Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: XR3+NF+/PbNr5OWXkeG562GWmO8MLJCs/nWVQE9XRQg=
Subject key identifier: 0C:D0:87:79:AF:C2:E6:D2:9E:D4:0C:45:0B:18:19:1B:12:E3:D0:0E
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 0196AB7A26019D7D9F17F304BF69F067146B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 1348
Signing time: Wed 07 May 2025 16:00:30 +0000
Manifest this update: Wed 07 May 2025 16:00:30 +0000
Manifest next update: Thu 08 May 2025 16:00:30 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: 4cXqJDDsnu+ITUDhF/MOXO1a4G4zXBHAUdUTpDva/Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:7a:26:01:9d:7d:9f:17:f3:04:bf:69:f0:67:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: May 7 16:00:30 2025 GMT
Not After : May 8 16:00:30 2025 GMT
Subject: CN=0cd08779afc2e6d29ed40c450b18191b12e3d00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:46:b1:75:c2:6b:79:dc:de:10:50:30:fd:c2:
65:2f:cf:22:dc:04:ca:2f:96:c7:22:36:3e:47:ac:
0c:88:42:63:de:a3:82:bd:77:e1:0b:93:c1:c7:7c:
75:99:2b:da:f2:18:3d:7f:7f:a8:97:91:ba:b1:77:
4d:18:a3:93:12:64:1c:ed:e9:a8:95:8d:cc:29:d9:
75:6f:64:c1:f3:b9:75:8a:25:c4:c1:40:ac:ec:ce:
70:60:3d:47:33:dd:26:65:8d:66:93:43:47:80:a0:
63:a9:b2:31:7f:a5:31:0d:05:91:51:38:65:2c:e7:
23:6b:db:f8:15:3f:27:d0:ba:48:41:2d:3d:c3:9e:
2f:ac:02:b8:e8:74:75:c9:b3:51:72:f8:8d:8a:ae:
c5:b5:97:2e:a0:6e:3a:04:bd:85:f8:4c:5d:2e:1d:
dc:80:1f:f8:bc:ad:14:0e:dc:3f:55:6b:08:97:8b:
c3:54:d3:3a:ec:4b:28:17:27:72:a2:33:b1:56:87:
37:42:b3:dc:8a:24:a6:25:35:79:29:cf:31:46:a0:
55:5c:bf:e3:0b:a4:36:d2:62:eb:f7:ec:90:6e:b6:
f3:82:2f:65:c6:a4:a3:28:13:a2:ce:19:0e:08:b0:
f1:4b:af:91:f6:d2:18:2e:81:b7:17:21:c6:a0:08:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D0:87:79:AF:C2:E6:D2:9E:D4:0C:45:0B:18:19:1B:12:E3:D0:0E
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:22:99:fc:77:83:01:1b:12:b5:1e:f1:97:1a:45:63:8d:df:
3e:f9:17:cf:27:5d:8c:e4:e3:be:28:66:80:19:84:ae:aa:33:
16:cf:1e:fb:50:a9:d9:dc:22:b1:2e:c3:fa:c2:79:7f:5f:b0:
7e:ab:3c:14:a0:58:0d:3e:0d:30:6f:6c:44:9b:d1:99:c1:e5:
f8:46:50:f4:16:d7:ab:7e:37:0c:09:6e:de:e3:ca:1f:ef:ae:
fa:98:18:f0:46:8b:e8:38:68:62:6a:27:8b:e2:0b:3e:f6:37:
c1:40:0d:4f:17:92:bc:d4:1b:50:78:27:7a:e7:76:6e:17:f1:
00:53:4d:4a:f7:07:00:4f:c1:a5:d2:3c:47:f7:5a:e3:b8:57:
2f:dc:90:4c:15:39:c6:de:68:19:7e:06:8f:95:c8:71:e0:8e:
af:36:36:bb:b7:43:d8:9d:14:31:50:29:6e:80:a0:d7:47:32:
72:1b:72:09:cd:83:3e:dd:0b:65:5a:1b:f6:4a:d4:c0:6c:9c:
fd:e9:09:c4:fb:2c:25:98:9b:5d:d7:dc:33:6c:25:23:06:9c:
2d:97:ee:b2:49:89:cf:4a:6e:76:52:db:c9:33:5d:da:bb:b6:
14:17:a9:01:6d:8c:f0:58:4c:8d:42:c1:06:39:ad:19:6b:b6:
6b:a9:1e:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZareiYBnX2fF/MEv2nwZxRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmZiZjA5YWU2ODg2ZWM3ZGQ1ODZiNGEzNGIxZGM5NzM3
ZTg3N2QwHhcNMjUwNTA3MTYwMDMwWhcNMjUwNTA4MTYwMDMwWjAzMTEwLwYDVQQD
EygwY2QwODc3OWFmYzJlNmQyOWVkNDBjNDUwYjE4MTkxYjEyZTNkMDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkaxdcJredzeEFAw/cJlL88i3ATK
L5bHIjY+R6wMiEJj3qOCvXfhC5PBx3x1mSva8hg9f3+ol5G6sXdNGKOTEmQc7emo
lY3MKdl1b2TB87l1iiXEwUCs7M5wYD1HM90mZY1mk0NHgKBjqbIxf6UxDQWRUThl
LOcja9v4FT8n0LpIQS09w54vrAK46HR1ybNRcviNiq7FtZcuoG46BL2F+ExdLh3c
gB/4vK0UDtw/VWsIl4vDVNM67EsoFydyojOxVoc3QrPciiSmJTV5Kc8xRqBVXL/j
C6Q20mLr9+yQbrbzgi9lxqSjKBOizhkOCLDxS6+R9tIYLoG3FyHGoAhaiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzQh3mvwubSntQMRQsYGRsS49AOMB8GA1UdIwQY
MBaAFGYvvwmuaIbsfdWGtKNLHclzfod9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUt
MWM2NjhmZjU3ODczLzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUtMWM2NjhmZjU3ODcz
LzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSKZ/HeD
ARsStR7xlxpFY43fPvkXzyddjOTjvihmgBmErqozFs8e+1Cp2dwisS7D+sJ5f1+w
fqs8FKBYDT4NMG9sRJvRmcHl+EZQ9BbXq343DAlu3uPKH++u+pgY8EaL6DhoYmon
i+ILPvY3wUANTxeSvNQbUHgneud2bhfxAFNNSvcHAE/BpdI8R/da47hXL9yQTBU5
xt5oGX4Gj5XIceCOrzY2u7dD2J0UMVApboCg10cychtyCc2DPt0LZVob9krUwGyc
/ekJxPssJZibXdfcM2wlIwacLZfuskmJz0pudlLbyTNd2ru2FBepAW2M8FhMjULB
BjmtGWu2a6kesw==
-----END CERTIFICATE-----
Generated at Thu May 8 02:30:07 2025 by rpki-client