Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json)
Hash identifier: Dy14ceunJZBbgcPDN0c1PDhpnQdhNZFixb//u0ZqCBk=
Subject key identifier: 61:20:DF:B9:59:5C:22:AD:28:8E:35:47:54:73:85:AE:3C:5B:91:3A
Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Certificate serial: 0196CFF4CE8978A617EE4D4769BA2CBBFC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
Manifest number: 049F
Signing time: Wed 14 May 2025 18:00:49 +0000
Manifest this update: Wed 14 May 2025 18:00:49 +0000
Manifest next update: Thu 15 May 2025 18:00:49 +0000
Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: pM8+OQo2akGil5LxwTb+ahkjMrOr9jMQb77AMHRB0PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:ce:89:78:a6:17:ee:4d:47:69:ba:2c:bb:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998
Validity
Not Before: May 14 18:00:49 2025 GMT
Not After : May 15 18:00:49 2025 GMT
Subject: CN=6120dfb9595c22ad288e3547547385ae3c5b913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:37:cc:ac:c6:e0:50:4a:b4:3c:ca:b3:1f:
2d:47:65:8c:2d:fa:08:76:6e:03:5a:c4:af:16:8d:
46:6d:bc:04:56:7f:5b:14:46:d0:e9:05:d1:d3:cd:
bb:ec:9e:e2:32:a5:94:32:88:77:a5:64:dc:d1:d9:
ce:85:d1:69:78:f4:52:19:88:5d:d5:11:7a:7d:98:
1b:be:9a:71:cf:47:f9:c2:9d:b1:e8:7e:c0:2b:14:
d0:59:fa:5c:ee:03:75:29:ba:f6:d0:91:17:38:9d:
72:1d:2b:25:dd:69:b5:fb:cf:7f:f3:de:fc:f6:6d:
78:81:2c:db:b3:29:31:7e:1b:0b:20:66:b2:3e:75:
c9:26:5c:37:bb:cf:c6:f6:9d:64:eb:f3:6a:6c:d1:
67:b5:ef:54:5f:30:f5:32:a5:d9:7d:dd:36:a2:86:
6a:fa:45:43:2b:02:54:3e:28:d9:e6:b1:08:c7:46:
f0:20:8b:98:4f:a0:e9:4b:5d:e2:64:72:be:e1:ae:
b5:0a:0d:34:05:b2:b7:5a:42:f6:67:be:45:27:c0:
dd:ce:27:82:1b:10:71:e3:a8:d1:7a:65:e9:5d:e0:
8b:d9:1c:4c:83:da:7c:37:fd:e1:9f:a3:e9:b7:07:
cc:a8:e7:43:99:a5:66:95:b5:33:32:cf:f7:58:54:
05:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:DF:B9:59:5C:22:AD:28:8E:35:47:54:73:85:AE:3C:5B:91:3A
X509v3 Authority Key Identifier:
keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:13:0d:7d:5c:e6:32:d8:d7:da:79:2a:2c:5f:03:fe:e5:
3f:33:7c:57:26:60:08:9b:4a:8a:d5:36:07:92:51:24:f8:26:
e6:16:78:84:f8:f8:ab:19:3a:77:ab:bb:05:2f:3f:d8:cb:b9:
92:4f:2b:38:43:1d:50:4d:cd:23:06:5f:9f:55:82:4a:aa:91:
eb:80:a5:fd:4e:10:28:a0:d7:d9:c8:50:4f:95:d7:00:0b:c2:
5e:c5:1a:b9:07:f4:35:13:46:62:83:ee:a6:3d:1c:27:85:63:
8f:95:d3:b3:6b:15:e3:6f:26:3c:f4:bb:6d:10:3e:b9:79:2b:
8b:ce:65:d9:ee:27:81:0b:aa:26:4a:ea:21:5d:79:68:17:8f:
93:0b:cb:69:40:d0:a9:c6:f6:e7:8f:79:77:cb:8a:e6:b8:a5:
ad:9b:ac:1b:58:ba:63:d0:b3:49:d5:9d:aa:41:f0:2e:ec:26:
37:9e:07:9e:36:63:db:11:80:c5:ee:09:4a:45:85:40:55:fb:
ad:fa:57:e2:62:d4:cd:40:d3:f5:4b:72:75:3c:e2:01:10:6c:
88:89:fc:4c:93:fc:5e:01:5d:1d:93:b4:1e:08:46:3e:ef:17:
94:9c:f8:db:70:8b:6d:33:1f:38:54:53:34:8f:62:2e:5a:f4:
52:7a:2d:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbP9M6JeKYX7k1Habosu/waMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz
OTk5OTgwHhcNMjUwNTE0MTgwMDQ5WhcNMjUwNTE1MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg2MTIwZGZiOTU5NWMyMmFkMjg4ZTM1NDc1NDczODVhZTNjNWI5MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWM3zKzG4FBKtDzKsx8tR2WMLfoI
dm4DWsSvFo1GbbwEVn9bFEbQ6QXR08277J7iMqWUMoh3pWTc0dnOhdFpePRSGYhd
1RF6fZgbvppxz0f5wp2x6H7AKxTQWfpc7gN1Kbr20JEXOJ1yHSsl3Wm1+89/8978
9m14gSzbsykxfhsLIGayPnXJJlw3u8/G9p1k6/NqbNFnte9UXzD1MqXZfd02ooZq
+kVDKwJUPijZ5rEIx0bwIIuYT6DpS13iZHK+4a61Cg00BbK3WkL2Z75FJ8DdzieC
GxBx46jRemXpXeCL2RxMg9p8N/3hn6PptwfMqOdDmaVmlbUzMs/3WFQF+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEg37lZXCKtKI41R1Rzha48W5E6MB8GA1UdIwQY
MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt
NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy
LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlDoTDX1c
5jLY19p5KixfA/7lPzN8VyZgCJtKitU2B5JRJPgm5hZ4hPj4qxk6d6u7BS8/2Mu5
kk8rOEMdUE3NIwZfn1WCSqqR64Cl/U4QKKDX2chQT5XXAAvCXsUauQf0NRNGYoPu
pj0cJ4Vjj5XTs2sV428mPPS7bRA+uXkri85l2e4ngQuqJkrqIV15aBePkwvLaUDQ
qcb25495d8uK5rilrZusG1i6Y9CzSdWdqkHwLuwmN54HnjZj2xGAxe4JSkWFQFX7
rfpX4mLUzUDT9UtydTziARBsiIn8TJP8XgFdHZO0HghGPu8XlJz423CLbTMfOFRT
NI9iLlr0UnotIw==
-----END CERTIFICATE-----
Generated at Wed May 14 22:04:14 2025 by rpki-client