Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: fNeTlF/48f5lpnzQOr0Ztu/qVbR9WR+skkTXxDcDemU=
Subject key identifier: 64:39:E3:C2:44:01:5C:2D:60:1C:7F:41:05:F3:5D:1B:EC:8B:A7:35
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 0196BD49A1E000189DC52FF3176FD5E70AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 03:00:41 +0000
Manifest this update: Sun 11 May 2025 03:00:41 +0000
Manifest next update: Mon 12 May 2025 03:00:41 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: 1lGqVqnHgOryIOS9EWjEbkDWNmUrsp+S1+9Fi08Hcu8=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:a1:e0:00:18:9d:c5:2f:f3:17:6f:d5:e7:0a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: May 11 03:00:41 2025 GMT
Not After : May 12 03:00:41 2025 GMT
Subject: CN=6439e3c244015c2d601c7f4105f35d1bec8ba735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:48:1c:05:95:7f:30:98:44:95:c8:d9:b2:
89:36:87:e8:41:14:3c:30:45:24:8f:9b:38:4d:f7:
b2:7e:3f:88:c8:19:9c:35:dc:89:07:4e:a8:3c:b4:
53:61:92:d4:94:92:62:39:0c:58:06:02:ba:5b:af:
f3:9f:9e:76:f4:b3:e8:23:a2:21:75:ce:5c:e9:3c:
e3:b0:77:75:b7:35:a2:24:2d:63:e1:7a:7e:3a:50:
cc:b9:d2:d3:c1:c1:51:10:85:72:fd:22:1f:c7:25:
18:c1:39:bb:92:00:4a:ff:77:71:c4:31:73:24:7f:
5e:28:b9:99:3d:96:74:62:cb:2f:50:e6:ba:3f:53:
4f:51:b0:fb:21:c4:ea:9f:4d:3f:b2:57:6d:e0:c5:
27:4c:1d:d8:45:5f:56:ab:f7:34:f4:c8:ef:93:d6:
04:85:28:c0:54:30:5d:e7:a8:2d:27:4c:a4:10:2c:
6b:6f:8b:1d:29:51:65:45:db:73:08:9d:93:c3:d7:
b9:05:04:e3:8b:cd:3e:3a:34:c7:04:10:a1:63:c9:
bb:58:0d:1d:19:92:87:e2:31:f4:68:2a:5c:ff:57:
0a:5c:b3:08:e9:cb:12:7b:2f:0b:9f:78:8b:82:79:
48:91:03:8f:b2:d2:12:c5:5f:d6:44:0d:c2:82:68:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:39:E3:C2:44:01:5C:2D:60:1C:7F:41:05:F3:5D:1B:EC:8B:A7:35
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7a:bc:9c:37:7e:70:24:c3:e7:66:52:63:7c:e1:04:dc:4c:
c1:2e:f6:84:d9:a5:72:86:34:4a:ed:dd:b6:82:b2:ca:06:a6:
e1:c7:53:cc:25:de:30:ce:5d:c8:0b:17:46:45:9a:93:f2:7c:
0a:64:8f:c6:b1:bf:53:83:dc:5c:1b:c6:43:8d:3d:f0:ee:e2:
3b:89:db:6a:cc:85:e4:ab:9b:74:6d:ab:fa:3b:03:f6:9a:7a:
8b:cf:f1:ef:f4:c8:b3:93:39:53:a0:89:7b:8b:e1:77:32:6a:
80:cb:36:f5:37:d7:8e:d1:1e:80:59:4d:bc:c7:e9:b1:8f:dd:
cd:da:33:f6:6b:7f:61:04:d4:c9:4c:4d:32:1a:f0:9f:52:8a:
19:bd:e9:13:b7:b9:f2:52:b7:29:b0:d7:ed:fc:5e:a6:8a:53:
d0:98:b8:ce:37:2c:e8:54:db:09:4e:3d:5f:e8:73:10:dd:fd:
bb:19:1e:77:5a:11:59:34:01:1a:7a:48:8d:7c:97:28:e0:28:
9c:0f:79:99:22:b3:f0:fa:9f:e3:e8:18:8e:9e:d5:7f:c1:e2:
19:8a:4e:69:55:0e:4c:86:42:77:7c:34:2b:9f:f8:e5:7f:92:
ef:44:8d:22:4a:3c:1c:11:d1:7b:4d:0e:8d:4d:e4:07:43:58:
e5:b7:3b:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SaHgABidxS/zF2/V5wrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWY2MTI5MTQyYmQwYTlkYzY5ZGZkNDAyNDg5ZmYyNWY1
YjNlZjIwHhcNMjUwNTExMDMwMDQxWhcNMjUwNTEyMDMwMDQxWjAzMTEwLwYDVQQD
Eyg2NDM5ZTNjMjQ0MDE1YzJkNjAxYzdmNDEwNWYzNWQxYmVjOGJhNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdRIHAWVfzCYRJXI2bKJNofoQRQ8
MEUkj5s4Tfeyfj+IyBmcNdyJB06oPLRTYZLUlJJiOQxYBgK6W6/zn5529LPoI6Ih
dc5c6TzjsHd1tzWiJC1j4Xp+OlDMudLTwcFREIVy/SIfxyUYwTm7kgBK/3dxxDFz
JH9eKLmZPZZ0YssvUOa6P1NPUbD7IcTqn00/sldt4MUnTB3YRV9Wq/c09Mjvk9YE
hSjAVDBd56gtJ0ykECxrb4sdKVFlRdtzCJ2Tw9e5BQTji80+OjTHBBChY8m7WA0d
GZKH4jH0aCpc/1cKXLMI6csSey8Ln3iLgnlIkQOPstISxV/WRA3CgmhA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQ548JEAVwtYBx/QQXzXRvsi6c1MB8GA1UdIwQY
MBaAFApfYSkUK9Cp3Gnf1AJIn/JfWz7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEt
MGQyYmJlNThjMTQ1LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wYWQyNjQtM2E1MC00NTYzLWEzNWEtMGQyYmJlNThjMTQ1
LzEvQ2w5aEtSUXIwS25jYWRfVUFraWY4bDliUHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3q8nDd+
cCTD52ZSY3zhBNxMwS72hNmlcoY0Su3dtoKyygam4cdTzCXeMM5dyAsXRkWak/J8
CmSPxrG/U4PcXBvGQ4098O7iO4nbasyF5KubdG2r+jsD9pp6i8/x7/TIs5M5U6CJ
e4vhdzJqgMs29TfXjtEegFlNvMfpsY/dzdoz9mt/YQTUyUxNMhrwn1KKGb3pE7e5
8lK3KbDX7fxepopT0Ji4zjcs6FTbCU49X+hzEN39uxked1oRWTQBGnpIjXyXKOAo
nA95mSKz8Pqf4+gYjp7Vf8HiGYpOaVUOTIZCd3w0K5/45X+S70SNIko8HBHRe00O
jU3kB0NY5bc7lA==
-----END CERTIFICATE-----
Generated at Sun May 11 07:34:21 2025 by rpki-client