Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json)
Hash identifier: /lEyYQ6SotLmJ4o7QRyzZm/vqm+f/Q7J52quaa6aETg=
Subject key identifier: 1F:0A:DE:B8:73:89:98:6E:A4:1C:7D:A0:1C:D3:74:E4:1C:7F:05:81
Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Certificate serial: 0196C53AEE04D6D36E7D15BC7EAC496AEF76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
Manifest number: 05CF
Signing time: Mon 12 May 2025 16:01:35 +0000
Manifest this update: Mon 12 May 2025 16:01:35 +0000
Manifest next update: Tue 13 May 2025 16:01:35 +0000
Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: sN0mHWHB7P4D38sTp2F+MKjkpbUFTIN4z3VlcaCP5f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:ee:04:d6:d3:6e:7d:15:bc:7e:ac:49:6a:ef:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce
Validity
Not Before: May 12 16:01:35 2025 GMT
Not After : May 13 16:01:35 2025 GMT
Subject: CN=1f0adeb87389986ea41c7da01cd374e41c7f0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:de:3d:c8:dd:69:0a:e3:97:f6:92:c7:0c:
46:42:27:37:64:32:77:f2:99:15:ce:f7:b4:71:b8:
f0:8d:41:91:5e:89:28:c6:1c:0b:7c:c3:53:1f:71:
60:f8:2b:5a:67:d8:b1:f4:02:79:fa:dd:7a:d6:c1:
36:c9:e8:bb:07:11:d9:61:97:04:0e:d7:ee:04:9b:
37:39:26:31:a3:59:76:f8:57:54:de:10:d8:cc:27:
b9:9a:c6:93:0d:06:3c:3f:88:d6:07:41:84:aa:8e:
08:a0:21:4d:4a:ff:0e:d5:2f:4b:9e:47:f2:a9:9d:
69:c4:dd:8b:75:79:43:a8:ef:44:3e:0c:b6:71:1d:
2b:3c:aa:58:a3:b4:bc:51:ab:08:64:b4:c5:eb:97:
09:71:b0:3d:fe:4b:1c:93:6e:d9:7d:ab:b4:c6:42:
e4:4d:5d:a7:73:f6:7e:4c:c2:ee:e6:50:87:b3:36:
61:79:89:07:c0:7f:5b:c3:f1:07:90:ca:63:e3:b3:
83:a2:ca:4a:9e:d8:eb:93:c1:32:eb:27:f5:c9:25:
dc:01:5f:9c:6e:36:dd:cd:de:6a:e5:21:2e:e1:04:
1a:c0:ab:2b:7e:ac:6f:48:67:c7:cc:2e:b0:ee:01:
88:04:bf:85:f0:f3:cd:2d:b9:e3:df:2f:86:d6:0a:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:DE:B8:73:89:98:6E:A4:1C:7D:A0:1C:D3:74:E4:1C:7F:05:81
X509v3 Authority Key Identifier:
keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7a:21:a5:82:97:b3:06:c5:0f:8c:39:8c:0c:67:f6:5d:86:
26:16:35:94:3b:c9:54:6d:a6:d5:1d:04:aa:f4:bb:19:2e:08:
42:77:c4:6c:c3:9a:52:2e:8f:36:10:56:fe:b4:5e:d3:e9:49:
c7:d5:66:06:6e:2a:81:8c:cc:0a:d9:16:f2:06:c7:41:1e:bf:
b5:ca:7a:2a:fb:86:61:d2:94:47:69:e6:67:55:59:76:37:23:
e4:26:95:1e:0e:f3:e9:cf:5d:34:22:02:63:f8:65:a7:33:ac:
29:bb:50:09:81:3f:f2:d2:ce:0e:8f:37:13:6c:ad:f6:58:bf:
24:4b:06:1b:ba:0b:98:37:4d:e3:89:d7:12:58:34:d0:4d:90:
7b:60:85:bf:e6:f1:33:e6:94:a0:93:89:4a:0e:f2:f1:70:f2:
5e:ff:6e:76:f8:af:65:a1:72:b8:ee:16:65:ec:b6:46:43:72:
9b:60:45:97:d7:f3:d7:31:68:17:91:22:8c:9c:58:3f:e7:c8:
13:5c:b1:68:0b:91:0f:3b:89:56:24:d5:32:e6:47:f3:d2:b2:
97:45:87:fd:69:e6:53:20:84:e2:0d:b1:ad:74:69:c1:b9:dc:
f4:00:48:5e:e0:9a:30:91:ef:21:51:54:e2:89:00:a5:78:c8:
84:86:0e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOu4E1tNufRW8fqxJau92MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDJmOWFhOTFjNTM4M2IzZTcyNzU3MmViYjE5NTU5MWE4
NzYwY2UwHhcNMjUwNTEyMTYwMTM1WhcNMjUwNTEzMTYwMTM1WjAzMTEwLwYDVQQD
EygxZjBhZGViODczODk5ODZlYTQxYzdkYTAxY2QzNzRlNDFjN2YwNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5bePcjdaQrjl/aSxwxGQic3ZDJ3
8pkVzve0cbjwjUGRXokoxhwLfMNTH3Fg+CtaZ9ix9AJ5+t161sE2yei7BxHZYZcE
DtfuBJs3OSYxo1l2+FdU3hDYzCe5msaTDQY8P4jWB0GEqo4IoCFNSv8O1S9Lnkfy
qZ1pxN2LdXlDqO9EPgy2cR0rPKpYo7S8UasIZLTF65cJcbA9/ksck27Zfau0xkLk
TV2nc/Z+TMLu5lCHszZheYkHwH9bw/EHkMpj47ODospKntjrk8Ey6yf1ySXcAV+c
bjbdzd5q5SEu4QQawKsrfqxvSGfHzC6w7gGIBL+F8PPNLbnj3y+G1gq0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8K3rhziZhupBx9oBzTdOQcfwWBMB8GA1UdIwQY
MBaAFH5C+aqRxTg7PnJ1cuuxlVkah2DOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjct
N2NkNDcyODY0YmY4LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjctN2NkNDcyODY0YmY4
LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnohpYKX
swbFD4w5jAxn9l2GJhY1lDvJVG2m1R0EqvS7GS4IQnfEbMOaUi6PNhBW/rRe0+lJ
x9VmBm4qgYzMCtkW8gbHQR6/tcp6KvuGYdKUR2nmZ1VZdjcj5CaVHg7z6c9dNCIC
Y/hlpzOsKbtQCYE/8tLODo83E2yt9li/JEsGG7oLmDdN44nXElg00E2Qe2CFv+bx
M+aUoJOJSg7y8XDyXv9udvivZaFyuO4WZey2RkNym2BFl9fz1zFoF5EijJxYP+fI
E1yxaAuRDzuJViTVMuZH89Kyl0WH/WnmUyCE4g2xrXRpwbnc9ABIXuCaMJHvIVFU
4okApXjIhIYOAQ==
-----END CERTIFICATE-----
Generated at Mon May 12 17:26:55 2025 by rpki-client