
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
File: xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft (raw, json)
Hash identifier: Av+aFORd1uPocfQsqvaPN5QNjIes+YqaDJzSGIIj7E0=
Subject key identifier: 82:4B:C8:DE:D2:D6:F5:D9:77:F1:43:5A:33:1F:8C:0E:52:AC:87:BE
Authority key identifier: C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
Certificate issuer: /CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Certificate serial: 0196A8AFB97D9C27B87FC19E7BCD5634B275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
Manifest number: 02B3
Signing time: Wed 07 May 2025 03:00:10 +0000
Manifest this update: Wed 07 May 2025 03:00:10 +0000
Manifest next update: Thu 08 May 2025 03:00:10 +0000
Files and hashes: 1: xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl (hash: 2i+cpBAy3yl8fQt8m7IV7Pn7TdrSfdR/BTuCWHAzGu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:af:b9:7d:9c:27:b8:7f:c1:9e:7b:cd:56:34:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48f6f4cd59280a6548bb232017b4a3c8a75116e
Validity
Not Before: May 7 03:00:10 2025 GMT
Not After : May 8 03:00:10 2025 GMT
Subject: CN=824bc8ded2d6f5d977f1435a331f8c0e52ac87be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f5:36:26:1e:6b:d0:01:41:6a:d6:fb:c4:de:
9e:20:e8:bf:82:b6:25:04:4f:36:3d:d5:f9:98:fe:
c0:e7:ff:56:ef:95:0d:1b:d7:94:94:df:2e:c7:c4:
aa:bf:02:15:66:fb:a6:a0:b4:51:01:59:52:67:1e:
70:a5:1f:a5:77:a0:38:b1:d6:83:09:52:9d:1b:f8:
ba:5b:d9:3c:db:88:da:23:cb:c5:52:a8:c8:39:76:
a1:f5:26:95:b6:c3:e8:d9:99:5f:5f:01:a1:17:d8:
c3:b1:e0:62:51:b1:ef:84:74:cd:ed:e0:18:be:14:
fe:b1:82:03:37:95:db:a2:c8:85:25:ef:32:c0:05:
c2:70:f4:a6:69:80:c7:9c:d4:05:2d:15:04:4c:55:
c7:17:08:ea:4f:5d:05:ae:8a:7c:8f:4f:11:f2:e0:
a3:b4:1b:bb:35:d8:f3:63:2c:19:8f:11:7c:e2:57:
25:4d:6f:40:05:93:2e:c4:cc:95:10:d2:bc:48:49:
0f:ac:1c:c4:92:85:4b:73:e3:55:6a:b8:52:a4:f2:
25:63:b2:45:5f:30:f5:de:f9:94:23:e1:95:44:2c:
d4:48:0b:55:6b:34:83:d3:8c:44:67:d1:60:67:7f:
0f:fc:83:01:81:03:e8:6b:2c:ec:cd:5b:d9:6f:4a:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:C8:DE:D2:D6:F5:D9:77:F1:43:5A:33:1F:8C:0E:52:AC:87:BE
X509v3 Authority Key Identifier:
keyid:C4:8F:6F:4C:D5:92:80:A6:54:8B:B2:32:01:7B:4A:3C:8A:75:11:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI9vTNWSgKZUi7IyAXtKPIp1EW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e873bc-95f4-4dca-b96e-a037d57444e3/1/xI9vTNWSgKZUi7IyAXtKPIp1EW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:f4:c7:14:0d:15:81:39:68:58:b2:d1:6f:dd:d9:5f:8c:
71:4b:34:56:a7:b7:6f:8d:b7:e1:63:90:50:e1:47:fb:76:b3:
f1:22:66:12:0a:09:be:89:57:77:40:bb:d0:d5:2f:55:85:5a:
54:60:38:7d:d6:08:61:74:76:0e:c6:c4:bc:c8:3a:5b:68:eb:
1d:9b:c3:4c:13:3f:af:1d:68:9f:3e:62:95:80:21:90:22:75:
53:0e:86:01:46:07:51:47:44:7c:bf:cc:5f:82:1c:05:ff:55:
4d:d6:b9:11:8b:af:54:66:bb:b2:d4:81:9b:73:ed:1c:e9:cc:
50:07:82:44:78:29:d9:7d:91:91:4d:8a:10:dc:62:97:2c:0b:
9a:71:94:44:36:5f:69:74:b2:6d:2f:59:85:5c:c9:1f:57:a9:
e1:6c:45:ab:29:70:ca:9a:12:02:6b:49:90:d7:18:78:ec:93:
19:70:fc:e3:09:5e:85:ed:80:45:37:53:3b:3f:2e:c3:b2:40:
8c:27:38:13:dd:83:74:8c:15:59:37:db:3e:2e:00:24:7f:20:
65:a2:a4:a9:21:6a:fd:0f:cb:78:a3:15:b7:25:30:50:55:d7:
e1:b7:e4:eb:63:68:2a:56:ee:77:a3:85:8b:8c:62:19:2c:53:
a9:0b:b7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaor7l9nCe4f8Gee81WNLJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGY2ZjRjZDU5MjgwYTY1NDhiYjIzMjAxN2I0YTNjOGE3
NTExNmUwHhcNMjUwNTA3MDMwMDEwWhcNMjUwNTA4MDMwMDEwWjAzMTEwLwYDVQQD
Eyg4MjRiYzhkZWQyZDZmNWQ5NzdmMTQzNWEzMzFmOGMwZTUyYWM4N2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/U2Jh5r0AFBatb7xN6eIOi/grYl
BE82PdX5mP7A5/9W75UNG9eUlN8ux8SqvwIVZvumoLRRAVlSZx5wpR+ld6A4sdaD
CVKdG/i6W9k824jaI8vFUqjIOXah9SaVtsPo2ZlfXwGhF9jDseBiUbHvhHTN7eAY
vhT+sYIDN5XbosiFJe8ywAXCcPSmaYDHnNQFLRUETFXHFwjqT10Frop8j08R8uCj
tBu7NdjzYywZjxF84lclTW9ABZMuxMyVENK8SEkPrBzEkoVLc+NVarhSpPIlY7JF
XzD13vmUI+GVRCzUSAtVazSD04xEZ9FgZ38P/IMBgQPoayzszVvZb0oD2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJLyN7S1vXZd/FDWjMfjA5SrIe+MB8GA1UdIwQY
MBaAFMSPb0zVkoCmVIuyMgF7SjyKdRFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUt
YTAzN2Q1NzQ0NGUzLzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9lODczYmMtOTVmNC00ZGNhLWI5NmUtYTAzN2Q1NzQ0NGUz
LzEveEk5dlROV1NnS1pVaTdJeUFYdEtQSXAxRVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMn0xxQN
FYE5aFiy0W/d2V+McUs0Vqe3b4234WOQUOFH+3az8SJmEgoJvolXd0C70NUvVYVa
VGA4fdYIYXR2DsbEvMg6W2jrHZvDTBM/rx1onz5ilYAhkCJ1Uw6GAUYHUUdEfL/M
X4IcBf9VTda5EYuvVGa7stSBm3PtHOnMUAeCRHgp2X2RkU2KENxilywLmnGURDZf
aXSybS9ZhVzJH1ep4WxFqylwypoSAmtJkNcYeOyTGXD84wlehe2ARTdTOz8uw7JA
jCc4E92DdIwVWTfbPi4AJH8gZaKkqSFq/Q/LeKMVtyUwUFXX4bfk62NoKlbud6OF
i4xiGSxTqQu3IQ==
-----END CERTIFICATE-----
Generated at Wed May 7 06:30:18 2025 by rpki-client