Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json)
Hash identifier: k0JgaCFYJYmsRVCowA9oeLKojW4KiPrSAAcrBQKZAZo=
Subject key identifier: 2B:41:60:22:A0:B9:FE:00:9B:5D:52:C1:30:77:73:84:C9:21:40:4F
Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Certificate serial: 0196D2BEE2C4C5479B5C1728F2BCABBDE396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
Manifest number: 153B
Signing time: Thu 15 May 2025 07:00:47 +0000
Manifest this update: Thu 15 May 2025 07:00:47 +0000
Manifest next update: Fri 16 May 2025 07:00:47 +0000
Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: Z59T4J+QdSIk6n5I9VfruWOH7bF/tvot+wQX3MOvrv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:be:e2:c4:c5:47:9b:5c:17:28:f2:bc:ab:bd:e3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23
Validity
Not Before: May 15 07:00:47 2025 GMT
Not After : May 16 07:00:47 2025 GMT
Subject: CN=2b416022a0b9fe009b5d52c130777384c921404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:3f:83:f4:79:48:e7:00:04:5c:e1:79:4a:
79:35:7c:0d:23:8e:7f:da:2a:6e:be:e5:7a:55:8b:
aa:f0:a8:1c:88:8f:bc:d0:30:30:78:13:83:30:21:
d7:42:b7:c9:b9:9b:1a:53:11:b1:bb:c6:75:07:01:
85:d2:fd:db:6f:20:63:fc:d5:bd:6a:b0:b3:8f:46:
12:0c:d0:01:ce:22:7a:4a:17:9a:1a:d3:a6:bc:e9:
91:d6:1f:fc:4b:cd:cc:1f:1a:52:4b:65:25:4e:42:
fc:fd:b9:cb:ce:5a:08:1b:bd:ce:93:21:55:fa:5a:
dd:6d:f2:c2:f3:9a:16:bf:ac:db:3a:bf:4e:bb:77:
ea:3f:ad:af:f4:fe:bb:c4:65:0e:f7:f1:a9:d3:45:
bb:be:c9:c3:db:24:7b:b9:99:19:25:cc:47:c3:bf:
8d:d0:af:67:d0:1d:26:0f:3e:56:db:fa:ce:f0:76:
df:f3:52:38:62:0b:93:77:ab:f3:06:8a:00:54:87:
a4:57:e8:db:5c:53:8a:ed:28:e7:83:7b:d4:e1:6e:
fc:0a:ea:99:d2:ce:47:9d:e5:23:2a:c8:64:c9:77:
e9:cd:de:2a:46:18:7b:7b:be:40:ef:ec:cf:29:c8:
45:d7:4a:4e:79:06:e3:6b:7f:7b:af:dd:2e:a1:a9:
e3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:60:22:A0:B9:FE:00:9B:5D:52:C1:30:77:73:84:C9:21:40:4F
X509v3 Authority Key Identifier:
keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:35:2c:9a:ff:d5:fa:8a:67:41:75:63:e7:b6:91:5d:8f:6b:
bb:61:eb:7a:bf:c8:45:e1:25:a7:50:c8:73:0a:9b:bd:01:5a:
5b:e1:98:79:72:03:c7:b6:ff:c9:f5:12:53:d3:ca:07:e4:12:
ad:21:0c:7f:f6:70:b3:6d:f8:a2:20:c3:ea:de:4c:86:26:95:
a8:d5:dd:21:7f:63:b9:ab:c9:ba:41:78:49:46:2b:38:7f:ce:
fd:14:59:b8:db:8c:17:a1:51:13:15:96:90:a6:99:a1:92:c5:
3b:28:16:d0:86:ea:7a:df:8e:74:da:5b:bc:ff:22:65:ec:34:
fa:f9:68:dd:b9:ae:d5:bd:88:a4:57:06:ed:65:d8:27:84:d2:
62:a0:6b:cf:5c:6e:1a:87:ec:ac:11:10:fe:cd:f1:09:36:84:
aa:17:6a:ca:9d:80:19:e3:dd:00:94:9f:e5:99:21:2e:02:26:
cb:80:16:b8:07:af:1c:68:f2:e8:cc:e9:5a:07:50:dc:b6:c3:
8d:b8:0c:03:f1:ea:8c:7f:37:f7:fc:77:88:68:e7:bf:bb:11:
7d:45:0b:23:b9:d7:e9:8c:98:a7:31:41:7e:38:db:38:c7:76:
b8:ec:64:e5:41:76:98:bf:67:4f:9d:ab:b5:41:95:ea:a5:c7:
ec:5e:90:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbSvuLExUebXBco8ryrveOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2
MWJmMjMwHhcNMjUwNTE1MDcwMDQ3WhcNMjUwNTE2MDcwMDQ3WjAzMTEwLwYDVQQD
EygyYjQxNjAyMmEwYjlmZTAwOWI1ZDUyYzEzMDc3NzM4NGM5MjE0MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PE/g/R5SOcABFzheUp5NXwNI45/
2ipuvuV6VYuq8KgciI+80DAweBODMCHXQrfJuZsaUxGxu8Z1BwGF0v3bbyBj/NW9
arCzj0YSDNABziJ6SheaGtOmvOmR1h/8S83MHxpSS2UlTkL8/bnLzloIG73OkyFV
+lrdbfLC85oWv6zbOr9Ou3fqP62v9P67xGUO9/Gp00W7vsnD2yR7uZkZJcxHw7+N
0K9n0B0mDz5W2/rO8Hbf81I4YguTd6vzBooAVIekV+jbXFOK7Sjng3vU4W78CuqZ
0s5HneUjKshkyXfpzd4qRhh7e75A7+zPKchF10pOeQbja397r90uoanjOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtBYCKguf4Am11SwTB3c4TJIUBPMB8GA1UdIwQY
MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt
ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx
LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATUsmv/V
+opnQXVj57aRXY9ru2Hrer/IReElp1DIcwqbvQFaW+GYeXIDx7b/yfUSU9PKB+QS
rSEMf/Zws234oiDD6t5MhiaVqNXdIX9juavJukF4SUYrOH/O/RRZuNuMF6FRExWW
kKaZoZLFOygW0Ibqet+OdNpbvP8iZew0+vlo3bmu1b2IpFcG7WXYJ4TSYqBrz1xu
GofsrBEQ/s3xCTaEqhdqyp2AGePdAJSf5ZkhLgImy4AWuAevHGjy6MzpWgdQ3LbD
jbgMA/HqjH839/x3iGjnv7sRfUULI7nX6YyYpzFBfjjbOMd2uOxk5UF2mL9nT52r
tUGV6qXH7F6QGg==
-----END CERTIFICATE-----
Generated at Thu May 15 09:06:35 2025 by rpki-client