Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
File: zqPt3xh6xsGoT4iU1jq7YFlieew.mft (raw, json)
Hash identifier: l4SlilopEiNUWDWIbFxmRs8m6F0pEXygEaV7FCvQAe4=
Subject key identifier: 47:52:01:47:64:20:A1:D6:6F:BB:C2:CF:AC:8B:28:34:CA:96:8D:31
Authority key identifier: CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
Certificate issuer: /CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Certificate serial: 0196C916F79E95D7D6E122FB40756E8A4CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
Manifest number: 0D37
Signing time: Tue 13 May 2025 10:00:47 +0000
Manifest this update: Tue 13 May 2025 10:00:47 +0000
Manifest next update: Wed 14 May 2025 10:00:47 +0000
Files and hashes: 1: zqPt3xh6xsGoT4iU1jq7YFlieew.crl (hash: Nh5wjQ/ULYeJCjR5NLb8BpcvWa4QtkVx+aqpP/neJ8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:f7:9e:95:d7:d6:e1:22:fb:40:75:6e:8a:4c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea3eddf187ac6c1a84f8894d63abb60596279ec
Validity
Not Before: May 13 10:00:47 2025 GMT
Not After : May 14 10:00:47 2025 GMT
Subject: CN=475201476420a1d66fbbc2cfac8b2834ca968d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:0e:2a:ff:4b:d7:b8:a7:4b:92:e4:6a:90:
97:fe:a2:b7:4d:67:2d:d1:0d:a3:a6:82:a1:eb:4f:
a1:61:3b:0f:6e:21:1a:ef:31:e8:b7:68:f7:bc:b6:
3d:3c:2d:1d:8c:67:a2:2c:0b:78:8d:fd:45:8f:0d:
ae:32:b2:e2:4b:85:91:93:ac:46:dc:7e:3b:bb:f8:
18:88:41:c8:b2:08:ee:eb:50:9f:db:11:da:38:17:
b7:0b:5b:0d:a2:9c:2a:6a:87:2f:8a:20:4f:5a:e3:
4d:10:27:54:7f:a0:d6:fa:43:07:17:80:ee:ff:6a:
97:f9:78:1c:4a:7c:62:03:7a:35:d4:80:2c:51:09:
8d:d8:32:b4:0c:09:ec:b7:24:17:0f:af:57:c3:37:
49:cd:df:a6:c0:a7:45:a8:61:19:98:dc:62:26:ba:
2a:44:9f:b8:da:34:60:39:25:94:5f:4e:cb:b1:9c:
d1:68:d7:18:b6:99:1d:fe:a3:82:f0:ab:18:d7:c7:
47:e6:73:34:ff:4f:dc:b3:45:8b:08:27:74:f4:53:
b9:f7:49:2c:9f:ea:22:9b:77:42:4c:74:d8:8b:00:
92:49:9b:27:e7:2b:ba:56:5e:29:f2:8b:ba:6e:c5:
d8:93:d0:16:ec:e5:13:f7:52:a6:0b:75:64:10:fe:
a2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:52:01:47:64:20:A1:D6:6F:BB:C2:CF:AC:8B:28:34:CA:96:8D:31
X509v3 Authority Key Identifier:
keyid:CE:A3:ED:DF:18:7A:C6:C1:A8:4F:88:94:D6:3A:BB:60:59:62:79:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqPt3xh6xsGoT4iU1jq7YFlieew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/330fa5-ea90-4676-995a-133599154be1/1/zqPt3xh6xsGoT4iU1jq7YFlieew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8e:af:a6:c5:a2:1e:a1:f1:3a:23:5b:a8:b9:1a:79:5a:13:
