Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: i4UuMsjTnVJxNZvk44LghzYThAlhvcVLQdkY2vVgVik=
Subject key identifier: 38:8C:94:A0:F8:C9:F5:E4:1A:6A:B6:2F:FE:93:D0:29:72:34:15:A7
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 0196CCF39F567B59F1C8A89FFD3E045CF6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0BDF
Signing time: Wed 14 May 2025 04:00:40 +0000
Manifest this update: Wed 14 May 2025 04:00:40 +0000
Manifest next update: Thu 15 May 2025 04:00:40 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: gPt9dAPjwd/x9L2m5arpnDPwXSE3LNu9IFrMjIJ3RMQ=)
2: FFFquzyoI6V8zUirU5qgTnYffFE.roa (hash: UkzzNUPit9F8YYAkgHSPwBmxXN79Y3LDHaSScH7xgPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:9f:56:7b:59:f1:c8:a8:9f:fd:3e:04:5c:f6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: May 14 04:00:40 2025 GMT
Not After : May 15 04:00:40 2025 GMT
Subject: CN=388c94a0f8c9f5e41a6ab62ffe93d029723415a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:f7:06:25:e0:23:55:cd:6f:3b:ee:07:d9:
86:69:aa:a3:9d:f0:72:59:6b:7a:db:56:59:ed:13:
6c:ab:95:c4:75:d6:fc:6a:20:aa:9d:27:4f:37:d4:
09:bd:7a:76:0a:8a:e9:b6:90:e8:12:44:26:4c:a6:
35:c4:8a:2f:c7:47:26:61:52:16:59:77:8e:f1:fc:
75:e3:ac:f5:83:bd:c2:3b:7d:9c:12:2e:fb:bd:67:
3d:38:6d:15:ad:49:0c:67:2c:ba:f8:3a:67:d2:7d:
9d:8d:d5:31:e4:de:67:a6:aa:c6:91:75:1f:6e:35:
4a:3a:6e:d4:cd:1b:92:77:ba:a2:0d:66:be:7c:06:
fd:5f:ef:fd:88:20:06:1e:2d:13:46:31:a2:de:26:
82:99:83:cb:2c:68:78:5b:4f:56:b0:04:ba:a8:80:
a4:c1:f5:02:de:88:20:db:81:02:87:c3:0b:6a:f0:
a3:7c:0f:f6:de:dc:3a:d3:c9:35:b4:2f:6b:43:a9:
39:ec:3f:63:71:19:4b:c9:d9:01:a1:41:f3:09:89:
83:a5:e6:23:ef:b1:5e:95:ea:a1:f1:a0:9f:99:05:
9d:13:b8:00:03:34:66:8a:01:9f:96:79:b0:6d:43:
8c:dd:75:9b:8c:49:3a:79:18:56:c7:df:70:f0:32:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:94:A0:F8:C9:F5:E4:1A:6A:B6:2F:FE:93:D0:29:72:34:15:A7
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:6a:46:ff:73:5e:68:32:ec:e1:0d:a6:d8:af:0e:a1:14:31:
56:80:b0:f9:48:e8:31:90:3d:3f:cc:ff:8b:b7:f3:db:73:48:
53:96:be:80:c3:ca:0d:44:66:78:ef:06:1e:c7:a0:4b:df:c7:
33:56:37:ee:9d:dd:bd:6a:8e:54:c4:e7:ce:16:c7:1c:aa:ce:
9d:3b:61:ac:b2:72:f1:ac:e9:91:fb:b7:27:23:42:49:2f:ac:
e3:c6:09:fc:52:ad:0c:68:1f:1e:63:eb:07:e9:fd:a3:78:c2:
0c:90:c2:2e:b5:4f:bf:69:b1:b5:36:35:ad:88:1d:3d:f4:6b:
af:9a:e7:6d:04:83:45:2d:ff:af:9e:bd:75:17:42:ff:c2:d3:
81:9b:98:06:73:fe:04:58:e7:e8:c4:94:8c:df:74:4f:21:19:
a5:3c:33:5a:9c:d1:04:08:d8:bc:29:06:a7:e8:3c:53:20:0b:
07:8f:27:ec:da:d0:d8:8c:f8:56:fa:6f:a6:95:26:de:e0:bb:
b2:5f:33:56:89:25:99:82:51:aa:60:ac:a4:33:1e:9e:7d:24:
65:79:29:b5:d5:78:99:30:06:8a:04:ea:5e:a4:b3:cf:78:83:
57:80:5a:a6:3d:9a:6d:f8:ec:c2:b5:76:ec:a3:2b:55:b2:31:
98:ad:43:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM859We1nxyKif/T4EXPbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjUwNTE0MDQwMDQwWhcNMjUwNTE1MDQwMDQwWjAzMTEwLwYDVQQD
EygzODhjOTRhMGY4YzlmNWU0MWE2YWI2MmZmZTkzZDAyOTcyMzQxNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOj3BiXgI1XNbzvuB9mGaaqjnfBy
WWt621ZZ7RNsq5XEddb8aiCqnSdPN9QJvXp2CorptpDoEkQmTKY1xIovx0cmYVIW
WXeO8fx146z1g73CO32cEi77vWc9OG0VrUkMZyy6+Dpn0n2djdUx5N5npqrGkXUf
bjVKOm7UzRuSd7qiDWa+fAb9X+/9iCAGHi0TRjGi3iaCmYPLLGh4W09WsAS6qICk
wfUC3ogg24ECh8MLavCjfA/23tw608k1tC9rQ6k57D9jcRlLydkBoUHzCYmDpeYj
77Feleqh8aCfmQWdE7gAAzRmigGflnmwbUOM3XWbjEk6eRhWx99w8DJHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiMlKD4yfXkGmq2L/6T0ClyNBWnMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWpG/3Ne
aDLs4Q2m2K8OoRQxVoCw+UjoMZA9P8z/i7fz23NIU5a+gMPKDURmeO8GHsegS9/H
M1Y37p3dvWqOVMTnzhbHHKrOnTthrLJy8azpkfu3JyNCSS+s48YJ/FKtDGgfHmPr
B+n9o3jCDJDCLrVPv2mxtTY1rYgdPfRrr5rnbQSDRS3/r569dRdC/8LTgZuYBnP+
BFjn6MSUjN90TyEZpTwzWpzRBAjYvCkGp+g8UyALB48n7NrQ2Iz4VvpvppUm3uC7
sl8zVoklmYJRqmCspDMenn0kZXkptdV4mTAGigTqXqSzz3iDV4Bapj2abfjswrV2
7KMrVbIxmK1Djw==
-----END CERTIFICATE-----
Generated at Wed May 14 09:01:22 2025 by rpki-client