Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: 3RzCAuiQxBjVYN7LLcfgZ1ytqmk1pfWvtwm/1ljUrhk=
Subject key identifier: A9:1C:BE:6D:51:92:86:48:F6:9F:8A:83:76:F5:FE:98:FE:23:1B:52
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 0196AEE9473C9DF0629F83B9440AF92F0189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 016D
Signing time: Thu 08 May 2025 08:00:45 +0000
Manifest this update: Thu 08 May 2025 08:00:45 +0000
Manifest next update: Fri 09 May 2025 08:00:45 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: l/8YO8rHqBahLgKGrEQIqdSarpgBY4enWW0Owe0F2WA=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:47:3c:9d:f0:62:9f:83:b9:44:0a:f9:2f:01:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: May 8 08:00:45 2025 GMT
Not After : May 9 08:00:45 2025 GMT
Subject: CN=a91cbe6d51928648f69f8a8376f5fe98fe231b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:74:76:10:01:05:14:4e:89:18:03:6a:af:
6f:52:0b:a6:a8:54:70:42:9f:85:ec:14:fa:e3:aa:
00:d7:ad:75:f2:dd:fe:b0:c7:a1:11:1e:67:14:96:
e1:25:b0:ac:cd:ef:d0:a3:0e:20:d3:e9:02:06:13:
70:24:ee:72:a6:15:9f:2c:7b:e7:f4:d7:6e:26:05:
ff:a1:9d:c3:7c:0a:69:5a:33:98:9c:2b:98:e8:68:
e3:f5:6d:74:59:c9:d7:e2:88:c7:11:21:90:44:db:
c7:8b:10:07:0c:a8:44:c8:eb:00:eb:7a:51:8b:24:
cf:c2:6d:5c:1f:57:15:66:24:d3:52:8b:63:ad:e2:
cb:2e:d7:04:c7:70:84:43:72:18:4f:28:02:6b:16:
ec:56:e8:fe:9c:cc:65:33:e4:7c:10:8a:a2:f6:d5:
65:04:53:9c:df:90:62:a5:06:06:b6:ad:e9:8b:66:
e8:ff:d1:bd:bb:56:98:b0:cf:b6:82:28:0a:1c:36:
14:13:1a:39:c3:e3:a3:3d:2b:24:ca:da:87:90:01:
63:52:e3:72:be:d3:ee:53:a3:8a:cb:9d:f5:bb:95:
d3:7b:ba:50:0f:1a:d9:2b:56:85:75:4b:75:15:50:
43:27:ef:e6:27:8b:5f:ba:24:e0:41:70:aa:e8:4e:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:BE:6D:51:92:86:48:F6:9F:8A:83:76:F5:FE:98:FE:23:1B:52
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d1:d2:49:7e:05:47:1f:9c:e4:7b:f4:9a:1a:c8:3d:76:a4:
00:7d:54:eb:d1:5e:ec:ac:f8:9c:4a:a1:1b:0b:7c:6b:7e:ed:
9f:a6:08:7d:23:73:9b:92:41:d0:5d:87:ac:7d:79:bc:99:ef:
0d:6d:19:5d:0a:d9:ea:4b:a0:25:42:51:81:77:22:80:3b:62:
bd:45:e3:f9:cf:64:75:5a:4f:f9:92:c8:fd:ef:8c:ac:b9:9e:
f5:86:fb:d4:c7:57:e5:e9:1a:3c:b0:bd:08:26:72:c0:f4:70:
25:72:e5:f0:df:70:37:5b:f7:66:9d:4d:cd:5e:6d:e4:6f:13:
17:2c:f7:4b:f2:4b:74:1f:d3:11:3b:3d:8f:92:de:6f:c1:8b:
03:79:f5:c5:46:b4:10:56:e3:51:7a:9b:f2:8b:64:b9:3e:0a:
b4:8a:05:09:eb:f5:05:bd:d0:c0:d6:ac:2e:9c:d1:c0:09:ab:
df:11:a7:b4:77:d1:a8:e1:f8:c1:cc:bb:63:bf:71:0d:aa:30:
73:d0:40:cb:53:50:9d:48:d8:57:e5:78:e0:b5:f4:5a:83:12:
1e:f1:dc:60:e5:35:34:c9:a2:f1:18:98:66:1c:23:8d:f7:47:
4b:eb:24:e5:47:76:f3:ae:b0:42:a3:14:c2:77:3f:d3:e3:27:
f8:aa:84:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZau6Uc8nfBin4O5RAr5LwGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjUwNTA4MDgwMDQ1WhcNMjUwNTA5MDgwMDQ1WjAzMTEwLwYDVQQD
EyhhOTFjYmU2ZDUxOTI4NjQ4ZjY5ZjhhODM3NmY1ZmU5OGZlMjMxYjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr50dhABBRROiRgDaq9vUgumqFRw
Qp+F7BT646oA16118t3+sMehER5nFJbhJbCsze/Qow4g0+kCBhNwJO5yphWfLHvn
9NduJgX/oZ3DfAppWjOYnCuY6Gjj9W10WcnX4ojHESGQRNvHixAHDKhEyOsA63pR
iyTPwm1cH1cVZiTTUotjreLLLtcEx3CEQ3IYTygCaxbsVuj+nMxlM+R8EIqi9tVl
BFOc35BipQYGtq3pi2bo/9G9u1aYsM+2gigKHDYUExo5w+OjPSskytqHkAFjUuNy
vtPuU6OKy531u5XTe7pQDxrZK1aFdUt1FVBDJ+/mJ4tfuiTgQXCq6E4R3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkcvm1RkoZI9p+Kg3b1/pj+IxtSMB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtHSSX4F
Rx+c5Hv0mhrIPXakAH1U69Fe7Kz4nEqhGwt8a37tn6YIfSNzm5JB0F2HrH15vJnv
DW0ZXQrZ6kugJUJRgXcigDtivUXj+c9kdVpP+ZLI/e+MrLme9Yb71MdX5ekaPLC9
CCZywPRwJXLl8N9wN1v3Zp1NzV5t5G8TFyz3S/JLdB/TETs9j5Leb8GLA3n1xUa0
EFbjUXqb8otkuT4KtIoFCev1Bb3QwNasLpzRwAmr3xGntHfRqOH4wcy7Y79xDaow
c9BAy1NQnUjYV+V44LX0WoMSHvHcYOU1NMmi8RiYZhwjjfdHS+sk5Ud2866wQqMU
wnc/0+Mn+KqEsw==
-----END CERTIFICATE-----
Generated at Thu May 8 10:02:52 2025 by rpki-client