
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
File: Znrl7XyovV-O_zCw5Hq035OCj_E.mft (raw, json)
Hash identifier: gtJJ3hljBk6dzkalpdRrgCNKIdrP8JWzIizZWIQXMxA=
Subject key identifier: 3C:50:0E:C9:A0:9D:FF:AB:9F:2E:91:94:B3:2F:04:9D:E0:9A:C5:2D
Authority key identifier: 66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
Certificate issuer: /CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Certificate serial: 0196C83AB9B2441C6A2F0FF6B4A3916322EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
Manifest number: 153C
Signing time: Tue 13 May 2025 06:00:13 +0000
Manifest this update: Tue 13 May 2025 06:00:13 +0000
Manifest next update: Wed 14 May 2025 06:00:13 +0000
Files and hashes: 1: Znrl7XyovV-O_zCw5Hq035OCj_E.crl (hash: 1hnPRNEIppOggEtIctZT6QlmN47mz0fhSiZEJbv/iqc=)
2: rD7zRvb7ZOSrFNptFJIKjnHIijY.roa (hash: 6Kl9dTmuCjd2YPwZJzigIWIBDUWb7+H1Wc7Equtq1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:3a:b9:b2:44:1c:6a:2f:0f:f6:b4:a3:91:63:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=667ae5ed7ca8bd5f8eff30b0e47ab4df93828ff1
Validity
Not Before: May 13 06:00:13 2025 GMT
Not After : May 14 06:00:13 2025 GMT
Subject: CN=3c500ec9a09dffab9f2e9194b32f049de09ac52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:77:a6:ea:9c:d7:fc:bc:93:c2:e0:3e:2d:
c1:4b:8f:28:dd:50:f0:7f:9e:da:4f:fb:9f:30:6f:
b9:e2:b4:3a:1f:19:e3:5c:60:29:f3:c9:72:9f:4f:
83:0a:11:4b:99:0e:f7:e0:58:81:82:fa:67:39:61:
17:fa:c7:63:2e:f3:cb:31:28:fa:21:6d:db:4d:fc:
f4:cd:1a:97:1c:bd:7d:5a:89:5c:df:f5:e9:87:c9:
25:77:49:86:4e:a9:8f:62:6a:15:54:f2:18:04:df:
2c:88:13:36:58:65:aa:ff:0c:75:15:67:14:de:97:
76:6f:a0:36:f0:8f:e2:4d:64:6a:36:f6:2c:b8:7b:
4d:8a:95:af:02:fd:f9:66:b3:c9:df:e5:4d:d3:39:
0d:d6:76:87:78:5f:d2:61:80:f4:ad:66:7e:40:9a:
ac:91:d1:5c:c7:13:62:1e:06:35:d2:83:3e:d9:05:
8a:e8:46:ff:c7:81:2d:e8:6c:f4:75:a0:7e:42:87:
de:37:7c:b1:c8:72:ac:b5:18:82:9c:fe:27:a7:08:
0a:7c:1e:bc:40:47:3a:eb:84:75:53:c4:10:99:d6:
80:21:42:e5:a2:8f:95:63:a8:76:f6:0b:63:1d:68:
70:a8:13:9c:1b:23:8b:40:ea:66:94:79:8e:a9:62:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:0E:C9:A0:9D:FF:AB:9F:2E:91:94:B3:2F:04:9D:E0:9A:C5:2D
X509v3 Authority Key Identifier:
keyid:66:7A:E5:ED:7C:A8:BD:5F:8E:FF:30:B0:E4:7A:B4:DF:93:82:8F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znrl7XyovV-O_zCw5Hq035OCj_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4ae0bd-d7e4-44d5-877e-4a9ce2131b42/1/Znrl7XyovV-O_zCw5Hq035OCj_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:98:60:47:bf:3c:8e:c9:2e:f0:2b:b4:3d:ba:54:36:c7:
