Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: E6l1HRQWO8wdstHJ9YRPmZIr9wkdgKvUqF2voT5IXK8=
Subject key identifier: DF:FB:E6:BD:36:26:53:B3:02:0B:0A:16:B9:04:8E:86:6D:93:C0:AA
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 0196C34C7ABAC7D518AC93740E4E5A1F67F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 07:01:31 +0000
Manifest this update: Mon 12 May 2025 07:01:31 +0000
Manifest next update: Tue 13 May 2025 07:01:31 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: DwcR2i9fydJ7G0hEirm/UDpkOR1u8TsLxXyGO84kz6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:7a:ba:c7:d5:18:ac:93:74:0e:4e:5a:1f:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: May 12 07:01:31 2025 GMT
Not After : May 13 07:01:31 2025 GMT
Subject: CN=dffbe6bd362653b3020b0a16b9048e866d93c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:1a:63:11:b5:25:ff:a0:c8:f2:28:88:ab:
68:c2:cc:8d:d7:f8:ae:e5:1a:84:2f:77:3c:5c:0c:
cc:b4:f3:cf:40:35:84:75:a0:d9:53:1e:43:91:b6:
67:e3:02:1c:51:e4:e1:53:15:76:54:5a:f7:41:dd:
fe:54:a7:8e:8d:e1:c4:15:51:5d:a4:f4:9e:2f:57:
58:f3:f0:e4:0f:26:20:fc:da:91:86:2d:47:b0:6a:
8f:9d:fd:ed:bb:2d:6f:af:e7:49:ce:40:9d:b2:69:
e9:75:0c:d1:60:50:e1:ff:d7:28:12:4e:f8:8c:c9:
59:ce:04:dd:c5:84:89:60:3c:f6:59:3e:27:e7:a2:
38:07:c1:2b:b9:68:cf:1a:02:4d:61:73:89:ec:12:
a0:a7:d0:f7:53:a7:18:b7:26:b3:94:f9:e5:a6:5b:
d9:60:88:c8:14:3e:cd:9f:2e:b5:ce:b5:4c:7d:5e:
74:19:dd:b1:9d:b4:7e:54:92:f2:97:fa:f1:f1:a3:
a0:c0:09:68:2b:2f:b4:73:48:05:31:f2:5e:60:c8:
6d:4a:dc:4c:e5:28:3e:9a:d2:18:08:58:88:5f:17:
94:d6:a2:49:37:e2:59:4a:e6:ae:1e:ba:7e:1d:9f:
60:13:3a:1f:0a:f9:b7:2b:6d:ad:9e:eb:0a:32:94:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FB:E6:BD:36:26:53:B3:02:0B:0A:16:B9:04:8E:86:6D:93:C0:AA
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:c3:7d:4d:6e:03:3b:7f:67:3d:9b:81:d8:00:43:7d:d0:
9e:ef:30:27:79:a1:1c:10:28:18:5a:75:16:35:d0:a7:90:10:
49:f7:42:d4:aa:32:a6:be:72:f8:ca:0d:b8:f0:12:47:50:ae:
37:92:9f:6b:3d:3e:2d:df:c2:c2:60:b8:19:f7:21:ac:f2:87:
c8:b8:d1:7c:1b:9c:ec:8e:ec:1a:dc:13:62:a8:c6:bb:63:12:
5e:57:43:aa:73:b8:be:d7:b2:1a:c0:62:a9:28:55:1c:11:1c:
a7:54:6c:83:4d:05:30:cc:bf:d5:7a:66:80:3a:37:80:c5:c4:
ba:43:fc:bc:de:cd:03:36:1c:1f:c4:83:0d:7f:85:6c:a2:cc:
62:97:e7:5d:0e:a3:bb:d6:27:f9:de:30:ab:38:b6:48:b6:0f:
71:af:ca:cf:f1:84:e1:92:80:f9:3a:73:48:23:8f:31:ba:05:
f6:71:2d:68:db:5b:c5:64:89:3d:48:59:eb:eb:16:9c:87:a0:
24:2f:bb:76:6f:a4:9e:6d:b4:c3:73:92:3c:20:f6:53:86:91:
f5:41:9e:51:13:a4:dc:a1:b7:84:d1:45:8e:49:44:98:11:25:
18:eb:c7:4c:8d:ca:f1:de:85:9e:10:4f:c4:d8:39:88:ab:8d:
89:ea:39:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTHq6x9UYrJN0Dk5aH2fyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzQxZTA3OWViOWRjZjVmYWQ5ZTVkNDhkZGNlMzk2OTc3
Yjc5NzcwHhcNMjUwNTEyMDcwMTMxWhcNMjUwNTEzMDcwMTMxWjAzMTEwLwYDVQQD
EyhkZmZiZTZiZDM2MjY1M2IzMDIwYjBhMTZiOTA0OGU4NjZkOTNjMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOgaYxG1Jf+gyPIoiKtowsyN1/iu
5RqEL3c8XAzMtPPPQDWEdaDZUx5DkbZn4wIcUeThUxV2VFr3Qd3+VKeOjeHEFVFd
pPSeL1dY8/DkDyYg/NqRhi1HsGqPnf3tuy1vr+dJzkCdsmnpdQzRYFDh/9coEk74
jMlZzgTdxYSJYDz2WT4n56I4B8EruWjPGgJNYXOJ7BKgp9D3U6cYtyazlPnlplvZ
YIjIFD7Nny61zrVMfV50Gd2xnbR+VJLyl/rx8aOgwAloKy+0c0gFMfJeYMhtStxM
5Sg+mtIYCFiIXxeU1qJJN+JZSuauHrp+HZ9gEzofCvm3K22tnusKMpQj1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/75r02JlOzAgsKFrkEjoZtk8CqMB8GA1UdIwQY
MBaAFGfEHgeeudz1+tnl1I3c45aXe3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgt
ZDY0MzE0ZGEwYmI5LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgtZDY0MzE0ZGEwYmI5
LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWjDfU1u
Azt/Zz2bgdgAQ33Qnu8wJ3mhHBAoGFp1FjXQp5AQSfdC1Koypr5y+MoNuPASR1Cu
N5Kfaz0+Ld/CwmC4GfchrPKHyLjRfBuc7I7sGtwTYqjGu2MSXldDqnO4vteyGsBi
qShVHBEcp1Rsg00FMMy/1XpmgDo3gMXEukP8vN7NAzYcH8SDDX+FbKLMYpfnXQ6j
u9Yn+d4wqzi2SLYPca/Kz/GE4ZKA+TpzSCOPMboF9nEtaNtbxWSJPUhZ6+sWnIeg
JC+7dm+knm20w3OSPCD2U4aR9UGeUROk3KG3hNFFjklEmBElGOvHTI3K8d6FnhBP
xNg5iKuNieo5Bw==
-----END CERTIFICATE-----
Generated at Mon May 12 17:03:13 2025 by rpki-client