Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
File: ge84bpUp6_89_qsXonx5OCPNPVU.mft (raw, json)
Hash identifier: 3PPUjujfRX395owxSziPCT0Dme68T8P+aqUZGbxq49A=
Subject key identifier: C7:3A:BE:85:60:50:F8:CC:0D:54:1B:E5:C7:E4:46:7C:F8:47:0B:9F
Authority key identifier: 81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
Certificate issuer: /CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Certificate serial: 0196AA30EDBD6F930B44DBD0F4F4BC89D47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
Manifest number: 01F4
Signing time: Wed 07 May 2025 10:00:55 +0000
Manifest this update: Wed 07 May 2025 10:00:55 +0000
Manifest next update: Thu 08 May 2025 10:00:55 +0000
Files and hashes: 1: ge84bpUp6_89_qsXonx5OCPNPVU.crl (hash: mDO4gw19YhX4pF01G4VCKaJ/kc0K999zHtDZ+7MqXdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:30:ed:bd:6f:93:0b:44:db:d0:f4:f4:bc:89:d4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81ef386e9529ebff3dfeab17a27c793823cd3d55
Validity
Not Before: May 7 10:00:55 2025 GMT
Not After : May 8 10:00:55 2025 GMT
Subject: CN=c73abe856050f8cc0d541be5c7e4467cf8470b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:5d:c4:6c:6b:c1:4e:88:d6:97:a8:ac:58:
94:4c:c9:76:87:71:00:c9:7f:40:fc:e8:c3:68:2c:
cf:dd:be:08:51:48:e6:c2:c8:92:52:d5:97:fb:83:
c8:83:dc:85:7a:06:f4:8c:28:a6:d1:33:2d:38:bc:
5c:66:e8:77:3e:85:5d:ec:39:b9:f6:d8:61:21:a3:
d4:c7:7f:75:91:cf:ca:9d:b3:93:cb:48:f4:cf:bf:
95:f0:ea:bf:04:d1:5f:b1:7b:50:92:9c:c2:1e:52:
5a:fd:38:06:18:da:2f:04:67:e4:cd:de:fe:6a:e3:
11:16:af:8b:5b:58:f9:cb:dc:e7:17:3d:f1:15:bb:
26:96:fa:2c:da:31:c6:81:e1:ea:aa:a0:81:3e:12:
ba:9d:2a:87:7b:76:e7:87:b5:6d:c2:a7:59:f4:97:
ce:03:36:a0:27:6d:20:b2:3f:80:4e:15:da:7d:6c:
80:8c:02:28:84:a4:11:41:b1:e1:7e:cf:d1:be:ab:
24:ab:a6:d5:61:1f:82:f6:a1:bc:73:57:2c:71:70:
20:56:4a:64:dc:fc:f2:85:08:1b:c0:66:1a:04:a5:
46:c4:6b:df:43:d9:f2:76:31:1f:87:39:6d:1b:b9:
a0:b9:f1:7d:2f:f3:97:f0:27:53:9c:33:c2:30:98:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:BE:85:60:50:F8:CC:0D:54:1B:E5:C7:E4:46:7C:F8:47:0B:9F
X509v3 Authority Key Identifier:
keyid:81:EF:38:6E:95:29:EB:FF:3D:FE:AB:17:A2:7C:79:38:23:CD:3D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge84bpUp6_89_qsXonx5OCPNPVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f5ca48-3aa5-4bdf-9284-28fb039f9a42/1/ge84bpUp6_89_qsXonx5OCPNPVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4f:5e:07:09:5e:64:0f:35:1a:f8:0f:7d:fb:09:d6:00:10:
