Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
File: ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft (raw, json)
Hash identifier: qdj3lZuM/H+/Iy3xdAhyLd4zefeaP870k7eTpAdpGJU=
Subject key identifier: 1F:CE:D8:BD:2B:02:96:02:75:A5:70:99:BA:89:46:A2:16:36:07:62
Authority key identifier: 44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
Certificate issuer: /CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Certificate serial: 0196C3B9DCDCFBDEAED357CCAF5AC0BE944C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 09:00:59 +0000
Manifest this update: Mon 12 May 2025 09:00:59 +0000
Manifest next update: Tue 13 May 2025 09:00:59 +0000
Files and hashes: 1: ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl (hash: ktqcl99BK2/V6UZISL8t5Ffjph+rHOv7s3K99E7uR4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:dc:dc:fb:de:ae:d3:57:cc:af:5a:c0:be:94:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecede7e0ffbd308acb91121368df8d6cb2e961
Validity
Not Before: May 12 09:00:59 2025 GMT
Not After : May 13 09:00:59 2025 GMT
Subject: CN=1fced8bd2b02960275a57099ba8946a216360762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:28:98:29:73:88:07:1d:9f:a5:50:61:a3:8d:
b3:5e:87:ae:3d:63:49:7c:07:4f:61:65:33:b4:bb:
01:8c:7c:3d:1c:c6:06:e4:c9:b6:c8:6b:e7:6a:db:
af:b3:7e:1e:91:48:55:53:e6:fd:8f:22:da:4a:37:
9e:a5:50:c9:1c:4e:87:e0:87:14:89:df:ff:e5:9c:
02:31:bc:cf:31:9a:54:36:82:9b:e1:15:b6:f9:d0:
83:da:40:7b:f1:3f:01:dd:31:e7:2d:3e:2f:a1:32:
cf:60:f9:a7:10:b3:d6:19:99:7f:63:b7:db:4b:3c:
14:cd:d8:23:9e:5a:a6:d7:81:9c:2f:22:bb:0b:5b:
4d:8d:9c:7a:6a:1a:41:0a:ae:5f:12:d1:69:dc:fc:
c3:49:2f:55:c9:97:cc:b6:3e:1d:f5:bb:95:d4:bd:
e9:9f:8d:38:41:db:f6:d8:fb:ff:b5:c7:4e:1b:eb:
27:0b:26:2f:b0:ef:32:f8:fd:e4:18:27:cc:6a:de:
68:3f:d7:56:d0:cc:87:a3:ea:2a:29:37:0c:8a:fd:
28:f7:9d:f2:6d:88:33:4a:46:ca:0a:ee:44:34:b5:
71:25:27:69:fa:d0:d4:d4:cd:a2:8a:be:70:bc:9d:
0a:59:50:a3:e0:80:6f:20:3f:ba:cf:ab:41:12:6d:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CE:D8:BD:2B:02:96:02:75:A5:70:99:BA:89:46:A2:16:36:07:62
X509v3 Authority Key Identifier:
keyid:44:EC:ED:E7:E0:FF:BD:30:8A:CB:91:12:13:68:DF:8D:6C:B2:E9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzt5-D_vTCKy5ESE2jfjWyy6WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/439275-30bf-4f61-b4d5-80930b284a69/1/ROzt5-D_vTCKy5ESE2jfjWyy6WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:c1:95:03:0a:7a:9f:e2:a8:a1:0e:a8:7b:e9:4f:c3:cc:
9b:99:8b:ee:a6:3f:ea:bc:f9:f3:c0:d2:6c:ca:04:c9:b5:cd:
9a:a4:18:01:af:b7:46:62:ab:7a:4f:e8:fd:c0:d7:ad:86:ac:
bc:b1:f5:ef:05:51:f0:91:4e:be:a2:c2:50:d7:c2:ae:00:ef:
f1:75:af:bf:70:7e:46:c2:9c:dc:3b:c6:a6:f8:43:0b:02:70:
22:49:01:7c:2c:e4:0e:b5:b1:97:b9:5b:a3:3c:ea:42:11:b0:
12:af:c3:48:9e:df:44:87:6d:38:25:4f:bf:95:ac:01:1b:d8:
9c:c6:22:63:d0:8f:d5:1d:53:a9:64:6f:0a:62:38:d0:ed:06:
3a:36:a7:34:fb:59:a1:f5:13:88:88:fa:a4:13:fa:54:5c:ac:
b5:de:53:63:a2:f2:45:21:b7:57:d6:d8:e1:29:65:83:8f:40:
d7:9c:2a:47:71:4a:12:9b:82:58:4b:0d:da:ee:0e:37:5d:f1:
b1:60:8c:33:65:a3:ba:d8:77:f5:da:90:00:eb:70:e3:bc:fc:
91:88:2c:1a:28:f0:83:05:fb:af:11:0f:9b:f0:a3:0e:64:e5:
d9:e5:aa:df:d3:d7:90:b1:cd:ba:ae:32:0e:dd:9d:72:ef:e5:
dc:f1:5d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDudzc+96u01fMr1rAvpRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZWNlZGU3ZTBmZmJkMzA4YWNiOTExMjEzNjhkZjhkNmNi
MmU5NjEwHhcNMjUwNTEyMDkwMDU5WhcNMjUwNTEzMDkwMDU5WjAzMTEwLwYDVQQD
EygxZmNlZDhiZDJiMDI5NjAyNzVhNTcwOTliYTg5NDZhMjE2MzYwNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiiYKXOIBx2fpVBho42zXoeuPWNJ
fAdPYWUztLsBjHw9HMYG5Mm2yGvnatuvs34ekUhVU+b9jyLaSjeepVDJHE6H4IcU
id//5ZwCMbzPMZpUNoKb4RW2+dCD2kB78T8B3THnLT4voTLPYPmnELPWGZl/Y7fb
SzwUzdgjnlqm14GcLyK7C1tNjZx6ahpBCq5fEtFp3PzDSS9VyZfMtj4d9buV1L3p
n404Qdv22Pv/tcdOG+snCyYvsO8y+P3kGCfMat5oP9dW0MyHo+oqKTcMiv0o953y
bYgzSkbKCu5ENLVxJSdp+tDU1M2iir5wvJ0KWVCj4IBvID+6z6tBEm1WGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/O2L0rApYCdaVwmbqJRqIWNgdiMB8GA1UdIwQY
MBaAFETs7efg/70wisuREhNo341ssulhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUt
ODA5MzBiMjg0YTY5LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MzkyNzUtMzBiZi00ZjYxLWI0ZDUtODA5MzBiMjg0YTY5
LzEvUk96dDUtRF92VENLeTVFU0UyamZqV3l5NldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA/BlQMK
ep/iqKEOqHvpT8PMm5mL7qY/6rz588DSbMoEybXNmqQYAa+3RmKrek/o/cDXrYas
vLH17wVR8JFOvqLCUNfCrgDv8XWvv3B+RsKc3DvGpvhDCwJwIkkBfCzkDrWxl7lb
ozzqQhGwEq/DSJ7fRIdtOCVPv5WsARvYnMYiY9CP1R1TqWRvCmI40O0GOjanNPtZ
ofUTiIj6pBP6VFystd5TY6LyRSG3V9bY4Sllg49A15wqR3FKEpuCWEsN2u4ON13x
sWCMM2Wjuth39dqQAOtw47z8kYgsGijwgwX7rxEPm/CjDmTl2eWq39PXkLHNuq4y
Dt2dcu/l3PFdiQ==
-----END CERTIFICATE-----
Generated at Mon May 12 19:28:49 2025 by rpki-client