Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
File: zc30j16nbFCnF-EFgEjLr2f7JJI.mft (raw, json)
Hash identifier: Shz5rS5qd+AzXH5VHASUagAqE/DuM9tbKOoVQwsrgIY=
Subject key identifier: D2:70:29:0F:1E:34:02:C4:F1:04:FC:72:9C:DC:E3:86:65:9C:67:39
Authority key identifier: CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
Certificate issuer: /CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Certificate serial: 0196B96C7759651BF5E5C4657FDBEEBEBDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
Manifest number: 0253
Signing time: Sat 10 May 2025 09:00:15 +0000
Manifest this update: Sat 10 May 2025 09:00:15 +0000
Manifest next update: Sun 11 May 2025 09:00:15 +0000
Files and hashes: 1: zc30j16nbFCnF-EFgEjLr2f7JJI.crl (hash: UzuobE5rKWDBqAjjw6SeOpymHj3lQG8T9T4fw7scpbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:77:59:65:1b:f5:e5:c4:65:7f:db:ee:be:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdcdf48f5ea76c50a717e1058048cbaf67fb2492
Validity
Not Before: May 10 09:00:15 2025 GMT
Not After : May 11 09:00:15 2025 GMT
Subject: CN=d270290f1e3402c4f104fc729cdce386659c6739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:cc:23:0c:04:be:68:45:fb:92:1f:c1:5d:
1b:e9:57:9f:c7:73:9f:c4:df:bd:56:fb:6b:33:c6:
64:99:fc:db:18:57:73:1c:6c:0e:65:a1:56:c9:0e:
65:2a:12:b3:ba:ea:51:eb:f2:96:15:68:03:d6:92:
62:c9:1e:42:6f:72:63:c6:ef:9d:2b:f9:48:fa:21:
67:de:e0:96:11:67:31:ed:1a:28:1f:1d:43:b7:2c:
38:a4:81:fd:36:18:e9:e0:41:e6:dd:11:e8:8c:f9:
82:b8:47:97:d2:9b:04:f8:00:b8:b5:d3:30:2b:f1:
07:fe:e7:a4:d4:e3:b8:e2:dd:9f:a5:1d:61:24:7e:
82:23:89:b2:41:f4:49:66:6b:20:ec:4a:75:0f:12:
0e:94:5a:fe:e8:ee:4f:2e:73:3a:fc:2f:ea:0d:9c:
bd:40:86:44:ee:6d:b3:a7:78:31:ec:c7:2b:ce:e6:
a7:32:72:f9:b4:73:08:de:76:e3:0c:08:a4:71:2a:
1e:4e:4b:0f:4c:d3:66:a7:72:39:5b:18:33:4a:ca:
cc:fa:fc:c1:43:83:2e:65:9b:1f:ff:5d:36:05:4a:
75:de:6a:e6:a5:dc:e6:34:2a:94:a3:89:fe:76:31:
13:20:64:65:8b:34:b0:ad:a7:79:f2:12:b8:c2:74:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:29:0F:1E:34:02:C4:F1:04:FC:72:9C:DC:E3:86:65:9C:67:39
X509v3 Authority Key Identifier:
keyid:CD:CD:F4:8F:5E:A7:6C:50:A7:17:E1:05:80:48:CB:AF:67:FB:24:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zc30j16nbFCnF-EFgEjLr2f7JJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4a8a0d-6552-434a-ab1b-25a1ab5d1893/1/zc30j16nbFCnF-EFgEjLr2f7JJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:a0:a6:c2:3d:64:da:ee:c4:60:05:51:4c:e5:0a:fe:75:
