da:99:45:
3f:11:36:ff:01:a5:42:37:b4:aa:03:ec:a4:08:4b:9e:98:65:
ac:5b:c1:fb:f2:c4:d6:3f:0e:a8:dc:df:bf:23:bc:4f:42:1b:
73:52:07:26:0e:38:3b:8a:78:19:d0:28:ce:37:8a:46:1d:d1:
e2:6b:da:c4:fe:f3:90:f6:bc:08:7b:62:36:4c:32:fc:92:31:
a9:af:f9:d9:a9:32:c0:4c:2b:1c:79:0b:15:db:fb:5d:00:f3:
56:88:e8:49:fa:01:f4:2f:4f:7c:80:65:64:b6:3d:a5:7e:7b:
5a:3e:a5:76:38:9e:9b:79:4e:bf:0e:50:96:b1:84:bc:69:16:
eb:6a:6d:79:a3:92:c8:74:8f:34:21:47:d6:e9:f3:7d:a3:f8:
c9:e0:e6:98:df:31:0e:35:89:75:50:6a:a2:78:d7:c5:60:2c:
4d:46:b3:53:95:42:c2:bc:13:87:d4:3b:32:df:ba:78:76:f8:
df:a0:c2:17:b6:a4:90:e4:ee:43:e1:4f:73:73:78:d1:b1:7d:
e2:76:77:e8:dd:2c:5f:8e:d8:99:a4:ce:8f:77:66:43:f8:43:
16:3f:86:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oDgVluE5tGGThopH4krQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl
ZTIwMzIwHhcNMjUwNDI4MDkwMDE5WhcNMjUwNDI5MDkwMDE5WjAzMTEwLwYDVQQD
Eyg4OGU2MTJkMzE4YjFiNDI0MzU3MGI1ZDkzNzA1Nzk3NjA0NzVlZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNxHf1/KQdKPcF5/eQi8i2t+/scl
/yw8NPn1ZQGtE3Yyc8XoT2tpyrUYsUlI5OHU7adsFN95J0wXjUGBUvKqKnv1A4wg
u/LOstUFjxstHVd1ksrskEsuXL1hedGRNJQ3Fl4ppOkda+w2oXa/u9lNUUfXrqI4
Z29GsYg536GHq8k+xa09kgx/fU1Al3X8k/fbH30pVkE0Sxn7ytGR/RJB91fvcNtU
PiGyqyjgj2/P5fJ5V/23AuK5NTCbA2gfGCu05Gr+29IB9AezV1i4oQGl2tbRbwuJ
gufLTkWgBdNOjBnKiupa8d4ncMUwvvzBRTv6Ak36yY8swbCBQ1kGaW4iLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjmEtMYsbQkNXC12TcFeXYEde3xMB8GA1UdIwQY
MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt
ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx
LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJODehlLA
DzzcC3aeuMKO5u17I7nZWmIeXWlU0e6XmF++2plFPxE2/wGlQje0qgPspAhLnphl
rFvB+/LE1j8OqNzfvyO8T0Ibc1IHJg44O4p4GdAozjeKRh3R4mvaxP7zkPa8CHti
Nkwy/JIxqa/52akywEwrHHkLFdv7XQDzVojoSfoB9C9PfIBlZLY9pX57Wj6ldjie
m3lOvw5QlrGEvGkW62pteaOSyHSPNCFH1unzfaP4yeDmmN8xDjWJdVBqonjXxWAs
TUazU5VCwrwTh9Q7Mt+6eHb436DCF7akkOTuQ+FPc3N40bF94nZ36N0sX47YmaTO
j3dmQ/hDFj+Ggw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:05:09 2025 by rpki-client