Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json)
Hash identifier: 2742AqpmERbIMZBWPnxFQcaXMaDAOTPg7BslB/eq2jg=
Subject key identifier: 6B:33:70:A0:79:36:F2:39:32:A5:A8:E5:71:85:81:A6:63:F5:A8:89
Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Certificate serial: 0196BE92F1752E6AE5897E8DF8D649047492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
Manifest number: 0942
Signing time: Sun 11 May 2025 09:00:23 +0000
Manifest this update: Sun 11 May 2025 09:00:23 +0000
Manifest next update: Mon 12 May 2025 09:00:23 +0000
Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: c2QQ4D17lCbzE84S/SA+tFyBk86VCmNOLz1GOYQ0tgc=)
2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:f1:75:2e:6a:e5:89:7e:8d:f8:d6:49:04:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39
Validity
Not Before: May 11 09:00:23 2025 GMT
Not After : May 12 09:00:23 2025 GMT
Subject: CN=6b3370a07936f23932a5a8e5718581a663f5a889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:70:77:f5:24:21:f3:eb:ae:7a:57:c9:02:
60:07:d3:2d:f9:5e:38:06:45:d9:a9:81:30:dd:f6:
72:e9:0c:d6:fa:95:74:b7:c1:45:f3:40:7d:ad:e8:
51:50:d1:65:a6:47:0a:11:9d:29:f4:7a:fb:f1:e0:
48:7b:e9:21:60:c1:e2:c7:75:7f:65:72:4b:c6:81:
42:05:ff:6e:4a:c6:c4:44:8a:1d:ce:01:ab:38:62:
06:70:8c:c2:35:bb:57:54:44:e0:42:51:e8:89:6e:
f2:92:a1:25:48:ac:b6:d5:ef:50:ae:76:2d:fa:d9:
cc:c9:61:ba:74:a2:8d:01:d3:25:c0:76:ce:d7:d3:
83:3d:0f:31:a9:cb:09:7f:78:84:a8:08:9c:3a:70:
94:e0:6e:8f:dc:4d:83:06:46:34:e8:95:7a:7c:dc:
60:e2:af:7c:9a:0f:95:3f:43:90:7c:c0:d0:22:6d:
c5:e4:ff:b7:ab:25:14:28:a3:7f:42:3b:81:96:9a:
5a:0a:f8:fc:fa:98:f7:1b:bb:d9:be:a4:53:42:18:
3e:48:ab:57:45:2f:f1:cd:59:81:4a:22:94:cc:91:
82:0b:71:9d:81:ed:c3:ab:09:d9:57:da:ee:4a:08:
6f:78:7c:0d:2d:c7:45:dc:1d:45:66:29:5e:e6:44:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:33:70:A0:79:36:F2:39:32:A5:A8:E5:71:85:81:A6:63:F5:A8:89
X509v3 Authority Key Identifier:
keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d2:e1:58:7b:51:f2:b2:88:4d:2a:2a:4e:60:c3:6d:00:57:
de:46:e1:fd:85:48:6e:bd:c4:56:b2:32:d2:58:99:7d:c2:1b:
1b:82:3d:16:d1:ae:57:d4:59:9c:af:c4:0e:06:ec:e2:f2:4c:
ff:50:ce:f0:29:32:4f:c2:f2:66:18:8a:d8:f9:a4:0c:9d:e3:
cd:fd:3d:a9:29:4e:3c:15:bb:74:89:a9:78:b9:c1:e7:ae:7a:
42:cc:2c:dc:b7:11:8e:1e:ea:9c:4a:91:2f:1d:c0:77:0b:09:
89:5e:fe:e5:43:6a:75:e8:01:50:45:a0:24:fe:fe:69:35:b4:
c4:8c:ce:7c:de:0f:41:b0:c0:6d:50:50:6c:21:98:1f:9c:f8:
b5:b9:18:bc:89:ec:4e:48:0c:78:e5:92:35:f5:82:90:a5:b4:
f2:08:ee:43:7c:79:15:52:52:05:18:72:6b:5f:f2:df:43:2b:
2b:2a:25:6e:3d:47:ee:e9:f9:85:18:50:41:e0:54:aa:49:e1:
77:00:81:4e:f2:46:91:0a:6a:28:30:37:b7:80:69:ff:c6:8f:
2e:2a:c4:8a:7a:75:20:14:55:1f:f7:f3:34:59:fc:67:ed:33:
dd:65:c9:1e:41:32:f4:55:a4:ac:80:20:04:87:3a:ac:cc:00:
cd:83:e5:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kvF1LmrliX6N+NZJBHSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1
NWZmMzkwHhcNMjUwNTExMDkwMDIzWhcNMjUwNTEyMDkwMDIzWjAzMTEwLwYDVQQD
Eyg2YjMzNzBhMDc5MzZmMjM5MzJhNWE4ZTU3MTg1ODFhNjYzZjVhODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1wd/UkIfPrrnpXyQJgB9Mt+V44
BkXZqYEw3fZy6QzW+pV0t8FF80B9rehRUNFlpkcKEZ0p9Hr78eBIe+khYMHix3V/
ZXJLxoFCBf9uSsbERIodzgGrOGIGcIzCNbtXVETgQlHoiW7ykqElSKy21e9QrnYt
+tnMyWG6dKKNAdMlwHbO19ODPQ8xqcsJf3iEqAicOnCU4G6P3E2DBkY06JV6fNxg
4q98mg+VP0OQfMDQIm3F5P+3qyUUKKN/QjuBlppaCvj8+pj3G7vZvqRTQhg+SKtX
RS/xzVmBSiKUzJGCC3Gdge3DqwnZV9ruSghveHwNLcdF3B1FZile5kSijQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGszcKB5NvI5MqWo5XGFgaZj9aiJMB8GA1UdIwQY
MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt
ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx
LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNLhWHtR
8rKITSoqTmDDbQBX3kbh/YVIbr3EVrIy0liZfcIbG4I9FtGuV9RZnK/EDgbs4vJM
/1DO8CkyT8LyZhiK2PmkDJ3jzf09qSlOPBW7dImpeLnB5656Qsws3LcRjh7qnEqR
Lx3AdwsJiV7+5UNqdegBUEWgJP7+aTW0xIzOfN4PQbDAbVBQbCGYH5z4tbkYvIns
TkgMeOWSNfWCkKW08gjuQ3x5FVJSBRhya1/y30MrKyolbj1H7un5hRhQQeBUqknh
dwCBTvJGkQpqKDA3t4Bp/8aPLirEinp1IBRVH/fzNFn8Z+0z3WXJHkEy9FWkrIAg
BIc6rMwAzYPlAA==
-----END CERTIFICATE-----
Generated at Sun May 11 19:00:39 2025 by rpki-client