Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: JZ+ug4kWFMBriieOQekPzqJZHE/Yrcc6aE3mHLMeu+8=
Subject key identifier: 02:F7:1C:26:07:AF:6F:85:11:88:1C:83:8C:64:7E:DE:5C:AE:67:95
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 0196B44658AAC4F54092071D4D2A6D2C1ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0C2C
Signing time: Fri 09 May 2025 09:00:31 +0000
Manifest this update: Fri 09 May 2025 09:00:31 +0000
Manifest next update: Sat 10 May 2025 09:00:31 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: C2wVm1H9WgvZrVMlkS9QBcLrPacCbaxciyvObhc6XO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:58:aa:c4:f5:40:92:07:1d:4d:2a:6d:2c:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: May 9 09:00:31 2025 GMT
Not After : May 10 09:00:31 2025 GMT
Subject: CN=02f71c2607af6f8511881c838c647ede5cae6795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:46:bf:f5:48:1f:d8:77:ff:e0:10:38:fa:
df:72:5e:c5:6b:9d:f4:29:6d:51:3e:02:02:a1:13:
a3:61:e6:b1:bc:c7:16:a3:7c:76:7f:52:dc:53:d2:
df:e7:61:fa:27:73:eb:31:1a:9d:97:00:51:37:39:
8e:77:c8:1e:cd:b8:33:c4:ff:51:74:ea:22:ae:dd:
c2:e0:d8:e2:0f:67:67:66:bd:53:8b:e3:b1:37:75:
51:38:74:72:a8:61:76:ce:b1:7a:38:0a:26:a5:6e:
64:0b:4e:68:e7:29:bf:80:31:d4:3d:aa:77:89:f4:
51:6e:5f:68:cd:d8:6e:8a:c6:a5:b5:2a:16:39:3e:
8a:bc:d1:4a:47:0a:5c:83:4b:19:49:4d:85:eb:19:
51:18:96:37:0b:48:4c:2c:5f:d8:08:c5:72:49:51:
f8:ce:8c:49:1d:5d:c2:37:32:e1:56:c5:e2:4d:aa:
53:02:e4:03:22:6d:93:f1:b4:19:3e:12:b3:ce:5b:
13:68:07:94:77:ab:b1:12:1f:63:5e:77:34:bb:36:
cf:e7:97:f6:b6:fd:ea:24:ba:27:c9:b1:9a:7c:e5:
17:aa:50:6a:0d:a8:14:6a:eb:fa:ed:da:a9:18:dd:
b0:f4:47:43:47:ed:04:6b:33:c9:c6:64:ba:74:3c:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F7:1C:26:07:AF:6F:85:11:88:1C:83:8C:64:7E:DE:5C:AE:67:95
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f1:7d:7a:27:f8:1c:b1:97:c9:3b:6f:1a:f2:75:8b:b7:3e:
a2:5f:76:fc:bf:da:c4:f6:9f:5d:fa:59:2e:c1:ee:79:60:1f:
03:b5:ad:37:34:3c:6b:ef:ff:86:31:4e:dd:f9:44:e1:1d:f1:
9b:59:4d:d2:61:bc:2f:a8:16:5f:00:58:5f:c3:48:23:44:d8:
8b:0c:e4:60:e3:ac:56:40:d1:2f:b2:0c:6c:40:c2:2d:2f:68:
27:76:44:37:43:b8:b8:5c:d3:42:e2:83:5f:60:90:e3:12:5e:
bf:9a:f6:0b:b7:b6:03:63:7b:4b:3e:99:fc:c1:3e:63:b7:7f:
26:00:9b:30:74:39:f7:5a:0c:4a:48:2e:73:ba:6e:c1:36:61:
16:d3:7b:a9:03:34:4d:96:b0:9d:64:73:56:81:fe:95:b6:15:
4e:d0:30:0f:77:e6:eb:b4:e1:9b:9c:e1:00:6f:d3:17:d4:2d:
67:41:39:17:d0:69:37:86:78:03:81:11:b5:40:9f:1e:46:0a:
92:ea:f9:df:47:3b:0a:13:10:ae:f0:c3:38:3c:22:0a:25:84:
79:03:bf:76:8b:91:44:6c:f9:f2:b4:b6:b0:5f:84:43:93:13:
86:9d:7b:e3:c9:cb:c8:87:a9:94:79:02:96:39:e4:b3:17:81:
ee:bf:9d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0RliqxPVAkgcdTSptLBq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGVlMjg2YWMyNGM1ZjI1OWYwYTcyYjNiNDhjMjQzNmRk
MzRjZjcwHhcNMjUwNTA5MDkwMDMxWhcNMjUwNTEwMDkwMDMxWjAzMTEwLwYDVQQD
EygwMmY3MWMyNjA3YWY2Zjg1MTE4ODFjODM4YzY0N2VkZTVjYWU2Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB1Gv/VIH9h3/+AQOPrfcl7Fa530
KW1RPgICoROjYeaxvMcWo3x2f1LcU9Lf52H6J3PrMRqdlwBRNzmOd8gezbgzxP9R
dOoirt3C4NjiD2dnZr1Ti+OxN3VROHRyqGF2zrF6OAompW5kC05o5ym/gDHUPap3
ifRRbl9ozdhuisaltSoWOT6KvNFKRwpcg0sZSU2F6xlRGJY3C0hMLF/YCMVySVH4
zoxJHV3CNzLhVsXiTapTAuQDIm2T8bQZPhKzzlsTaAeUd6uxEh9jXnc0uzbP55f2
tv3qJLonybGafOUXqlBqDagUauv67dqpGN2w9EdDR+0EazPJxmS6dDxuFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL3HCYHr2+FEYgcg4xkft5crmeVMB8GA1UdIwQY
MBaAFHxO4oasJMXyWfCnKztIwkNt00z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUt
MGIxNDFjOGY1YTNiLzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUtMGIxNDFjOGY1YTNi
LzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvF9eif4
HLGXyTtvGvJ1i7c+ol92/L/axPafXfpZLsHueWAfA7WtNzQ8a+//hjFO3flE4R3x
m1lN0mG8L6gWXwBYX8NII0TYiwzkYOOsVkDRL7IMbEDCLS9oJ3ZEN0O4uFzTQuKD
X2CQ4xJev5r2C7e2A2N7Sz6Z/ME+Y7d/JgCbMHQ591oMSkguc7puwTZhFtN7qQM0
TZawnWRzVoH+lbYVTtAwD3fm67Thm5zhAG/TF9QtZ0E5F9BpN4Z4A4ERtUCfHkYK
kur530c7ChMQrvDDODwiCiWEeQO/douRRGz58rS2sF+EQ5MThp1748nLyIeplHkC
ljnksxeB7r+d6w==
-----END CERTIFICATE-----
Generated at Fri May 9 18:12:13 2025 by rpki-client