Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: TaLo27DaAXfKWSkhw0eDH2jxIIVjuhDz42rW9IMy4Cg=
Subject key identifier: EE:90:48:F7:46:A7:9B:8F:DB:60:3C:E6:25:38:AD:8C:DE:7E:E3:41
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0196C201FF0E7E82C0FBEFE32879BD063A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0758
Signing time: Mon 12 May 2025 01:00:32 +0000
Manifest this update: Mon 12 May 2025 01:00:32 +0000
Manifest next update: Tue 13 May 2025 01:00:32 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: hfeYW9EQ4p+w4NPRkb9IbV4kGNYxIxBs0nuuLQ3o9mw=)
2: Pc2EUIWHtHolnHBST8NkkBublHg.roa (hash: kiUdXWLazxPlTfW1//CR94yYtQySkuU4W6TmLo2zE+c=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:01:ff:0e:7e:82:c0:fb:ef:e3:28:79:bd:06:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: May 12 01:00:32 2025 GMT
Not After : May 13 01:00:32 2025 GMT
Subject: CN=ee9048f746a79b8fdb603ce62538ad8cde7ee341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:73:d1:fb:47:92:4a:83:fc:83:62:e9:ff:
c6:e0:5b:8b:6b:3d:39:46:f4:7f:0f:e1:6c:ae:e7:
ff:fe:aa:81:c0:a2:9c:f9:2a:e1:f4:2c:5a:60:d8:
14:a9:5b:97:ad:c8:33:0f:8b:d8:80:22:5d:51:d6:
00:08:8f:ca:62:e3:73:8f:a5:28:9a:db:ee:18:3e:
34:67:af:6b:a8:f8:1d:da:93:a9:92:4b:53:29:47:
46:11:92:0a:55:60:0b:a4:50:8d:45:ec:6d:ac:56:
13:c4:7d:34:1b:b5:5f:5e:ad:4b:0d:cb:36:18:f2:
ce:fa:7c:cc:cf:76:f8:06:30:8a:f3:79:bd:c9:50:
e1:81:cd:e6:d0:fb:69:7e:ca:e2:13:c8:58:95:50:
f4:e6:e6:1f:1b:8b:db:68:b0:ed:ca:58:a8:26:f9:
3e:be:bd:18:d1:69:83:b9:2d:62:f7:3e:cf:97:b6:
6f:a8:b6:20:1a:f4:5b:d0:5b:1a:1e:ad:da:29:00:
03:f3:54:f8:c7:38:b5:e1:03:79:73:05:ee:89:7b:
9f:d2:6c:a2:06:b1:55:c8:35:64:e9:43:7a:b5:00:
0c:72:ca:4b:f9:5e:3a:4d:6e:da:31:a6:72:77:99:
52:ad:99:bc:6b:a9:f5:a1:1d:bf:84:96:b4:ef:05:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:48:F7:46:A7:9B:8F:DB:60:3C:E6:25:38:AD:8C:DE:7E:E3:41
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:0a:7e:e2:ab:2d:0d:32:55:8f:89:46:18:ea:c8:98:f3:
9f:f2:09:9e:23:d5:8d:92:17:72:08:4f:b5:28:c6:b4:f4:11:
b2:45:ec:0c:51:be:e8:54:d0:bc:b5:25:29:8d:82:ce:45:79:
aa:98:5c:37:01:7a:b9:f6:1e:3f:d9:e7:0e:73:f7:e5:82:a9:
ce:3a:73:aa:57:54:39:26:c7:5d:84:40:57:c0:0b:c4:f8:2b:
b4:59:40:b0:c5:4f:f3:52:f4:1b:a7:33:fd:38:9c:35:9e:9c:
9b:f6:21:a1:80:ae:75:23:f3:59:cf:4c:82:6c:56:83:22:f6:
48:0e:b2:c9:27:2c:3b:cb:f7:22:f7:89:f4:e0:0d:d1:30:ea:
b7:9b:47:d7:4b:95:7e:b2:f0:8b:29:f2:91:bb:02:6a:2c:db:
de:79:ec:93:41:75:1e:8d:88:f2:9c:9d:00:ab:d3:99:6f:09:
3f:d5:1d:18:f2:13:0f:53:a7:83:fd:7d:f3:ca:36:ef:02:05:
23:68:30:da:3a:3e:74:f1:cc:3e:cc:15:a1:32:d6:9c:9b:c8:
09:14:8b:f4:0f:06:be:bb:89:38:0d:1e:d1:9f:a6:91:ca:a1:
67:04:09:59:90:fb:9d:dc:cc:9f:86:ae:3e:bf:b0:a5:6f:f9:
fa:11:c5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAf8OfoLA++/jKHm9BjpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWExZjJkYmY3YjdhODRhZTU3YjhkNjc0MjZiN2U0ZTQy
MGZhYjUwHhcNMjUwNTEyMDEwMDMyWhcNMjUwNTEzMDEwMDMyWjAzMTEwLwYDVQQD
EyhlZTkwNDhmNzQ2YTc5YjhmZGI2MDNjZTYyNTM4YWQ4Y2RlN2VlMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqtz0ftHkkqD/INi6f/G4FuLaz05
RvR/D+Fsruf//qqBwKKc+Srh9CxaYNgUqVuXrcgzD4vYgCJdUdYACI/KYuNzj6Uo
mtvuGD40Z69rqPgd2pOpkktTKUdGEZIKVWALpFCNRextrFYTxH00G7VfXq1LDcs2
GPLO+nzMz3b4BjCK83m9yVDhgc3m0PtpfsriE8hYlVD05uYfG4vbaLDtylioJvk+
vr0Y0WmDuS1i9z7Pl7ZvqLYgGvRb0FsaHq3aKQAD81T4xzi14QN5cwXuiXuf0myi
BrFVyDVk6UN6tQAMcspL+V46TW7aMaZyd5lSrZm8a6n1oR2/hJa07wUnDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6QSPdGp5uP22A85iU4rYzefuNBMB8GA1UdIwQY
MBaAFAmaHy2/e3qErle41nQmt+TkIPq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAt
OWNkNjhmMjIxZTIxLzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kNDJhYmItMzM0Mi00ODg3LWFmNDAtOWNkNjhmMjIxZTIx
LzEvQ1pvZkxiOTdlb1N1VjdqV2RDYTM1T1FnLXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxoKfuKr
LQ0yVY+JRhjqyJjzn/IJniPVjZIXcghPtSjGtPQRskXsDFG+6FTQvLUlKY2CzkV5
qphcNwF6ufYeP9nnDnP35YKpzjpzqldUOSbHXYRAV8ALxPgrtFlAsMVP81L0G6cz
/TicNZ6cm/YhoYCudSPzWc9MgmxWgyL2SA6yyScsO8v3IveJ9OAN0TDqt5tH10uV
frLwiynykbsCaizb3nnsk0F1Ho2I8pydAKvTmW8JP9UdGPITD1Ong/1988o27wIF
I2gw2jo+dPHMPswVoTLWnJvICRSL9A8GvruJOA0e0Z+mkcqhZwQJWZD7ndzMn4au
Pr+wpW/5+hHFkA==
-----END CERTIFICATE-----
Generated at Mon May 12 05:33:46 2025 by rpki-client