Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: X0N11ELWwpmZ974a5qTuC4HXTGsN7RNwM89tw6/+V3s=
Subject key identifier: CA:52:4E:48:2E:98:84:BF:5B:3A:0B:4E:57:74:64:7A:5B:F9:F2:BD
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 0196CE063A7F6504CB55B01C1799F9F58A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 04BE
Signing time: Wed 14 May 2025 09:00:36 +0000
Manifest this update: Wed 14 May 2025 09:00:36 +0000
Manifest next update: Thu 15 May 2025 09:00:36 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: uAY6vdPu81XKcH6WvJuC9YYoY7jk+9LlCwPw4NZ0gM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:3a:7f:65:04:cb:55:b0:1c:17:99:f9:f5:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: May 14 09:00:36 2025 GMT
Not After : May 15 09:00:36 2025 GMT
Subject: CN=ca524e482e9884bf5b3a0b4e5774647a5bf9f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:38:53:1a:d0:c6:0e:d3:14:bf:1e:ab:46:
c5:d3:6b:1f:05:a8:0e:90:87:ef:88:e7:13:d5:a1:
0d:40:8a:48:27:41:9b:e3:8c:9c:4b:d8:da:b5:e3:
cb:30:06:08:55:6e:76:6f:0c:98:fb:a5:09:f3:a5:
40:9d:27:5e:86:53:b1:6f:ba:10:a6:c0:d2:44:08:
d8:84:e2:c1:42:1c:7c:17:9a:d3:6b:77:46:d3:bc:
f9:2d:bc:b9:21:b7:6b:99:34:39:38:6c:ad:ac:32:
72:51:83:dd:c5:c2:a7:a7:2a:d7:08:e8:50:d7:7d:
be:7b:48:52:91:c6:a8:53:ed:88:87:5f:a6:a0:be:
2b:5c:f0:7a:7c:15:65:8a:5b:a4:0d:00:04:01:bb:
ce:93:b6:81:50:e2:df:97:56:9c:3d:74:72:d0:38:
cf:21:09:59:0f:5f:e4:f2:c4:33:65:df:02:8f:b6:
87:dd:4f:12:ff:75:9b:d7:3c:3d:b6:ae:86:ee:fa:
60:9c:95:f6:48:02:bf:55:b8:a1:ba:0c:44:85:96:
9f:3c:a1:7d:33:ef:64:cc:ad:b0:19:3a:cc:16:1e:
a2:ff:02:59:d7:17:2b:b2:e2:70:7e:aa:4f:af:ea:
17:cd:e6:b2:46:d1:78:a2:62:f9:18:56:b8:73:ea:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:4E:48:2E:98:84:BF:5B:3A:0B:4E:57:74:64:7A:5B:F9:F2:BD
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:74:70:9f:45:54:a3:ff:2f:a2:b8:dc:72:d4:ab:ab:55:2d:
be:f8:02:f4:22:57:03:c1:34:c5:4c:33:7b:63:e2:0f:c6:33:
b2:86:aa:7b:80:51:5e:14:2f:9a:5c:ae:a4:57:e7:48:8d:24:
d3:a3:ef:91:06:a8:e7:b3:5c:60:cb:ef:24:d4:0b:5c:dc:b7:
b1:3a:c4:c1:ef:66:1e:e4:14:17:4b:44:0e:e5:3f:56:f9:d3:
12:ec:4a:6e:be:c0:a1:7c:58:5b:ef:a9:dc:8c:07:58:81:29:
33:45:ae:da:c9:77:46:da:34:68:00:2a:66:09:35:c3:77:c1:
1a:1c:ea:83:a7:f2:9b:37:69:28:9f:de:59:0d:7f:44:d8:f2:
6c:69:f9:41:07:67:f0:b0:63:d2:da:61:84:06:a6:60:7a:5f:
a8:fc:71:b0:7c:74:51:1c:a7:ac:eb:85:13:2e:c9:0d:22:e7:
87:a0:9c:4d:07:be:31:bf:39:3d:35:9d:df:7f:55:d2:b2:27:
b3:55:3c:98:45:ee:d7:3d:d6:97:c2:34:36:e2:fb:b9:e2:8a:
80:aa:c3:7c:a3:1e:e5:b0:f7:e8:4e:15:1c:2e:60:8d:a4:12:
74:2c:5e:fc:c0:3a:05:25:71:c8:18:5a:44:c9:47:e5:de:f0:
7b:e7:f9:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbOBjp/ZQTLVbAcF5n59YqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5Nzk0MjZhMGJjZDkwM2E1NTI2NDkyY2M1YWY3YjRmMmIw
ZWRiMDQwHhcNMjUwNTE0MDkwMDM2WhcNMjUwNTE1MDkwMDM2WjAzMTEwLwYDVQQD
EyhjYTUyNGU0ODJlOTg4NGJmNWIzYTBiNGU1Nzc0NjQ3YTViZjlmMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHU4UxrQxg7TFL8eq0bF02sfBagO
kIfviOcT1aENQIpIJ0Gb44ycS9jatePLMAYIVW52bwyY+6UJ86VAnSdehlOxb7oQ
psDSRAjYhOLBQhx8F5rTa3dG07z5Lby5IbdrmTQ5OGytrDJyUYPdxcKnpyrXCOhQ
132+e0hSkcaoU+2Ih1+moL4rXPB6fBVlilukDQAEAbvOk7aBUOLfl1acPXRy0DjP
IQlZD1/k8sQzZd8Cj7aH3U8S/3Wb1zw9tq6G7vpgnJX2SAK/VbihugxEhZafPKF9
M+9kzK2wGTrMFh6i/wJZ1xcrsuJwfqpPr+oXzeayRtF4omL5GFa4c+oXhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpSTkgumIS/WzoLTld0ZHpb+fK9MB8GA1UdIwQY
MBaAFIl5QmoLzZA6VSZJLMWve08rDtsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMt
NDlhYzI4MTQyMzE4LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMtNDlhYzI4MTQyMzE4
LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHRwn0VU
o/8vorjcctSrq1UtvvgC9CJXA8E0xUwze2PiD8Yzsoaqe4BRXhQvmlyupFfnSI0k
06PvkQao57NcYMvvJNQLXNy3sTrEwe9mHuQUF0tEDuU/VvnTEuxKbr7AoXxYW++p
3IwHWIEpM0Wu2sl3Rto0aAAqZgk1w3fBGhzqg6fymzdpKJ/eWQ1/RNjybGn5QQdn
8LBj0tphhAamYHpfqPxxsHx0URynrOuFEy7JDSLnh6CcTQe+Mb85PTWd339V0rIn
s1U8mEXu1z3Wl8I0NuL7ueKKgKrDfKMe5bD36E4VHC5gjaQSdCxe/MA6BSVxyBha
RMlH5d7we+f5og==
-----END CERTIFICATE-----
Generated at Wed May 14 11:28:39 2025 by rpki-client