Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
File: ZKPnXG0KuryTHChHzaqGX7jX-c8.mft (raw, json)
Hash identifier: i8LDS5mx6ycaURVHyBqpCR9bQbblr14cpKW+A+7L4CM=
Subject key identifier: 35:74:32:72:84:A5:87:67:07:64:34:9B:20:75:8B:F9:7D:60:12:E3
Authority key identifier: 64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
Certificate issuer: /CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Certificate serial: 0196B74713DA9EA7CAE97F90F8BFE789CC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
Manifest number: 14C2
Signing time: Fri 09 May 2025 23:00:10 +0000
Manifest this update: Fri 09 May 2025 23:00:10 +0000
Manifest next update: Sat 10 May 2025 23:00:10 +0000
Files and hashes: 1: ZKPnXG0KuryTHChHzaqGX7jX-c8.crl (hash: qT4LazoZNiW0EgaYFiyLvn9LPwM9bQa2RoH0BuKCreQ=)
2: y9vY7PQkblV9_5mGvnjpI_1sy2c.roa (hash: IUOwXFsA4FATdHPgwe2EY1C0pHGXri80WzQO/bHofMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:47:13:da:9e:a7:ca:e9:7f:90:f8:bf:e7:89:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a3e75c6d0ababc931c2847cdaa865fb8d7f9cf
Validity
Not Before: May 9 23:00:10 2025 GMT
Not After : May 10 23:00:10 2025 GMT
Subject: CN=3574327284a587670764349b20758bf97d6012e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:83:4b:db:a0:6c:8b:4f:66:1d:c3:ec:b2:
e0:9e:ce:7e:16:e2:0f:8e:d5:c2:54:4b:73:9e:c6:
b3:c4:3b:45:e5:02:7a:b0:f3:e8:28:46:4c:7b:15:
db:b4:ba:a4:5b:d2:ef:88:96:92:46:66:17:6d:20:
43:6c:74:28:d3:5b:ad:ac:89:91:1d:51:aa:87:40:
2b:c8:4a:c5:92:83:7a:56:15:62:9e:08:a9:c4:41:
7c:ed:ae:61:f8:ae:bc:f3:0d:98:31:2d:45:6d:ac:
38:ef:f0:bf:af:4f:14:d7:0c:f6:be:46:5c:44:0f:
44:ae:53:97:14:cb:71:0c:c8:aa:ec:f6:56:ae:d9:
b2:7e:11:47:e7:f1:9c:64:fc:25:f1:75:c7:fa:31:
13:63:c8:6c:56:0a:55:ce:77:e7:50:0c:00:6e:ce:
f6:99:f0:5f:e4:68:f1:0f:1c:97:d3:38:78:e9:69:
bf:6f:fb:2d:b9:af:a4:67:7d:b8:aa:f7:0c:bd:4e:
bf:a2:67:21:8c:c7:79:7e:0a:92:18:d3:35:18:07:
85:bc:2d:31:1a:a5:63:3e:de:d5:1e:61:32:7f:b5:
8a:3c:d5:3d:46:1e:5c:e8:84:10:04:bf:74:76:fe:
a7:6b:5e:9e:15:49:e7:f1:f0:f9:39:24:db:26:d9:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:74:32:72:84:A5:87:67:07:64:34:9B:20:75:8B:F9:7D:60:12:E3
X509v3 Authority Key Identifier:
keyid:64:A3:E7:5C:6D:0A:BA:BC:93:1C:28:47:CD:AA:86:5F:B8:D7:F9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKPnXG0KuryTHChHzaqGX7jX-c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/40c07a-0323-4424-aeb3-f65826ffcbf8/1/ZKPnXG0KuryTHChHzaqGX7jX-c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f0:96:54:e2:71:b7:8b:6a:4a:11:f2:28:5d:2a:2b:2f:46:
