Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
File: _tPwXKP9-ef5nGXMagpnJPWTGnA.mft (raw, json)
Hash identifier: TPUVO4gubAL76VPbAtq7HjeNuLpnyR+l4Am4wzPQvDE=
Subject key identifier: D0:28:06:AB:2E:39:43:62:E2:F2:6E:E2:0F:3E:44:49:A5:24:82:EF
Authority key identifier: FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
Certificate issuer: /CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Certificate serial: 0196CCF46165CB29F27DD4510AEE0E86E235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
Manifest number: 1537
Signing time: Wed 14 May 2025 04:01:29 +0000
Manifest this update: Wed 14 May 2025 04:01:29 +0000
Manifest next update: Thu 15 May 2025 04:01:29 +0000
Files and hashes: 1: _tPwXKP9-ef5nGXMagpnJPWTGnA.crl (hash: QPWjEaDzVAoe3Qz7u86zn6DtsdLcijzqaPS18R++Y+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f4:61:65:cb:29:f2:7d:d4:51:0a:ee:0e:86:e2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed3f05ca3fdf9e7f99c65cc6a0a6724f5931a70
Validity
Not Before: May 14 04:01:29 2025 GMT
Not After : May 15 04:01:29 2025 GMT
Subject: CN=d02806ab2e394362e2f26ee20f3e4449a52482ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:80:24:a4:18:3e:12:c4:1b:1a:fe:1d:d4:
79:ee:f7:35:ea:0e:0c:e2:86:46:e4:92:aa:41:5f:
5e:d4:18:76:34:b5:42:b6:47:b8:1a:d8:14:6d:78:
12:93:6b:28:85:da:a6:f2:f3:af:04:a0:f3:6d:10:
3c:65:56:05:ce:16:dc:45:bd:fe:c4:3e:ff:2a:a4:
bf:64:7a:ff:a3:9c:2c:8d:b3:c7:26:15:ff:a8:62:
1b:7d:6a:95:a5:42:b7:69:dc:a5:0d:c1:6d:b9:38:
c3:59:5c:ba:13:fc:07:cf:b8:66:94:8f:c3:82:a6:
19:65:55:1f:4d:3f:0d:5d:fc:20:a0:29:8f:6e:1b:
ea:98:69:70:9c:22:29:2f:36:bd:bc:ce:cd:a8:03:
09:31:70:48:ae:e5:ff:9e:26:b9:24:a6:7f:fd:00:
50:28:27:95:d2:88:54:94:db:c6:c6:d2:74:73:24:
26:8e:2e:89:54:8c:2a:1d:64:1d:ab:1b:dd:77:52:
1f:36:85:27:4f:02:8b:bd:fd:f1:30:59:c4:0d:ac:
f2:91:11:e9:3d:02:60:d8:54:3d:2f:61:79:dd:30:
a6:07:8e:06:c2:47:64:20:ef:30:26:cf:ad:b6:98:
52:62:ff:bd:7e:1f:7b:52:cb:c5:ef:87:38:3c:05:
37:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:28:06:AB:2E:39:43:62:E2:F2:6E:E2:0F:3E:44:49:A5:24:82:EF
X509v3 Authority Key Identifier:
keyid:FE:D3:F0:5C:A3:FD:F9:E7:F9:9C:65:CC:6A:0A:67:24:F5:93:1A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tPwXKP9-ef5nGXMagpnJPWTGnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c95639-722a-4021-beeb-ac5ee625babc/1/_tPwXKP9-ef5nGXMagpnJPWTGnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6b:eb:db:6e:62:ad:c2:d9:aa:c3:c4:91:78:1e:56:3c:f5:
