Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: YtmNtpPyS2g25OzT1CMmKGnsQ4U3SYrRca8qZSsa+lg=
Subject key identifier: D5:8B:BE:D3:37:68:E7:1D:56:A1:DA:DD:9D:29:EE:08:2A:2F:D0:6B
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 0196B7B5FC7552A9AD3D9376F5B68561F3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 01:01:19 +0000
Manifest this update: Sat 10 May 2025 01:01:19 +0000
Manifest next update: Sun 11 May 2025 01:01:19 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: atGDoenILHNgpjURZa8aGVDzDj88iD88p6RrKl91+Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:fc:75:52:a9:ad:3d:93:76:f5:b6:85:61:f3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: May 10 01:01:19 2025 GMT
Not After : May 11 01:01:19 2025 GMT
Subject: CN=d58bbed33768e71d56a1dadd9d29ee082a2fd06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:4d:3a:78:d9:32:ae:ed:65:86:a1:70:76:
4f:1f:24:51:53:3a:c7:b2:6a:47:d7:4c:73:74:a8:
97:0b:34:de:ca:d6:c7:a0:bc:40:f0:6b:db:64:80:
f4:30:d8:c8:de:fd:05:3d:ea:2a:14:c6:91:7f:f7:
f5:0c:a8:9c:95:1f:5e:5d:fa:38:1a:d0:40:ba:a5:
0b:56:02:3f:fb:8f:33:ea:8e:2c:ff:13:81:79:14:
99:ca:dc:66:f7:f3:d9:c2:8e:fe:af:20:7f:58:b2:
3c:e6:46:f0:9f:97:d9:b9:4d:16:fc:5c:77:a0:7e:
4c:48:b5:d3:78:c1:14:4a:1f:c9:08:e5:0a:91:1f:
22:05:5a:37:f4:d6:14:f2:5f:23:c0:ed:a1:c6:8e:
59:30:41:35:92:f3:a1:f5:6f:27:30:71:e2:29:6f:
b1:56:b6:ff:27:8c:d9:b1:7a:ff:5f:82:2e:84:32:
1a:82:93:52:df:66:10:d0:f0:c8:e9:8f:06:41:1e:
46:5f:52:24:62:60:96:a7:a1:ca:bf:4b:80:6f:88:
e6:7d:5f:2b:f2:47:02:f2:bd:c8:13:46:00:f4:dc:
fc:14:ae:30:77:d1:37:c5:69:85:82:2f:80:b7:07:
17:e3:54:1e:fb:7e:0e:b5:50:38:24:b5:d3:89:9a:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8B:BE:D3:37:68:E7:1D:56:A1:DA:DD:9D:29:EE:08:2A:2F:D0:6B
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:be:b4:a2:c0:26:46:a1:ba:d8:0b:88:f9:59:73:f4:3e:9a:
e1:61:47:5b:ca:f9:7c:2b:bd:4a:a7:0c:9d:44:8d:4c:8d:a0:
b3:1b:53:7d:2c:76:5c:6a:79:22:5f:c7:bf:d0:37:17:39:5f:
6a:0d:5c:94:cd:7e:f2:32:71:89:ab:b0:0e:73:a3:da:73:fb:
3a:d5:a5:d2:93:0f:c5:4a:ae:82:f7:fd:18:d3:cf:02:ef:d7:
09:83:d4:04:66:bf:07:87:4a:aa:06:9c:7b:3e:99:b9:ff:7e:
c6:b2:a0:d3:ba:4a:5c:b7:e4:1f:1f:e1:09:e9:88:94:d0:98:
f5:cb:c0:c8:3f:d1:b5:e4:51:04:f7:31:df:b4:fe:7c:e2:5f:
ef:47:4b:ff:ad:56:46:fb:31:f9:b2:28:cc:0a:b5:ed:06:90:
a4:4f:d6:44:e9:e2:aa:a0:d4:13:82:87:47:3b:2b:21:44:84:
8b:67:a0:3b:d7:3f:4c:14:66:91:e8:5b:50:f2:1d:bd:f3:62:
9a:49:79:70:eb:20:8d:90:a0:40:54:a6:4e:05:77:21:b3:e6:
79:fe:f3:7c:40:56:e5:a3:76:d3:ba:06:b8:81:f7:83:d6:c3:
ec:b5:06:fc:0d:40:df:fe:9e:eb:cd:20:40:ce:ca:5e:ab:61:
1d:94:06:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tfx1UqmtPZN29baFYfPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjUwNTEwMDEwMTE5WhcNMjUwNTExMDEwMTE5WjAzMTEwLwYDVQQD
EyhkNThiYmVkMzM3NjhlNzFkNTZhMWRhZGQ5ZDI5ZWUwODJhMmZkMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTVNOnjZMq7tZYahcHZPHyRRUzrH
smpH10xzdKiXCzTeytbHoLxA8GvbZID0MNjI3v0FPeoqFMaRf/f1DKiclR9eXfo4
GtBAuqULVgI/+48z6o4s/xOBeRSZytxm9/PZwo7+ryB/WLI85kbwn5fZuU0W/Fx3
oH5MSLXTeMEUSh/JCOUKkR8iBVo39NYU8l8jwO2hxo5ZMEE1kvOh9W8nMHHiKW+x
Vrb/J4zZsXr/X4IuhDIagpNS32YQ0PDI6Y8GQR5GX1IkYmCWp6HKv0uAb4jmfV8r
8kcC8r3IE0YA9Nz8FK4wd9E3xWmFgi+AtwcX41Qe+34OtVA4JLXTiZpHwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWLvtM3aOcdVqHa3Z0p7ggqL9BrMB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtr60osAm
RqG62AuI+Vlz9D6a4WFHW8r5fCu9SqcMnUSNTI2gsxtTfSx2XGp5Il/Hv9A3Fzlf
ag1clM1+8jJxiauwDnOj2nP7OtWl0pMPxUqugvf9GNPPAu/XCYPUBGa/B4dKqgac
ez6Zuf9+xrKg07pKXLfkHx/hCemIlNCY9cvAyD/RteRRBPcx37T+fOJf70dL/61W
Rvsx+bIozAq17QaQpE/WROniqqDUE4KHRzsrIUSEi2egO9c/TBRmkehbUPIdvfNi
mkl5cOsgjZCgQFSmTgV3IbPmef7zfEBW5aN207oGuIH3g9bD7LUG/A1A3/6e680g
QM7KXqthHZQGdA==
-----END CERTIFICATE-----
Generated at Sat May 10 03:41:43 2025 by rpki-client