Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: /QLplYYbahb0FZmQMyXg6nhIeiZMzSlB9OzpnFeZjdo=
Subject key identifier: A0:93:27:EF:87:50:65:26:11:10:17:D0:3D:35:05:7D:D0:8E:FC:54
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 0196A12D5A80C43886DF4FA77B8E9A30541D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 16:00:26 +0000
Manifest this update: Mon 05 May 2025 16:00:26 +0000
Manifest next update: Tue 06 May 2025 16:00:26 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: ptCdDmPU3jEDCG6X6SSHQrdWSPb5UIeC+zMflcNHOyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:5a:80:c4:38:86:df:4f:a7:7b:8e:9a:30:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: May 5 16:00:26 2025 GMT
Not After : May 6 16:00:26 2025 GMT
Subject: CN=a09327ef87506526111017d03d35057dd08efc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d8:a4:1b:02:22:80:0f:85:3f:57:d3:b8:24:
00:21:85:86:59:97:ff:e5:60:46:e0:e8:cb:45:ab:
d7:07:61:48:1d:36:a3:fd:96:3d:4c:44:90:1f:30:
2b:d8:96:3a:bd:75:64:18:35:9b:3a:79:04:64:a7:
ff:7d:d8:4e:24:06:d7:34:e4:bb:c7:b5:6f:e0:44:
b5:8e:5a:58:5e:3d:a3:78:60:b4:d3:6d:c6:e3:7f:
ec:cf:ae:eb:d2:30:c3:93:28:c2:18:52:8b:e7:0c:
09:a9:e5:95:92:e0:a1:18:92:88:40:c2:89:e9:b6:
88:01:cd:14:97:2e:1c:dd:15:4a:66:31:97:56:b2:
a1:fa:65:63:fa:bf:1a:b9:6b:b2:78:f3:9d:43:a7:
97:19:b1:24:42:60:0a:8c:e1:22:d2:d2:c5:97:32:
4d:e0:e8:2c:f6:17:de:33:56:3e:aa:85:21:60:a3:
b2:8c:72:5a:81:4b:9e:2f:4a:65:ad:6a:ae:5a:09:
bf:62:35:57:a6:f0:ea:52:7b:81:7f:23:de:67:7f:
1c:fc:e0:24:12:a0:ce:18:a4:dd:58:39:80:4f:7a:
35:fc:bb:c5:73:d7:da:24:8d:00:31:98:06:76:48:
1b:ce:2b:26:35:b2:2f:fe:3a:82:22:b7:a9:64:5c:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:27:EF:87:50:65:26:11:10:17:D0:3D:35:05:7D:D0:8E:FC:54
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9b:2e:e9:ed:10:1d:de:2b:53:5e:d3:d4:db:8d:33:46:24:
80:da:5e:c3:5a:c4:46:c1:6c:78:69:15:05:3b:98:fc:dc:70:
77:e4:43:cb:e1:ea:ae:02:c8:d1:5b:f1:74:7b:73:82:44:6a:
59:1c:5e:d1:f5:be:a1:92:cd:47:db:e1:ce:2c:54:92:5d:08:
bc:04:92:b1:f2:3e:03:c5:58:f7:f4:2b:4c:25:ab:af:14:90:
58:b2:5c:c2:77:de:55:90:07:fe:c6:3a:68:60:86:87:2c:3e:
f4:5e:8c:78:94:8a:4f:8b:e0:c0:4c:d0:64:fc:e4:6f:59:28:
06:f8:b1:a3:f0:e9:82:37:80:84:36:6d:e0:19:12:63:fc:67:
60:b7:54:fe:85:c2:bb:9f:e3:5f:bb:55:de:a9:61:cc:56:54:
f4:d4:6d:14:11:b1:d2:aa:f3:18:a5:b2:02:23:38:49:10:91:
c8:ce:d9:91:34:79:ae:d9:50:15:a1:14:59:70:9a:c1:47:c3:
90:c3:4c:cb:82:41:92:ce:83:d6:4d:73:66:79:6d:e8:c0:4f:
98:af:8f:6a:32:dc:c3:d1:d2:ab:07:8c:62:96:54:da:0d:bc:
83:d9:4f:62:5f:5a:49:ac:50:54:3a:1d:2e:c5:4c:bb:98:e0:
50:19:c9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZahLVqAxDiG30+ne46aMFQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2
M2IyOWEwHhcNMjUwNTA1MTYwMDI2WhcNMjUwNTA2MTYwMDI2WjAzMTEwLwYDVQQD
EyhhMDkzMjdlZjg3NTA2NTI2MTExMDE3ZDAzZDM1MDU3ZGQwOGVmYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09ikGwIigA+FP1fTuCQAIYWGWZf/
5WBG4OjLRavXB2FIHTaj/ZY9TESQHzAr2JY6vXVkGDWbOnkEZKf/fdhOJAbXNOS7
x7Vv4ES1jlpYXj2jeGC0023G43/sz67r0jDDkyjCGFKL5wwJqeWVkuChGJKIQMKJ
6baIAc0Uly4c3RVKZjGXVrKh+mVj+r8auWuyePOdQ6eXGbEkQmAKjOEi0tLFlzJN
4Ogs9hfeM1Y+qoUhYKOyjHJagUueL0plrWquWgm/YjVXpvDqUnuBfyPeZ38c/OAk
EqDOGKTdWDmAT3o1/LvFc9faJI0AMZgGdkgbzismNbIv/jqCIrepZFxv+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCTJ++HUGUmERAX0D01BX3QjvxUMB8GA1UdIwQY
MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt
ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5
LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJsu6e0Q
Hd4rU17T1NuNM0YkgNpew1rERsFseGkVBTuY/Nxwd+RDy+HqrgLI0VvxdHtzgkRq
WRxe0fW+oZLNR9vhzixUkl0IvASSsfI+A8VY9/QrTCWrrxSQWLJcwnfeVZAH/sY6
aGCGhyw+9F6MeJSKT4vgwEzQZPzkb1koBvixo/DpgjeAhDZt4BkSY/xnYLdU/oXC
u5/jX7tV3qlhzFZU9NRtFBGx0qrzGKWyAiM4SRCRyM7ZkTR5rtlQFaEUWXCawUfD
kMNMy4JBks6D1k1zZnlt6MBPmK+PajLcw9HSqweMYpZU2g28g9lPYl9aSaxQVDod
LsVMu5jgUBnJXQ==
-----END CERTIFICATE-----
Generated at Mon May 5 17:52:11 2025 by rpki-client