Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: 6kkFzKQ+rUR8Kr94aNawHB7B6xg899CqXzlGWYCn7qQ=
Subject key identifier: 06:F0:EE:4A:3A:74:7D:32:CF:EA:CE:AC:C8:08:F0:34:8B:4F:11:3A
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 0196A0887310079A4C897697E18D4C8EA0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 0E7E
Signing time: Mon 05 May 2025 13:00:19 +0000
Manifest this update: Mon 05 May 2025 13:00:19 +0000
Manifest next update: Tue 06 May 2025 13:00:19 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 7w13+7Y6GDoKpjZOBYIyswK/Y1ChHakan40mQ9gy6pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:73:10:07:9a:4c:89:76:97:e1:8d:4c:8e:a0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: May 5 13:00:19 2025 GMT
Not After : May 6 13:00:19 2025 GMT
Subject: CN=06f0ee4a3a747d32cfeaceacc808f0348b4f113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:65:dd:63:d6:b5:e8:72:9e:2f:3d:a3:d2:
c4:60:45:f2:37:81:d7:3e:5a:11:51:b9:52:49:d1:
24:25:dd:57:1f:80:e4:cc:33:10:e1:fe:cc:b5:e6:
70:14:c5:70:b7:41:25:ea:6e:f8:9a:7c:4d:9e:8f:
96:97:14:c2:86:84:86:10:84:0d:ce:9e:f9:b4:7a:
3b:59:21:2d:55:e5:a1:17:73:d3:00:0d:78:3d:d6:
0f:ff:16:a2:d8:15:1b:f7:dd:9f:d9:2f:db:e9:c2:
de:0c:7b:5d:4d:ac:ee:d4:02:c1:98:d7:0d:2b:8f:
51:c7:6f:8b:67:71:97:9b:49:31:de:02:3d:0b:13:
61:61:96:6b:ae:06:c3:ba:19:f5:e8:dd:b0:d7:88:
44:1a:05:c9:1b:2e:ff:09:e5:a2:94:23:83:c0:bf:
c6:fb:d8:c2:78:66:87:a6:32:ed:04:1d:67:00:b4:
35:da:c8:73:34:69:2e:35:56:24:d8:6e:c5:08:28:
ba:20:6c:eb:0a:2f:d8:8c:2c:bb:a7:1f:ea:01:c5:
b8:10:96:03:b7:f4:97:6f:10:03:c3:b5:a8:7b:18:
cb:42:a4:2e:f5:4c:99:1c:4c:d9:a4:9f:44:b5:8d:
90:3f:30:ac:dc:30:30:92:46:03:ad:ff:32:e9:42:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:EE:4A:3A:74:7D:32:CF:EA:CE:AC:C8:08:F0:34:8B:4F:11:3A
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dd:32:b9:fa:0e:ee:86:6a:de:26:04:bb:d4:a4:07:af:ec:
fe:1a:bf:84:b5:9d:06:b7:55:a6:82:a7:a4:2d:a1:33:5f:2b:
7e:c1:27:f7:34:7d:28:d9:aa:88:bd:a9:e0:28:c7:96:32:c3:
0d:f2:a4:d7:2b:26:d6:5b:78:7b:02:dc:d7:c8:e8:02:b5:f9:
a0:a0:9f:73:41:d3:21:f2:ca:25:19:37:ee:8a:7b:9b:ed:93:
e7:20:31:cb:c4:e7:b1:b7:0d:5a:f8:e9:3f:56:28:a7:4b:32:
c6:29:91:a7:7c:ce:6b:68:bd:6a:8d:80:d8:33:de:22:ff:6c:
7d:5e:eb:89:28:a5:36:c4:59:cb:30:bd:1c:c4:66:3c:52:95:
1d:45:6b:92:f1:ed:74:fd:e1:81:cf:60:14:cf:c3:18:7a:2d:
ec:71:3e:2a:3f:e4:74:4a:99:c8:f3:31:9a:87:b1:73:a2:28:
10:20:bf:d2:90:e5:4c:87:ac:c4:77:88:fc:bf:6e:de:fc:c8:
ac:1a:67:23:62:dd:4f:10:63:03:97:6d:f0:fd:ae:04:1b:6d:
c2:0a:f3:9f:08:aa:d8:c2:e8:5c:ec:da:ac:cd:13:d8:e4:f0:
ad:94:c2:cc:91:01:9e:1c:95:34:3e:a0:69:03:a8:e7:2d:0f:
db:23:0f:dd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZagiHMQB5pMiXaX4Y1MjqC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk
YzNlMjMwHhcNMjUwNTA1MTMwMDE5WhcNMjUwNTA2MTMwMDE5WjAzMTEwLwYDVQQD
EygwNmYwZWU0YTNhNzQ3ZDMyY2ZlYWNlYWNjODA4ZjAzNDhiNGYxMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2pl3WPWtehyni89o9LEYEXyN4HX
PloRUblSSdEkJd1XH4DkzDMQ4f7MteZwFMVwt0El6m74mnxNno+WlxTChoSGEIQN
zp75tHo7WSEtVeWhF3PTAA14PdYP/xai2BUb992f2S/b6cLeDHtdTazu1ALBmNcN
K49Rx2+LZ3GXm0kx3gI9CxNhYZZrrgbDuhn16N2w14hEGgXJGy7/CeWilCODwL/G
+9jCeGaHpjLtBB1nALQ12shzNGkuNVYk2G7FCCi6IGzrCi/YjCy7px/qAcW4EJYD
t/SXbxADw7WoexjLQqQu9UyZHEzZpJ9EtY2QPzCs3DAwkkYDrf8y6UIoTwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAbw7ko6dH0yz+rOrMgI8DSLTxE6MB8GA1UdIwQY
MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx
LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm
ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat0y
ufoO7oZq3iYEu9SkB6/s/hq/hLWdBrdVpoKnpC2hM18rfsEn9zR9KNmqiL2p4CjH
ljLDDfKk1ysm1lt4ewLc18joArX5oKCfc0HTIfLKJRk37op7m+2T5yAxy8TnsbcN
WvjpP1Yop0syximRp3zOa2i9ao2A2DPeIv9sfV7riSilNsRZyzC9HMRmPFKVHUVr
kvHtdP3hgc9gFM/DGHot7HE+Kj/kdEqZyPMxmoexc6IoECC/0pDlTIesxHeI/L9u
3vzIrBpnI2LdTxBjA5dt8P2uBBttwgrznwiq2MLoXOzarM0T2OTwrZTCzJEBnhyV
ND6gaQOo5y0P2yMP3Q==
-----END CERTIFICATE-----
Generated at Mon May 5 20:41:05 2025 by rpki-client