Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
File: P5oSEPUJkiOdOn8uXoATtatJH_8.mft (raw, json)
Hash identifier: LR3SY1ksw9fK27+VObAAVl75gaeU9YEELsPEQjDqfFI=
Subject key identifier: CE:48:0B:F2:CA:62:42:3D:8E:8D:A9:A8:67:7C:12:FC:D6:E8:A4:36
Authority key identifier: 3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
Certificate issuer: /CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Certificate serial: 0196A1D248535C77DC9E1BBB3DF7109E5449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
Manifest number: 10F4
Signing time: Mon 05 May 2025 19:00:34 +0000
Manifest this update: Mon 05 May 2025 19:00:34 +0000
Manifest next update: Tue 06 May 2025 19:00:34 +0000
Files and hashes: 1: P5oSEPUJkiOdOn8uXoATtatJH_8.crl (hash: 7DG+h+jNFwuUQJE2pTv/wz/UWQF80v69wYEmljm0nBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:48:53:5c:77:dc:9e:1b:bb:3d:f7:10:9e:54:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f9a1210f50992239d3a7f2e5e8013b5ab491fff
Validity
Not Before: May 5 19:00:34 2025 GMT
Not After : May 6 19:00:34 2025 GMT
Subject: CN=ce480bf2ca62423d8e8da9a8677c12fcd6e8a436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:21:e2:84:ee:ed:c1:26:46:66:5f:ca:e7:
94:66:da:d8:97:b7:6f:f7:1c:27:07:b4:d3:b7:d2:
a1:08:a2:62:4e:dd:44:86:e9:d7:2b:a3:fa:43:1b:
b6:26:05:b6:a8:6e:20:11:5f:fe:f9:bf:49:34:4d:
70:dd:88:b1:61:2d:4a:3a:0d:1c:3a:f5:04:6e:e1:
a9:b4:9d:5c:5d:7a:93:5b:3f:2f:85:fd:bc:e6:10:
99:ec:27:36:58:22:39:5a:84:78:40:a1:90:00:2d:
1f:5b:6d:98:3a:35:36:8c:97:0f:77:1c:63:43:0c:
28:bc:94:b3:15:af:dd:78:c8:ff:f8:ac:d8:a7:eb:
df:4d:ea:59:5e:6f:bc:c2:1e:91:ac:ec:ee:b0:5e:
3e:79:b0:8c:72:de:11:72:4f:a2:df:02:04:8a:fa:
be:3a:c0:04:e3:8e:df:99:81:d2:dc:81:0c:38:86:
f0:e8:5b:d5:66:02:ce:e3:77:a4:1b:38:7e:84:c2:
79:c1:6b:38:93:83:31:e4:f4:d8:5c:3d:c8:4d:1a:
14:53:9f:cc:dd:c8:39:1a:70:7f:fd:3b:da:b8:7c:
ee:8b:db:e0:5a:a4:63:88:48:d4:47:09:cb:b8:4a:
fc:46:19:f0:81:30:20:eb:dd:8a:70:61:2a:55:e2:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:48:0B:F2:CA:62:42:3D:8E:8D:A9:A8:67:7C:12:FC:D6:E8:A4:36
X509v3 Authority Key Identifier:
keyid:3F:9A:12:10:F5:09:92:23:9D:3A:7F:2E:5E:80:13:B5:AB:49:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5oSEPUJkiOdOn8uXoATtatJH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/14a5e8-f3bf-42f9-a285-a8734f703b98/1/P5oSEPUJkiOdOn8uXoATtatJH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:1e:10:c5:93:71:16:32:e5:09:19:81:39:ce:01:6b:62:23:
