Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
File: cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft (raw, json)
Hash identifier: qr0tNUga8bhz24ulv3svOSlvOSoGOf+2fVtyKN8mJgE=
Subject key identifier: 65:14:8E:01:C8:43:2F:EF:52:B1:93:29:CD:21:EA:D2:06:BE:27:E7
Authority key identifier: 71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
Certificate issuer: /CN=711280b1338f12fc6f621c4c90560c7bc5908961
Certificate serial: 0196B47DC670A917472CD88F0EE04A41779D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
Manifest number: 0901
Signing time: Fri 09 May 2025 10:01:03 +0000
Manifest this update: Fri 09 May 2025 10:01:03 +0000
Manifest next update: Sat 10 May 2025 10:01:03 +0000
Files and hashes: 1: cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl (hash: Wh6NMtoLqqOteVSBPBNYVvLDp/e6Z8GS4rGBhodCy/M=)
2: myyHg-EZ7oPvLVMt0GMINU1S9Ss.roa (hash: uTCXVchkgOWKUqBTemAVamh0cjaPQ4ao1yqdp6r41LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:c6:70:a9:17:47:2c:d8:8f:0e:e0:4a:41:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711280b1338f12fc6f621c4c90560c7bc5908961
Validity
Not Before: May 9 10:01:03 2025 GMT
Not After : May 10 10:01:03 2025 GMT
Subject: CN=65148e01c8432fef52b19329cd21ead206be27e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:59:bf:45:b2:a3:0c:9a:d5:52:e8:64:06:
da:79:e7:d0:be:ca:da:0a:1c:a7:92:f6:fa:68:6c:
93:29:76:39:a0:16:f1:35:1f:42:d7:7e:c9:ec:af:
17:51:bd:d0:ef:fa:2c:22:1f:66:e6:56:9d:32:76:
a7:22:38:27:87:7b:48:00:77:8b:bf:04:c3:00:6a:
c4:f8:26:23:d9:19:60:95:64:90:ac:10:b3:c7:c8:
84:51:23:81:3f:f5:86:0e:b0:c3:e5:b6:ea:e6:eb:
f0:8a:61:53:f2:07:e7:2d:26:4f:9f:c9:34:0b:3b:
77:4b:63:67:d4:97:87:2d:5a:bb:ad:d8:c6:07:a3:
fe:ec:e2:3d:da:d7:6c:e8:2f:cb:ac:ea:75:6b:e8:
64:38:b4:5e:a8:19:c5:e3:a5:a1:94:02:2e:07:00:
97:e3:f5:a4:4f:0a:11:2f:c9:67:8e:f5:ee:c8:c8:
ed:45:5c:c9:39:e4:e3:0a:fb:cc:b7:ae:8c:44:d4:
ad:a2:16:57:7e:b4:a6:af:d7:d4:d3:38:4c:ac:3a:
2b:2c:cf:d7:50:01:a3:fd:f5:22:98:c0:74:e3:9a:
3c:ff:63:ad:d7:59:25:02:56:4b:b9:64:7d:7e:e9:
5e:5d:7c:9e:e2:c8:23:00:67:57:9a:3b:9f:6e:6b:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:14:8E:01:C8:43:2F:EF:52:B1:93:29:CD:21:EA:D2:06:BE:27:E7
X509v3 Authority Key Identifier:
keyid:71:12:80:B1:33:8F:12:FC:6F:62:1C:4C:90:56:0C:7B:C5:90:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRKAsTOPEvxvYhxMkFYMe8WQiWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce113d-c923-43f4-9708-bb417ec649ab/1/cRKAsTOPEvxvYhxMkFYMe8WQiWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b7:3c:95:92:c2:f7:10:5a:56:4a:dc:ed:6f:e8:92:bb:16:
f6:99:4b:02:34:5f:35:3e:10:3c:c2:fc:b0:c1:7f:aa:cd:d8:
82:fb:08:85:22:c1:a6:0d:27:82:8e:3d:5f:e4:57:45:78:c2:
87:a2:da:18:64:a3:3e:35:c1:b0:56:f8:82:2d:ee:60:24:5a:
2a:b5:f6:55:ad:ec:9f:93:c9:e2:4f:24:e0:2b:f7:3b:5c:e3:
28:ad:f7:96:1b:b2:6c:d7:9c:54:7b:f3:e4:78:24:24:26:0e:
2a:a9:8f:cd:ce:74:e9:44:d2:5f:a2:68:c9:44:0c:d8:f8:2d:
6e:1f:81:4d:b2:40:55:b1:38:cf:d5:25:45:8b:7b:3c:8a:7a:
6d:c7:6f:c8:eb:fc:5e:07:76:1c:24:92:7c:74:f9:e0:13:66:
92:d9:40:dc:8f:ae:d1:92:e9:81:c2:fe:fe:e0:0a:3b:85:1b:
d2:1a:98:1f:4b:28:89:ab:e2:a9:dd:45:70:e3:90:90:2a:78:
4c:9b:66:27:97:1b:18:ba:66:e2:20:71:c2:c7:81:38:12:bf:
fb:b9:a5:2c:a9:a4:78:a2:58:3c:19:06:88:10:ba:a5:0f:fe:
1d:e5:90:f7:75:f8:ec:68:02:17:9d:62:0f:83:ab:0d:1b:39:
2a:24:b8:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0fcZwqRdHLNiPDuBKQXedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTI4MGIxMzM4ZjEyZmM2ZjYyMWM0YzkwNTYwYzdiYzU5
MDg5NjEwHhcNMjUwNTA5MTAwMTAzWhcNMjUwNTEwMTAwMTAzWjAzMTEwLwYDVQQD
Eyg2NTE0OGUwMWM4NDMyZmVmNTJiMTkzMjljZDIxZWFkMjA2YmUyN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2E5Zv0Wyowya1VLoZAbaeefQvsra
Chynkvb6aGyTKXY5oBbxNR9C137J7K8XUb3Q7/osIh9m5ladMnanIjgnh3tIAHeL
vwTDAGrE+CYj2RlglWSQrBCzx8iEUSOBP/WGDrDD5bbq5uvwimFT8gfnLSZPn8k0
Czt3S2Nn1JeHLVq7rdjGB6P+7OI92tds6C/LrOp1a+hkOLReqBnF46WhlAIuBwCX
4/WkTwoRL8lnjvXuyMjtRVzJOeTjCvvMt66MRNStohZXfrSmr9fU0zhMrDorLM/X
UAGj/fUimMB045o8/2Ot11klAlZLuWR9fuleXXye4sgjAGdXmjufbmtdgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUUjgHIQy/vUrGTKc0h6tIGvifnMB8GA1UdIwQY
MBaAFHESgLEzjxL8b2IcTJBWDHvFkIlhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgt
YmI0MTdlYzY0OWFiLzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZTExM2QtYzkyMy00M2Y0LTk3MDgtYmI0MTdlYzY0OWFi
LzEvY1JLQXNUT1BFdnh2WWh4TWtGWU1lOFdRaVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbc8lZLC
9xBaVkrc7W/okrsW9plLAjRfNT4QPML8sMF/qs3YgvsIhSLBpg0ngo49X+RXRXjC
h6LaGGSjPjXBsFb4gi3uYCRaKrX2Va3sn5PJ4k8k4Cv3O1zjKK33lhuybNecVHvz
5HgkJCYOKqmPzc506UTSX6JoyUQM2Pgtbh+BTbJAVbE4z9UlRYt7PIp6bcdvyOv8
Xgd2HCSSfHT54BNmktlA3I+u0ZLpgcL+/uAKO4Ub0hqYH0soiaviqd1FcOOQkCp4
TJtmJ5cbGLpm4iBxwseBOBK/+7mlLKmkeKJYPBkGiBC6pQ/+HeWQ93X47GgCF51i
D4OrDRs5KiS4aQ==
-----END CERTIFICATE-----
Generated at Fri May 9 17:07:22 2025 by rpki-client