28:5f:ba:9e:6a:10:89:ab:8b:ac:f3:70:6f:ca:45:49:d5:c9:
60:ed:fe:df:03:fe:aa:5b:a9:2a:00:f0:0d:fa:45:79:15:8d:
32:a7:29:41:5f:87:c2:75:0b:90:02:31:e3:cf:80:ef:74:11:
ea:27:b8:5c:8d:62:38:7f:e4:7d:8a:0b:14:7a:0e:a4:b8:d2:
7b:8d:75:b1:fb:e1:4d:d5:6b:d0:ec:c2:d9:ee:91:9e:e2:0c:
ab:6d:76:92:1e:53:ec:a0:da:41:6b:0f:ef:64:3d:56:92:18:
bc:75:1b:9f:8a:73:4f:d5:09:c2:35:70:b4:87:39:6f:07:a5:
8a:dd:86:50:4a:de:bf:84:57:f4:b5:6b:28:12:9f:30:d7:8b:
a0:f4:57:6a:11:c6:e4:18:ae:07:9a:14:a4:80:c9:bb:4d:d1:
01:dd:ca:4e:48:de:a3:97:88:f1:52:22:09:de:5c:5f:53:7a:
af:e8:41:88:87:06:a3:fc:97:d5:cf:40:c2:d4:80:97:f5:7b:
22:67:26:18:42:c7:92:54:37:3e:09:ce:f4:8a:f3:43:7e:16:
85:6d:82:6d:50:d1:32:1d:ae:3e:5a:db:3b:11:9e:b9:eb:b2:
fa:94:9b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM9GFlyynyfdRRCu4OhuI1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDNmMDVjYTNmZGY5ZTdmOTljNjVjYzZhMGE2NzI0ZjU5
MzFhNzAwHhcNMjUwNTE0MDQwMTI5WhcNMjUwNTE1MDQwMTI5WjAzMTEwLwYDVQQD
EyhkMDI4MDZhYjJlMzk0MzYyZTJmMjZlZTIwZjNlNDQ0OWE1MjQ4MmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquaAJKQYPhLEGxr+HdR57vc16g4M
4oZG5JKqQV9e1Bh2NLVCtke4GtgUbXgSk2sohdqm8vOvBKDzbRA8ZVYFzhbcRb3+
xD7/KqS/ZHr/o5wsjbPHJhX/qGIbfWqVpUK3adylDcFtuTjDWVy6E/wHz7hmlI/D
gqYZZVUfTT8NXfwgoCmPbhvqmGlwnCIpLza9vM7NqAMJMXBIruX/nia5JKZ//QBQ
KCeV0ohUlNvGxtJ0cyQmji6JVIwqHWQdqxvdd1IfNoUnTwKLvf3xMFnEDazykRHp
PQJg2FQ9L2F53TCmB44GwkdkIO8wJs+ttphSYv+9fh97UsvF74c4PAU3awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAoBqsuOUNi4vJu4g8+REmlJILvMB8GA1UdIwQY
MBaAFP7T8Fyj/fnn+ZxlzGoKZyT1kxpwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWIt
YWM1ZWU2MjViYWJjLzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jOTU2MzktNzIyYS00MDIxLWJlZWItYWM1ZWU2MjViYWJj
LzEvX3RQd1hLUDktZWY1bkdYTWFncG5KUFdUR25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWvr225i
rcLZqsPEkXgeVjz1KF+6nmoQiauLrPNwb8pFSdXJYO3+3wP+qlupKgDwDfpFeRWN
MqcpQV+HwnULkAIx48+A73QR6ie4XI1iOH/kfYoLFHoOpLjSe411sfvhTdVr0OzC
2e6RnuIMq212kh5T7KDaQWsP72Q9VpIYvHUbn4pzT9UJwjVwtIc5bwelit2GUEre
v4RX9LVrKBKfMNeLoPRXahHG5BiuB5oUpIDJu03RAd3KTkjeo5eI8VIiCd5cX1N6
r+hBiIcGo/yX1c9AwtSAl/V7ImcmGELHklQ3PgnO9IrzQ34WhW2CbVDRMh2uPlrb
OxGeueuy+pSbJw==
-----END CERTIFICATE-----
Generated at Wed May 14 13:08:29 2025 by rpki-client