8f:b2:88:52:db:22:94:f2:fa:03:80:21:37:03:3c:0b:a8:af:
2b:40:c3:98:74:2f:8f:3c:70:2d:64:4d:ce:ad:36:58:ad:5e:
4e:fe:07:ce:22:cc:b5:4c:ab:73:02:4b:42:6e:1d:a6:53:85:
21:18:4d:39:0c:0e:a3:46:3d:98:cd:7d:4c:f4:3a:ed:05:38:
fb:29:95:f3:2f:b1:72:19:85:6f:9e:51:16:a3:99:80:d9:51:
40:39:0b:84:9d:9c:5b:75:8c:54:06:23:64:35:45:6e:f8:a3:
2d:04:14:c1:af:eb:24:39:ec:95:f8:7b:88:17:b7:74:8e:ba:
77:5f:8d:43:c8:9b:1e:f4:ec:d3:39:cb:46:cd:4a:ce:8a:25:
ba:c0:d3:96:2a:05:5a:32:9d:7b:0b:cd:7e:e3:55:1a:c1:13:
1c:0c:33:d2:9c:50:a5:78:bb:08:bd:77:54:3e:36:60:93:a9:
8f:1c:d3:07:57:54:b5:e8:73:9a:26:f2:15:be:cb:f1:fa:f4:
67:7b:f3:e0:4a:eb:45:87:77:d1:71:96:5b:81:89:50:fb:a8:
5a:9a:b9:22:99:cc:1c:e8:45:d6:24:ff:0c:c1:39:28:b8:b5:
fa:f1:f6:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMO29b5MLRNvQ9PS8idR6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZWYzODZlOTUyOWViZmYzZGZlYWIxN2EyN2M3OTM4MjNj
ZDNkNTUwHhcNMjUwNTA3MTAwMDU1WhcNMjUwNTA4MTAwMDU1WjAzMTEwLwYDVQQD
EyhjNzNhYmU4NTYwNTBmOGNjMGQ1NDFiZTVjN2U0NDY3Y2Y4NDcwYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X1dxGxrwU6I1peorFiUTMl2h3EA
yX9A/OjDaCzP3b4IUUjmwsiSUtWX+4PIg9yFegb0jCim0TMtOLxcZuh3PoVd7Dm5
9thhIaPUx391kc/KnbOTy0j0z7+V8Oq/BNFfsXtQkpzCHlJa/TgGGNovBGfkzd7+
auMRFq+LW1j5y9znFz3xFbsmlvos2jHGgeHqqqCBPhK6nSqHe3bnh7VtwqdZ9JfO
AzagJ20gsj+AThXafWyAjAIohKQRQbHhfs/Rvqskq6bVYR+C9qG8c1cscXAgVkpk
3PzyhQgbwGYaBKVGxGvfQ9nydjEfhzltG7mgufF9L/OX8CdTnDPCMJhZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc6voVgUPjMDVQb5cfkRnz4RwufMB8GA1UdIwQY
MBaAFIHvOG6VKev/Pf6rF6J8eTgjzT1VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNWNhNDgtM2FhNS00YmRmLTkyODQt
MjhmYjAzOWY5YTQyLzEvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNWNhNDgtM2FhNS00YmRmLTkyODQtMjhmYjAzOWY5YTQy
LzEvZ2U4NGJwVXA2Xzg5X3FzWG9ueDVPQ1BOUFZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF09eBwle
ZA81GvgPffsJ1gAQj7KIUtsilPL6A4AhNwM8C6ivK0DDmHQvjzxwLWRNzq02WK1e
Tv4HziLMtUyrcwJLQm4dplOFIRhNOQwOo0Y9mM19TPQ67QU4+ymV8y+xchmFb55R
FqOZgNlRQDkLhJ2cW3WMVAYjZDVFbvijLQQUwa/rJDnslfh7iBe3dI66d1+NQ8ib
HvTs0znLRs1KzoolusDTlioFWjKdewvNfuNVGsETHAwz0pxQpXi7CL13VD42YJOp
jxzTB1dUtehzmibyFb7L8fr0Z3vz4ErrRYd30XGWW4GJUPuoWpq5IpnMHOhF1iT/
DME5KLi1+vH2HA==
-----END CERTIFICATE-----
Generated at Wed May 7 17:05:56 2025 by rpki-client