Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
File: MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft (raw, json)
Hash identifier: G+9jTSQ3G4zW1KAB4lplEAhlopEP0nfONuhBE6SIFAs=
Subject key identifier: 73:D1:2B:2E:61:4B:0E:07:20:9C:4F:14:A0:3E:43:84:83:C6:8B:5D
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Certificate issuer: /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial: 01969D51163663015F545E8280ADA2AD94DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
Manifest number: 1527
Signing time: Sun 04 May 2025 22:00:59 +0000
Manifest this update: Sun 04 May 2025 22:00:59 +0000
Manifest next update: Mon 05 May 2025 22:00:59 +0000
Files and hashes: 1: MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl (hash: 6dhn23P4niImbHax4efZRcM5pjRtRK4vXS4D6w3R1Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:16:36:63:01:5f:54:5e:82:80:ad:a2:ad:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Validity
Not Before: May 4 22:00:59 2025 GMT
Not After : May 5 22:00:59 2025 GMT
Subject: CN=73d12b2e614b0e07209c4f14a03e438483c68b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:9c:ce:c1:3f:2a:fc:4a:08:a7:a0:ef:32:
13:1f:cc:0c:f9:b2:ef:95:fd:fb:6b:66:5e:2f:91:
5f:ca:9b:e6:62:a9:a6:13:5e:22:d2:20:69:59:12:
6d:10:46:16:21:17:42:82:64:d2:85:80:a6:c1:6e:
10:62:9c:fe:95:b6:41:42:2a:b4:d8:62:aa:64:e2:
80:50:be:7b:17:ae:a6:63:14:b7:8c:9a:2a:8e:c6:
c2:69:43:27:ae:ae:eb:7e:03:af:20:e2:0b:fd:4e:
ea:3f:97:7b:c1:43:24:78:b7:4e:1e:5e:2d:38:a4:
f8:a4:9e:bd:bd:5b:bd:42:bf:33:ee:79:cb:f7:5a:
99:bc:bb:f6:91:b4:06:67:b1:df:3e:04:be:b8:39:
89:f0:01:88:69:9c:3b:d3:82:eb:5e:c7:63:e0:7d:
39:a1:96:45:7f:79:1d:f5:0e:3e:ed:9e:08:87:b8:
df:f0:81:2f:a5:6e:65:73:73:98:91:ec:ce:91:5a:
79:e7:89:6d:07:eb:06:74:eb:10:6f:b8:d3:d8:80:
ce:ee:95:2b:53:ae:c9:c2:0e:92:d9:b3:df:28:40:
4a:29:9f:3c:95:a6:d0:b7:16:34:fe:47:15:60:44:
3f:49:22:97:2c:ee:7f:71:9d:30:5b:61:90:99:a3:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D1:2B:2E:61:4B:0E:07:20:9C:4F:14:A0:3E:43:84:83:C6:8B:5D
X509v3 Authority Key Identifier:
keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d9:bc:ca:96:a6:ad:61:2b:5e:71:e3:82:b1:8e:d6:b5:73:
9b:be:b8:c7:de:27:f4:59:74:88:91:a1:7f:d0:d4:a2:00:fe:
d3:c4:34:37:d3:0e:d7:82:f3:3b:41:43:36:16:cc:39:37:ae:
a2:54:f5:10:f4:ac:af:18:db:c4:91:ce:07:ef:f8:4f:86:14:
c4:72:cf:e9:2e:bf:f7:a2:91:9b:59:a0:ea:3a:e8:60:e8:09:
0e:c8:82:58:33:8b:1b:c2:b3:25:5b:4d:a5:d8:c9:9a:17:c1:
d3:48:8b:55:ce:ab:77:c4:18:68:60:ad:f5:cd:a5:3e:a2:9d:
fa:70:38:38:a5:f5:fc:ab:06:47:d5:39:c2:be:cf:92:a4:de:
4e:33:dc:fb:dc:43:04:f3:1f:f2:41:b7:8d:2e:7c:91:7e:65:
32:09:8a:c8:cd:1e:a4:8c:97:e7:b4:b3:de:95:b8:dd:c0:69:
7b:46:67:28:b9:fc:38:23:00:13:94:d1:57:3b:80:fb:ed:cf:
75:ce:0e:02:c5:58:ea:f1:5a:36:6c:ba:bf:2e:54:6a:0a:cb:
e5:6c:df:6a:4a:65:5e:f4:6c:d6:97:0c:8e:63:8e:dd:b7:77:
f1:98:74:f2:07:30:e0:9f:1f:89:97:61:d3:2f:06:87:e0:ce:
ad:ce:ea:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadURY2YwFfVF6CgK2irZTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzU4YjQ1MWVlMGZlODViMDA0YTA1NjRmODMxMGZiMjEx
Yzk1ZmEwHhcNMjUwNTA0MjIwMDU5WhcNMjUwNTA1MjIwMDU5WjAzMTEwLwYDVQQD
Eyg3M2QxMmIyZTYxNGIwZTA3MjA5YzRmMTRhMDNlNDM4NDgzYzY4YjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn+czsE/KvxKCKeg7zITH8wM+bLv
lf37a2ZeL5FfypvmYqmmE14i0iBpWRJtEEYWIRdCgmTShYCmwW4QYpz+lbZBQiq0
2GKqZOKAUL57F66mYxS3jJoqjsbCaUMnrq7rfgOvIOIL/U7qP5d7wUMkeLdOHl4t
OKT4pJ69vVu9Qr8z7nnL91qZvLv2kbQGZ7HfPgS+uDmJ8AGIaZw704LrXsdj4H05
oZZFf3kd9Q4+7Z4Ih7jf8IEvpW5lc3OYkezOkVp554ltB+sGdOsQb7jT2IDO7pUr
U67Jwg6S2bPfKEBKKZ88labQtxY0/kcVYEQ/SSKXLO5/cZ0wW2GQmaN8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPRKy5hSw4HIJxPFKA+Q4SDxotdMB8GA1UdIwQY
MBaAFDM1i0Ue4P6FsASgVk+DEPshHJX6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYt
ZDVmMDQ3YzI5MTkwLzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85ZjE4ZjgtOTZjNC00YjIzLTkzMWYtZDVmMDQ3YzI5MTkw
LzEvTXpXTFJSN2dfb1d3QktCV1Q0TVEteUVjbGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtm8ypam
rWErXnHjgrGO1rVzm764x94n9Fl0iJGhf9DUogD+08Q0N9MO14LzO0FDNhbMOTeu
olT1EPSsrxjbxJHOB+/4T4YUxHLP6S6/96KRm1mg6jroYOgJDsiCWDOLG8KzJVtN
pdjJmhfB00iLVc6rd8QYaGCt9c2lPqKd+nA4OKX1/KsGR9U5wr7PkqTeTjPc+9xD
BPMf8kG3jS58kX5lMgmKyM0epIyX57Sz3pW43cBpe0ZnKLn8OCMAE5TRVzuA++3P
dc4OAsVY6vFaNmy6vy5UagrL5WzfakplXvRs1pcMjmOO3bd38Zh08gcw4J8fiZdh
0y8Gh+DOrc7q9A==
-----END CERTIFICATE-----
Generated at Mon May 5 05:56:09 2025 by rpki-client