Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
File: KzLSXH3hnpDudAmAT43LMcIK_zc.mft (raw, json)
Hash identifier: PTOPY5dIIEy8Dsp/MUg9tI5o43k0j3nDvp4ezr85XBQ=
Subject key identifier: F4:72:37:4C:C2:AA:2E:8B:D4:43:BF:EE:59:3D:F8:78:A1:22:63:2F
Authority key identifier: 2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
Certificate issuer: /CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Certificate serial: 0196C0B87E69F22C41BBD1B7AE3A40B43809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
Manifest number: 08F0
Signing time: Sun 11 May 2025 19:00:38 +0000
Manifest this update: Sun 11 May 2025 19:00:38 +0000
Manifest next update: Mon 12 May 2025 19:00:38 +0000
Files and hashes: 1: KzLSXH3hnpDudAmAT43LMcIK_zc.crl (hash: 132I0a2cNzzeCRC9hP9/w62rQzm8yJF8W6ODTLO6PUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:7e:69:f2:2c:41:bb:d1:b7:ae:3a:40:b4:38:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b32d25c7de19e90ee7409804f8dcb31c20aff37
Validity
Not Before: May 11 19:00:38 2025 GMT
Not After : May 12 19:00:38 2025 GMT
Subject: CN=f472374cc2aa2e8bd443bfee593df878a122632f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:e5:a8:92:b0:3f:85:15:bb:8d:4f:5c:2a:
07:de:12:29:50:47:dc:79:c8:a3:d9:26:e2:7a:ef:
d5:ac:f9:e0:c8:38:2d:45:2f:4c:1a:70:83:09:9f:
62:4c:d3:da:9f:f8:f1:f3:b3:83:e5:bc:0d:81:15:
05:94:b6:62:6f:47:6d:da:d2:dc:c9:a2:1a:c2:27:
5c:e4:ee:18:33:f5:56:70:80:76:31:5f:02:89:62:
f4:03:e3:1c:34:b2:91:35:9b:2e:f3:d8:7a:2e:48:
8a:34:5c:5e:6d:33:67:31:a4:15:e1:9f:9f:4f:39:
9e:19:24:12:d4:0b:79:70:38:0c:fb:ad:89:d4:ab:
dc:99:91:9f:0d:0b:a4:4b:9e:50:f1:52:1b:6c:21:
0c:4f:ec:e9:bb:bf:db:1f:e4:df:c1:f6:53:e0:58:
88:d8:f7:96:9d:8c:c4:bd:b8:de:3b:08:4c:e0:31:
90:3a:91:d7:7a:d8:e4:6f:a5:58:c2:05:9f:49:4e:
51:94:7c:72:8b:60:fd:9e:9b:ad:5f:89:d6:4f:ea:
27:31:00:21:f3:38:56:2a:4f:cc:7d:32:66:83:3b:
b1:00:82:8b:35:81:12:6f:3f:ca:2c:e0:d8:0d:56:
bd:b4:4f:12:89:08:af:48:1f:d7:7b:4f:cb:3f:53:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:72:37:4C:C2:AA:2E:8B:D4:43:BF:EE:59:3D:F8:78:A1:22:63:2F
X509v3 Authority Key Identifier:
keyid:2B:32:D2:5C:7D:E1:9E:90:EE:74:09:80:4F:8D:CB:31:C2:0A:FF:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzLSXH3hnpDudAmAT43LMcIK_zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/333410-b988-40b7-b336-4e53fec9b6bd/1/KzLSXH3hnpDudAmAT43LMcIK_zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e7:56:85:e1:98:2c:d4:da:f3:5a:63:2f:89:89:93:d5:bf:
