Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
File: _s7aKggEQpcq6nJV-LM6dg7LMcs.mft (raw, json)
Hash identifier: pLPs5gop2PdUWhedC1otLazpcD16GOnUj6qN33uHrhk=
Subject key identifier: 39:51:21:CF:F2:51:1B:B4:D8:53:90:5E:91:82:38:56:AA:13:F2:1E
Authority key identifier: FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
Certificate issuer: /CN=feceda2a080442972aea7255f8b33a760ecb31cb
Certificate serial: 0196C34BBC2B21D3D1A6E1AE4B64DD94A967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
Manifest number: 0B40
Signing time: Mon 12 May 2025 07:00:42 +0000
Manifest this update: Mon 12 May 2025 07:00:42 +0000
Manifest next update: Tue 13 May 2025 07:00:42 +0000
Files and hashes: 1: _s7aKggEQpcq6nJV-LM6dg7LMcs.crl (hash: I+/VsF+qg7bMAz+ULZPQjkTXGHKKyFX9R0JSMZQFwUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:bc:2b:21:d3:d1:a6:e1:ae:4b:64:dd:94:a9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feceda2a080442972aea7255f8b33a760ecb31cb
Validity
Not Before: May 12 07:00:42 2025 GMT
Not After : May 13 07:00:42 2025 GMT
Subject: CN=395121cff2511bb4d853905e91823856aa13f21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b8:e4:a3:35:81:ff:15:fc:4a:9d:4a:1b:39:
82:60:90:5f:08:b3:88:b9:68:87:eb:60:e9:d6:9f:
b6:2f:bc:47:64:78:78:d3:70:95:86:0c:27:3e:fb:
19:59:f2:ab:ee:10:07:d1:c9:34:03:a1:3b:c7:84:
00:12:74:e0:fb:4d:4f:43:67:8b:12:5e:cd:41:24:
b8:5b:fd:ee:fa:f8:7f:0f:ca:45:78:69:11:e6:da:
4f:b4:3a:de:8a:a4:30:87:8a:b5:aa:e9:c7:fe:18:
9e:c5:de:99:59:2d:89:31:cd:bf:09:64:44:12:1a:
25:8b:42:53:f1:07:0d:9d:c0:90:9a:bc:45:19:c6:
5e:82:88:83:55:4e:f5:e5:d0:19:5e:be:be:b1:9a:
c8:21:67:b0:4e:6c:e7:a6:55:59:ef:22:d8:92:79:
b1:f2:93:82:68:d5:f1:e3:56:b6:f8:16:f4:58:46:
f1:6c:7c:cd:b6:5a:31:4a:7b:7e:0d:69:73:dd:06:
8b:d7:10:a3:c4:5a:55:6f:f9:21:da:1c:ee:2a:27:
25:fe:14:de:68:f5:f8:65:b8:52:17:43:8e:8e:97:
49:b4:30:db:99:02:e0:c5:c6:a2:50:2c:63:c3:85:
7b:14:b1:94:58:e8:7b:35:6c:96:46:c3:35:42:78:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:51:21:CF:F2:51:1B:B4:D8:53:90:5E:91:82:38:56:AA:13:F2:1E
X509v3 Authority Key Identifier:
keyid:FE:CE:DA:2A:08:04:42:97:2A:EA:72:55:F8:B3:3A:76:0E:CB:31:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s7aKggEQpcq6nJV-LM6dg7LMcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/623aeb-0fc9-403a-8d35-b04cd8a73afc/1/_s7aKggEQpcq6nJV-LM6dg7LMcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:fe:a6:a9:5c:b2:3e:31:0b:19:ce:e4:0c:7e:72:7e:af:
92:a5:9c:9d:28:45:cd:85:9f:62:d0:28:72:0e:ca:eb:dc:94:
7d:f7:a0:21:8e:1a:1b:aa:56:b9:b6:0f:fb:c3:40:a5:a4:6a:
cf:77:62:5e:04:5f:0f:d4:66:3b:2d:f0:19:1a:e9:7d:4c:c2:
0b:d0:74:c8:c3:2b:3f:fa:24:65:80:2c:79:08:ae:97:ac:d3:
16:ec:a7:04:8d:11:17:c8:b3:66:32:0c:bc:8c:43:8f:87:d7:
50:7f:d9:ce:79:03:d6:0f:6f:38:6c:6d:92:ce:93:60:a3:2c:
32:e6:dd:b7:9f:8a:b2:a6:8d:bf:97:77:cb:a1:e8:f3:fb:b1:
18:cb:41:5f:94:ab:f4:d1:e6:6f:ec:20:15:76:fa:6c:a5:9c:
ad:f0:fd:2f:9c:4f:91:cb:c5:fa:a8:f6:b6:cc:26:6f:56:e6:
92:61:b3:d5:ad:b9:2d:2a:e8:d6:50:fa:ff:6b:f5:79:8d:60:
48:9e:15:54:10:64:74:7e:0e:06:24:42:93:c5:92:c2:cf:6f:
f0:27:83:26:35:ef:a9:e6:60:f6:4a:05:fc:5d:e2:62:27:d9:
6f:f4:bd:cc:66:9e:ca:d6:ea:75:6b:e2:fa:e6:72:f6:74:9e:
b5:f6:ac:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS7wrIdPRpuGuS2TdlKlnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2VkYTJhMDgwNDQyOTcyYWVhNzI1NWY4YjMzYTc2MGVj
YjMxY2IwHhcNMjUwNTEyMDcwMDQyWhcNMjUwNTEzMDcwMDQyWjAzMTEwLwYDVQQD
EygzOTUxMjFjZmYyNTExYmI0ZDg1MzkwNWU5MTgyMzg1NmFhMTNmMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47jkozWB/xX8Sp1KGzmCYJBfCLOI
uWiH62Dp1p+2L7xHZHh403CVhgwnPvsZWfKr7hAH0ck0A6E7x4QAEnTg+01PQ2eL
El7NQSS4W/3u+vh/D8pFeGkR5tpPtDreiqQwh4q1qunH/hiexd6ZWS2JMc2/CWRE
Eholi0JT8QcNncCQmrxFGcZegoiDVU715dAZXr6+sZrIIWewTmznplVZ7yLYknmx
8pOCaNXx41a2+Bb0WEbxbHzNtloxSnt+DWlz3QaL1xCjxFpVb/kh2hzuKicl/hTe
aPX4ZbhSF0OOjpdJtDDbmQLgxcaiUCxjw4V7FLGUWOh7NWyWRsM1QnjAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlRIc/yURu02FOQXpGCOFaqE/IeMB8GA1UdIwQY
MBaAFP7O2ioIBEKXKupyVfizOnYOyzHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUt
YjA0Y2Q4YTczYWZjLzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy82MjNhZWItMGZjOS00MDNhLThkMzUtYjA0Y2Q4YTczYWZj
LzEvX3M3YUtnZ0VRcGNxNm5KVi1MTTZkZzdMTWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh7+pqlc
sj4xCxnO5Ax+cn6vkqWcnShFzYWfYtAocg7K69yUffegIY4aG6pWubYP+8NApaRq
z3diXgRfD9RmOy3wGRrpfUzCC9B0yMMrP/okZYAseQiul6zTFuynBI0RF8izZjIM
vIxDj4fXUH/ZznkD1g9vOGxtks6TYKMsMubdt5+KsqaNv5d3y6Ho8/uxGMtBX5Sr
9NHmb+wgFXb6bKWcrfD9L5xPkcvF+qj2tswmb1bmkmGz1a25LSro1lD6/2v1eY1g
SJ4VVBBkdH4OBiRCk8WSws9v8CeDJjXvqeZg9koF/F3iYifZb/S9zGaeytbqdWvi
+uZy9nSetfasvg==
-----END CERTIFICATE-----
Generated at Mon May 12 11:21:42 2025 by rpki-client