Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
File: ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft (raw, json)
Hash identifier: TicEt7E3bEMkkQS1WCiRrEzopxOJnfHDATlLhcNuebQ=
Subject key identifier: 13:A8:A6:49:91:DA:DC:9D:86:26:C2:22:8A:14:DC:C3:2E:B3:E9:4F
Authority key identifier: 65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
Certificate issuer: /CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Certificate serial: 01969D87ABC99AEB41658844BDF15232D1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 23:00:36 +0000
Manifest this update: Sun 04 May 2025 23:00:36 +0000
Manifest next update: Mon 05 May 2025 23:00:36 +0000
Files and hashes: 1: ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl (hash: UpZuFjhmmSCFipmdwjny4k1dGgtohu4TPC/16fdrFOQ=)
2: y6XKa07TTPMFsjvwx8e568cVXPU.roa (hash: C/iy2HFJBUXxZmfuDRQqFLZ88BpL9CevYMYDHGoS6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:ab:c9:9a:eb:41:65:88:44:bd:f1:52:32:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6510c26f3a4fac700ac7b0e3490b8fa175f08ad8
Validity
Not Before: May 4 23:00:36 2025 GMT
Not After : May 5 23:00:36 2025 GMT
Subject: CN=13a8a64991dadc9d8626c2228a14dcc32eb3e94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:95:df:30:2a:66:b8:82:7c:0d:ea:53:6c:
e4:7a:7e:50:d9:19:e8:8b:9f:26:49:8a:ab:1d:fd:
ea:b2:ad:f6:56:ed:79:1d:78:c7:aa:de:99:08:ed:
6f:9b:74:a8:3f:6e:b4:bd:02:46:88:9b:c0:06:c3:
e7:18:8f:97:df:25:74:1c:4a:40:f5:af:f3:49:94:
9e:76:cc:ec:99:d3:53:7c:bc:4a:25:d6:b6:0d:dc:
f8:55:b2:0c:c2:47:e2:69:1a:3d:90:6a:83:8d:dd:
36:b3:e6:75:c8:3c:18:05:d7:91:42:32:ac:55:f1:
fa:ec:c3:85:aa:41:a8:75:cd:54:2e:c2:50:63:bf:
09:dc:48:11:34:d2:ed:ee:6e:36:91:1e:6d:78:46:
53:dc:28:45:6b:e6:71:bb:02:84:03:e5:f0:aa:b0:
ec:80:92:0f:7f:2b:dd:f8:54:b3:c7:d2:19:a0:f7:
84:0c:a5:c5:4b:c0:01:6c:75:64:23:0f:22:78:1c:
68:9d:7d:62:41:7a:bb:65:fe:25:e4:3a:40:91:20:
6f:2b:94:f2:f8:df:8f:cb:56:27:c6:4e:c9:21:9f:
c2:6a:31:b9:ba:08:a8:0d:c2:31:a5:71:e5:06:f1:
40:19:36:99:01:ff:58:48:e5:fd:b4:a3:bb:cf:42:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:A6:49:91:DA:DC:9D:86:26:C2:22:8A:14:DC:C3:2E:B3:E9:4F
X509v3 Authority Key Identifier:
keyid:65:10:C2:6F:3A:4F:AC:70:0A:C7:B0:E3:49:0B:8F:A1:75:F0:8A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRDCbzpPrHAKx7DjSQuPoXXwitg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/026ed8-ab9c-4753-9b20-2ba9d516f944/1/ZRDCbzpPrHAKx7DjSQuPoXXwitg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ba:5f:d4:e0:93:b2:97:91:81:05:49:ff:11:ef:e4:99:ff:
c9:9a:fa:cf:5d:8d:63:a5:a9:99:17:c6:78:1b:83:e3:f9:ee:
28:f0:7f:61:b3:07:ad:dd:61:2c:36:8e:32:d4:d0:c2:76:34:
b5:4f:ae:46:c3:b2:67:d6:4a:bf:0a:f9:1c:8b:7c:c8:60:2c:
a7:79:f8:6e:d3:2d:a6:93:04:e1:ef:20:75:86:8b:a0:7a:d0:
ea:3e:98:11:1e:2d:d6:e7:02:13:ba:6e:d1:ce:a5:76:b6:57:
99:de:49:a7:b7:d8:76:55:1f:fc:0b:fb:93:d9:3f:04:55:b7:
76:bf:c0:a9:52:4d:52:67:3d:4b:e0:e1:d3:3f:8a:93:41:36:
5b:55:6b:20:c1:67:cc:2e:6a:cc:99:2e:79:8e:40:aa:4a:fc:
63:4a:6e:ed:b4:53:2f:da:ab:52:80:f5:77:4e:ef:38:36:df:
50:2f:f8:03:13:80:27:50:6c:c4:f9:28:8c:6d:4d:bb:c5:b5:
91:a0:1c:66:20:18:ec:71:60:96:4d:cb:04:6c:83:61:88:9b:
e7:e5:93:35:c5:fd:1d:49:7d:42:02:d6:e1:30:e8:bc:39:cf:
0f:51:18:16:51:bf:f9:34:e0:4d:f4:65:a7:f7:b7:31:d8:24:
c5:42:8a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadh6vJmutBZYhEvfFSMtG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTBjMjZmM2E0ZmFjNzAwYWM3YjBlMzQ5MGI4ZmExNzVm
MDhhZDgwHhcNMjUwNTA0MjMwMDM2WhcNMjUwNTA1MjMwMDM2WjAzMTEwLwYDVQQD
EygxM2E4YTY0OTkxZGFkYzlkODYyNmMyMjI4YTE0ZGNjMzJlYjNlOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0GV3zAqZriCfA3qU2zken5Q2Rno
i58mSYqrHf3qsq32Vu15HXjHqt6ZCO1vm3SoP260vQJGiJvABsPnGI+X3yV0HEpA
9a/zSZSedszsmdNTfLxKJda2Ddz4VbIMwkfiaRo9kGqDjd02s+Z1yDwYBdeRQjKs
VfH67MOFqkGodc1ULsJQY78J3EgRNNLt7m42kR5teEZT3ChFa+ZxuwKEA+XwqrDs
gJIPfyvd+FSzx9IZoPeEDKXFS8ABbHVkIw8ieBxonX1iQXq7Zf4l5DpAkSBvK5Ty
+N+Py1Ynxk7JIZ/CajG5ugioDcIxpXHlBvFAGTaZAf9YSOX9tKO7z0L19wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOopkmR2tydhibCIooU3MMus+lPMB8GA1UdIwQY
MBaAFGUQwm86T6xwCsew40kLj6F18IrYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAt
MmJhOWQ1MTZmOTQ0LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wMjZlZDgtYWI5Yy00NzUzLTliMjAtMmJhOWQ1MTZmOTQ0
LzEvWlJEQ2J6cFBySEFLeDdEalNRdVBvWFh3aXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7pf1OCT
speRgQVJ/xHv5Jn/yZr6z12NY6WpmRfGeBuD4/nuKPB/YbMHrd1hLDaOMtTQwnY0
tU+uRsOyZ9ZKvwr5HIt8yGAsp3n4btMtppME4e8gdYaLoHrQ6j6YER4t1ucCE7pu
0c6ldrZXmd5Jp7fYdlUf/Av7k9k/BFW3dr/AqVJNUmc9S+Dh0z+Kk0E2W1VrIMFn
zC5qzJkueY5Aqkr8Y0pu7bRTL9qrUoD1d07vODbfUC/4AxOAJ1BsxPkojG1Nu8W1
kaAcZiAY7HFglk3LBGyDYYib5+WTNcX9HUl9QgLW4TDovDnPD1EYFlG/+TTgTfRl
p/e3MdgkxUKKbw==
-----END CERTIFICATE-----
Generated at Mon May 5 08:34:04 2025 by rpki-client