Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
File: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft (raw, json)
Hash identifier: VJzPOoS2kgRASY3g59HE+2wUQ4JB1q333JklHR7OiTA=
Subject key identifier: 23:C3:02:FA:74:C3:F5:07:4D:D2:C9:E2:59:DC:99:2D:C1:4D:66:89
Authority key identifier: CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
Certificate issuer: /CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Certificate serial: 0196D664E9E2BD890A66A8778CC88DDB819D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
Manifest number: 02BB
Signing time: Fri 16 May 2025 00:00:59 +0000
Manifest this update: Fri 16 May 2025 00:00:59 +0000
Manifest next update: Sat 17 May 2025 00:00:59 +0000
Files and hashes: 1: zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl (hash: Ov02fbsMz2aygBm56qxwFZYBdzJb2xJoOnf7K1Hr+qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:64:e9:e2:bd:89:0a:66:a8:77:8c:c8:8d:db:81:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdbc431b1c9886dc2b21008dccfde18db735371c
Validity
Not Before: May 16 00:00:59 2025 GMT
Not After : May 17 00:00:59 2025 GMT
Subject: CN=23c302fa74c3f5074dd2c9e259dc992dc14d6689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:c9:5c:85:e3:5e:bc:e6:b9:fb:c2:b7:6c:
87:85:80:d3:3a:07:06:45:9e:b6:ab:b2:c9:fd:0e:
e5:68:bf:3b:c8:6f:f9:e4:8e:5b:5d:f5:2c:cb:39:
76:84:89:e8:47:d6:2b:e4:ef:fa:57:5a:b2:85:4a:
09:44:7e:d8:a0:2e:5b:b3:1e:27:2d:f5:e2:14:88:
63:62:f8:8e:87:8f:1a:36:22:c5:fc:63:e1:7b:fd:
93:3c:9f:5e:e4:66:33:69:d3:07:c0:c2:78:f3:d6:
77:37:e0:db:cf:e7:59:78:10:18:eb:04:70:9f:87:
09:a2:04:6a:b4:19:d5:d5:1a:d2:ff:b0:17:fa:17:
e9:54:e8:22:74:30:7c:86:fa:fb:40:63:ea:b9:1d:
14:01:ed:70:93:d7:23:66:e5:c2:6e:cd:0b:d1:01:
ff:1b:9a:03:93:6f:e3:37:f4:65:fc:46:f1:1d:cf:
d1:c0:ad:d9:19:4a:94:b3:e7:60:25:8a:5c:68:9a:
0d:59:82:96:e5:3f:45:16:c3:a8:f2:80:7e:96:89:
1c:30:76:be:ab:3d:3c:80:86:06:95:2f:20:6a:bf:
c3:c2:6a:88:b8:72:4c:7a:ac:88:ed:9c:3e:a5:a6:
98:71:08:5f:b5:bf:ff:83:22:f1:ac:6f:3f:43:73:
33:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C3:02:FA:74:C3:F5:07:4D:D2:C9:E2:59:DC:99:2D:C1:4D:66:89
X509v3 Authority Key Identifier:
keyid:CD:BC:43:1B:1C:98:86:DC:2B:21:00:8D:CC:FD:E1:8D:B7:35:37:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3689be-8152-4bad-b996-3cda71373dc9/1/zbxDGxyYhtwrIQCNzP3hjbc1Nxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:55:ea:bc:e4:9e:78:d5:e7:dc:a5:16:9f:84:3e:e7:7b:07:
b2:9c:db:f5:53:22:37:a0:2d:e6:63:f1:34:b2:8e:fe:1d:ff:
69:17:25:64:f3:59:dc:de:21:a7:cb:8f:56:eb:55:50:c9:7e:
eb:13:71:3e:56:f0:b3:d2:8e:42:5c:c6:d3:e1:48:39:54:37:
be:08:20:75:74:5f:18:36:d3:c8:6d:f5:9a:3f:7a:2e:cb:de:
29:ca:9d:d1:b9:9f:1d:74:ab:03:bc:8b:2a:d0:6e:64:fd:0e:
72:40:a0:71:71:1e:a6:34:fa:eb:7d:93:96:00:6c:f1:31:86:
42:b4:6a:ad:3c:05:bf:ab:75:c3:89:b6:a5:0a:68:3c:b1:85:
d9:fa:98:4d:8c:46:a6:a2:57:2f:d4:b8:4a:b1:ec:0f:5e:aa:
43:b1:66:1e:81:2b:b7:b2:8f:33:43:51:a5:b6:bf:f1:fe:80:
ae:2d:bf:db:23:3f:0a:a5:bd:9e:f9:eb:27:6a:28:ef:84:65:
5a:ed:bc:1a:6d:4c:0c:18:9e:4b:3e:d6:7b:08:e0:71:1c:c1:
bd:e6:0b:2a:ab:5e:e2:52:03:e0:1c:7e:41:37:d1:ba:a7:42:
38:45:f0:44:99:21:0b:b3:c0:de:87:b3:42:ae:05:43:fe:01:
89:bd:b4:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbWZOnivYkKZqh3jMiN24GdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmM0MzFiMWM5ODg2ZGMyYjIxMDA4ZGNjZmRlMThkYjcz
NTM3MWMwHhcNMjUwNTE2MDAwMDU5WhcNMjUwNTE3MDAwMDU5WjAzMTEwLwYDVQQD
EygyM2MzMDJmYTc0YzNmNTA3NGRkMmM5ZTI1OWRjOTkyZGMxNGQ2Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNbJXIXjXrzmufvCt2yHhYDTOgcG
RZ62q7LJ/Q7laL87yG/55I5bXfUsyzl2hInoR9Yr5O/6V1qyhUoJRH7YoC5bsx4n
LfXiFIhjYviOh48aNiLF/GPhe/2TPJ9e5GYzadMHwMJ489Z3N+Dbz+dZeBAY6wRw
n4cJogRqtBnV1RrS/7AX+hfpVOgidDB8hvr7QGPquR0UAe1wk9cjZuXCbs0L0QH/
G5oDk2/jN/Rl/EbxHc/RwK3ZGUqUs+dgJYpcaJoNWYKW5T9FFsOo8oB+lokcMHa+
qz08gIYGlS8gar/DwmqIuHJMeqyI7Zw+paaYcQhftb//gyLxrG8/Q3Mz/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPDAvp0w/UHTdLJ4lncmS3BTWaJMB8GA1UdIwQY
MBaAFM28QxscmIbcKyEAjcz94Y23NTccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYt
M2NkYTcxMzczZGM5LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zNjg5YmUtODE1Mi00YmFkLWI5OTYtM2NkYTcxMzczZGM5
LzEvemJ4REd4eVlodHdySVFDTnpQM2hqYmMxTnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVXqvOSe
eNXn3KUWn4Q+53sHspzb9VMiN6At5mPxNLKO/h3/aRclZPNZ3N4hp8uPVutVUMl+
6xNxPlbws9KOQlzG0+FIOVQ3vgggdXRfGDbTyG31mj96LsveKcqd0bmfHXSrA7yL
KtBuZP0OckCgcXEepjT6632TlgBs8TGGQrRqrTwFv6t1w4m2pQpoPLGF2fqYTYxG
pqJXL9S4SrHsD16qQ7FmHoErt7KPM0NRpba/8f6Ari2/2yM/CqW9nvnrJ2oo74Rl
Wu28Gm1MDBieSz7WewjgcRzBveYLKqte4lID4Bx+QTfRuqdCOEXwRJkhC7PA3oez
Qq4FQ/4Bib20dQ==
-----END CERTIFICATE-----
Generated at Fri May 16 08:25:29 2025 by rpki-client