Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
File: IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft (raw, json)
Hash identifier: oSC/la91lknDMx4CYuI5iYHjFisXHcZr04wJsnhLGsA=
Subject key identifier: 53:C7:82:F6:D4:C3:97:28:A7:AF:18:40:DE:A2:12:15:F1:C6:27:12
Authority key identifier: 21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
Certificate issuer: /CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Certificate serial: 0196BDB7272C2DC233B0F0D4AFC325922836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
Manifest number: E7
Signing time: Sun 11 May 2025 05:00:18 +0000
Manifest this update: Sun 11 May 2025 05:00:18 +0000
Manifest next update: Mon 12 May 2025 05:00:18 +0000
Files and hashes: 1: IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl (hash: WiPYkFOoiGe7ekSXRUcYrKmNy6Zq1jjjN/lofJ3UDis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:27:2c:2d:c2:33:b0:f0:d4:af:c3:25:92:28:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219b7c145e0acf8148418d54247dfddffc19fa4c
Validity
Not Before: May 11 05:00:18 2025 GMT
Not After : May 12 05:00:18 2025 GMT
Subject: CN=53c782f6d4c39728a7af1840dea21215f1c62712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:46:94:31:42:9c:4b:41:ba:50:92:c8:71:
17:68:8b:e6:42:71:d5:75:5e:21:92:11:9b:da:7b:
15:87:51:90:fc:b6:9b:28:df:72:19:d1:46:c6:34:
d4:2d:8a:72:30:ef:4f:91:80:9a:78:27:55:a4:a2:
47:7b:bb:b7:4b:e4:c3:f1:1f:06:f4:fe:1a:47:07:
ab:37:9f:79:99:8f:14:12:6d:8b:93:a9:c0:86:a5:
a8:bd:43:61:95:74:0c:50:3c:f8:59:34:f4:16:d6:
12:df:62:f7:6c:48:07:47:7e:2f:d3:df:7c:ba:7d:
4b:2a:e9:ab:70:05:9e:79:8e:a2:de:da:79:c3:b1:
c6:79:41:b2:ba:7d:44:53:a4:6a:1e:f3:5d:d8:e1:
62:cb:3a:16:ef:1b:0a:d5:c4:fb:c8:ab:69:f5:a8:
f1:4d:38:39:2d:a3:56:55:63:3b:22:29:66:d3:e4:
90:46:5b:bd:69:53:34:fd:d8:4f:60:f2:8c:60:9e:
4f:4f:93:0d:e9:ec:75:98:7c:8e:85:f6:10:09:39:
1d:89:0b:ba:70:78:a8:50:0d:20:bb:92:0d:61:64:
0d:66:ee:16:74:e5:70:a9:37:32:64:3d:5d:6b:37:
4a:ad:b5:ab:ac:19:d0:82:f2:9e:9d:23:43:aa:e2:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C7:82:F6:D4:C3:97:28:A7:AF:18:40:DE:A2:12:15:F1:C6:27:12
X509v3 Authority Key Identifier:
keyid:21:9B:7C:14:5E:0A:CF:81:48:41:8D:54:24:7D:FD:DF:FC:19:FA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZt8FF4Kz4FIQY1UJH393_wZ-kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/fa1004-e450-41ec-9d5e-4a1f7c1bdf78/1/IZt8FF4Kz4FIQY1UJH393_wZ-kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:42:85:77:cb:6e:e6:e9:08:4b:87:9c:73:15:0a:29:c4:d0:
