Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: 0RZwynHuFVLLYWFmuRi+Zfyj46wDkolm9yKCHzocUWA=
Subject key identifier: 61:DA:93:B4:82:19:AB:FA:0A:9B:2E:CA:AE:CC:96:1F:BA:4D:75:69
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 0196B4B4328655557FEE12089511A2774ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 11:00:30 +0000
Manifest this update: Fri 09 May 2025 11:00:30 +0000
Manifest next update: Sat 10 May 2025 11:00:30 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: D4/f+E2JJiHbIKZZmmQga8rP+ZB5t/7W8vii8VdObaQ=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:32:86:55:55:7f:ee:12:08:95:11:a2:77:4e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: May 9 11:00:30 2025 GMT
Not After : May 10 11:00:30 2025 GMT
Subject: CN=61da93b48219abfa0a9b2ecaaecc961fba4d7569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:b6:4c:b8:e9:69:3e:7d:dd:6a:cf:43:8a:
b6:72:8e:e7:1d:e4:e2:a9:46:66:7e:17:3d:a2:fb:
e2:55:8b:1a:1c:03:61:fb:c9:b6:ec:dc:fc:31:a1:
08:04:e7:b0:39:c8:94:d4:b1:2a:6f:f1:67:b0:70:
d8:fb:b1:6a:e8:c5:04:6a:61:ef:95:50:7f:cd:96:
37:f3:d3:5f:3a:88:0e:80:31:b2:72:bc:2d:a1:3d:
c8:7d:b3:17:2b:9a:33:d5:53:78:ae:97:57:26:ae:
ec:43:2f:82:11:43:07:68:ca:3e:35:df:b4:4a:5b:
14:2b:c6:48:9e:77:45:19:0b:d7:b1:21:8d:20:4e:
de:64:ba:bb:10:ae:ec:e0:86:2d:50:bf:88:6d:73:
c5:ba:d9:3e:7f:65:c7:bb:97:a4:9b:fc:f4:0a:96:
8e:01:7f:36:34:ed:2e:5b:b6:be:af:64:50:98:25:
c8:39:7f:0a:17:a0:c4:3e:b2:98:38:e0:24:e8:67:
55:c3:a3:c3:8c:33:8c:b2:1c:28:2e:0c:2e:0c:76:
66:88:1d:87:4b:d6:72:a1:ba:e5:da:70:bd:35:18:
dc:55:9f:42:85:47:41:95:b9:c3:c9:90:2a:6d:a5:
a0:56:c3:25:f5:f9:99:41:9a:bb:12:17:a6:d0:8a:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DA:93:B4:82:19:AB:FA:0A:9B:2E:CA:AE:CC:96:1F:BA:4D:75:69
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e4:ec:72:85:04:5b:c9:cd:c6:1e:ec:f4:ac:96:3a:e7:50:
ac:90:2e:83:17:e6:ec:75:f4:5a:45:75:af:5f:d7:b4:60:32:
28:fa:fc:45:8a:4b:f3:38:8c:de:7f:8a:de:e2:56:d7:fb:7d:
83:d7:e9:0f:fd:ee:81:31:d7:fd:e8:b7:56:07:d2:80:5c:97:
5f:59:90:ee:43:22:7c:97:89:bd:e3:95:97:ba:7d:7c:0e:a6:
b3:d5:6e:0f:f2:5b:06:ee:f2:f9:a9:8d:0e:60:f7:d3:28:8d:
64:59:3b:9d:2c:ef:73:a0:30:14:20:9b:65:51:60:d5:c6:d2:
21:c3:23:fa:ec:c9:97:84:54:8b:c5:1f:e3:64:f6:d9:9d:71:
ba:38:1b:91:8d:df:25:80:25:1a:71:16:61:3e:8b:a4:b4:f8:
74:49:f0:ac:d7:db:af:be:d5:b7:f2:b4:cd:34:fd:26:c7:cc:
cb:b1:e7:44:3d:bb:2b:18:b5:8d:92:de:b8:fb:ee:bd:49:eb:
e7:3f:86:ec:80:60:0e:0a:17:e7:bd:74:97:3e:70:e5:3a:60:
41:38:6a:e1:b7:89:d2:66:0c:6f:34:2f:13:df:0e:cb:ec:19:
af:82:79:14:d7:a0:23:d3:59:c6:78:a3:63:52:01:1f:32:4f:
b2:24:33:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0tDKGVVV/7hIIlRGid07LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjUwNTA5MTEwMDMwWhcNMjUwNTEwMTEwMDMwWjAzMTEwLwYDVQQD
Eyg2MWRhOTNiNDgyMTlhYmZhMGE5YjJlY2FhZWNjOTYxZmJhNGQ3NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvG2TLjpaT593WrPQ4q2co7nHeTi
qUZmfhc9ovviVYsaHANh+8m27Nz8MaEIBOewOciU1LEqb/FnsHDY+7Fq6MUEamHv
lVB/zZY389NfOogOgDGycrwtoT3IfbMXK5oz1VN4rpdXJq7sQy+CEUMHaMo+Nd+0
SlsUK8ZInndFGQvXsSGNIE7eZLq7EK7s4IYtUL+IbXPFutk+f2XHu5ekm/z0CpaO
AX82NO0uW7a+r2RQmCXIOX8KF6DEPrKYOOAk6GdVw6PDjDOMshwoLgwuDHZmiB2H
S9Zyobrl2nC9NRjcVZ9ChUdBlbnDyZAqbaWgVsMl9fmZQZq7Ehem0IrKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHak7SCGav6Cpsuyq7Mlh+6TXVpMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPuTscoUE
W8nNxh7s9KyWOudQrJAugxfm7HX0WkV1r1/XtGAyKPr8RYpL8ziM3n+K3uJW1/t9
g9fpD/3ugTHX/ei3VgfSgFyXX1mQ7kMifJeJveOVl7p9fA6ms9VuD/JbBu7y+amN
DmD30yiNZFk7nSzvc6AwFCCbZVFg1cbSIcMj+uzJl4RUi8Uf42T22Z1xujgbkY3f
JYAlGnEWYT6LpLT4dEnwrNfbr77Vt/K0zTT9JsfMy7HnRD27Kxi1jZLeuPvuvUnr
5z+G7IBgDgoX5710lz5w5TpgQThq4beJ0mYMbzQvE98Oy+wZr4J5FNegI9NZxnij
Y1IBHzJPsiQzNw==
-----END CERTIFICATE-----
Generated at Fri May 9 19:14:02 2025 by rpki-client