Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: Dz8tYfLndTFYr3otidd+6spoiK52n1wgD1s/+oiUxNY=
Subject key identifier: C3:DA:AE:D6:C2:0C:4F:25:6C:C7:09:E3:26:10:1F:DF:ED:88:B0:83
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 0196BD80491195699C38C643825A5A708B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0869
Signing time: Sun 11 May 2025 04:00:23 +0000
Manifest this update: Sun 11 May 2025 04:00:23 +0000
Manifest next update: Mon 12 May 2025 04:00:23 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: IRZ9/ccfiUm/npiMbTPXUoiSBUU9c+A9j4GMdPfZb7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:49:11:95:69:9c:38:c6:43:82:5a:5a:70:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: May 11 04:00:23 2025 GMT
Not After : May 12 04:00:23 2025 GMT
Subject: CN=c3daaed6c20c4f256cc709e326101fdfed88b083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:64:3a:9a:57:c5:f0:e1:9a:de:b7:3e:ab:
c5:ca:22:af:35:35:06:a4:8a:b6:e7:47:9a:b0:6e:
d8:2f:49:d0:f5:13:ff:be:5c:13:8a:d8:ff:79:3a:
b9:cc:ed:f3:fd:fc:25:e3:c1:0e:8c:b6:e7:4d:4e:
74:3a:82:ab:23:5a:de:38:f1:2f:ce:56:bf:d0:cd:
c1:15:6c:42:42:1c:d2:34:02:d7:00:7b:f9:3d:30:
e3:9d:d5:5f:7a:4b:71:f9:95:94:9f:6e:fe:d5:87:
cd:cd:9c:8d:0e:9d:0a:a3:9f:7e:d9:d8:08:0d:e4:
13:fc:7b:25:92:91:93:f5:53:33:d3:ee:7f:3a:da:
8b:73:79:44:2b:63:36:55:1d:32:f6:97:c2:1c:e1:
fa:96:99:2b:aa:49:d3:85:c4:e0:ab:b1:68:c1:fa:
fc:1a:30:12:fc:a0:93:0c:f0:ea:77:f3:03:cb:e9:
38:23:33:58:f6:d2:b6:9b:40:72:8c:c9:1d:06:82:
13:73:ac:de:eb:97:c0:50:36:6f:e8:4a:0a:f1:c1:
ab:56:a1:f3:93:54:42:c6:d4:37:8d:31:36:1c:25:
34:e4:5d:62:38:31:87:71:1f:22:51:6a:d1:80:21:
85:ba:63:3a:be:bf:0e:21:ea:23:f7:2e:a0:67:b0:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:AE:D6:C2:0C:4F:25:6C:C7:09:E3:26:10:1F:DF:ED:88:B0:83
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ab:02:ba:21:53:dd:a3:1c:00:62:6c:26:b5:4a:d7:8c:9d:
da:94:2e:45:72:85:0e:d8:0c:69:a6:3b:1a:8c:07:67:f2:11:
fd:23:c2:e5:a3:1d:42:f6:10:78:97:2d:1f:ce:20:3f:9b:1b:
1f:b6:92:48:7c:7d:7c:76:8e:3c:2b:f6:4d:9e:d4:a0:bc:8a:
7c:8a:36:c2:a7:08:36:4a:05:03:5e:dc:c2:52:2e:e7:79:c9:
60:ff:dc:6d:b0:52:01:a4:be:ac:17:2c:fd:dd:39:b2:e3:55:
f5:62:20:0e:f7:a3:0a:fe:39:f6:52:88:12:5b:7a:46:0e:15:
c5:ea:cc:73:13:ca:76:e0:ce:93:40:36:fa:32:58:57:a4:8f:
68:f1:0f:67:e9:16:18:85:68:03:dd:26:1f:e2:c6:19:6d:0c:
0b:3e:37:20:e9:df:91:f5:43:58:ad:de:3f:bc:e2:db:44:e1:
f1:6f:29:b9:e6:47:c5:b5:79:5d:f7:c9:d0:93:62:ee:06:c7:
e6:0b:48:26:1b:8c:f5:c1:3c:c4:12:f4:02:73:1f:a2:f5:af:
fa:0d:6d:f0:7c:df:93:2d:01:84:dc:2d:10:cd:59:04:dc:3f:
23:f7:b2:66:42:a9:f8:1b:33:ff:41:5b:c1:38:9e:1d:85:87:
6d:88:71:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gEkRlWmcOMZDglpacIs+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MWQ3MzcxMjQxMzQ2YzZlYTlhNDc2OTQ2ODAyMTcyY2Ew
NzU2NmIwHhcNMjUwNTExMDQwMDIzWhcNMjUwNTEyMDQwMDIzWjAzMTEwLwYDVQQD
EyhjM2RhYWVkNmMyMGM0ZjI1NmNjNzA5ZTMyNjEwMWZkZmVkODhiMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjBkOppXxfDhmt63PqvFyiKvNTUG
pIq250easG7YL0nQ9RP/vlwTitj/eTq5zO3z/fwl48EOjLbnTU50OoKrI1reOPEv
zla/0M3BFWxCQhzSNALXAHv5PTDjndVfektx+ZWUn27+1YfNzZyNDp0Ko59+2dgI
DeQT/HslkpGT9VMz0+5/OtqLc3lEK2M2VR0y9pfCHOH6lpkrqknThcTgq7Fowfr8
GjAS/KCTDPDqd/MDy+k4IzNY9tK2m0ByjMkdBoITc6ze65fAUDZv6EoK8cGrVqHz
k1RCxtQ3jTE2HCU05F1iODGHcR8iUWrRgCGFumM6vr8OIeoj9y6gZ7ASVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPartbCDE8lbMcJ4yYQH9/tiLCDMB8GA1UdIwQY
MBaAFEcdc3EkE0bG6ppHaUaAIXLKB1ZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUt
NTY5MWYxNzM4YWJhLzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUtNTY5MWYxNzM4YWJh
LzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6sCuiFT
3aMcAGJsJrVK14yd2pQuRXKFDtgMaaY7GowHZ/IR/SPC5aMdQvYQeJctH84gP5sb
H7aSSHx9fHaOPCv2TZ7UoLyKfIo2wqcINkoFA17cwlIu53nJYP/cbbBSAaS+rBcs
/d05suNV9WIgDvejCv459lKIElt6Rg4VxerMcxPKduDOk0A2+jJYV6SPaPEPZ+kW
GIVoA90mH+LGGW0MCz43IOnfkfVDWK3eP7zi20Th8W8pueZHxbV5XffJ0JNi7gbH
5gtIJhuM9cE8xBL0AnMfovWv+g1t8Hzfky0BhNwtEM1ZBNw/I/eyZkKp+Bsz/0Fb
wTieHYWHbYhxdg==
-----END CERTIFICATE-----
Generated at Sun May 11 10:02:05 2025 by rpki-client