09:1e:9f:ef:52:0e:5b:7f:a3:a2:9c:0f:55:d6:b2:f8:74:34:
d6:15:79:af:38:35:9f:78:03:77:45:3c:71:31:c6:02:17:4b:
e0:b7:e8:10:77:d1:d3:82:bb:7c:3c:2b:98:76:c1:e6:2c:99:
55:9b:70:4f:80:6c:b9:5e:17:b4:e2:52:3f:b9:21:21:fc:95:
e2:42:31:a1:06:80:8c:9e:f0:82:e3:01:6a:0f:0d:16:49:b3:
8f:8c:65:b9:e7:55:93:d3:1a:86:4d:af:80:4e:4e:5b:5f:f2:
c4:79:6b:e8:33:38:c4:46:ab:d4:55:d7:7b:cc:d8:80:45:1f:
a0:59:98:51:09:2d:5a:4e:37:a8:fb:4b:17:eb:1d:7f:b2:04:
d0:74:15:24:09:a7:00:27:11:52:96:00:cd:b1:e2:f0:80:aa:
49:aa:d9:bc:ea:ab:69:c2:16:26:b4:2a:ad:8d:7c:90:fc:1a:
cf:9a:9e:14:41:4a:a0:64:48:5e:8a:d1:d8:4a:44:ae:34:a6:
2b:48:b5:d1:80:89:fd:33:3a:9a:f1:ef:38:9d:f8:dd:6d:eb:
3c:a6:6a:ee:15:35:04:1b:75:41:e8:ac:6f:fb:26:14:a9:0c:
a4:8a:4a:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5bHdZZRv15cRlf9vuvr3QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkY2RmNDhmNWVhNzZjNTBhNzE3ZTEwNTgwNDhjYmFmNjdm
YjI0OTIwHhcNMjUwNTEwMDkwMDE1WhcNMjUwNTExMDkwMDE1WjAzMTEwLwYDVQQD
EyhkMjcwMjkwZjFlMzQwMmM0ZjEwNGZjNzI5Y2RjZTM4NjY1OWM2NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6/MIwwEvmhF+5IfwV0b6Vefx3Of
xN+9VvtrM8ZkmfzbGFdzHGwOZaFWyQ5lKhKzuupR6/KWFWgD1pJiyR5Cb3Jjxu+d
K/lI+iFn3uCWEWcx7RooHx1Dtyw4pIH9Nhjp4EHm3RHojPmCuEeX0psE+AC4tdMw
K/EH/uek1OO44t2fpR1hJH6CI4myQfRJZmsg7Ep1DxIOlFr+6O5PLnM6/C/qDZy9
QIZE7m2zp3gx7McrzuanMnL5tHMI3nbjDAikcSoeTksPTNNmp3I5WxgzSsrM+vzB
Q4MuZZsf/102BUp13mrmpdzmNCqUo4n+djETIGRlizSwrad58hK4wnQ6dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJwKQ8eNALE8QT8cpzc44ZlnGc5MB8GA1UdIwQY
MBaAFM3N9I9ep2xQpxfhBYBIy69n+ySSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWIt
MjVhMWFiNWQxODkzLzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80YThhMGQtNjU1Mi00MzRhLWFiMWItMjVhMWFiNWQxODkz
LzEvemMzMGoxNm5iRkNuRi1FRmdFakxyMmY3SkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVT2gpsI9
ZNruxGAFUUzlCv51CR6f71IOW3+jopwPVday+HQ01hV5rzg1n3gDd0U8cTHGAhdL
4LfoEHfR04K7fDwrmHbB5iyZVZtwT4BsuV4XtOJSP7khIfyV4kIxoQaAjJ7wguMB
ag8NFkmzj4xluedVk9Mahk2vgE5OW1/yxHlr6DM4xEar1FXXe8zYgEUfoFmYUQkt
Wk43qPtLF+sdf7IE0HQVJAmnACcRUpYAzbHi8ICqSarZvOqracIWJrQqrY18kPwa
z5qeFEFKoGRIXorR2EpErjSmK0i10YCJ/TM6mvHvOJ343W3rPKZq7hU1BBt1Qeis
b/smFKkMpIpKGw==
-----END CERTIFICATE-----
Generated at Sat May 10 14:51:28 2025 by rpki-client