Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
File: S6TRDarjyS2n0u6XO3SMsflJIuk.mft (raw, json)
Hash identifier: 9OC2xmOayZfc3Q68RP+D6x/AuYhl4+XTLd3D32hD3Eo=
Subject key identifier: 2F:D8:3B:08:31:F8:66:37:E3:C8:D6:05:A6:7C:02:A7:87:C8:CA:AF
Authority key identifier: 4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
Certificate issuer: /CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Certificate serial: 0196BF6F62B60DB003660BE3A9E6B16C50F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
Manifest number: 08D9
Signing time: Sun 11 May 2025 13:01:10 +0000
Manifest this update: Sun 11 May 2025 13:01:10 +0000
Manifest next update: Mon 12 May 2025 13:01:10 +0000
Files and hashes: 1: S6TRDarjyS2n0u6XO3SMsflJIuk.crl (hash: XFH8kRDQ+mchwLNNYOHuuvMOMRC1L+ELKoVB1PaTMYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:62:b6:0d:b0:03:66:0b:e3:a9:e6:b1:6c:50:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba4d10daae3c92da7d2ee973b748cb1f94922e9
Validity
Not Before: May 11 13:01:10 2025 GMT
Not After : May 12 13:01:10 2025 GMT
Subject: CN=2fd83b0831f86637e3c8d605a67c02a787c8caaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:f8:03:c3:e2:b9:41:b8:09:0c:99:af:6e:
78:78:6f:a5:b7:9c:cb:03:d3:9e:03:40:be:4a:d3:
37:86:69:4a:20:82:4b:24:df:ef:9e:1d:bb:0f:a8:
a6:59:0c:01:21:ef:2f:ab:2f:0d:9e:a9:de:ca:20:
01:4b:a0:cb:7c:79:e4:19:b0:69:28:ed:eb:21:e4:
8d:f8:c7:b0:9d:41:e5:64:0c:ed:b2:05:1b:02:65:
61:10:49:54:c1:d9:ad:d9:4f:11:10:7a:4e:50:ba:
d4:fb:66:89:8a:f4:93:fa:77:6a:f7:45:92:64:d3:
75:b0:b5:40:57:56:20:45:0c:93:d0:63:87:fd:5a:
c8:c9:ea:cd:4a:d6:75:7e:3a:69:c0:bf:18:94:a1:
28:6c:3a:d9:79:4d:90:63:fb:ae:28:29:b8:ae:09:
f5:5a:f2:40:27:26:a7:ad:db:24:97:a8:3d:8b:7c:
f8:54:de:a5:a8:ab:94:2f:5e:94:14:80:ee:ed:18:
0e:ff:6a:b7:6c:b4:8c:be:75:eb:3e:f4:4f:eb:ef:
d3:f1:ca:12:f7:9b:17:8c:2a:f9:69:52:98:1e:4f:
f0:02:b2:3c:ea:71:dc:34:94:50:f9:b3:e9:75:a6:
78:56:d2:81:9d:d9:31:55:99:28:c6:3a:44:c7:45:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D8:3B:08:31:F8:66:37:E3:C8:D6:05:A6:7C:02:A7:87:C8:CA:AF
X509v3 Authority Key Identifier:
keyid:4B:A4:D1:0D:AA:E3:C9:2D:A7:D2:EE:97:3B:74:8C:B1:F9:49:22:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6TRDarjyS2n0u6XO3SMsflJIuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ad90a5-896a-452e-ac7d-04ccc80d1876/1/S6TRDarjyS2n0u6XO3SMsflJIuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:96:a5:50:2a:e1:e2:f6:82:02:08:ea:fd:73:94:2b:bc:29:
e4:5d:6c:93:af:f9:e3:51:05:be:b4:85:63:95:3a:71:4f:f9:
b8:6c:e6:00:b1:0c:bb:2d:eb:6f:da:07:6e:cb:09:67:be:5b:
8f:0a:53:a7:3c:bd:67:af:ba:7c:fe:38:a1:af:4a:0e:f9:7e:
a5:e1:60:18:ac:fb:8a:53:fe:dc:05:25:66:f8:90:0c:cb:96:
87:78:01:c3:8d:69:e0:d2:c6:cb:21:e3:0a:22:9c:68:5f:0e:
c3:b3:d6:2c:af:aa:bf:8c:20:d3:e9:81:cd:a4:99:b5:fb:57:
17:f1:e5:9f:69:ce:85:fe:5e:df:c1:d4:da:cd:e1:57:92:62:
58:02:d0:8c:23:1b:0d:34:24:64:30:a6:a6:f6:33:00:da:95:
a4:f7:d4:fd:fd:d3:dc:80:2b:bb:49:20:3b:1a:ec:dd:bf:44:
1f:04:d8:11:b4:9f:fe:01:31:e2:3b:5d:ef:66:b4:5f:71:3f:
a8:bb:2f:bd:76:c8:4f:e7:47:58:e1:91:82:a1:f1:93:43:c4:
85:65:7d:9d:e5:59:ca:48:ca:00:da:4e:fa:e6:c3:a2:1e:24:
0e:79:3d:57:6f:52:2a:62:13:4a:75:c3:9a:4a:40:35:50:ea:
81:fc:9d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b2K2DbADZgvjqeaxbFD3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiYTRkMTBkYWFlM2M5MmRhN2QyZWU5NzNiNzQ4Y2IxZjk0
OTIyZTkwHhcNMjUwNTExMTMwMTEwWhcNMjUwNTEyMTMwMTEwWjAzMTEwLwYDVQQD
EygyZmQ4M2IwODMxZjg2NjM3ZTNjOGQ2MDVhNjdjMDJhNzg3YzhjYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lv4A8PiuUG4CQyZr254eG+lt5zL
A9OeA0C+StM3hmlKIIJLJN/vnh27D6imWQwBIe8vqy8NnqneyiABS6DLfHnkGbBp
KO3rIeSN+MewnUHlZAztsgUbAmVhEElUwdmt2U8REHpOULrU+2aJivST+ndq90WS
ZNN1sLVAV1YgRQyT0GOH/VrIyerNStZ1fjppwL8YlKEobDrZeU2QY/uuKCm4rgn1
WvJAJyanrdskl6g9i3z4VN6lqKuUL16UFIDu7RgO/2q3bLSMvnXrPvRP6+/T8coS
95sXjCr5aVKYHk/wArI86nHcNJRQ+bPpdaZ4VtKBndkxVZkoxjpEx0UEzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/YOwgx+GY348jWBaZ8AqeHyMqvMB8GA1UdIwQY
MBaAFEuk0Q2q48ktp9Lulzt0jLH5SSLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2Qt
MDRjY2M4MGQxODc2LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9hZDkwYTUtODk2YS00NTJlLWFjN2QtMDRjY2M4MGQxODc2
LzEvUzZUUkRhcmp5UzJuMHU2WE8zU01zZmxKSXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJalUCrh
4vaCAgjq/XOUK7wp5F1sk6/541EFvrSFY5U6cU/5uGzmALEMuy3rb9oHbssJZ75b
jwpTpzy9Z6+6fP44oa9KDvl+peFgGKz7ilP+3AUlZviQDMuWh3gBw41p4NLGyyHj
CiKcaF8Ow7PWLK+qv4wg0+mBzaSZtftXF/Hln2nOhf5e38HU2s3hV5JiWALQjCMb
DTQkZDCmpvYzANqVpPfU/f3T3IAru0kgOxrs3b9EHwTYEbSf/gEx4jtd72a0X3E/
qLsvvXbIT+dHWOGRgqHxk0PEhWV9neVZykjKANpO+ubDoh4kDnk9V29SKmITSnXD
mkpANVDqgfydpg==
-----END CERTIFICATE-----
Generated at Sun May 11 23:02:48 2025 by rpki-client