Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: ZChEPQMc9YClc74wrtYNU6V4HX1FkTE3vkeuH2lj7r0=
Subject key identifier: 57:1E:17:9E:C2:02:A2:0D:F8:F0:95:7E:93:02:CC:0D:8F:C2:A7:F0
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 0196BB923131EF1C31B5D61751B247EE9436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 19:00:42 +0000
Manifest this update: Sat 10 May 2025 19:00:42 +0000
Manifest next update: Sun 11 May 2025 19:00:42 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: YLsLPKV5InnBpHbbSgHci9LFu3GbFB0qXPAF+c2whfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:31:31:ef:1c:31:b5:d6:17:51:b2:47:ee:94:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: May 10 19:00:42 2025 GMT
Not After : May 11 19:00:42 2025 GMT
Subject: CN=571e179ec202a20df8f0957e9302cc0d8fc2a7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:75:f1:80:c1:64:c5:08:70:6d:32:14:d1:
e5:c6:d2:9a:92:bc:15:d9:e0:f8:af:a7:75:33:23:
89:bc:2f:fa:d0:a7:6f:b2:7a:ac:3a:da:15:9e:a6:
21:6e:b6:ef:b9:36:10:dc:95:f7:4c:9b:fd:5c:7e:
61:a2:21:79:f0:0e:10:76:0d:64:83:fc:19:ad:f2:
b4:52:60:5a:c2:85:59:8a:e0:fd:a2:55:18:3c:8b:
77:4d:79:49:9d:6f:a5:18:86:72:fe:3a:ff:df:73:
78:05:cb:44:d0:c1:d7:3a:0e:f1:ed:d8:a8:1d:3f:
3c:4a:3a:6c:c1:47:5f:ac:4a:0a:db:f6:57:ba:0d:
c5:a7:8c:7a:39:d5:f0:29:9b:09:94:b4:88:dd:34:
b6:fa:14:b1:8e:60:74:30:65:38:b0:52:a0:e5:b7:
48:37:bb:de:41:87:a5:d1:31:29:79:34:1d:1c:37:
0e:23:1f:3b:6c:3d:e5:3a:29:31:32:ac:2d:4f:da:
a9:e6:e2:59:5d:74:5f:a9:d5:a1:e1:f0:1a:a6:49:
60:bb:1a:1d:6b:37:32:f1:a9:36:55:a7:eb:69:29:
bb:4e:14:ec:29:10:f1:83:db:3a:16:11:dd:7d:e8:
e9:85:70:27:f6:0c:c3:3f:e4:bb:84:3f:09:df:7e:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:17:9E:C2:02:A2:0D:F8:F0:95:7E:93:02:CC:0D:8F:C2:A7:F0
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:57:f7:e8:37:53:42:17:bc:08:f9:4f:be:31:52:be:6e:01:
51:8d:52:aa:0c:ae:23:05:a1:6c:b7:c4:ae:be:45:74:ea:a0:
6e:58:43:f9:1f:5a:6a:a5:a6:b2:76:36:9e:4f:f8:af:aa:f7:
66:e0:64:85:f7:e3:14:d4:6d:5e:bf:ba:0e:07:81:80:a7:7b:
46:1c:c0:aa:dd:64:46:4f:41:45:7c:34:19:26:b6:ec:83:5e:
18:58:8b:b3:c0:5b:3b:2a:56:69:db:75:a4:d4:3b:26:14:18:
9f:15:86:7d:01:a8:cb:92:16:2a:86:49:fb:97:27:00:6c:00:
1d:48:93:85:36:e6:06:c5:43:a9:36:59:f3:39:03:ff:27:bd:
69:44:a0:0e:cd:3a:d6:03:f4:3e:61:15:53:36:45:92:29:c6:
f6:dc:5f:e5:09:93:7c:22:7c:6b:69:6d:0f:b7:8c:c9:68:7b:
42:14:45:ac:05:f1:21:95:62:2e:b5:1f:4b:ea:62:1a:c2:2e:
f3:69:49:9d:99:c9:89:a4:ca:a6:33:fc:31:91:0d:04:2f:d7:
a2:a0:2c:06:5b:ad:c8:3c:ab:24:2b:98:5f:d2:f8:54:94:ba:
b9:91:fe:f8:62:c8:9b:a3:2d:03:6e:99:f1:6a:7d:a0:5d:78:
82:b2:f1:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kjEx7xwxtdYXUbJH7pQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODM3OTk5NjdlY2QwNGM1MzYxNDg5ZWU0Y2ZhMDk4Y2U0
MzY4NzEwHhcNMjUwNTEwMTkwMDQyWhcNMjUwNTExMTkwMDQyWjAzMTEwLwYDVQQD
Eyg1NzFlMTc5ZWMyMDJhMjBkZjhmMDk1N2U5MzAyY2MwZDhmYzJhN2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7118YDBZMUIcG0yFNHlxtKakrwV
2eD4r6d1MyOJvC/60KdvsnqsOtoVnqYhbrbvuTYQ3JX3TJv9XH5hoiF58A4Qdg1k
g/wZrfK0UmBawoVZiuD9olUYPIt3TXlJnW+lGIZy/jr/33N4BctE0MHXOg7x7dio
HT88SjpswUdfrEoK2/ZXug3Fp4x6OdXwKZsJlLSI3TS2+hSxjmB0MGU4sFKg5bdI
N7veQYel0TEpeTQdHDcOIx87bD3lOikxMqwtT9qp5uJZXXRfqdWh4fAapklguxod
azcy8ak2VafraSm7ThTsKRDxg9s6FhHdfejphXAn9gzDP+S7hD8J335LiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFceF57CAqIN+PCVfpMCzA2PwqfwMB8GA1UdIwQY
MBaAFP6DeZln7NBMU2FInuTPoJjOQ2hxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYt
YzczYmVkY2RjYTZkLzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYtYzczYmVkY2RjYTZk
LzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1f36DdT
Qhe8CPlPvjFSvm4BUY1SqgyuIwWhbLfErr5FdOqgblhD+R9aaqWmsnY2nk/4r6r3
ZuBkhffjFNRtXr+6DgeBgKd7RhzAqt1kRk9BRXw0GSa27INeGFiLs8BbOypWadt1
pNQ7JhQYnxWGfQGoy5IWKoZJ+5cnAGwAHUiThTbmBsVDqTZZ8zkD/ye9aUSgDs06
1gP0PmEVUzZFkinG9txf5QmTfCJ8a2ltD7eMyWh7QhRFrAXxIZViLrUfS+piGsIu
82lJnZnJiaTKpjP8MZENBC/XoqAsBlutyDyrJCuYX9L4VJS6uZH++GLIm6MtA26Z
8Wp9oF14grLxoA==
-----END CERTIFICATE-----
Generated at Sun May 11 00:39:52 2025 by rpki-client