Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
File: iZFbtGEcVfYprTpMz-NXwECh3BI.mft (raw, json)
Hash identifier: wJRpvgp9IpfoFzpEdraBWDrg3OV/RgjCC4zeuUPxVOY=
Subject key identifier: 41:33:8C:EB:44:6A:31:0B:97:10:67:50:E4:84:A3:38:70:E5:47:CC
Authority key identifier: 89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
Certificate issuer: /CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Certificate serial: 0196BCDBA36C151395CF7FEB719931958C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
Manifest number: 04FF
Signing time: Sun 11 May 2025 01:00:32 +0000
Manifest this update: Sun 11 May 2025 01:00:32 +0000
Manifest next update: Mon 12 May 2025 01:00:32 +0000
Files and hashes: 1: iZFbtGEcVfYprTpMz-NXwECh3BI.crl (hash: yxg1BSW93iESxgrHA5u7cKRF9u0KOfhJUdJ8UdnEg1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:a3:6c:15:13:95:cf:7f:eb:71:99:31:95:8c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89915bb4611c55f629ad3a4ccfe357c040a1dc12
Validity
Not Before: May 11 01:00:32 2025 GMT
Not After : May 12 01:00:32 2025 GMT
Subject: CN=41338ceb446a310b97106750e484a33870e547cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:47:eb:8e:6b:b6:a9:64:e2:db:66:2a:9d:
4b:6d:0f:ed:58:34:49:77:05:dc:d5:fb:21:23:7a:
2a:48:78:09:53:29:66:70:db:f0:8b:57:14:6f:87:
c9:d0:e3:a7:11:35:62:c7:a8:f3:12:3d:35:42:92:
79:fd:bd:3f:20:a8:df:a9:29:ec:1a:9f:88:5c:c3:
56:03:ed:0b:6f:4d:7a:e5:69:21:21:93:9b:0b:bb:
6e:8b:a9:ba:43:3d:1a:1e:90:84:a9:d1:49:30:43:
f8:bd:42:05:c3:58:1e:68:9f:e4:5f:87:4e:f3:11:
cf:07:0f:8f:7c:a6:7e:54:fb:dc:38:b9:3e:4e:5e:
89:62:d7:48:23:2e:80:48:ae:8c:83:39:84:7c:45:
26:a5:74:6a:58:dd:7c:d2:ee:ee:3c:2b:ac:28:fe:
92:c9:e3:5a:0f:f2:b8:ad:a7:df:a8:c6:8b:8d:27:
6c:0c:e2:47:5e:53:c4:f0:0f:1d:b1:37:a8:00:a7:
8e:90:08:ea:79:da:0e:e8:d0:b3:e3:72:0e:c1:25:
05:70:41:14:eb:20:d7:73:de:13:d0:ed:ec:25:3b:
7e:64:ab:f5:5f:16:1e:5c:4f:36:46:5b:f1:59:44:
48:ec:7f:c7:f7:70:ff:51:77:83:b4:8e:0b:3a:b0:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:33:8C:EB:44:6A:31:0B:97:10:67:50:E4:84:A3:38:70:E5:47:CC
X509v3 Authority Key Identifier:
keyid:89:91:5B:B4:61:1C:55:F6:29:AD:3A:4C:CF:E3:57:C0:40:A1:DC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZFbtGEcVfYprTpMz-NXwECh3BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/74ac9d-2a53-4ae5-ba72-62afcb9972d7/1/iZFbtGEcVfYprTpMz-NXwECh3BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:85:c2:ca:b1:a9:23:cf:5a:80:77:3a:6a:a7:9f:fa:47:80:
3b:17:e5:4e:30:9e:7c:49:68:23:3d:0b:5f:91:94:9d:22:fa:
a1:9e:65:bb:b2:ca:0a:95:bd:1d:a1:61:1e:56:fc:b3:1e:c8:
b2:21:aa:38:16:ad:ad:e0:f8:cb:90:99:84:1c:d9:fc:1c:48:
00:83:17:8c:20:75:ef:12:be:5f:65:d2:01:96:d9:33:cc:fe:
aa:3c:ce:dd:e3:d5:ba:dd:27:c5:cb:7d:42:9c:c7:f0:f0:59:
c6:40:03:56:bb:79:49:57:eb:37:a4:f5:23:27:91:0e:5f:72:
11:9a:f0:88:4a:6e:76:b8:32:3e:f8:0d:7e:3d:d6:d9:7d:14:
39:ab:fa:e5:f6:8b:36:3a:4c:3e:62:50:14:14:55:29:7f:e6:
ae:b2:01:ae:58:f7:98:22:72:92:ed:aa:0b:45:ab:77:6b:11:
b8:b8:1d:ea:a6:6f:50:1e:3d:2f:e5:0e:1b:4c:23:a8:7f:0d:
09:69:83:25:60:bd:26:18:09:93:80:94:11:78:77:6a:11:76:
ce:c0:ae:98:1a:15:2a:48:69:73:f0:fd:b8:0b:30:ef:0e:9f:
57:63:ba:4d:9d:0e:67:f8:3a:ff:1f:42:79:dd:d4:2c:bc:c6:
c1:d4:68:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa826NsFROVz3/rcZkxlYwoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTE1YmI0NjExYzU1ZjYyOWFkM2E0Y2NmZTM1N2MwNDBh
MWRjMTIwHhcNMjUwNTExMDEwMDMyWhcNMjUwNTEyMDEwMDMyWjAzMTEwLwYDVQQD
Eyg0MTMzOGNlYjQ0NmEzMTBiOTcxMDY3NTBlNDg0YTMzODcwZTU0N2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpH645rtqlk4ttmKp1LbQ/tWDRJ
dwXc1fshI3oqSHgJUylmcNvwi1cUb4fJ0OOnETVix6jzEj01QpJ5/b0/IKjfqSns
Gp+IXMNWA+0Lb0165WkhIZObC7tui6m6Qz0aHpCEqdFJMEP4vUIFw1geaJ/kX4dO
8xHPBw+PfKZ+VPvcOLk+Tl6JYtdIIy6ASK6MgzmEfEUmpXRqWN180u7uPCusKP6S
yeNaD/K4raffqMaLjSdsDOJHXlPE8A8dsTeoAKeOkAjqedoO6NCz43IOwSUFcEEU
6yDXc94T0O3sJTt+ZKv1XxYeXE82RlvxWURI7H/H93D/UXeDtI4LOrBdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEEzjOtEajELlxBnUOSEozhw5UfMMB8GA1UdIwQY
MBaAFImRW7RhHFX2Ka06TM/jV8BAodwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NGFjOWQtMmE1My00YWU1LWJhNzIt
NjJhZmNiOTk3MmQ3LzEvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NGFjOWQtMmE1My00YWU1LWJhNzItNjJhZmNiOTk3MmQ3
LzEvaVpGYnRHRWNWZllwclRwTXotTlh3RUNoM0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIXCyrGp
I89agHc6aqef+keAOxflTjCefEloIz0LX5GUnSL6oZ5lu7LKCpW9HaFhHlb8sx7I
siGqOBatreD4y5CZhBzZ/BxIAIMXjCB17xK+X2XSAZbZM8z+qjzO3ePVut0nxct9
QpzH8PBZxkADVrt5SVfrN6T1IyeRDl9yEZrwiEpudrgyPvgNfj3W2X0UOav65faL
NjpMPmJQFBRVKX/mrrIBrlj3mCJyku2qC0Wrd2sRuLgd6qZvUB49L+UOG0wjqH8N
CWmDJWC9JhgJk4CUEXh3ahF2zsCumBoVKkhpc/D9uAsw7w6fV2O6TZ0OZ/g6/x9C
ed3ULLzGwdRowg==
-----END CERTIFICATE-----
Generated at Sun May 11 03:08:04 2025 by rpki-client