Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: 5I2x8lJYOsb0CCu5JjlCuGPWyxOjJya+LlkxLV7fMAY=
Subject key identifier: 12:97:2C:DB:4C:A9:FF:72:04:97:B8:3C:AC:AA:FB:22:41:48:34:C8
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 0196A2E4D5A1B0632566A63EED26ECE2D9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 023E
Signing time: Tue 06 May 2025 00:00:27 +0000
Manifest this update: Tue 06 May 2025 00:00:27 +0000
Manifest next update: Wed 07 May 2025 00:00:27 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: M3E9E16lFSxm25DKsroZB9zNk+ewIK5iia3eAQHaMvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:d5:a1:b0:63:25:66:a6:3e:ed:26:ec:e2:d9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: May 6 00:00:27 2025 GMT
Not After : May 7 00:00:27 2025 GMT
Subject: CN=12972cdb4ca9ff720497b83cacaafb22414834c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:ad:3a:63:e3:b1:56:5a:89:00:81:84:73:
cb:51:bb:56:63:c3:c2:60:4b:17:ba:8e:42:57:16:
3e:6e:5c:12:19:38:98:3b:63:6d:e3:10:07:1d:7a:
aa:9e:1d:d3:46:06:a9:ab:31:0b:b0:e4:0f:a6:24:
e4:cd:d8:27:d5:51:d5:9b:71:09:b5:5e:66:9e:04:
61:af:ea:d0:23:38:7c:b4:7f:8d:26:4a:29:64:26:
f0:41:de:3f:d0:86:05:1f:82:cf:d3:77:5a:73:ca:
17:a6:f5:08:f6:e5:35:02:74:eb:e7:e7:06:b3:c0:
c5:67:76:b2:e4:95:a9:1a:dd:0a:b7:43:7f:f0:e0:
6d:bd:39:42:2b:ca:92:3c:4c:3c:28:92:d0:aa:93:
4c:1d:d3:23:77:24:ed:4d:f2:5e:ca:7b:b9:26:95:
44:8d:a9:57:62:d2:49:e9:ab:55:7d:72:2d:78:49:
81:76:e8:16:61:d5:1b:8d:27:a7:9e:e9:14:eb:2c:
7b:67:50:e0:ff:bc:11:70:37:eb:83:ae:6b:e1:54:
4d:54:bc:b9:a4:f9:c3:c7:04:70:98:91:43:6d:fd:
c4:3d:d4:b7:6e:b6:de:6a:63:23:72:49:b8:de:b6:
d6:75:14:e2:ca:72:66:d6:58:55:05:3d:01:75:ae:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:97:2C:DB:4C:A9:FF:72:04:97:B8:3C:AC:AA:FB:22:41:48:34:C8
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:aa:05:9a:49:71:ff:d6:fd:ec:f8:1c:eb:2e:eb:4b:bf:af:
a5:b7:f8:0d:e4:ca:82:4b:45:b5:e6:5f:e9:3f:98:c9:a9:f8:
11:6c:e5:0f:25:d7:13:b1:f7:c7:ad:1b:5b:e5:48:a8:ac:18:
55:23:2c:81:72:da:44:40:f8:07:ce:45:b4:0a:37:60:38:e6:
26:23:2a:a0:37:52:d1:13:2b:5e:f3:cd:09:5d:11:c2:8e:5a:
0d:9f:fd:64:2d:8e:7a:1c:17:be:b7:b6:f7:57:53:bd:9a:30:
4c:60:b5:c5:aa:9d:39:b9:36:d3:bd:e1:8f:76:04:fa:df:8b:
b4:84:e5:d5:19:7e:93:39:a1:d7:e5:ce:1f:ff:05:2b:a0:7b:
1a:27:f1:33:47:cd:ef:82:cd:64:4d:a2:13:e8:a6:ed:02:31:
72:64:ba:5c:56:97:6b:97:e5:74:c8:27:36:e9:5c:6b:d3:49:
46:9d:49:36:17:8a:6b:53:83:f1:6b:9f:23:cb:91:cd:c4:8c:
5a:cb:9d:a1:0a:dd:ad:6f:8b:4a:8e:7a:dc:3d:1a:32:4c:97:
79:8a:64:61:f6:3a:03:bb:f7:21:2a:1d:06:21:9b:9d:39:3c:
ca:b5:a4:62:9c:26:bc:0d:fb:ea:c9:73:1a:21:d3:cd:bf:a6:
4a:1d:b0:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZai5NWhsGMlZqY+7Sbs4tm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmNjNDAyNjdlMzU5MmUxYjUyZjBmMDA5NmNiMWYyZjBh
ZjE2N2QwHhcNMjUwNTA2MDAwMDI3WhcNMjUwNTA3MDAwMDI3WjAzMTEwLwYDVQQD
EygxMjk3MmNkYjRjYTlmZjcyMDQ5N2I4M2NhY2FhZmIyMjQxNDgzNGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwCtOmPjsVZaiQCBhHPLUbtWY8PC
YEsXuo5CVxY+blwSGTiYO2Nt4xAHHXqqnh3TRgapqzELsOQPpiTkzdgn1VHVm3EJ
tV5mngRhr+rQIzh8tH+NJkopZCbwQd4/0IYFH4LP03dac8oXpvUI9uU1AnTr5+cG
s8DFZ3ay5JWpGt0Kt0N/8OBtvTlCK8qSPEw8KJLQqpNMHdMjdyTtTfJeynu5JpVE
jalXYtJJ6atVfXIteEmBdugWYdUbjSennukU6yx7Z1Dg/7wRcDfrg65r4VRNVLy5
pPnDxwRwmJFDbf3EPdS3brbeamMjckm43rbWdRTiynJm1lhVBT0Bda5h4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKXLNtMqf9yBJe4PKyq+yJBSDTIMB8GA1UdIwQY
MBaAFNQsxAJn41kuG1Lw8AlssfLwrxZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjct
MTZlMTMwODczN2IwLzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjctMTZlMTMwODczN2Iw
LzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqqoFmklx
/9b97Pgc6y7rS7+vpbf4DeTKgktFteZf6T+Yyan4EWzlDyXXE7H3x60bW+VIqKwY
VSMsgXLaRED4B85FtAo3YDjmJiMqoDdS0RMrXvPNCV0Rwo5aDZ/9ZC2OehwXvre2
91dTvZowTGC1xaqdObk2073hj3YE+t+LtITl1Rl+kzmh1+XOH/8FK6B7GifxM0fN
74LNZE2iE+im7QIxcmS6XFaXa5fldMgnNulca9NJRp1JNheKa1OD8WufI8uRzcSM
WsudoQrdrW+LSo563D0aMkyXeYpkYfY6A7v3ISodBiGbnTk8yrWkYpwmvA376slz
GiHTzb+mSh2wwQ==
-----END CERTIFICATE-----
Generated at Tue May 6 07:35:56 2025 by rpki-client