Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
File: ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft (raw, json)
Hash identifier: xA6BQI7zrLiX5ktg1jfFILeXRItVuOFXol7kztdGPxo=
Subject key identifier: 2F:96:EE:77:C7:6E:02:65:19:1D:87:DB:88:52:D2:BC:E2:F6:C1:18
Authority key identifier: 64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
Certificate issuer: /CN=6414775fdaeec7b0d5c927083988d555727c21b5
Certificate serial: 0196AFFBBAFAFA41CE824DB2930C45696DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
Manifest number: 06DA
Signing time: Thu 08 May 2025 13:00:32 +0000
Manifest this update: Thu 08 May 2025 13:00:32 +0000
Manifest next update: Fri 09 May 2025 13:00:32 +0000
Files and hashes: 1: ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl (hash: WA92dk648+nG2Wy5hxDRdr7lHQGGsybJ8EU8VvmjqhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fb:ba:fa:fa:41:ce:82:4d:b2:93:0c:45:69:6d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414775fdaeec7b0d5c927083988d555727c21b5
Validity
Not Before: May 8 13:00:32 2025 GMT
Not After : May 9 13:00:32 2025 GMT
Subject: CN=2f96ee77c76e0265191d87db8852d2bce2f6c118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:c3:6e:c8:00:b8:9f:52:8a:80:9c:a6:ea:
fc:ed:d2:d2:c9:33:9a:52:d9:f7:ee:28:54:96:bc:
fb:85:8d:28:72:aa:6d:c9:63:d1:a8:57:cb:25:91:
51:93:6e:0e:66:48:fb:0f:7a:11:46:44:4f:51:44:
9d:6b:0e:7e:5d:aa:8f:33:93:c1:10:72:2b:a6:3f:
1e:88:33:fc:4d:64:52:c3:b3:0f:7e:4c:29:2e:48:
05:45:df:ee:d1:43:c8:fb:0e:13:42:72:01:a1:88:
be:9a:00:bc:43:41:85:6c:50:9d:8a:a8:a5:78:fa:
ea:10:fb:24:ff:4d:1f:00:5e:8c:7f:d9:5e:88:73:
ac:55:69:25:c6:0e:df:ba:37:c7:98:6f:76:da:ec:
ff:56:a8:34:e5:4c:1e:f9:35:9d:a6:69:a2:2d:d7:
fc:4a:31:27:45:b8:72:eb:4b:c3:33:c4:98:43:8b:
10:2c:4b:ff:5f:f6:5a:c8:fd:1c:68:16:ad:eb:a0:
d0:ba:05:74:7e:fa:9f:d4:b7:b6:8a:5f:23:80:90:
43:c1:87:91:ca:03:cc:fe:8d:35:48:93:6c:a4:4a:
f9:ed:50:e9:9f:f3:70:82:9f:93:d2:3d:57:7e:f2:
93:0c:97:a0:61:72:04:c2:1d:33:5b:61:fd:90:d8:
5a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:96:EE:77:C7:6E:02:65:19:1D:87:DB:88:52:D2:BC:E2:F6:C1:18
X509v3 Authority Key Identifier:
keyid:64:14:77:5F:DA:EE:C7:B0:D5:C9:27:08:39:88:D5:55:72:7C:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBR3X9rux7DVyScIOYjVVXJ8IbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/af9f45-3456-48a2-ad75-475727a03dd3/1/ZBR3X9rux7DVyScIOYjVVXJ8IbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:dc:33:af:6d:0d:93:0e:66:0c:9a:f0:9d:3d:fd:e6:10:67:
f1:51:23:b8:e0:d3:7b:7a:9a:dd:0e:96:76:3f:af:7f:1b:ce:
80:fa:bb:4f:2a:1b:66:6a:79:b4:39:fc:d8:c7:f9:b1:b3:d4:
c6:5a:bb:a9:3e:db:16:2d:bd:7f:0e:b3:7f:11:10:ac:5b:e3:
84:b7:6d:7b:5a:14:7a:f6:f2:c1:16:60:0c:7b:7c:db:e0:93:
01:bc:e3:7c:6d:ff:3b:b7:37:a0:4c:16:d6:89:95:79:52:39:
b7:ea:76:23:58:ce:b4:58:a6:0b:12:1d:85:13:9c:cc:c4:92:
d0:ee:1b:33:0f:b1:fe:24:d8:a8:89:18:31:03:66:ef:61:02:
4f:b1:af:54:27:78:f2:ad:9d:ee:12:fb:c3:76:35:cc:3c:3b:
dc:3f:ad:f8:77:f6:18:14:06:e5:ee:a1:b2:3d:2c:c8:0e:fd:
72:05:05:e4:ec:80:59:81:c6:0e:ae:c7:26:ac:7d:44:30:57:
f0:ad:10:42:d0:ff:c3:76:79:3c:36:b5:78:b9:8c:dc:d3:a6:
55:d1:64:79:06:51:89:d6:9f:37:93:d6:d9:cb:9a:a8:10:dc:
75:23:d8:48:3e:44:22:3e:b3:a4:6a:6e:01:95:29:ce:37:26:
06:e6:e5:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav+7r6+kHOgk2ykwxFaW28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTQ3NzVmZGFlZWM3YjBkNWM5MjcwODM5ODhkNTU1NzI3
YzIxYjUwHhcNMjUwNTA4MTMwMDMyWhcNMjUwNTA5MTMwMDMyWjAzMTEwLwYDVQQD
EygyZjk2ZWU3N2M3NmUwMjY1MTkxZDg3ZGI4ODUyZDJiY2UyZjZjMTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW3DbsgAuJ9SioCcpur87dLSyTOa
Utn37ihUlrz7hY0ocqptyWPRqFfLJZFRk24OZkj7D3oRRkRPUUSdaw5+XaqPM5PB
EHIrpj8eiDP8TWRSw7MPfkwpLkgFRd/u0UPI+w4TQnIBoYi+mgC8Q0GFbFCdiqil
ePrqEPsk/00fAF6Mf9leiHOsVWklxg7fujfHmG922uz/Vqg05Uwe+TWdpmmiLdf8
SjEnRbhy60vDM8SYQ4sQLEv/X/ZayP0caBat66DQugV0fvqf1Le2il8jgJBDwYeR
ygPM/o01SJNspEr57VDpn/Nwgp+T0j1XfvKTDJegYXIEwh0zW2H9kNhaGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+W7nfHbgJlGR2H24hS0rzi9sEYMB8GA1UdIwQY
MBaAFGQUd1/a7sew1cknCDmI1VVyfCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUt
NDc1NzI3YTAzZGQzLzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9hZjlmNDUtMzQ1Ni00OGEyLWFkNzUtNDc1NzI3YTAzZGQz
LzEvWkJSM1g5cnV4N0RWeVNjSU9ZalZWWEo4SWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdwzr20N
kw5mDJrwnT395hBn8VEjuODTe3qa3Q6Wdj+vfxvOgPq7TyobZmp5tDn82Mf5sbPU
xlq7qT7bFi29fw6zfxEQrFvjhLdte1oUevbywRZgDHt82+CTAbzjfG3/O7c3oEwW
1omVeVI5t+p2I1jOtFimCxIdhROczMSS0O4bMw+x/iTYqIkYMQNm72ECT7GvVCd4
8q2d7hL7w3Y1zDw73D+t+Hf2GBQG5e6hsj0syA79cgUF5OyAWYHGDq7HJqx9RDBX
8K0QQtD/w3Z5PDa1eLmM3NOmVdFkeQZRidafN5PW2cuaqBDcdSPYSD5EIj6zpGpu
AZUpzjcmBublKw==
-----END CERTIFICATE-----
Generated at Thu May 8 15:12:19 2025 by rpki-client