Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
File: ZHU9ILmKDudww7UWaj9KB_BRW90.mft (raw, json)
Hash identifier: u4+PAdn2G4WKHSkiK40hrYC/aDjhOb4PazdW+75ZO5g=
Subject key identifier: 20:59:3E:D0:89:7E:39:49:E7:55:C7:87:AB:BB:DF:7A:9B:EE:2F:F4
Authority key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Certificate issuer: /CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Certificate serial: 01969E6398F8D2C519E0F3FAB1180ED31A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 03:00:49 +0000
Manifest this update: Mon 05 May 2025 03:00:49 +0000
Manifest next update: Tue 06 May 2025 03:00:49 +0000
Files and hashes: 1: ZHU9ILmKDudww7UWaj9KB_BRW90.crl (hash: peeBGLgkXrJApwydkQ1PxNMUsBeviaaKUjWroHD+m7g=)
2: hOtE2f6RqrVKTnKq4mitSq4GEW8.roa (hash: o3xEB2xwahNf/hrxJ/DM1O/UGFrILVNi8EQRepInZF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:98:f8:d2:c5:19:e0:f3:fa:b1:18:0e:d3:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Validity
Not Before: May 5 03:00:49 2025 GMT
Not After : May 6 03:00:49 2025 GMT
Subject: CN=20593ed0897e3949e755c787abbbdf7a9bee2ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a7:a5:e2:2d:90:57:a6:27:43:01:78:4f:f9:
75:9a:34:92:97:99:29:45:88:0b:d3:dc:4f:5c:7a:
0a:c0:91:a3:96:81:47:0f:7e:af:26:7d:e7:ce:6f:
a3:8b:36:dd:96:bc:7b:e6:07:8d:0b:f7:63:c5:07:
8f:f9:ba:b0:bd:73:8b:3f:ee:3a:13:6b:2d:da:bb:
ba:38:af:d4:8a:cb:25:a6:7c:6c:8b:54:55:96:84:
95:ca:db:b4:c3:bc:a2:1b:69:da:4c:a5:dd:9e:60:
59:0b:e0:57:7f:9d:32:a9:42:46:19:96:8b:91:12:
f8:d3:60:0b:6b:a5:39:35:0b:5e:46:60:42:f4:73:
1a:86:15:58:c0:61:13:f4:cb:ad:13:81:ec:62:ee:
dd:32:43:8b:f6:99:c9:37:f0:21:db:ef:4d:21:e5:
a7:3e:10:80:31:f4:47:ed:b0:b0:9d:7e:d8:e1:8e:
e2:1e:c0:87:3c:de:51:43:90:7e:bc:6a:31:7f:9f:
9f:37:e6:0d:28:90:0a:6f:0b:ad:48:7c:42:f4:54:
c0:a7:87:d3:b2:09:79:e2:36:47:a8:49:39:c6:f7:
0d:94:29:20:52:91:d8:64:1b:ef:98:b7:29:41:c0:
a5:c3:58:5a:4f:ab:1b:29:34:60:31:d3:c0:63:65:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:59:3E:D0:89:7E:39:49:E7:55:C7:87:AB:BB:DF:7A:9B:EE:2F:F4
X509v3 Authority Key Identifier:
keyid:64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:37:a1:de:1c:f6:f8:ee:b8:b4:0e:43:ad:12:25:2f:d6:d8:
95:a7:83:94:b8:41:27:c4:b2:dd:74:ae:f5:fc:df:e3:4e:3a:
24:60:93:90:29:35:60:f2:87:32:ad:cc:b0:7a:fd:a1:35:1d:
78:e9:ab:04:63:b7:c1:10:a0:47:ea:4f:3e:54:6b:9e:0e:ac:
35:ff:31:a5:72:88:95:f1:8c:e4:4e:b9:15:91:61:07:36:98:
d5:8f:4c:63:96:0b:21:57:68:2c:4d:fd:bd:bb:4e:7a:34:03:
f8:f0:e4:66:c6:6b:c4:9a:06:22:aa:e2:cd:6e:d7:6b:a1:14:
0b:ef:ee:4e:98:cd:19:5c:17:ae:65:ef:78:1e:3e:d6:d1:7d:
71:09:25:0f:26:16:e6:33:f8:03:b4:a1:5f:19:90:c7:35:8b:
b3:f4:e5:3b:41:f7:2f:d9:8b:13:1d:8a:3d:d7:b5:61:80:a6:
2d:f9:cc:40:a6:8b:a4:ba:0a:2e:39:90:07:64:93:f5:ce:2e:
88:03:72:59:7e:69:99:72:a8:d6:ec:a1:cb:96:3c:24:07:a7:
8a:d1:1c:33:f2:e5:1e:57:c8:af:10:91:f2:bd:f4:24:4e:b5:
8e:eb:ab:36:d1:52:61:55:3b:2e:4d:39:32:f8:84:56:72:b8:
72:db:2f:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY5j40sUZ4PP6sRgO0xpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzUzZDIwYjk4YTBlZTc3MGMzYjUxNjZhM2Y0YTA3ZjA1
MTViZGQwHhcNMjUwNTA1MDMwMDQ5WhcNMjUwNTA2MDMwMDQ5WjAzMTEwLwYDVQQD
EygyMDU5M2VkMDg5N2UzOTQ5ZTc1NWM3ODdhYmJiZGY3YTliZWUyZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qel4i2QV6YnQwF4T/l1mjSSl5kp
RYgL09xPXHoKwJGjloFHD36vJn3nzm+jizbdlrx75geNC/djxQeP+bqwvXOLP+46
E2st2ru6OK/Uisslpnxsi1RVloSVytu0w7yiG2naTKXdnmBZC+BXf50yqUJGGZaL
kRL402ALa6U5NQteRmBC9HMahhVYwGET9MutE4HsYu7dMkOL9pnJN/Ah2+9NIeWn
PhCAMfRH7bCwnX7Y4Y7iHsCHPN5RQ5B+vGoxf5+fN+YNKJAKbwutSHxC9FTAp4fT
sgl54jZHqEk5xvcNlCkgUpHYZBvvmLcpQcClw1haT6sbKTRgMdPAY2XX8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBZPtCJfjlJ51XHh6u733qb7i/0MB8GA1UdIwQY
MBaAFGR1PSC5ig7ncMO1Fmo/SgfwUVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1Yjgt
YWE5OTU5MDJiODRiLzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lYmVkN2QtNTA5MC00MTdhLWI1YjgtYWE5OTU5MDJiODRi
LzEvWkhVOUlMbUtEdWR3dzdVV2FqOUtCX0JSVzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDeh3hz2
+O64tA5DrRIlL9bYlaeDlLhBJ8Sy3XSu9fzf4046JGCTkCk1YPKHMq3MsHr9oTUd
eOmrBGO3wRCgR+pPPlRrng6sNf8xpXKIlfGM5E65FZFhBzaY1Y9MY5YLIVdoLE39
vbtOejQD+PDkZsZrxJoGIqrizW7Xa6EUC+/uTpjNGVwXrmXveB4+1tF9cQklDyYW
5jP4A7ShXxmQxzWLs/TlO0H3L9mLEx2KPde1YYCmLfnMQKaLpLoKLjmQB2ST9c4u
iANyWX5pmXKo1uyhy5Y8JAenitEcM/LlHlfIrxCR8r30JE61juurNtFSYVU7Lk05
MviEVnK4ctsvxQ==
-----END CERTIFICATE-----
Generated at Mon May 5 07:12:19 2025 by rpki-client