Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
File: 2krNipcsDnNxGs9H4MhFmhz3JgY.mft (raw, json)
Hash identifier: 7TKDJ6L8HwXtLTPnYZ8NofRiEw3SO5+kk0EgPl82BU4=
Subject key identifier: 51:28:03:0C:48:E0:B7:85:09:22:C8:51:B6:2D:D9:82:26:BE:3D:AC
Authority key identifier: DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
Certificate issuer: /CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Certificate serial: 0196C9BB8939AB9AAD938ABC57E815CC06F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
Manifest number: 1497
Signing time: Tue 13 May 2025 13:00:32 +0000
Manifest this update: Tue 13 May 2025 13:00:32 +0000
Manifest next update: Wed 14 May 2025 13:00:32 +0000
Files and hashes: 1: 2krNipcsDnNxGs9H4MhFmhz3JgY.crl (hash: 1ouM8CDvo9lSunY/q38Lj2La8i7TNrnfABJ89da30NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:bb:89:39:ab:9a:ad:93:8a:bc:57:e8:15:cc:06:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da4acd8a972c0e73711acf47e0c8459a1cf72606
Validity
Not Before: May 13 13:00:32 2025 GMT
Not After : May 14 13:00:32 2025 GMT
Subject: CN=5128030c48e0b7850922c851b62dd98226be3dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:75:4a:a0:3f:d3:20:20:d3:23:55:58:60:
15:a3:81:ce:b6:ac:07:2d:44:28:00:5d:30:13:e1:
aa:cf:b5:b1:d4:e2:db:ac:f1:1f:4c:c9:2a:b1:b9:
3f:a9:cb:0f:9d:66:30:9a:da:5d:94:cb:c9:65:74:
17:97:89:ae:18:37:84:43:45:a6:1d:0f:1b:ab:be:
26:fc:25:69:c4:16:fd:34:5e:58:18:62:4c:2b:a8:
2e:f8:15:aa:9e:05:24:0c:79:f2:a9:40:55:4f:95:
1f:40:58:44:60:82:62:2c:1a:e4:17:2b:27:f7:a9:
7c:af:7d:dc:23:eb:48:e8:95:58:c7:56:b8:bf:36:
98:84:75:ea:98:b2:75:69:f4:14:04:ea:26:af:62:
53:2c:00:02:e3:4b:a6:1b:10:70:b0:91:a2:de:94:
4e:48:49:2e:7e:7b:51:e2:db:e1:65:3c:2e:2c:3c:
75:26:55:41:23:d5:f8:cc:64:2a:23:ad:2c:d5:d2:
68:d7:e7:34:dd:08:c9:a3:43:76:9e:ce:e2:7e:fe:
76:b4:e2:c8:61:2f:c3:19:a4:a0:7e:d2:10:03:96:
b4:6c:2d:f1:0c:37:fc:41:77:f7:e8:30:35:e9:51:
80:ea:f2:ed:56:ec:2c:60:74:4b:21:6f:94:2e:6b:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:28:03:0C:48:E0:B7:85:09:22:C8:51:B6:2D:D9:82:26:BE:3D:AC
X509v3 Authority Key Identifier:
keyid:DA:4A:CD:8A:97:2C:0E:73:71:1A:CF:47:E0:C8:45:9A:1C:F7:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2krNipcsDnNxGs9H4MhFmhz3JgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b132e-b79e-4e58-9380-9e5fd43935b7/1/2krNipcsDnNxGs9H4MhFmhz3JgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fd:84:f8:35:96:cc:89:cc:f0:08:80:49:ff:65:75:36:be:
91:ec:43:9f:48:41:b5:c6:2e:e0:d6:2e:4d:78:18:4a:44:3e:
07:85:a6:50:9b:d4:9c:69:c1:7c:0e:47:ad:8e:e4:8f:5f:2a:
a4:37:26:01:a7:d6:71:d2:fe:7a:ff:5b:67:6c:b6:ad:f2:2e:
3c:45:d2:ac:e8:10:aa:eb:40:a2:86:3c:b8:4c:c2:0e:68:98:
29:4f:e9:fd:50:28:47:72:e9:4b:55:5f:be:ee:3f:85:c2:b7:
f9:1c:64:6d:57:69:a5:c6:67:7b:56:8b:95:91:c0:98:3f:61:
b3:64:82:f0:cb:e5:60:65:64:7d:8f:93:79:6f:51:92:07:eb:
b4:ac:1a:a5:26:80:ca:e9:16:12:7a:02:bf:86:f2:32:82:0a:
6a:1b:55:f1:14:b0:10:93:b4:df:25:61:df:97:f5:a5:0b:21:
5a:0e:4c:d6:13:a2:7f:75:bc:20:d9:09:de:fd:01:64:d6:0a:
95:1c:a2:8c:9d:3b:02:3b:a3:3c:09:ab:d2:aa:46:99:9f:26:
6e:5d:2f:95:56:68:9c:3e:46:3e:e7:43:30:75:8d:3a:3d:19:
89:a4:82:57:64:59:ca:90:0e:27:f6:a0:95:04:d3:57:38:f8:
90:35:46:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJu4k5q5qtk4q8V+gVzAbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNGFjZDhhOTcyYzBlNzM3MTFhY2Y0N2UwYzg0NTlhMWNm
NzI2MDYwHhcNMjUwNTEzMTMwMDMyWhcNMjUwNTE0MTMwMDMyWjAzMTEwLwYDVQQD
Eyg1MTI4MDMwYzQ4ZTBiNzg1MDkyMmM4NTFiNjJkZDk4MjI2YmUzZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMB1SqA/0yAg0yNVWGAVo4HOtqwH
LUQoAF0wE+Gqz7Wx1OLbrPEfTMkqsbk/qcsPnWYwmtpdlMvJZXQXl4muGDeEQ0Wm
HQ8bq74m/CVpxBb9NF5YGGJMK6gu+BWqngUkDHnyqUBVT5UfQFhEYIJiLBrkFysn
96l8r33cI+tI6JVYx1a4vzaYhHXqmLJ1afQUBOomr2JTLAAC40umGxBwsJGi3pRO
SEkufntR4tvhZTwuLDx1JlVBI9X4zGQqI60s1dJo1+c03QjJo0N2ns7ifv52tOLI
YS/DGaSgftIQA5a0bC3xDDf8QXf36DA16VGA6vLtVuwsYHRLIW+ULmuawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEoAwxI4LeFCSLIUbYt2YImvj2sMB8GA1UdIwQY
MBaAFNpKzYqXLA5zcRrPR+DIRZoc9yYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAt
OWU1ZmQ0MzkzNWI3LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYjEzMmUtYjc5ZS00ZTU4LTkzODAtOWU1ZmQ0MzkzNWI3
LzEvMmtyTmlwY3NEbk54R3M5SDRNaEZtaHozSmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARf2E+DWW
zInM8AiASf9ldTa+kexDn0hBtcYu4NYuTXgYSkQ+B4WmUJvUnGnBfA5HrY7kj18q
pDcmAafWcdL+ev9bZ2y2rfIuPEXSrOgQqutAooY8uEzCDmiYKU/p/VAoR3LpS1Vf
vu4/hcK3+RxkbVdppcZne1aLlZHAmD9hs2SC8MvlYGVkfY+TeW9RkgfrtKwapSaA
yukWEnoCv4byMoIKahtV8RSwEJO03yVh35f1pQshWg5M1hOif3W8INkJ3v0BZNYK
lRyijJ07AjujPAmr0qpGmZ8mbl0vlVZonD5GPudDMHWNOj0ZiaSCV2RZypAOJ/ag
lQTTVzj4kDVGEA==
-----END CERTIFICATE-----
Generated at Tue May 13 20:39:14 2025 by rpki-client