Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
File: rh967y8S0HaqitWli8uNyvPwvUw.mft (raw, json)
Hash identifier: J6Jc5sBDBVOLd+8Qyo/K/hRoyqsqdtma8MMnTR6In5M=
Subject key identifier: 2A:6E:EA:5F:BF:BE:65:77:A3:82:53:A4:DA:08:AD:C6:06:48:01:ED
Authority key identifier: AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
Certificate issuer: /CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Certificate serial: 0196E0E7EC1ACBC752EE0A7FE0FA8904140F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
Manifest number: 1095
Signing time: Sun 18 May 2025 01:00:17 +0000
Manifest this update: Sun 18 May 2025 01:00:17 +0000
Manifest next update: Mon 19 May 2025 01:00:17 +0000
Files and hashes: 1: rh967y8S0HaqitWli8uNyvPwvUw.crl (hash: QhRHU/92gVxV2KDvS/s8pl3aYY0Sgx1EAQcDY59FMdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:e7:ec:1a:cb:c7:52:ee:0a:7f:e0:fa:89:04:14:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1f7aef2f12d076aa8ad5a58bcb8dcaf3f0bd4c
Validity
Not Before: May 18 01:00:17 2025 GMT
Not After : May 19 01:00:17 2025 GMT
Subject: CN=2a6eea5fbfbe6577a38253a4da08adc6064801ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:51:32:ce:69:de:77:62:21:82:f5:0f:53:
e3:5a:64:8f:48:63:89:48:82:ec:f1:1d:fa:28:c3:
fd:01:49:ea:8a:3b:9b:f3:fa:b4:1a:92:08:bc:72:
73:c3:cd:4a:2c:22:a6:9e:90:2e:6e:ff:f5:80:b2:
d8:96:2c:ce:6e:56:d0:33:5a:09:35:0a:26:9e:b7:
88:72:b2:64:9b:5d:00:e1:5a:d4:a8:f4:23:2e:2e:
00:cc:a5:f2:3e:60:97:bb:75:ad:11:44:0b:51:76:
c7:e7:04:8f:54:0c:7e:ed:30:37:ca:b4:34:f9:2c:
de:8d:3f:47:73:9a:ab:55:4a:aa:a3:5b:3a:0d:c6:
6c:a4:de:b8:15:4a:25:70:e9:79:e8:06:52:83:9f:
bb:8f:14:7b:54:3d:77:b2:22:b3:bd:a3:c3:16:f6:
52:22:8b:6b:c1:1e:37:1f:3a:fa:08:e7:5b:06:46:
0d:2b:0e:3a:68:3a:01:ff:e9:42:80:a2:57:c1:df:
02:3d:d2:6a:9c:59:57:16:7f:63:50:59:be:f1:40:
60:38:e9:58:7e:40:84:72:aa:49:f0:53:41:ae:ac:
3c:2c:7f:26:e1:89:8e:d7:cb:b8:e3:cb:cd:7f:d9:
65:de:37:55:12:8f:56:c3:22:b8:81:bb:92:6d:ef:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6E:EA:5F:BF:BE:65:77:A3:82:53:A4:DA:08:AD:C6:06:48:01:ED
X509v3 Authority Key Identifier:
keyid:AE:1F:7A:EF:2F:12:D0:76:AA:8A:D5:A5:8B:CB:8D:CA:F3:F0:BD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh967y8S0HaqitWli8uNyvPwvUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f60d31-c748-4eb7-b781-098d3bd0b951/1/rh967y8S0HaqitWli8uNyvPwvUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:42:88:ce:2e:1c:50:c2:b5:c4:ec:3b:0b:58:95:2d:89:d3:
