Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: ho74qTmbQYKBtzUsknI6Z7q1neb/ssN2OM2kT+9iJw4=
Subject key identifier: 5E:1F:B6:8A:11:15:29:01:47:28:91:04:79:64:2C:5D:CC:B2:D1:EF
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 01969F0861188F17FD3CCDF89C8DD876CF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 0861
Signing time: Mon 05 May 2025 06:00:48 +0000
Manifest this update: Mon 05 May 2025 06:00:48 +0000
Manifest next update: Tue 06 May 2025 06:00:48 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: l6vZgLPH7tfld3ZU/k27HA5MknDezpuuPPGbsagvt9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:61:18:8f:17:fd:3c:cd:f8:9c:8d:d8:76:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: May 5 06:00:48 2025 GMT
Not After : May 6 06:00:48 2025 GMT
Subject: CN=5e1fb68a111529014728910479642c5dccb2d1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:8c:92:50:f2:b5:c1:01:cd:95:4b:6e:b9:
49:06:84:8c:09:12:5d:2b:e3:93:d2:fb:8c:eb:9a:
67:df:38:26:09:89:37:dd:55:17:6a:74:6a:0e:50:
bc:2d:c9:65:b9:7d:94:73:55:f6:00:1c:86:46:68:
85:2b:49:6f:19:f6:f3:e4:f0:46:f0:c7:a0:d4:53:
b9:7f:4a:b4:f0:9c:a5:84:e0:bf:19:13:84:43:d1:
25:00:8e:ee:a3:15:54:bf:21:8a:57:16:23:bd:f8:
c3:90:5d:22:e3:db:3c:c8:d1:f2:e2:43:eb:ca:af:
78:01:28:87:3a:84:86:a2:5c:93:e7:c4:84:75:a1:
94:a1:58:66:59:47:8d:d0:7d:10:ff:ea:30:e9:af:
55:35:27:2c:50:ba:15:e5:82:eb:c5:0b:d3:fe:8c:
6b:47:b2:7d:4b:c2:54:1c:86:81:91:eb:52:91:61:
5b:51:8b:39:9c:3c:ab:6a:3c:be:ff:d5:85:49:03:
58:7e:93:d0:34:b3:50:67:e2:de:2a:47:6b:55:ab:
fb:10:ff:fc:7b:fc:66:a7:d1:45:bb:32:d9:5d:40:
f9:60:5c:be:79:63:f0:9c:5d:fa:e7:2f:02:7f:43:
d8:bd:df:e9:ea:ff:b3:35:00:12:98:01:0c:52:46:
8b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:B6:8A:11:15:29:01:47:28:91:04:79:64:2C:5D:CC:B2:D1:EF
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:04:4e:de:3f:77:15:ce:5b:1b:f4:3d:40:34:5e:c2:7e:a0:
28:b6:ba:24:a7:ae:8f:1f:59:ff:46:7a:32:21:48:71:67:3b:
3f:16:f7:fe:e5:19:b0:01:dc:c7:ab:fa:66:dc:6f:bd:9f:3f:
cd:eb:22:3c:0a:54:b1:c6:04:72:30:4c:5a:10:2a:2f:cc:04:
82:79:5c:3c:fc:14:21:e7:58:7b:57:83:fb:c7:96:10:d1:b5:
6f:15:be:fb:a5:09:db:33:82:d8:23:ad:9b:60:31:20:fb:88:
26:fe:54:73:cf:fc:dc:0d:48:39:70:c2:cf:0c:7b:fe:63:33:
98:0b:b0:b5:45:dd:ec:e7:3b:2e:19:5b:c3:dd:cc:c2:05:19:
60:d7:80:5a:3d:a6:1e:65:f6:f7:13:39:52:bb:5e:0f:54:26:
5b:df:91:e6:ee:13:2a:2d:4e:1d:12:32:6a:64:81:6e:8a:30:
c9:e8:f2:c8:31:10:36:25:8b:ee:1d:68:a6:39:78:2a:8f:1a:
d2:8c:71:b5:10:f9:3c:f5:69:8f:d0:94:b1:f4:28:e5:2a:6f:
0e:0d:3b:ac:2f:fa:2c:ca:ef:da:29:a8:1e:fa:f7:36:03:6d:
f6:be:fd:8d:e6:ad:15:c5:cb:d4:e8:a9:1f:ce:7c:8b:8f:98:
b8:9b:6e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCGEYjxf9PM34nI3Yds+WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDJiNGRhMGFlYTU3OGNhMjdmMjVkZWIwY2ZlZDYxYTgw
YjllYTIwHhcNMjUwNTA1MDYwMDQ4WhcNMjUwNTA2MDYwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZTFmYjY4YTExMTUyOTAxNDcyODkxMDQ3OTY0MmM1ZGNjYjJkMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/OMklDytcEBzZVLbrlJBoSMCRJd
K+OT0vuM65pn3zgmCYk33VUXanRqDlC8LclluX2Uc1X2AByGRmiFK0lvGfbz5PBG
8Meg1FO5f0q08JylhOC/GROEQ9ElAI7uoxVUvyGKVxYjvfjDkF0i49s8yNHy4kPr
yq94ASiHOoSGolyT58SEdaGUoVhmWUeN0H0Q/+ow6a9VNScsULoV5YLrxQvT/oxr
R7J9S8JUHIaBketSkWFbUYs5nDyrajy+/9WFSQNYfpPQNLNQZ+LeKkdrVav7EP/8
e/xmp9FFuzLZXUD5YFy+eWPwnF365y8Cf0PYvd/p6v+zNQASmAEMUkaLmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4ftooRFSkBRyiRBHlkLF3MstHvMB8GA1UdIwQY
MBaAFP5CtNoK6leMon8l3rDP7WGoC56iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjIt
NjhmMzJlYTlmMGE3LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjItNjhmMzJlYTlmMGE3
LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwRO3j93
Fc5bG/Q9QDRewn6gKLa6JKeujx9Z/0Z6MiFIcWc7Pxb3/uUZsAHcx6v6ZtxvvZ8/
zesiPApUscYEcjBMWhAqL8wEgnlcPPwUIedYe1eD+8eWENG1bxW++6UJ2zOC2COt
m2AxIPuIJv5Uc8/83A1IOXDCzwx7/mMzmAuwtUXd7Oc7Lhlbw93MwgUZYNeAWj2m
HmX29xM5UrteD1QmW9+R5u4TKi1OHRIyamSBboowyejyyDEQNiWL7h1opjl4Ko8a
0oxxtRD5PPVpj9CUsfQo5SpvDg07rC/6LMrv2imoHvr3NgNt9r79jeatFcXL1Oip
H858i4+YuJtuEg==
-----END CERTIFICATE-----
Generated at Mon May 5 10:40:54 2025 by rpki-client