Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: FcZ9z8shVMExPepnqmzl+NV+8U8EaGtR1gHpWDi1Hyo=
Subject key identifier: 69:F8:1C:02:4F:E2:CD:B3:D1:67:E3:FA:24:0A:45:8E:98:CF:12:9F
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 0196CFBD9D90A3F1DBF2F0FC1420DA86C50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0B64
Signing time: Wed 14 May 2025 17:00:32 +0000
Manifest this update: Wed 14 May 2025 17:00:32 +0000
Manifest next update: Thu 15 May 2025 17:00:32 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: FK5pCBwV8n5/8vw5CYHpLfSynecl+1YRtj9YY7tzZsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:bd:9d:90:a3:f1:db:f2:f0:fc:14:20:da:86:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: May 14 17:00:32 2025 GMT
Not After : May 15 17:00:32 2025 GMT
Subject: CN=69f81c024fe2cdb3d167e3fa240a458e98cf129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0b:99:40:dc:eb:4f:81:1c:40:18:0e:e1:41:
c6:dc:4a:47:77:61:55:6c:5e:93:89:88:65:91:9c:
72:1b:24:ab:ab:4b:09:0e:d5:e5:3d:64:dd:a0:ab:
1f:52:6c:af:0b:4a:7a:ea:33:35:fb:71:83:19:8e:
8d:cc:d4:16:67:17:18:e8:fa:58:98:46:e0:d7:8b:
b4:32:19:23:a9:2a:5a:e4:a0:9f:2b:46:8e:96:0c:
fa:b0:7a:3d:b2:07:30:de:ba:39:5f:df:e6:68:55:
3a:d3:fa:d1:1c:31:78:36:93:35:af:eb:e0:59:4c:
cf:6f:18:87:c1:ae:03:63:8a:03:5a:40:e1:4d:73:
6d:d7:69:63:b6:3b:a3:6a:0f:13:b8:45:76:95:2d:
43:70:dc:aa:04:f0:51:fd:bb:5c:70:68:c0:37:5e:
21:43:48:cf:b1:5e:f3:0a:95:a2:d5:39:b3:33:b4:
60:4b:32:d1:11:f3:12:5a:ae:74:42:6f:a6:a6:53:
81:38:cf:fc:e5:53:ae:e9:b3:25:6e:24:7e:9b:36:
30:00:d7:09:d3:bc:b8:bc:99:d3:81:58:ae:42:8d:
b8:20:dc:07:00:17:dd:d8:aa:36:85:fa:5f:42:b4:
70:e0:8a:9e:70:c5:d6:5f:8e:74:24:9e:73:8f:24:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:1C:02:4F:E2:CD:B3:D1:67:E3:FA:24:0A:45:8E:98:CF:12:9F
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:23:01:27:92:8a:7c:a5:2d:93:c8:67:30:65:df:df:7f:9b:
5a:81:d1:a0:f6:a0:66:ea:b6:b5:9f:dd:05:c9:7f:51:bc:88:
96:a2:09:73:2f:90:78:db:d6:a9:be:2c:f4:28:18:3b:1b:05:
3a:ec:7a:d7:26:bf:d5:c5:11:af:ab:27:4c:6c:41:17:dc:8b:
30:9a:f7:61:af:8e:6f:9f:21:fd:aa:3d:29:35:a5:7d:ae:97:
48:70:79:a4:9c:9c:2f:40:23:6b:c7:9e:3d:28:45:bf:03:57:
9c:40:c0:04:f8:60:ce:53:16:7a:74:75:6f:e5:77:3f:ab:dc:
a7:37:7d:5d:6c:dd:16:26:04:63:4b:0a:0a:fc:9d:1c:39:7b:
41:6f:53:30:9a:84:74:63:34:9d:1d:a1:72:17:77:6e:b8:50:
43:74:21:95:78:04:95:b6:48:f0:7f:b3:fe:ca:7a:09:7b:70:
96:6c:ff:0e:2d:93:4a:05:e6:07:8e:af:00:1c:61:e0:be:83:
90:a6:e9:f1:ed:39:44:3f:c8:e6:d8:c0:b7:87:53:ba:c2:6d:
f4:2f:72:b8:d4:5f:e4:1f:ab:77:56:54:83:8e:76:1f:45:31:
ee:35:38:ef:45:16:fb:24:93:d2:b1:12:db:9d:69:ca:fc:02:
42:1c:b4:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbPvZ2Qo/Hb8vD8FCDahsUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MWJiODY1OTExOGQ3NTJmMWU3MzU0NWZkOGFjNzNhN2Qx
OGIyMWMwHhcNMjUwNTE0MTcwMDMyWhcNMjUwNTE1MTcwMDMyWjAzMTEwLwYDVQQD
Eyg2OWY4MWMwMjRmZTJjZGIzZDE2N2UzZmEyNDBhNDU4ZTk4Y2YxMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wuZQNzrT4EcQBgO4UHG3EpHd2FV
bF6TiYhlkZxyGySrq0sJDtXlPWTdoKsfUmyvC0p66jM1+3GDGY6NzNQWZxcY6PpY
mEbg14u0MhkjqSpa5KCfK0aOlgz6sHo9sgcw3ro5X9/maFU60/rRHDF4NpM1r+vg
WUzPbxiHwa4DY4oDWkDhTXNt12ljtjujag8TuEV2lS1DcNyqBPBR/btccGjAN14h
Q0jPsV7zCpWi1TmzM7RgSzLREfMSWq50Qm+mplOBOM/85VOu6bMlbiR+mzYwANcJ
07y4vJnTgViuQo24INwHABfd2Ko2hfpfQrRw4IqecMXWX450JJ5zjyQPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn4HAJP4s2z0Wfj+iQKRY6YzxKfMB8GA1UdIwQY
MBaAFNUbuGWRGNdS8ec1Rf2Kxzp9GLIcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTIt
NWNmMjE1MDk0MDVlLzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mMmE4YmUtNzIxYi00NTYzLTljZTItNWNmMjE1MDk0MDVl
LzEvMVJ1NFpaRVkxMUx4NXpWRl9ZckhPbjBZc2h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCMBJ5KK
fKUtk8hnMGXf33+bWoHRoPagZuq2tZ/dBcl/UbyIlqIJcy+QeNvWqb4s9CgYOxsF
Oux61ya/1cURr6snTGxBF9yLMJr3Ya+Ob58h/ao9KTWlfa6XSHB5pJycL0Aja8ee
PShFvwNXnEDABPhgzlMWenR1b+V3P6vcpzd9XWzdFiYEY0sKCvydHDl7QW9TMJqE
dGM0nR2hchd3brhQQ3QhlXgElbZI8H+z/sp6CXtwlmz/Di2TSgXmB46vABxh4L6D
kKbp8e05RD/I5tjAt4dTusJt9C9yuNRf5B+rd1ZUg452H0Ux7jU470UW+yST0rES
251pyvwCQhy0lg==
-----END CERTIFICATE-----
Generated at Thu May 15 00:16:54 2025 by rpki-client