06:ac:48:1f:93:b5:22:e3:51:ff:5c:2a:78:31:1f:a7:31:dc:
be:44:b3:61:1f:c8:4c:55:cc:ee:88:db:ba:a0:da:62:d0:b2:
2e:18:93:68:c7:d6:9b:30:b9:d5:11:1c:15:0e:6f:d8:3f:d1:
0b:55:1d:52:ad:a3:dd:7d:a6:60:b2:6c:5e:bd:f9:89:64:20:
0a:77:74:7b:00:d2:23:19:3a:e7:e6:8f:ab:6d:f5:1b:be:3d:
f6:7e:c5:33:df:b5:86:37:a2:0b:d2:5a:9a:ba:84:00:cb:8c:
b9:04:1f:d4:f1:0e:63:02:9d:1c:f4:3f:66:19:1f:06:f2:2b:
86:dc:64:37:83:ef:37:56:1e:26:f5:e2:8b:cb:2b:fc:b4:46:
f4:7b:e3:3b:10:c6:26:73:ec:3b:25:92:8c:53:79:6d:58:bf:
f7:71:f1:da:42:f3:26:59:81:b4:d3:ac:01:6c:65:ca:c5:b9:
7c:27:e0:76:f9:86:ab:de:c7:57:ac:48:52:c2:7f:04:71:58:
a4:3c:a4:d6:c0:b4:b6:e6:dd:8c:77:2a:66:e0:09:13:bf:5a:
b8:46:ac:58:c6:73:18:26:18:6e:a2:c8:70:c9:7b:da:93:6e:
b8:bf:de:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbg5+way8dS7gp/4PqJBBQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWY3YWVmMmYxMmQwNzZhYThhZDVhNThiY2I4ZGNhZjNm
MGJkNGMwHhcNMjUwNTE4MDEwMDE3WhcNMjUwNTE5MDEwMDE3WjAzMTEwLwYDVQQD
EygyYTZlZWE1ZmJmYmU2NTc3YTM4MjUzYTRkYTA4YWRjNjA2NDgwMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsRRMs5p3ndiIYL1D1PjWmSPSGOJ
SILs8R36KMP9AUnqijub8/q0GpIIvHJzw81KLCKmnpAubv/1gLLYlizOblbQM1oJ
NQomnreIcrJkm10A4VrUqPQjLi4AzKXyPmCXu3WtEUQLUXbH5wSPVAx+7TA3yrQ0
+SzejT9Hc5qrVUqqo1s6DcZspN64FUolcOl56AZSg5+7jxR7VD13siKzvaPDFvZS
IotrwR43Hzr6COdbBkYNKw46aDoB/+lCgKJXwd8CPdJqnFlXFn9jUFm+8UBgOOlY
fkCEcqpJ8FNBrqw8LH8m4YmO18u448vNf9ll3jdVEo9WwyK4gbuSbe+lhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpu6l+/vmV3o4JTpNoIrcYGSAHtMB8GA1UdIwQY
MBaAFK4feu8vEtB2qorVpYvLjcrz8L1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmg5Njd5OFMwSGFxaXRXbGk4dU55dlB3dlV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mNjBkMzEtYzc0OC00ZWI3LWI3ODEt
MDk4ZDNiZDBiOTUxLzEvcmg5Njd5OFMwSGFxaXRXbGk4dU55dlB3dlV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mNjBkMzEtYzc0OC00ZWI3LWI3ODEtMDk4ZDNiZDBiOTUx
LzEvcmg5Njd5OFMwSGFxaXRXbGk4dU55dlB3dlV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0KIzi4c
UMK1xOw7C1iVLYnTBqxIH5O1IuNR/1wqeDEfpzHcvkSzYR/ITFXM7ojbuqDaYtCy
LhiTaMfWmzC51REcFQ5v2D/RC1UdUq2j3X2mYLJsXr35iWQgCnd0ewDSIxk65+aP
q231G7499n7FM9+1hjeiC9JamrqEAMuMuQQf1PEOYwKdHPQ/ZhkfBvIrhtxkN4Pv
N1YeJvXii8sr/LRG9HvjOxDGJnPsOyWSjFN5bVi/93Hx2kLzJlmBtNOsAWxlysW5
fCfgdvmGq97HV6xIUsJ/BHFYpDyk1sC0tubdjHcqZuAJE79auEasWMZzGCYYbqLI
cMl72pNuuL/eBQ==
-----END CERTIFICATE-----
Generated at Sun May 18 04:52:13 2025 by rpki-client