ee:57:b6:31:0d:a8:76:0d:ac:ec:57:14:7d:11:db:30:ae:03:
e0:2d:ef:17:b5:e1:fd:45:df:f8:34:bf:a5:51:d1:5f:13:0a:
a0:34:cc:78:4b:67:02:07:02:2e:e7:25:87:7b:39:bb:b4:ed:
ff:fc:f1:09:0a:ef:53:08:e2:7f:89:5c:23:ea:8b:0f:3e:0f:
f4:5b:fd:d7:85:1b:33:43:2c:e2:ff:ce:bc:96:56:30:cd:30:
43:7f:0d:fe:3e:a6:cc:8a:27:9b:fa:19:09:29:b3:69:5b:a4:
a2:5f:10:c8:fd:a0:ad:c5:b2:9e:f5:62:ac:47:56:99:76:dc:
68:89:10:86:62:a7:cf:c6:45:64:69:db:2d:34:fd:e3:3c:81:
8e:ac:c4:6c:84:49:c8:3f:ed:25:7e:12:d3:57:02:fb:ce:77:
18:a6:64:22:69:11:0b:a5:41:e1:34:c7:89:25:72:41:8b:42:
7d:4d:6d:55:08:b6:33:1c:2f:a7:e1:a9:eb:1e:b3:50:e0:bb:
51:24:6f:b2:3d:c2:ba:da:da:c8:52:6c:f1:37:fc:c7:59:49:
62:e7:a0:ad:bc:ab:db:58:0b:df:55:65:59:eb:f3:93:75:99:
2c:55:62:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJFveeldfW4SL7QHVuikzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYTNlZGRmMTg3YWM2YzFhODRmODg5NGQ2M2FiYjYwNTk2
Mjc5ZWMwHhcNMjUwNTEzMTAwMDQ3WhcNMjUwNTE0MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg0NzUyMDE0NzY0MjBhMWQ2NmZiYmMyY2ZhYzhiMjgzNGNhOTY4ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWgOKv9L17inS5LkapCX/qK3TWct
0Q2jpoKh60+hYTsPbiEa7zHot2j3vLY9PC0djGeiLAt4jf1Fjw2uMrLiS4WRk6xG
3H47u/gYiEHIsgju61Cf2xHaOBe3C1sNopwqaocviiBPWuNNECdUf6DW+kMHF4Du
/2qX+XgcSnxiA3o11IAsUQmN2DK0DAnstyQXD69XwzdJzd+mwKdFqGEZmNxiJroq
RJ+42jRgOSWUX07LsZzRaNcYtpkd/qOC8KsY18dH5nM0/0/cs0WLCCd09FO590ks
n+oim3dCTHTYiwCSSZsn5yu6Vl4p8ou6bsXYk9AW7OUT91KmC3VkEP6iOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdSAUdkIKHWb7vCz6yLKDTKlo0xMB8GA1UdIwQY
MBaAFM6j7d8YesbBqE+IlNY6u2BZYnnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEt
MTMzNTk5MTU0YmUxLzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8zMzBmYTUtZWE5MC00Njc2LTk5NWEtMTMzNTk5MTU0YmUx
LzEvenFQdDN4aDZ4c0dvVDRpVTFqcTdZRmxpZWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJo6vpsWi
HqHxOiNbqLkaeVoT7le2MQ2odg2s7FcUfRHbMK4D4C3vF7Xh/UXf+DS/pVHRXxMK
oDTMeEtnAgcCLuclh3s5u7Tt//zxCQrvUwjif4lcI+qLDz4P9Fv914UbM0Ms4v/O
vJZWMM0wQ38N/j6mzIonm/oZCSmzaVukol8QyP2grcWynvVirEdWmXbcaIkQhmKn
z8ZFZGnbLTT94zyBjqzEbIRJyD/tJX4S01cC+853GKZkImkRC6VB4TTHiSVyQYtC
fU1tVQi2Mxwvp+Gp6x6zUOC7USRvsj3CutrayFJs8Tf8x1lJYuegrbyr21gL31Vl
Wevzk3WZLFVirg==
-----END CERTIFICATE-----
Generated at Tue May 13 16:05:42 2025 by rpki-client