Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
File: rD5tWdR-c37cMaZfMQUUzUuV04c.mft (raw, json)
Hash identifier: llNc2OxPWthiFpfU4p4Ebf1JiHyAd9bM77+y1m7WU4Y=
Subject key identifier: 7E:30:C3:29:5C:A8:E6:88:11:62:FC:26:84:B1:E8:6E:7A:7B:DD:13
Authority key identifier: AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
Certificate issuer: /CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Certificate serial: 0196BA117029C043DCC4D7CD14A1F57E0BB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
Manifest number: 152D
Signing time: Sat 10 May 2025 12:00:26 +0000
Manifest this update: Sat 10 May 2025 12:00:26 +0000
Manifest next update: Sun 11 May 2025 12:00:26 +0000
Files and hashes: 1: rD5tWdR-c37cMaZfMQUUzUuV04c.crl (hash: +Hb7tSK0tdXPn8YRPb29aEOjQVI08q8rza3oShN7Exc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:70:29:c0:43:dc:c4:d7:cd:14:a1:f5:7e:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3e6d59d47e737edc31a65f310514cd4b95d387
Validity
Not Before: May 10 12:00:26 2025 GMT
Not After : May 11 12:00:26 2025 GMT
Subject: CN=7e30c3295ca8e6881162fc2684b1e86e7a7bdd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:0b:54:93:df:c8:9f:b5:81:bb:8e:c2:e4:
c1:8d:0a:bb:ca:4f:5c:80:e3:be:9c:1f:01:33:31:
d8:0f:12:09:98:b0:36:9e:23:ef:2f:d6:44:5f:00:
28:d4:2f:bf:7d:c7:d3:56:c5:9a:ff:7f:95:86:e9:
b8:c2:b9:05:87:f5:f9:b4:64:7d:d2:ee:b9:1f:ed:
96:60:30:46:bc:49:60:68:0d:04:bf:3a:44:e6:e3:
3b:a9:c2:09:e1:88:b5:c0:db:c1:82:f9:6c:d2:07:
03:f2:1c:e1:87:5e:ec:8f:0c:6f:a4:de:66:ae:22:
ba:e5:d1:8f:7a:90:db:38:c5:ff:fd:0e:cf:75:1c:
ce:41:66:12:9a:aa:84:e2:41:eb:04:8d:92:b3:32:
e9:77:61:f6:0f:eb:1b:23:d5:51:9f:d7:12:3e:5a:
c6:84:62:51:4a:24:4e:96:fb:d6:fb:54:84:7e:64:
59:65:38:c8:fe:14:ad:77:d2:d8:7c:4d:5e:37:d7:
6f:03:56:a8:73:b7:c3:18:16:9f:29:0e:64:cc:f2:
0f:68:aa:e6:f6:26:04:d7:cd:c0:e3:50:75:8b:39:
47:7a:26:9d:a9:73:60:83:67:4d:07:0a:18:30:1f:
22:bb:4c:10:0c:d4:14:57:7c:30:89:f3:63:2e:77:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:30:C3:29:5C:A8:E6:88:11:62:FC:26:84:B1:E8:6E:7A:7B:DD:13
X509v3 Authority Key Identifier:
keyid:AC:3E:6D:59:D4:7E:73:7E:DC:31:A6:5F:31:05:14:CD:4B:95:D3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rD5tWdR-c37cMaZfMQUUzUuV04c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6e1003-819a-4392-938a-5ae53c21b8cd/1/rD5tWdR-c37cMaZfMQUUzUuV04c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:94:2d:70:1a:39:2f:33:14:4d:c8:76:4d:4a:08:e7:f8:e2:
