
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
File: _S0VJ2B9EYjp24DPFkmKQTggDNw.mft (raw, json)
Hash identifier: RjRMOPdia5mhdMHL7P2JYzbYuJEfyfd7r+gF/YT5CQ8=
Subject key identifier: 0A:B5:01:44:98:72:6A:87:15:F1:96:A9:15:2B:50:60:F4:E5:83:39
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 0196A352ED61724E0974A7B5369616B03B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
Manifest number: 1523
Signing time: Tue 06 May 2025 02:00:42 +0000
Manifest this update: Tue 06 May 2025 02:00:42 +0000
Manifest next update: Wed 07 May 2025 02:00:42 +0000
Files and hashes: 1: _S0VJ2B9EYjp24DPFkmKQTggDNw.crl (hash: EDWE5t10v7iEjq1A3zlPAEeXTwMMwSIpQpVaP+QUrQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:ed:61:72:4e:09:74:a7:b5:36:96:16:b0:3b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: May 6 02:00:42 2025 GMT
Not After : May 7 02:00:42 2025 GMT
Subject: CN=0ab5014498726a8715f196a9152b5060f4e58339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:f2:78:9b:7a:24:e0:ae:5a:5c:e1:9b:df:
79:62:f3:d6:00:83:f1:66:9d:8b:8d:3e:0e:9c:5e:
3e:80:7c:03:17:17:2e:fc:6a:3c:26:af:1b:79:5d:
ac:7e:4a:73:bb:ce:85:9f:33:46:37:c0:b5:18:5e:
01:e8:0a:d9:6b:fb:9f:bf:9d:df:0d:58:a2:0c:d2:
73:d4:25:5d:ac:7a:f2:f1:d8:90:20:94:95:53:e9:
f2:56:f9:38:d0:00:13:b4:cc:44:ea:4e:36:b1:db:
84:31:ea:b8:7d:00:58:34:60:6c:17:0e:b1:64:9a:
a8:fb:00:b2:0e:1e:bc:b8:ba:59:1c:e5:f7:eb:fc:
69:4e:5b:14:ee:21:13:73:10:1d:54:92:1e:a0:5c:
81:ef:da:26:b0:f2:ef:55:53:26:d7:46:bd:c3:5d:
d8:7c:fe:5c:92:da:c1:90:e5:a3:4f:12:58:20:3c:
79:e9:ca:e6:e8:a1:ee:e1:24:d4:df:8f:81:cd:56:
d4:bc:f5:a7:0d:7b:84:66:3f:17:70:c0:42:90:d8:
2c:d9:a4:a7:39:3e:f4:6f:51:17:5b:8a:eb:6a:4b:
49:d0:5a:e2:5a:1f:69:76:13:bc:b5:a2:f5:0b:cc:
9b:4f:f4:f2:e3:4c:9a:7b:48:f7:07:64:e4:b6:17:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B5:01:44:98:72:6A:87:15:F1:96:A9:15:2B:50:60:F4:E5:83:39
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f6:0e:66:ba:38:ee:df:ad:68:54:b7:6d:cf:37:d4:39:68:
26:31:60:2d:d7:4f:ac:b5:38:ca:88:cd:0c:64:ba:6a:76:0f:
59:a4:fd:e4:79:ff:d5:5c:aa:f9:9c:0c:ac:ea:5b:e0:ba:e8:
f1:ae:2e:51:91:98:d8:30:2c:64:9b:a8:d6:35:33:02:35:83:
25:ee:16:a2:7b:ca:04:3e:11:48:28:36:3e:2d:5f:d1:c3:1e:
c7:aa:92:e2:1b:fc:ef:d6:dc:ff:26:d9:b6:51:e7:68:23:2a:
1c:80:81:29:bd:b0:f1:2f:c1:f7:61:cf:64:45:30:9b:10:a2:
d2:b0:12:b3:ff:94:64:62:9c:f2:dd:c8:1b:c3:f9:92:b4:f2:
29:4c:ad:97:5e:7e:26:5b:46:d6:de:16:23:03:3e:11:cb:9a:
7f:82:9c:78:c2:ba:f8:cc:05:cd:11:b2:19:91:63:46:4d:3a:
33:78:f3:8f:72:ee:d8:d1:c0:f3:08:1a:e1:8e:5a:cf:d0:ad:
e7:21:98:2d:30:80:95:66:10:20:34:71:3d:ed:0d:8d:52:c9:
46:5d:2a:05:33:50:b4:47:8b:20:41:04:c9:1b:d1:c3:bb:eb:
6b:b8:bf:10:ae:be:42:8d:9d:81:9a:95:a6:21:c5:b4:42:4c:
ea:5b:f4:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZajUu1hck4JdKe1NpYWsDsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmQxNTI3NjA3ZDExODhlOWRiODBjZjE2NDk4YTQxMzgy
MDBjZGMwHhcNMjUwNTA2MDIwMDQyWhcNMjUwNTA3MDIwMDQyWjAzMTEwLwYDVQQD
EygwYWI1MDE0NDk4NzI2YTg3MTVmMTk2YTkxNTJiNTA2MGY0ZTU4MzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfyeJt6JOCuWlzhm995YvPWAIPx
Zp2LjT4OnF4+gHwDFxcu/Go8Jq8beV2sfkpzu86FnzNGN8C1GF4B6ArZa/ufv53f
DViiDNJz1CVdrHry8diQIJSVU+nyVvk40AATtMxE6k42sduEMeq4fQBYNGBsFw6x
ZJqo+wCyDh68uLpZHOX36/xpTlsU7iETcxAdVJIeoFyB79omsPLvVVMm10a9w13Y
fP5cktrBkOWjTxJYIDx56crm6KHu4STU34+BzVbUvPWnDXuEZj8XcMBCkNgs2aSn
OT70b1EXW4rraktJ0FriWh9pdhO8taL1C8ybT/Ty40yae0j3B2TkthfrHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAq1AUSYcmqHFfGWqRUrUGD05YM5MB8GA1UdIwQY
MBaAFP0tFSdgfRGI6duAzxZJikE4IAzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzct
ZGMxYWJlYzE2NjZjLzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85OTk3YTAtZjJkNS00MGMyLThkYzctZGMxYWJlYzE2NjZj
LzEvX1MwVkoyQjlFWWpwMjREUEZrbUtRVGdnRE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvYOZro4
7t+taFS3bc831DloJjFgLddPrLU4yojNDGS6anYPWaT95Hn/1Vyq+ZwMrOpb4Lro
8a4uUZGY2DAsZJuo1jUzAjWDJe4WonvKBD4RSCg2Pi1f0cMex6qS4hv879bc/ybZ
tlHnaCMqHICBKb2w8S/B92HPZEUwmxCi0rASs/+UZGKc8t3IG8P5krTyKUytl15+
JltG1t4WIwM+Ecuaf4KceMK6+MwFzRGyGZFjRk06M3jzj3Lu2NHA8wga4Y5az9Ct
5yGYLTCAlWYQIDRxPe0NjVLJRl0qBTNQtEeLIEEEyRvRw7vra7i/EK6+Qo2dgZqV
piHFtEJM6lv0kA==
-----END CERTIFICATE-----
Generated at Tue May 6 09:48:00 2025 by rpki-client