Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json)
Hash identifier: WUT4PsmaNPpt1awKfm/3cxi1lxAyxOhjYHPud+0zff4=
Subject key identifier: 64:03:96:36:7D:A2:16:29:61:26:F5:9F:86:93:33:35:68:ED:B6:32
Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a
Certificate serial: 0196A8B092133B52FEAF7F6415F8CE0B2817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
Manifest number: 0456
Signing time: Wed 07 May 2025 03:01:06 +0000
Manifest this update: Wed 07 May 2025 03:01:06 +0000
Manifest next update: Thu 08 May 2025 03:01:06 +0000
Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: bGHRLIhw2DPC9+sCB5wocEq9K8SeXOc1d44KH58KtKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:b0:92:13:3b:52:fe:af:7f:64:15:f8:ce:0b:28:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a
Validity
Not Before: May 7 03:01:06 2025 GMT
Not After : May 8 03:01:06 2025 GMT
Subject: CN=640396367da216296126f59f8693333568edb632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:f8:83:f3:dc:27:80:dc:ee:cc:c0:d4:4c:
60:fc:de:f2:9a:55:ef:89:81:9c:83:0b:eb:29:5a:
08:16:44:eb:e0:bc:c5:f8:52:0f:d5:f4:f3:a7:02:
15:fd:10:6e:2c:b7:9a:95:d7:4f:49:de:9f:5e:2b:
ca:ff:2d:ad:5d:29:18:5c:9b:bd:5d:a4:1e:e6:a1:
71:d7:44:dd:e7:a2:6a:f4:8b:2c:11:3d:2b:9b:3e:
a0:23:ca:6b:91:3c:5a:72:d4:85:12:43:b4:03:03:
71:b7:19:a8:58:c9:bf:02:96:61:b7:2b:82:87:04:
2a:0b:d3:ed:e5:da:c8:fe:29:91:33:9e:66:5d:63:
e2:9a:5f:4e:76:09:89:af:ae:0e:7c:d2:29:9b:6e:
d8:8b:8a:43:ac:f5:a2:55:f1:ab:e1:9c:09:ab:55:
02:96:9c:d3:7f:ac:ad:6a:e1:94:ae:58:cf:55:10:
c9:9f:f6:f5:44:a3:53:16:41:74:f1:d1:0b:89:85:
04:f8:7b:7c:d1:3b:da:8b:17:72:45:75:7a:8b:16:
80:34:df:80:1f:7e:2b:64:0e:d0:9b:fe:9a:21:b8:
0c:5d:25:f8:11:4b:b2:d7:d5:1d:78:db:99:66:f7:
50:53:b4:f8:3d:8e:80:f3:64:bb:b7:93:1b:d3:c7:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:96:36:7D:A2:16:29:61:26:F5:9F:86:93:33:35:68:ED:B6:32
X509v3 Authority Key Identifier:
keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6f:dc:c4:76:bc:19:13:90:d8:ad:ef:7d:54:0e:5f:b7:cb:
d2:e6:69:30:bc:82:86:bd:c3:89:31:bb:78:3e:31:8d:4a:ed:
4e:91:58:9c:b6:99:2a:f8:82:e1:c7:6a:bf:96:b7:33:77:40:
b0:0b:6c:48:2c:12:49:ef:3b:f9:1f:9a:a8:56:71:a7:c3:a9:
7c:97:b6:18:f4:ae:9b:6e:b0:65:7b:c6:16:f6:a3:93:ed:24:
57:c4:ef:e3:26:78:93:a3:cf:2d:d3:f1:5c:a4:65:14:07:84:
83:d3:77:87:1b:a9:c7:22:9f:57:35:e9:ee:84:79:19:5b:16:
82:4f:47:79:5f:c5:b3:b4:67:23:12:5c:2a:65:a8:0f:ed:6b:
f4:bb:10:53:69:cb:c2:6d:87:da:eb:b9:6b:16:5b:83:e0:d3:
ae:2e:67:22:b1:c6:a4:78:5b:96:85:9d:88:8a:ff:ef:e6:00:
1c:a0:6e:83:b1:a4:fc:a5:c8:e0:e9:6b:f6:4a:06:67:3e:57:
15:28:04:23:2f:52:6f:ae:77:e5:ab:ac:de:f0:11:0f:35:54:
9d:fd:18:8c:50:c2:b8:f1:bc:eb:73:5a:8b:e7:c4:2e:8d:6e:
60:ce:10:ce:58:4c:83:4a:c7:d5:75:57:e8:52:e5:28:f7:49:
02:df:a1:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaosJITO1L+r39kFfjOCygXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NjY1MWNjYmQ5NGY2YmU5ZWI3NDMzMjEyMjMzNWNhYmJl
ZmMzOWEwHhcNMjUwNTA3MDMwMTA2WhcNMjUwNTA4MDMwMTA2WjAzMTEwLwYDVQQD
Eyg2NDAzOTYzNjdkYTIxNjI5NjEyNmY1OWY4NjkzMzMzNTY4ZWRiNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtX4g/PcJ4Dc7szA1Exg/N7ymlXv
iYGcgwvrKVoIFkTr4LzF+FIP1fTzpwIV/RBuLLealddPSd6fXivK/y2tXSkYXJu9
XaQe5qFx10Td56Jq9IssET0rmz6gI8prkTxactSFEkO0AwNxtxmoWMm/ApZhtyuC
hwQqC9Pt5drI/imRM55mXWPiml9OdgmJr64OfNIpm27Yi4pDrPWiVfGr4ZwJq1UC
lpzTf6ytauGUrljPVRDJn/b1RKNTFkF08dELiYUE+Ht80TvaixdyRXV6ixaANN+A
H34rZA7Qm/6aIbgMXSX4EUuy19UdeNuZZvdQU7T4PY6A82S7t5Mb08fKbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQDljZ9ohYpYSb1n4aTMzVo7bYyMB8GA1UdIwQY
MBaAFGlmUcy9lPa+nrdDMhIjNcq778OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9kY2MyMmUtYWFiMy00ZTE3LWE0YTAt
ZDg3MDE3ZDdhNmFjLzEvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9kY2MyMmUtYWFiMy00ZTE3LWE0YTAtZDg3MDE3ZDdhNmFj
LzEvYVdaUnpMMlU5cjZldDBNeUVpTTF5cnZ2dzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaW/cxHa8
GROQ2K3vfVQOX7fL0uZpMLyChr3DiTG7eD4xjUrtTpFYnLaZKviC4cdqv5a3M3dA
sAtsSCwSSe87+R+aqFZxp8OpfJe2GPSum26wZXvGFvajk+0kV8Tv4yZ4k6PPLdPx
XKRlFAeEg9N3hxupxyKfVzXp7oR5GVsWgk9HeV/Fs7RnIxJcKmWoD+1r9LsQU2nL
wm2H2uu5axZbg+DTri5nIrHGpHhbloWdiIr/7+YAHKBug7Gk/KXI4Olr9koGZz5X
FSgEIy9Sb6535aus3vARDzVUnf0YjFDCuPG863Nai+fELo1uYM4QzlhMg0rH1XVX
6FLlKPdJAt+hKw==
-----END CERTIFICATE-----
Generated at Wed May 7 06:49:50 2025 by rpki-client