d3:99:3a:95:c7:18:3c:fa:52:a4:f4:0e:ce:45:d7:f6:04:37:
56:4b:fa:bb:20:67:84:35:e5:15:3d:59:d9:9f:b3:f3:04:e3:
36:bb:6f:7a:bb:3a:0b:3c:7d:7f:aa:48:83:4c:48:75:e5:59:
c4:3a:e2:e4:63:b1:23:58:a5:6d:b4:d3:ed:7d:c4:20:ef:5f:
03:28:66:d9:b9:f7:57:e3:89:45:f8:2c:20:1c:50:a9:aa:42:
f9:5b:7c:ab:04:d5:4e:74:66:b0:96:1d:ec:16:80:d0:5e:07:
33:70:00:e0:65:60:cd:18:ac:8e:9c:3a:c5:06:3f:0e:07:5c:
5c:2d:48:83:3b:5e:c8:dd:54:3e:07:93:ef:5e:d1:46:b7:d9:
6e:57:ce:87:18:16:e5:c2:94:b0:b7:2b:e2:ca:f6:0a:cd:74:
38:6e:c5:b7:af:20:51:3c:60:1b:ac:2a:6f:ac:05:01:2b:01:
58:83:ed:cf:94:ba:16:87:e5:b7:71:dd:58:41:66:2e:bb:c7:
3b:d1:f1:84:24:a3:27:f1:3f:53:2d:6c:15:d6:1e:40:7c:bc:
6c:50:32:da:c8:92:cf:b9:02:f0:b7:a4:96:3c:40:84:4b:7a:
f6:73:42:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6EXApwEPcxNfNFKH1fgu5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjM2U2ZDU5ZDQ3ZTczN2VkYzMxYTY1ZjMxMDUxNGNkNGI5
NWQzODcwHhcNMjUwNTEwMTIwMDI2WhcNMjUwNTExMTIwMDI2WjAzMTEwLwYDVQQD
Eyg3ZTMwYzMyOTVjYThlNjg4MTE2MmZjMjY4NGIxZTg2ZTdhN2JkZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacLVJPfyJ+1gbuOwuTBjQq7yk9c
gOO+nB8BMzHYDxIJmLA2niPvL9ZEXwAo1C+/fcfTVsWa/3+Vhum4wrkFh/X5tGR9
0u65H+2WYDBGvElgaA0EvzpE5uM7qcIJ4Yi1wNvBgvls0gcD8hzhh17sjwxvpN5m
riK65dGPepDbOMX//Q7PdRzOQWYSmqqE4kHrBI2SszLpd2H2D+sbI9VRn9cSPlrG
hGJRSiROlvvW+1SEfmRZZTjI/hStd9LYfE1eN9dvA1aoc7fDGBafKQ5kzPIPaKrm
9iYE183A41B1izlHeiadqXNgg2dNBwoYMB8iu0wQDNQUV3wwifNjLneL+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4wwylcqOaIEWL8JoSx6G56e90TMB8GA1UdIwQY
MBaAFKw+bVnUfnN+3DGmXzEFFM1LldOHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEt
NWFlNTNjMjFiOGNkLzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82ZTEwMDMtODE5YS00MzkyLTkzOGEtNWFlNTNjMjFiOGNk
LzEvckQ1dFdkUi1jMzdjTWFaZk1RVVV6VXVWMDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5QtcBo5
LzMUTch2TUoI5/ji05k6lccYPPpSpPQOzkXX9gQ3Vkv6uyBnhDXlFT1Z2Z+z8wTj
Nrtvers6Czx9f6pIg0xIdeVZxDri5GOxI1ilbbTT7X3EIO9fAyhm2bn3V+OJRfgs
IBxQqapC+Vt8qwTVTnRmsJYd7BaA0F4HM3AA4GVgzRisjpw6xQY/DgdcXC1Igzte
yN1UPgeT717RRrfZblfOhxgW5cKUsLcr4sr2Cs10OG7Ft68gUTxgG6wqb6wFASsB
WIPtz5S6Foflt3HdWEFmLrvHO9HxhCSjJ/E/Uy1sFdYeQHy8bFAy2siSz7kC8Lek
ljxAhEt69nNCtg==
-----END CERTIFICATE-----
Generated at Sat May 10 16:05:52 2025 by rpki-client