Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: iS6xDbA9aewia0O/r9nVt6r+UFCNAH5/xdhnWA7/W7g=
Subject key identifier: 17:A7:07:AF:33:BD:69:8F:68:FF:6C:F4:6C:DF:8D:F2:96:B4:10:14
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 0196CF86EA429846A6E65805DA539AC66677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 16:00:47 +0000
Manifest this update: Wed 14 May 2025 16:00:47 +0000
Manifest next update: Thu 15 May 2025 16:00:47 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: l1A06Gy7Qe/W64KuvonX6v2LRPORnHHZIgZKB1+p9JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:86:ea:42:98:46:a6:e6:58:05:da:53:9a:c6:66:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: May 14 16:00:47 2025 GMT
Not After : May 15 16:00:47 2025 GMT
Subject: CN=17a707af33bd698f68ff6cf46cdf8df296b41014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:d9:38:8f:7a:b7:a6:4a:9c:d2:48:e0:63:
69:9f:a3:48:67:30:a3:ce:7f:7c:b3:81:12:b7:71:
1f:c8:f4:e0:ca:d4:93:7b:50:5f:35:c8:9f:a1:4c:
ff:49:11:66:74:d1:99:6c:55:06:51:7d:68:30:14:
72:81:2d:ca:4d:42:27:10:96:96:fd:55:58:77:2f:
df:39:f5:91:d5:86:3e:d5:65:cb:a4:24:48:25:d8:
cc:c9:6a:99:05:e2:d7:31:46:fb:23:43:0d:b6:fe:
8a:46:4f:6e:49:d1:a4:2b:cf:b6:cb:f2:19:e0:12:
5d:d9:64:a1:d4:66:cb:41:b3:a8:33:9c:7f:02:4a:
99:18:d5:02:e2:c7:4f:d8:0f:ce:7d:3e:76:09:2c:
91:41:e4:ed:44:56:1d:ce:6b:99:ff:55:0e:da:f7:
e7:69:b6:b8:d5:4d:65:da:9c:af:eb:38:82:9c:ce:
3f:75:34:06:0b:56:17:99:93:9a:00:05:61:72:85:
a6:b7:b4:28:e5:ee:d3:7e:c8:c0:6f:07:89:a1:24:
27:04:37:0b:e7:91:5b:ba:58:8f:37:62:72:48:2f:
84:04:13:9f:b1:09:37:05:53:32:f6:2c:8a:bb:38:
da:24:ab:1f:14:d6:c2:5f:5f:e3:b0:a6:7a:8a:28:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A7:07:AF:33:BD:69:8F:68:FF:6C:F4:6C:DF:8D:F2:96:B4:10:14
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:ea:a7:e0:60:d1:07:2d:80:f3:32:05:f5:0d:95:d8:55:
aa:7a:72:1b:b7:90:a6:57:ed:f5:20:92:d6:2f:00:91:83:e1:
61:cd:2a:1e:e8:e6:2e:93:e9:0d:d9:16:f8:1e:76:9a:9f:fe:
8e:e7:18:e8:85:5c:0d:01:04:a0:a5:5f:b8:16:14:c9:94:96:
6c:6d:21:41:5b:d0:3d:64:96:dd:19:ea:d3:e2:fd:c6:34:9c:
6b:67:c1:91:6a:57:a0:5e:05:ce:d3:21:bc:43:53:2b:84:27:
42:39:a8:5b:f6:05:95:af:c6:db:f4:bc:a0:63:5c:42:57:cf:
f0:d5:cf:d9:85:d8:49:ee:05:78:8f:b2:d9:1b:ee:1f:da:f5:
13:74:b7:d5:ad:20:50:c2:ac:37:e4:a9:42:b7:73:d1:1a:63:
b5:53:c8:2b:ab:3a:00:b2:ba:65:20:7d:ea:99:4c:85:06:5e:
76:4e:03:4d:e3:43:1e:1d:e4:6c:d9:d5:c0:b9:b6:41:2b:48:
0d:73:84:4d:e0:1f:dc:8e:ac:34:81:7e:70:69:25:98:41:78:
5f:a6:90:3c:4a:fc:0d:0b:2c:87:cd:ff:b3:3d:17:b4:b4:98:
f9:e6:59:ad:8a:2b:10:07:55:65:b2:0a:54:5c:d0:9d:6b:a2:
b8:e2:d5:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPhupCmEam5lgF2lOaxmZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZWZlYjMyZWE3OTRjOTQ1MDkyMDg5YWU1YzEzNTAyZjc3
MTZjZGUwHhcNMjUwNTE0MTYwMDQ3WhcNMjUwNTE1MTYwMDQ3WjAzMTEwLwYDVQQD
EygxN2E3MDdhZjMzYmQ2OThmNjhmZjZjZjQ2Y2RmOGRmMjk2YjQxMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yzZOI96t6ZKnNJI4GNpn6NIZzCj
zn98s4ESt3EfyPTgytSTe1BfNcifoUz/SRFmdNGZbFUGUX1oMBRygS3KTUInEJaW
/VVYdy/fOfWR1YY+1WXLpCRIJdjMyWqZBeLXMUb7I0MNtv6KRk9uSdGkK8+2y/IZ
4BJd2WSh1GbLQbOoM5x/AkqZGNUC4sdP2A/OfT52CSyRQeTtRFYdzmuZ/1UO2vfn
aba41U1l2pyv6ziCnM4/dTQGC1YXmZOaAAVhcoWmt7Qo5e7TfsjAbweJoSQnBDcL
55FbuliPN2JySC+EBBOfsQk3BVMy9iyKuzjaJKsfFNbCX1/jsKZ6iihQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBenB68zvWmPaP9s9GzfjfKWtBAUMB8GA1UdIwQY
MBaAFCPv6zLqeUyUUJIImuXBNQL3cWzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYt
ZGZiZDViNWVhNzYwLzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8yMDUyZjMtMmJlMS00MTdhLWE0MTYtZGZiZDViNWVhNzYw
LzEvSS1fck11cDVUSlJRa2dpYTVjRTFBdmR4Yk40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohXqp+Bg
0QctgPMyBfUNldhVqnpyG7eQplft9SCS1i8AkYPhYc0qHujmLpPpDdkW+B52mp/+
jucY6IVcDQEEoKVfuBYUyZSWbG0hQVvQPWSW3Rnq0+L9xjSca2fBkWpXoF4FztMh
vENTK4QnQjmoW/YFla/G2/S8oGNcQlfP8NXP2YXYSe4FeI+y2RvuH9r1E3S31a0g
UMKsN+SpQrdz0RpjtVPIK6s6ALK6ZSB96plMhQZedk4DTeNDHh3kbNnVwLm2QStI
DXOETeAf3I6sNIF+cGklmEF4X6aQPEr8DQssh83/sz0XtLSY+eZZrYorEAdVZbIK
VFzQnWuiuOLVqA==
-----END CERTIFICATE-----
Generated at Wed May 14 22:00:52 2025 by rpki-client