Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
File: tDlkbascuAzWConx-qE0bzlSO_o.mft (raw, json)
Hash identifier: 30ijdCW1a4fXIplmQhVfT669rjkSGidXZBCf162KbZU=
Subject key identifier: C1:A7:27:68:AE:BA:B4:2B:94:A0:9A:66:8E:2D:66:4A:62:19:60:C5
Authority key identifier: B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
Certificate issuer: /CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Certificate serial: 0196A4652E2A0C7A17942FA0123921D4DF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
Manifest number: 1523
Signing time: Tue 06 May 2025 07:00:16 +0000
Manifest this update: Tue 06 May 2025 07:00:16 +0000
Manifest next update: Wed 07 May 2025 07:00:16 +0000
Files and hashes: 1: tDlkbascuAzWConx-qE0bzlSO_o.crl (hash: mzolnMr5Fw4Y6ljFMUhd4cdYjPdU9n0qjZgvldyD7gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:2e:2a:0c:7a:17:94:2f:a0:12:39:21:d4:df:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b439646dab1cb80cd60a89f1faa1346f39523bfa
Validity
Not Before: May 6 07:00:16 2025 GMT
Not After : May 7 07:00:16 2025 GMT
Subject: CN=c1a72768aebab42b94a09a668e2d664a621960c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:dc:2b:ae:b7:d0:f9:d5:95:fc:cb:00:43:
22:16:5a:dd:4c:81:ef:70:78:34:95:3b:5e:2d:c6:
f8:21:76:10:f9:85:0d:22:92:3c:5f:4c:13:4e:d5:
12:1a:0d:62:42:37:27:45:f3:dd:06:a8:2b:79:00:
7f:d1:f8:11:e0:87:f3:24:69:ac:ec:ad:8c:06:c1:
36:e0:0b:fe:26:0b:85:56:dd:7f:7c:16:9f:d3:89:
aa:10:b4:bc:7d:bc:53:94:14:6f:a0:07:de:3c:f3:
93:ba:df:38:5a:4a:81:d7:f4:69:01:6d:d0:b1:b1:
0e:67:23:32:d5:2e:2e:97:42:b9:da:16:fb:81:1d:
c9:d0:65:f9:bb:01:ee:59:da:51:d6:c1:7a:d0:56:
80:b0:10:0a:f0:99:bd:b9:20:62:29:98:98:d7:f2:
c1:72:66:92:40:e9:83:f6:14:bc:9f:3f:7a:a9:37:
55:8b:f6:f1:4f:d7:54:3a:63:f7:de:20:da:38:8c:
47:85:3b:62:3f:32:b0:fa:22:f0:5d:3b:86:f1:e3:
fc:3c:38:7b:3a:0e:69:9d:b3:b8:86:e4:0e:71:7b:
ae:32:8d:38:72:85:b0:90:c3:6f:56:a8:7d:32:50:
2c:0a:f6:54:f2:18:16:87:10:8e:47:05:d5:bb:08:
e7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A7:27:68:AE:BA:B4:2B:94:A0:9A:66:8E:2D:66:4A:62:19:60:C5
X509v3 Authority Key Identifier:
keyid:B4:39:64:6D:AB:1C:B8:0C:D6:0A:89:F1:FA:A1:34:6F:39:52:3B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDlkbascuAzWConx-qE0bzlSO_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cd4f4d-aa58-4a2f-a3c5-7e8c545a97ae/1/tDlkbascuAzWConx-qE0bzlSO_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2e:be:cb:14:de:c6:03:5a:9b:75:e6:e0:9e:ec:b0:93:29:
67:c2:19:0b:9e:e0:de:f9:dd:83:91:58:4f:4e:46:04:c4:49:
93:d2:07:cd:d1:96:09:99:ed:a4:f4:d5:02:03:a4:fb:dd:b8:
fa:f0:bd:d3:1e:05:f1:d2:a2:6b:69:68:23:00:08:95:c8:0c:
0a:0a:2f:84:1e:94:a9:9a:f6:c5:97:6a:a4:4b:a4:33:69:c3:
83:94:77:8e:c1:c5:8b:70:61:1b:2a:6b:8f:12:84:ca:6f:96:
4e:f9:a7:04:ae:11:17:74:99:96:a9:e1:00:67:96:19:32:ff:
2c:dc:0d:58:74:7c:c1:55:5c:2c:d6:f0:24:85:57:1c:ec:bd:
6c:c2:76:49:48:bf:15:55:ca:13:b5:8c:5f:e7:99:dc:d2:87:
25:26:9b:c8:a3:a7:f2:47:8b:a8:9f:38:01:72:7d:5d:62:1e:
0c:08:e3:97:d1:20:33:3e:96:bd:ae:44:eb:33:6b:fa:d8:9a:
2a:f0:b7:4b:4a:fe:28:a3:3d:bd:9f:0d:42:69:33:7d:94:27:
75:0b:22:4e:ec:45:20:d5:59:ad:ab:ee:8a:15:c5:98:69:00:
1c:98:8c:f6:fa:96:a5:5c:94:7e:1f:8b:8d:c0:07:e6:4d:30:
0d:54:6a:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZakZS4qDHoXlC+gEjkh1N+HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Mzk2NDZkYWIxY2I4MGNkNjBhODlmMWZhYTEzNDZmMzk1
MjNiZmEwHhcNMjUwNTA2MDcwMDE2WhcNMjUwNTA3MDcwMDE2WjAzMTEwLwYDVQQD
EyhjMWE3Mjc2OGFlYmFiNDJiOTRhMDlhNjY4ZTJkNjY0YTYyMTk2MGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNLcK6630PnVlfzLAEMiFlrdTIHv
cHg0lTteLcb4IXYQ+YUNIpI8X0wTTtUSGg1iQjcnRfPdBqgreQB/0fgR4IfzJGms
7K2MBsE24Av+JguFVt1/fBaf04mqELS8fbxTlBRvoAfePPOTut84WkqB1/RpAW3Q
sbEOZyMy1S4ul0K52hb7gR3J0GX5uwHuWdpR1sF60FaAsBAK8Jm9uSBiKZiY1/LB
cmaSQOmD9hS8nz96qTdVi/bxT9dUOmP33iDaOIxHhTtiPzKw+iLwXTuG8eP8PDh7
Og5pnbO4huQOcXuuMo04coWwkMNvVqh9MlAsCvZU8hgWhxCORwXVuwjnPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGnJ2iuurQrlKCaZo4tZkpiGWDFMB8GA1UdIwQY
MBaAFLQ5ZG2rHLgM1gqJ8fqhNG85Ujv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUt
N2U4YzU0NWE5N2FlLzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jZDRmNGQtYWE1OC00YTJmLWEzYzUtN2U4YzU0NWE5N2Fl
LzEvdERsa2Jhc2N1QXpXQ29ueC1xRTBiemxTT19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi6+yxTe
xgNam3Xm4J7ssJMpZ8IZC57g3vndg5FYT05GBMRJk9IHzdGWCZntpPTVAgOk+924
+vC90x4F8dKia2loIwAIlcgMCgovhB6UqZr2xZdqpEukM2nDg5R3jsHFi3BhGypr
jxKEym+WTvmnBK4RF3SZlqnhAGeWGTL/LNwNWHR8wVVcLNbwJIVXHOy9bMJ2SUi/
FVXKE7WMX+eZ3NKHJSabyKOn8keLqJ84AXJ9XWIeDAjjl9EgMz6Wva5E6zNr+tia
KvC3S0r+KKM9vZ8NQmkzfZQndQsiTuxFINVZravuihXFmGkAHJiM9vqWpVyUfh+L
jcAH5k0wDVRqdg==
-----END CERTIFICATE-----
Generated at Tue May 6 17:18:47 2025 by rpki-client