35:85:fe:fc:63:4a:83:f2:5b:a1:80:41:6a:95:5c:60:2e:34:
24:23:03:44:33:a0:04:31:a7:89:84:10:36:b6:62:d7:13:d8:
97:06:91:a7:67:67:c9:3f:b1:fe:6c:f4:83:f9:6b:bf:fe:4b:
b4:2e:3a:3c:05:ef:eb:12:be:00:0c:4a:69:68:cf:24:e0:b2:
f1:34:71:60:af:5c:f0:f3:34:b7:64:65:3c:b7:cd:f4:95:de:
9c:e9:78:eb:a7:09:cc:4e:3b:77:60:eb:3e:f4:e0:a6:55:16:
51:17:17:ae:bf:f9:e1:f3:fa:b4:9b:1d:ef:73:96:1a:60:57:
89:0a:30:92:38:73:86:02:78:e1:84:64:4e:ab:a2:96:c4:ea:
18:7b:e4:d2:b6:22:8f:b0:bb:7a:b7:83:18:48:59:b9:e6:31:
19:a5:1e:bd:eb:c2:bf:d0:fe:a2:9d:af:bd:62:1d:2c:86:84:
c9:0f:5a:bc:97:9c:a4:40:d1:a2:a4:a6:4b:58:55:fb:57:82:
ff:ee:06:6e:a8:fe:56:28:ea:c8:73:9a:f2:03:1b:b2:6f:9d:
10:68:fd:ad:01:45:a8:bd:69:bd:04:83:c5:94:77:f6:29:42:
61:e2:be:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbIOrmyRBxqLw/2tKORYyLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2N2FlNWVkN2NhOGJkNWY4ZWZmMzBiMGU0N2FiNGRmOTM4
MjhmZjEwHhcNMjUwNTEzMDYwMDEzWhcNMjUwNTE0MDYwMDEzWjAzMTEwLwYDVQQD
EygzYzUwMGVjOWEwOWRmZmFiOWYyZTkxOTRiMzJmMDQ5ZGUwOWFjNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHh3puqc1/y8k8LgPi3BS48o3VDw
f57aT/ufMG+54rQ6HxnjXGAp88lyn0+DChFLmQ734FiBgvpnOWEX+sdjLvPLMSj6
IW3bTfz0zRqXHL19Wolc3/Xph8kld0mGTqmPYmoVVPIYBN8siBM2WGWq/wx1FWcU
3pd2b6A28I/iTWRqNvYsuHtNipWvAv35ZrPJ3+VN0zkN1naHeF/SYYD0rWZ+QJqs
kdFcxxNiHgY10oM+2QWK6Eb/x4Et6Gz0daB+QofeN3yxyHKstRiCnP4npwgKfB68
QEc664R1U8QQmdaAIULloo+VY6h29gtjHWhwqBOcGyOLQOpmlHmOqWLbcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxQDsmgnf+rny6RlLMvBJ3gmsUtMB8GA1UdIwQY
MBaAFGZ65e18qL1fjv8wsOR6tN+Tgo/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2Ut
NGE5Y2UyMTMxYjQyLzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YWUwYmQtZDdlNC00NGQ1LTg3N2UtNGE5Y2UyMTMxYjQy
LzEvWm5ybDdYeW92Vi1PX3pDdzVIcTAzNU9Dal9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwSYYEe/
PI7JLvArtD26VDbHNYX+/GNKg/JboYBBapVcYC40JCMDRDOgBDGniYQQNrZi1xPY
lwaRp2dnyT+x/mz0g/lrv/5LtC46PAXv6xK+AAxKaWjPJOCy8TRxYK9c8PM0t2Rl
PLfN9JXenOl466cJzE47d2DrPvTgplUWURcXrr/54fP6tJsd73OWGmBXiQowkjhz
hgJ44YRkTquilsTqGHvk0rYij7C7ereDGEhZueYxGaUevevCv9D+op2vvWIdLIaE
yQ9avJecpEDRoqSmS1hV+1eC/+4Gbqj+VijqyHOa8gMbsm+dEGj9rQFFqL1pvQSD
xZR39ilCYeK+fg==
-----END CERTIFICATE-----
Generated at Tue May 13 13:30:26 2025 by rpki-client