d5:b2:db:26:6e:db:d0:0d:21:41:82:7c:95:bf:7a:da:a0:65:
cd:14:c6:cb:ab:67:07:03:ed:37:02:f8:2d:43:79:29:6b:bc:
a3:8b:e2:bd:4f:72:7f:f9:e4:5c:3c:70:3a:01:4c:f3:e2:8a:
72:5f:4e:cb:e2:ef:60:98:a1:e3:cd:55:8e:49:33:5b:59:65:
27:9a:26:45:e6:63:97:c1:d4:aa:da:0c:0d:aa:ef:74:ef:68:
8d:f0:fd:98:cb:ab:81:83:46:77:9f:e2:07:7e:75:3e:13:90:
58:2c:f8:63:23:81:90:9d:67:a7:ce:b0:27:10:21:97:ef:d5:
97:94:cb:08:b9:09:7c:6d:8b:19:cd:7b:19:44:28:d0:53:bc:
b6:82:a4:ab:5e:9a:41:45:68:20:ab:19:3a:59:0b:0f:6a:7b:
e4:cc:eb:ac:0a:45:b4:2a:e5:43:d1:b8:5b:8b:63:11:85:5d:
8f:35:0d:2a:95:c3:55:8c:ca:de:b7:65:c4:16:cf:7f:15:8f:
eb:e3:4c:32:b0:e5:ff:5e:28:02:db:e3:6c:fa:8a:c8:87:28:
d1:e5:8b:4f:e0:ac:c2:0b:c2:c8:93:fc:0e:56:f2:17:e6:7d:
d2:aa:0a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3RxPanqfK6X+Q+L/nicxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0YTNlNzVjNmQwYWJhYmM5MzFjMjg0N2NkYWE4NjVmYjhk
N2Y5Y2YwHhcNMjUwNTA5MjMwMDEwWhcNMjUwNTEwMjMwMDEwWjAzMTEwLwYDVQQD
EygzNTc0MzI3Mjg0YTU4NzY3MDc2NDM0OWIyMDc1OGJmOTdkNjAxMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHyDS9ugbItPZh3D7LLgns5+FuIP
jtXCVEtznsazxDtF5QJ6sPPoKEZMexXbtLqkW9LviJaSRmYXbSBDbHQo01utrImR
HVGqh0AryErFkoN6VhVingipxEF87a5h+K688w2YMS1Fbaw47/C/r08U1wz2vkZc
RA9ErlOXFMtxDMiq7PZWrtmyfhFH5/GcZPwl8XXH+jETY8hsVgpVznfnUAwAbs72
mfBf5GjxDxyX0zh46Wm/b/stua+kZ324qvcMvU6/omchjMd5fgqSGNM1GAeFvC0x
GqVjPt7VHmEyf7WKPNU9Rh5c6IQQBL90dv6na16eFUnn8fD5OSTbJtkDjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDV0MnKEpYdnB2Q0myB1i/l9YBLjMB8GA1UdIwQY
MBaAFGSj51xtCrq8kxwoR82qhl+41/nPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMt
ZjY1ODI2ZmZjYmY4LzEvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MGMwN2EtMDMyMy00NDI0LWFlYjMtZjY1ODI2ZmZjYmY4
LzEvWktQblhHMEt1cnlUSENoSHphcUdYN2pYLWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPCWVOJx
t4tqShHyKF0qKy9G1bLbJm7b0A0hQYJ8lb962qBlzRTGy6tnBwPtNwL4LUN5KWu8
o4vivU9yf/nkXDxwOgFM8+KKcl9Oy+LvYJih481VjkkzW1llJ5omReZjl8HUqtoM
DarvdO9ojfD9mMurgYNGd5/iB351PhOQWCz4YyOBkJ1np86wJxAhl+/Vl5TLCLkJ
fG2LGc17GUQo0FO8toKkq16aQUVoIKsZOlkLD2p75MzrrApFtCrlQ9G4W4tjEYVd
jzUNKpXDVYzK3rdlxBbPfxWP6+NMMrDl/14oAtvjbPqKyIco0eWLT+CswgvCyJP8
DlbyF+Z90qoKjA==
-----END CERTIFICATE-----
Generated at Sat May 10 04:05:43 2025 by rpki-client