Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: vX22tKcZqG6vzCnrO6bNKkesMA+G1IjNxztqgJ28GQE=
Subject key identifier: C9:18:7A:7D:B0:88:78:F3:87:95:4E:59:2D:2F:B3:B7:68:56:33:93
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 0196B3D82B3A9F642FD25A70CD2153E81538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 1529
Signing time: Fri 09 May 2025 07:00:10 +0000
Manifest this update: Fri 09 May 2025 07:00:10 +0000
Manifest next update: Sat 10 May 2025 07:00:10 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: rcl6p75MeQPu6s2/ZyPNC29WvWJ0otLMjiBpMQKFKVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d8:2b:3a:9f:64:2f:d2:5a:70:cd:21:53:e8:15:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: May 9 07:00:10 2025 GMT
Not After : May 10 07:00:10 2025 GMT
Subject: CN=c9187a7db08878f387954e592d2fb3b768563393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:e5:c3:9b:b1:de:1d:d8:91:98:4b:e5:2d:
7c:07:c2:3c:92:3f:f0:ff:13:6a:43:94:5b:a8:89:
c5:6f:ec:9d:f9:ef:47:f0:2f:c5:0e:ee:28:f5:4e:
df:7a:1e:29:a9:2c:2b:0d:b1:8c:b3:73:11:06:f8:
0d:ee:71:7a:0e:70:19:d7:c9:6c:41:f4:49:7d:e9:
c1:68:c0:5c:86:69:26:5b:09:6d:fd:c3:c9:16:59:
a7:2e:21:48:3e:5e:e8:ed:22:ce:c8:52:19:d6:37:
3f:06:ac:94:dc:b3:90:54:4c:ce:85:9d:f0:33:c4:
f4:7e:e6:5d:38:3a:eb:5f:de:e0:ad:d8:a7:cc:0d:
ac:50:52:48:e9:41:eb:ff:0a:65:b7:12:ed:5e:c0:
e8:e1:ed:2f:da:05:65:17:2e:47:b4:ec:c3:b2:c6:
ef:1f:12:56:da:38:5d:ee:86:f0:3e:7e:f3:a6:f2:
09:75:4e:e0:25:34:d0:59:c7:e7:0b:f7:7c:e4:b1:
15:7d:55:58:81:2c:b9:27:c3:41:f0:4b:1c:09:4e:
a0:cf:7f:d2:44:c2:3f:c8:e6:0e:43:ad:81:63:cf:
71:85:b5:fe:7a:b1:94:f0:a8:19:4e:63:c6:3c:59:
fe:58:26:e9:b3:bd:a6:0d:ca:e3:d5:4f:16:f6:99:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:7A:7D:B0:88:78:F3:87:95:4E:59:2D:2F:B3:B7:68:56:33:93
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:44:f2:7f:cc:c2:92:76:e4:c0:6b:72:cf:54:a3:e6:4e:
e4:3c:00:43:16:8d:d6:2d:99:b0:b7:37:41:fd:ca:18:37:66:
1b:8d:41:17:cd:e4:f0:5d:a5:8f:83:6b:73:72:93:39:4e:db:
2e:9b:b4:7e:77:81:58:12:4e:a1:0f:84:9e:a3:9d:06:ad:ce:
6f:03:9b:b6:3f:41:92:fb:56:c9:50:20:e1:51:f0:10:08:04:
f6:f8:7e:27:c9:e3:10:fc:7c:b6:4c:cb:8b:7e:26:45:97:d8:
10:a1:d5:40:cb:07:8b:03:23:ed:07:54:6c:67:9a:ea:85:3a:
14:bd:dc:64:af:6b:e9:ab:ca:c3:47:0c:10:86:f1:cb:cc:7f:
0f:6e:d9:e2:81:36:96:36:c6:04:4f:04:74:6d:77:c7:01:34:
7e:c6:0c:69:af:9e:6a:98:83:5c:25:a6:9f:ba:50:07:7b:d3:
4a:a9:30:1b:76:db:c9:53:a0:c7:37:f0:fc:3f:8a:01:09:45:
76:ff:49:fc:b6:a3:67:49:7e:ca:41:8c:47:0d:30:04:12:d5:
e8:c4:81:a8:db:18:11:03:08:fc:7b:ca:ae:60:cc:59:50:a3:
36:d9:2c:cb:b1:e2:68:7b:ea:00:74:b1:6d:e2:ec:d9:4a:52:
e7:f6:de:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2Cs6n2Qv0lpwzSFT6BU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmFiMzI2ODA4NTMwOGExZjhkNTcwODRiOWRhYTFlYmY5
NWUwZGMwHhcNMjUwNTA5MDcwMDEwWhcNMjUwNTEwMDcwMDEwWjAzMTEwLwYDVQQD
EyhjOTE4N2E3ZGIwODg3OGYzODc5NTRlNTkyZDJmYjNiNzY4NTYzMzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TXlw5ux3h3YkZhL5S18B8I8kj/w
/xNqQ5RbqInFb+yd+e9H8C/FDu4o9U7feh4pqSwrDbGMs3MRBvgN7nF6DnAZ18ls
QfRJfenBaMBchmkmWwlt/cPJFlmnLiFIPl7o7SLOyFIZ1jc/BqyU3LOQVEzOhZ3w
M8T0fuZdODrrX97grdinzA2sUFJI6UHr/wpltxLtXsDo4e0v2gVlFy5HtOzDssbv
HxJW2jhd7obwPn7zpvIJdU7gJTTQWcfnC/d85LEVfVVYgSy5J8NB8EscCU6gz3/S
RMI/yOYOQ62BY89xhbX+erGU8KgZTmPGPFn+WCbps72mDcrj1U8W9plNcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkYen2wiHjzh5VOWS0vs7doVjOTMB8GA1UdIwQY
MBaAFHC6syaAhTCKH41XCEudqh6/leDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82ZmQzZWYtZDU1OC00ZTcwLWEyMTQt
NTJhZWZiNjU2OGFlLzEvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82ZmQzZWYtZDU1OC00ZTcwLWEyMTQtNTJhZWZiNjU2OGFl
LzEvY0xxekpvQ0ZNSW9malZjSVM1MnFIci1WNE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAappE8n/M
wpJ25MBrcs9Uo+ZO5DwAQxaN1i2ZsLc3Qf3KGDdmG41BF83k8F2lj4Nrc3KTOU7b
Lpu0fneBWBJOoQ+EnqOdBq3ObwObtj9BkvtWyVAg4VHwEAgE9vh+J8njEPx8tkzL
i34mRZfYEKHVQMsHiwMj7QdUbGea6oU6FL3cZK9r6avKw0cMEIbxy8x/D27Z4oE2
ljbGBE8EdG13xwE0fsYMaa+eapiDXCWmn7pQB3vTSqkwG3bbyVOgxzfw/D+KAQlF
dv9J/LajZ0l+ykGMRw0wBBLV6MSBqNsYEQMI/HvKrmDMWVCjNtksy7HiaHvqAHSx
beLs2UpS5/beFQ==
-----END CERTIFICATE-----
Generated at Fri May 9 13:33:56 2025 by rpki-client