Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: v5Zwn4jXxHun+e6sOGZZQzXZU4cyQNJoI6sEK+buE74=
Subject key identifier: 79:B3:B5:C3:42:B3:3F:B3:F0:73:2E:B5:A3:14:34:3C:CE:AE:97:53
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0196CB04EDE65FDE6E8930322F560CFFC8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0EB6
Signing time: Tue 13 May 2025 19:00:19 +0000
Manifest this update: Tue 13 May 2025 19:00:19 +0000
Manifest next update: Wed 14 May 2025 19:00:19 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: KTacq2GKAwHSX5DxhlG+x/Lq7EXTv4IyCToKAY2SLEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:ed:e6:5f:de:6e:89:30:32:2f:56:0c:ff:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: May 13 19:00:19 2025 GMT
Not After : May 14 19:00:19 2025 GMT
Subject: CN=79b3b5c342b33fb3f0732eb5a314343cceae9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:bf:bd:85:1d:62:5f:ae:91:07:77:4f:f9:
9a:2a:6d:fa:40:fa:46:9a:99:e5:b7:e3:21:88:f0:
ba:49:04:6f:f0:4e:1c:27:37:c3:85:a9:a9:73:66:
fa:5d:de:31:91:85:1d:f2:13:36:3b:07:f7:5e:00:
e0:8f:31:06:ce:92:0c:bf:0b:71:87:71:0d:1b:01:
67:dd:55:48:a9:c3:a5:35:16:62:8a:76:8b:1d:64:
96:a2:11:be:1f:a8:2a:31:61:72:84:25:0b:f4:48:
bb:86:c1:76:86:5e:39:75:c8:0a:04:76:67:91:6a:
83:48:67:2a:d3:f9:e0:55:0c:a1:77:02:c5:65:be:
74:ac:97:fc:5e:f8:04:a3:8d:5a:2a:78:d6:fb:81:
63:3f:63:df:bd:c0:d3:75:e8:8d:bc:2e:83:d5:16:
ce:ee:23:33:a0:b8:e9:37:d7:aa:10:a5:17:37:53:
9e:b1:6b:de:1c:d3:f4:b4:da:c2:04:15:dd:59:54:
0d:30:f2:dd:ff:1d:ea:cb:a3:e1:5a:c8:5c:02:c9:
4a:75:82:00:a6:df:95:43:aa:40:82:4d:34:7e:1a:
a1:f3:36:78:d0:f3:93:96:9c:5f:1f:af:74:73:f6:
0d:93:57:eb:55:91:02:65:06:88:ef:0f:45:3a:91:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:B5:C3:42:B3:3F:B3:F0:73:2E:B5:A3:14:34:3C:CE:AE:97:53
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0e:23:cb:c6:1e:ba:5e:d3:38:e6:a1:4a:c4:c3:40:44:7b:
39:82:ce:77:39:ba:27:83:c1:f5:dc:e4:b7:0d:80:33:b4:8f:
b5:8e:b8:f1:67:d7:3d:de:15:6c:27:d9:3c:a8:09:a7:ac:21:
e7:43:29:c2:ee:38:08:e2:0f:a7:58:0b:16:fa:8c:d0:c8:8b:
82:62:15:61:7b:40:d6:e3:47:bf:0e:fd:e4:23:a7:0f:a0:2b:
b7:d7:7f:91:14:5e:ab:86:55:bd:a3:30:3e:63:30:0a:91:0b:
97:4b:fc:d9:3d:46:40:80:b5:5f:41:c8:14:39:c7:ab:3d:d9:
21:99:ee:d9:cc:2b:f3:e4:91:e0:af:d1:1d:b0:49:de:ac:28:
b9:ee:fe:c9:55:30:56:ca:b2:ca:50:e2:7b:a4:26:b7:cc:46:
80:f2:a5:3b:df:96:f4:de:61:58:5f:73:84:27:28:e0:09:20:
08:a4:5b:c4:42:92:03:87:14:e3:fa:f9:2f:07:f4:89:7f:3f:
3d:73:83:31:a5:af:1c:1f:1a:26:83:66:36:5b:61:3b:ce:cf:
3f:87:cd:1d:31:5b:b2:e2:ce:84:e8:70:1a:7a:6c:bb:b1:fa:
ca:f9:3e:f9:f7:16:70:a8:e4:ed:bc:d3:6b:0a:30:ee:df:84:
06:6c:0a:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBO3mX95uiTAyL1YM/8i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1
YWI5YjUwHhcNMjUwNTEzMTkwMDE5WhcNMjUwNTE0MTkwMDE5WjAzMTEwLwYDVQQD
Eyg3OWIzYjVjMzQyYjMzZmIzZjA3MzJlYjVhMzE0MzQzY2NlYWU5NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R2/vYUdYl+ukQd3T/maKm36QPpG
mpnlt+MhiPC6SQRv8E4cJzfDhampc2b6Xd4xkYUd8hM2Owf3XgDgjzEGzpIMvwtx
h3ENGwFn3VVIqcOlNRZiinaLHWSWohG+H6gqMWFyhCUL9Ei7hsF2hl45dcgKBHZn
kWqDSGcq0/ngVQyhdwLFZb50rJf8XvgEo41aKnjW+4FjP2PfvcDTdeiNvC6D1RbO
7iMzoLjpN9eqEKUXN1OesWveHNP0tNrCBBXdWVQNMPLd/x3qy6PhWshcAslKdYIA
pt+VQ6pAgk00fhqh8zZ40POTlpxfH690c/YNk1frVZECZQaI7w9FOpEv7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmztcNCsz+z8HMutaMUNDzOrpdTMB8GA1UdIwQY
MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt
NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk
LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVw4jy8Ye
ul7TOOahSsTDQER7OYLOdzm6J4PB9dzktw2AM7SPtY648WfXPd4VbCfZPKgJp6wh
50Mpwu44COIPp1gLFvqM0MiLgmIVYXtA1uNHvw795COnD6Art9d/kRReq4ZVvaMw
PmMwCpELl0v82T1GQIC1X0HIFDnHqz3ZIZnu2cwr8+SR4K/RHbBJ3qwoue7+yVUw
VsqyylDie6Qmt8xGgPKlO9+W9N5hWF9zhCco4AkgCKRbxEKSA4cU4/r5Lwf0iX8/
PXODMaWvHB8aJoNmNlthO87PP4fNHTFbsuLOhOhwGnpsu7H6yvk++fcWcKjk7bzT
awow7t+EBmwKMg==
-----END CERTIFICATE-----
Generated at Wed May 14 02:22:00 2025 by rpki-client