9a:42:50:02:af:a9:ee:2d:f6:a1:41:05:98:ba:c2:dd:71:00:
fe:44:73:48:98:a1:a9:6a:dc:d3:fd:a3:b9:fb:85:d6:4b:a5:
89:a3:9c:67:9d:fe:eb:8b:d8:97:a4:03:db:bf:65:fa:46:c4:
f4:36:d5:71:1b:7c:cd:3d:ed:54:4c:1a:c4:c7:83:a0:8f:91:
1c:29:a3:45:c3:ec:58:2c:0e:14:11:48:48:da:44:0d:5c:78:
40:67:ae:f9:6d:6e:7a:b6:78:bb:3f:38:fa:1f:67:1a:ad:b3:
a9:52:4a:bc:1b:26:99:d4:32:34:a3:7a:cb:c3:76:7c:4c:58:
1d:5c:07:29:8f:3e:b5:50:b5:53:69:72:e8:3f:ad:05:eb:0c:
87:81:47:c8:b5:12:65:a9:20:92:98:e9:18:3e:44:ab:73:6b:
c5:b3:9a:9a:b6:11:b8:ba:26:aa:bd:e4:ef:56:c0:d3:5f:cf:
56:07:82:72:c7:ae:2b:53:c7:2a:fe:f8:fd:84:4e:e9:74:9c:
77:70:56:00:02:a3:9c:13:95:19:fc:82:f4:d9:d4:c2:3b:31:
ec:14:a6:3e:9b:a3:d0:4b:d7:b0:3d:00:a6:bb:d0:66:08:64:
40:d8:f7:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0khTXHfcnhu7PfcQnlRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmOWExMjEwZjUwOTkyMjM5ZDNhN2YyZTVlODAxM2I1YWI0
OTFmZmYwHhcNMjUwNTA1MTkwMDM0WhcNMjUwNTA2MTkwMDM0WjAzMTEwLwYDVQQD
EyhjZTQ4MGJmMmNhNjI0MjNkOGU4ZGE5YTg2NzdjMTJmY2Q2ZThhNDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZMh4oTu7cEmRmZfyueUZtrYl7dv
9xwnB7TTt9KhCKJiTt1EhunXK6P6Qxu2JgW2qG4gEV/++b9JNE1w3YixYS1KOg0c
OvUEbuGptJ1cXXqTWz8vhf285hCZ7Cc2WCI5WoR4QKGQAC0fW22YOjU2jJcPdxxj
QwwovJSzFa/deMj/+KzYp+vfTepZXm+8wh6RrOzusF4+ebCMct4Rck+i3wIEivq+
OsAE447fmYHS3IEMOIbw6FvVZgLO43ekGzh+hMJ5wWs4k4Mx5PTYXD3ITRoUU5/M
3cg5GnB//TvauHzui9vgWqRjiEjURwnLuEr8RhnwgTAg692KcGEqVeI5twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5IC/LKYkI9jo2pqGd8EvzW6KQ2MB8GA1UdIwQY
MBaAFD+aEhD1CZIjnTp/Ll6AE7WrSR//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUt
YTg3MzRmNzAzYjk4LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xNGE1ZTgtZjNiZi00MmY5LWEyODUtYTg3MzRmNzAzYjk4
LzEvUDVvU0VQVUpraU9kT244dVhvQVR0YXRKSF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6h4QxZNx
FjLlCRmBOc4Ba2IjmkJQAq+p7i32oUEFmLrC3XEA/kRzSJihqWrc0/2jufuF1kul
iaOcZ53+64vYl6QD279l+kbE9DbVcRt8zT3tVEwaxMeDoI+RHCmjRcPsWCwOFBFI
SNpEDVx4QGeu+W1uerZ4uz84+h9nGq2zqVJKvBsmmdQyNKN6y8N2fExYHVwHKY8+
tVC1U2ly6D+tBesMh4FHyLUSZakgkpjpGD5Eq3NrxbOamrYRuLomqr3k71bA01/P
VgeCcseuK1PHKv74/YRO6XScd3BWAAKjnBOVGfyC9NnUwjsx7BSmPpuj0EvXsD0A
prvQZghkQNj3dA==
-----END CERTIFICATE-----
Generated at Mon May 5 21:50:44 2025 by rpki-client