4a:fe:d9:cc:e1:a6:d7:77:9a:d0:af:ea:88:f4:e8:fc:51:88:
83:36:aa:85:94:5e:78:45:41:f4:c4:d6:e8:bb:15:4f:e0:9c:
9a:dc:d5:2b:38:3a:63:79:4e:b0:0c:aa:5c:80:32:2b:09:bc:
94:7a:dc:b6:b5:ab:45:19:81:93:77:18:5b:56:ac:23:d6:96:
0e:ff:a3:90:bb:be:82:7f:0d:b0:54:45:50:eb:4a:a2:60:97:
95:f1:51:11:65:64:2c:31:85:44:ef:d3:f9:d8:fe:14:ac:43:
2e:30:a3:f6:36:17:0f:24:19:54:d1:3b:01:66:67:cc:8f:5f:
19:01:84:57:67:bd:3f:b8:63:e8:04:ec:80:05:8f:d0:2f:a9:
72:86:25:9a:54:2e:50:69:30:d8:dc:a3:01:27:21:b5:93:e4:
64:e1:2f:19:dd:49:c6:f2:00:50:68:f6:b5:04:7d:dc:56:26:
d0:f0:21:66:5c:27:d8:d5:4d:9d:f6:0c:f0:f4:4a:72:7a:1e:
09:04:b9:ae:7c:fa:55:c3:99:c0:78:78:30:7e:7c:a7:85:c8:
2f:f1:1e:02:7b:a1:7e:66:0f:51:72:a6:c4:ce:2d:a5:f8:fc:
64:77:4e:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9tycsLcIzsPDUr8Mlkig2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOWI3YzE0NWUwYWNmODE0ODQxOGQ1NDI0N2RmZGRmZmMx
OWZhNGMwHhcNMjUwNTExMDUwMDE4WhcNMjUwNTEyMDUwMDE4WjAzMTEwLwYDVQQD
Eyg1M2M3ODJmNmQ0YzM5NzI4YTdhZjE4NDBkZWEyMTIxNWYxYzYyNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxslGlDFCnEtBulCSyHEXaIvmQnHV
dV4hkhGb2nsVh1GQ/LabKN9yGdFGxjTULYpyMO9PkYCaeCdVpKJHe7u3S+TD8R8G
9P4aRwerN595mY8UEm2Lk6nAhqWovUNhlXQMUDz4WTT0FtYS32L3bEgHR34v0998
un1LKumrcAWeeY6i3tp5w7HGeUGyun1EU6RqHvNd2OFiyzoW7xsK1cT7yKtp9ajx
TTg5LaNWVWM7Iilm0+SQRlu9aVM0/dhPYPKMYJ5PT5MN6ex1mHyOhfYQCTkdiQu6
cHioUA0gu5INYWQNZu4WdOVwqTcyZD1dazdKrbWrrBnQgvKenSNDquIcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPHgvbUw5cop68YQN6iEhXxxicSMB8GA1UdIwQY
MBaAFCGbfBReCs+BSEGNVCR9/d/8GfpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9mYTEwMDQtZTQ1MC00MWVjLTlkNWUt
NGExZjdjMWJkZjc4LzEvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9mYTEwMDQtZTQ1MC00MWVjLTlkNWUtNGExZjdjMWJkZjc4
LzEvSVp0OEZGNEt6NEZJUVkxVUpIMzkzX3daLWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0KFd8tu
5ukIS4eccxUKKcTQSv7ZzOGm13ea0K/qiPTo/FGIgzaqhZReeEVB9MTW6LsVT+Cc
mtzVKzg6Y3lOsAyqXIAyKwm8lHrctrWrRRmBk3cYW1asI9aWDv+jkLu+gn8NsFRF
UOtKomCXlfFREWVkLDGFRO/T+dj+FKxDLjCj9jYXDyQZVNE7AWZnzI9fGQGEV2e9
P7hj6ATsgAWP0C+pcoYlmlQuUGkw2NyjASchtZPkZOEvGd1JxvIAUGj2tQR93FYm
0PAhZlwn2NVNnfYM8PRKcnoeCQS5rnz6VcOZwHh4MH58p4XIL/EeAnuhfmYPUXKm
xM4tpfj8ZHdObA==
-----END CERTIFICATE-----
Generated at Sun May 11 12:46:45 2025 by rpki-client