ed:a3:21:e0:97:e8:1b:b3:a8:9c:e5:c7:28:b6:75:db:e9:e8:
a5:32:37:b6:46:07:cb:61:37:75:89:85:d8:ca:09:3f:32:41:
3b:8d:75:a6:6c:39:d4:85:0d:17:a1:f2:dc:5f:02:14:0d:d4:
7d:0d:15:b4:d8:7e:c9:15:f5:59:3d:1c:4c:78:96:38:70:88:
30:72:2f:26:66:8a:d2:e3:6d:78:6c:b4:04:eb:2e:e7:02:e9:
2e:c5:59:a4:64:39:be:68:e4:bf:3f:3e:0a:11:66:f3:1f:93:
69:8c:ae:a8:63:6d:47:92:b2:fa:28:56:ed:05:9a:08:75:4e:
5d:82:ee:c6:a7:a3:21:5f:d1:23:e7:c9:1a:6f:a8:95:6f:c1:
e1:47:1e:e9:9a:70:2c:0d:9c:4a:1d:12:fe:93:ac:61:af:fd:
6c:be:a5:f3:df:bc:a4:61:dc:bd:e0:70:dd:44:4b:48:79:14:
8b:e5:f7:b2:fc:bd:9a:79:30:3f:86:e6:75:d5:a9:66:b4:9a:
c5:45:bd:0f:34:60:60:b7:42:9b:82:71:ba:f4:9f:cf:9d:87:
08:8c:e8:5a:d8:ae:0c:b4:25:b3:c1:11:3e:63:ba:e0:02:7d:
8d:33:76:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAuH5p8ixBu9G3rjpAtDgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzJkMjVjN2RlMTllOTBlZTc0MDk4MDRmOGRjYjMxYzIw
YWZmMzcwHhcNMjUwNTExMTkwMDM4WhcNMjUwNTEyMTkwMDM4WjAzMTEwLwYDVQQD
EyhmNDcyMzc0Y2MyYWEyZThiZDQ0M2JmZWU1OTNkZjg3OGExMjI2MzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1PlqJKwP4UVu41PXCoH3hIpUEfc
ecij2Sbieu/VrPngyDgtRS9MGnCDCZ9iTNPan/jx87OD5bwNgRUFlLZib0dt2tLc
yaIawidc5O4YM/VWcIB2MV8CiWL0A+McNLKRNZsu89h6LkiKNFxebTNnMaQV4Z+f
TzmeGSQS1At5cDgM+62J1KvcmZGfDQukS55Q8VIbbCEMT+zpu7/bH+TfwfZT4FiI
2PeWnYzEvbjeOwhM4DGQOpHXetjkb6VYwgWfSU5RlHxyi2D9nputX4nWT+onMQAh
8zhWKk/MfTJmgzuxAIKLNYESbz/KLODYDVa9tE8SiQivSB/Xe0/LP1NTuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRyN0zCqi6L1EO/7lk9+HihImMvMB8GA1UdIwQY
MBaAFCsy0lx94Z6Q7nQJgE+NyzHCCv83MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zMzM0MTAtYjk4OC00MGI3LWIzMzYt
NGU1M2ZlYzliNmJkLzEvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zMzM0MTAtYjk4OC00MGI3LWIzMzYtNGU1M2ZlYzliNmJk
LzEvS3pMU1hIM2hucER1ZEFtQVQ0M0xNY0lLX3pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+dWheGY
LNTa81pjL4mJk9W/7aMh4JfoG7OonOXHKLZ12+nopTI3tkYHy2E3dYmF2MoJPzJB
O411pmw51IUNF6Hy3F8CFA3UfQ0VtNh+yRX1WT0cTHiWOHCIMHIvJmaK0uNteGy0
BOsu5wLpLsVZpGQ5vmjkvz8+ChFm8x+TaYyuqGNtR5Ky+ihW7QWaCHVOXYLuxqej
IV/RI+fJGm+olW/B4Uce6ZpwLA2cSh0S/pOsYa/9bL6l89+8pGHcveBw3URLSHkU
i+X3svy9mnkwP4bmddWpZrSaxUW9DzRgYLdCm4JxuvSfz52HCIzoWtiuDLQls8ER
PmO64AJ9jTN2rg==
-----END CERTIFICATE-----
Generated at Mon May 12 01:22:36 2025 by rpki-client