Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: LHcnuURCSpDP13vmWwpPtjpAhGKqS9YIDTPOZ++GkIQ=
Subject key identifier: 09:58:C8:49:69:EE:C5:58:6E:F0:B2:7F:EE:F0:98:CA:CA:26:C2:2D
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 0196D39A10C5368C43F2A7A2718EA24EB149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 093B
Signing time: Thu 15 May 2025 11:00:11 +0000
Manifest this update: Thu 15 May 2025 11:00:11 +0000
Manifest next update: Fri 16 May 2025 11:00:11 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: FYPLkeOpPZ7eafqbkSt2ClfpDfKPX3VG/y/z0hBiW5s=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:9a:10:c5:36:8c:43:f2:a7:a2:71:8e:a2:4e:b1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: May 15 11:00:11 2025 GMT
Not After : May 16 11:00:11 2025 GMT
Subject: CN=0958c84969eec5586ef0b27feef098caca26c22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:39:fd:95:fd:36:c7:fd:a3:cb:3c:91:ce:
51:8e:23:1b:bd:b1:82:3a:85:31:3a:a5:d8:0e:5b:
63:ce:19:17:51:2e:69:0d:5e:93:86:b9:bf:4e:0f:
07:27:a7:30:39:86:7e:16:cf:6f:e2:f5:d7:36:17:
3e:66:51:5d:c0:47:2d:ac:f1:82:bf:90:9f:9e:73:
50:96:cf:b7:54:84:ab:42:84:73:cd:9a:a5:14:5b:
3a:26:0b:4b:63:6d:73:7f:2f:c6:a7:d9:0b:3d:74:
60:44:3b:cf:e8:b8:bf:49:4e:6c:bc:d0:c6:e5:87:
ac:8a:78:d6:73:92:f7:9c:dc:5b:df:18:5a:ea:24:
fc:4f:a8:c5:73:34:3a:7e:34:44:9a:6c:2a:56:dc:
f3:89:5d:52:4b:c7:b0:3f:44:1f:fd:d8:79:9f:ce:
37:de:99:00:9a:0d:bb:1c:04:4e:30:65:52:6b:76:
77:36:04:f1:ec:d5:56:49:90:93:25:ab:10:cf:e4:
87:27:37:e2:27:d7:03:bc:b1:ca:39:3e:9c:72:e8:
e8:27:9d:35:b6:9b:8f:9d:22:85:d2:55:35:3b:3e:
7b:d4:5d:2a:70:fd:93:ff:65:ae:34:41:92:ea:9a:
83:d7:74:c4:74:75:ed:f7:3c:a0:7d:62:91:39:8c:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:C8:49:69:EE:C5:58:6E:F0:B2:7F:EE:F0:98:CA:CA:26:C2:2D
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:dd:52:ef:2a:23:42:1b:55:b9:07:82:0c:4b:5b:52:52:
ef:7d:cb:15:06:09:27:47:51:6b:bb:96:96:7e:70:04:2b:4e:
74:a8:93:23:8b:9b:af:8d:1f:ce:94:71:7d:ed:0a:ed:12:a5:
41:64:f5:46:12:ad:05:81:48:c5:95:4f:25:34:4f:83:b3:14:
cb:38:1b:91:76:5c:56:d6:0d:76:e5:8f:8c:f8:ff:66:cb:98:
6d:0f:01:22:b8:d6:d5:56:5f:bd:9b:1d:f1:e3:7f:9d:5f:e4:
04:03:5f:47:9b:23:c2:c4:ad:39:8f:c1:a6:e3:3e:7a:b4:30:
be:ee:7b:d0:10:4d:fe:e3:8f:b7:b1:db:dd:0c:fd:53:2e:fb:
fe:26:65:1a:c3:c7:9d:85:02:12:dd:ba:9b:f5:73:50:63:da:
e4:d5:13:74:7a:cd:c1:34:b9:13:c1:bc:53:f8:7e:1e:b9:34:
cb:96:0d:62:f5:1c:5f:a3:ba:42:7c:34:b3:76:1e:52:23:74:
1a:ab:68:7d:7e:89:df:eb:ec:5c:1f:dc:ca:b7:61:3a:27:12:
1e:ad:a8:e0:7f:d4:bf:58:63:30:b1:6d:3f:54:dd:54:ac:0a:
b4:ce:93:33:b9:a6:15:01:99:9f:a1:ae:21:c0:dd:09:ce:37:
d5:5f:55:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbTmhDFNoxD8qeicY6iTrFJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj
OWQ1MWYwHhcNMjUwNTE1MTEwMDExWhcNMjUwNTE2MTEwMDExWjAzMTEwLwYDVQQD
EygwOTU4Yzg0OTY5ZWVjNTU4NmVmMGIyN2ZlZWYwOThjYWNhMjZjMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Q5/ZX9Nsf9o8s8kc5RjiMbvbGC
OoUxOqXYDltjzhkXUS5pDV6Thrm/Tg8HJ6cwOYZ+Fs9v4vXXNhc+ZlFdwEctrPGC
v5CfnnNQls+3VISrQoRzzZqlFFs6JgtLY21zfy/Gp9kLPXRgRDvP6Li/SU5svNDG
5YesinjWc5L3nNxb3xha6iT8T6jFczQ6fjREmmwqVtzziV1SS8ewP0Qf/dh5n843
3pkAmg27HAROMGVSa3Z3NgTx7NVWSZCTJasQz+SHJzfiJ9cDvLHKOT6ccujoJ501
tpuPnSKF0lU1Oz571F0qcP2T/2WuNEGS6pqD13TEdHXt9zygfWKROYyGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlYyElp7sVYbvCyf+7wmMrKJsItMB8GA1UdIwQY
MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt
NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3
LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8ndUu8q
I0IbVbkHggxLW1JS733LFQYJJ0dRa7uWln5wBCtOdKiTI4ubr40fzpRxfe0K7RKl
QWT1RhKtBYFIxZVPJTRPg7MUyzgbkXZcVtYNduWPjPj/ZsuYbQ8BIrjW1VZfvZsd
8eN/nV/kBANfR5sjwsStOY/BpuM+erQwvu570BBN/uOPt7Hb3Qz9Uy77/iZlGsPH
nYUCEt26m/VzUGPa5NUTdHrNwTS5E8G8U/h+Hrk0y5YNYvUcX6O6Qnw0s3YeUiN0
GqtofX6J3+vsXB/cyrdhOicSHq2o4H/Uv1hjMLFtP1TdVKwKtM6TM7mmFQGZn6Gu
IcDdCc431V9VGQ==
-----END CERTIFICATE-----
Generated at Thu May 15 15:16:46 2025 by rpki-client