Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
File: M1lkDZyLY0Pghqr4vosw6MMdK40.mft (raw, json)
Hash identifier: 8gpCh3LC5k9CaCZBZveegmPxgS2zl40lXPdYKBk8ny8=
Subject key identifier: F6:28:93:6F:C7:03:AE:7F:D8:6B:2C:60:80:D3:18:31:88:92:E7:1D
Authority key identifier: 33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
Certificate issuer: /CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Certificate serial: 0196C34BDB59159418E51526214459FEDE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
Manifest number: 02BE
Signing time: Mon 12 May 2025 07:00:50 +0000
Manifest this update: Mon 12 May 2025 07:00:50 +0000
Manifest next update: Tue 13 May 2025 07:00:50 +0000
Files and hashes: 1: M1lkDZyLY0Pghqr4vosw6MMdK40.crl (hash: /IMVTN+ae0FkmNzK9MhJ3QflzHyFCG10ednvUZYtWyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:db:59:15:94:18:e5:15:26:21:44:59:fe:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3359640d9c8b6343e086aaf8be8b30e8c31d2b8d
Validity
Not Before: May 12 07:00:50 2025 GMT
Not After : May 13 07:00:50 2025 GMT
Subject: CN=f628936fc703ae7fd86b2c6080d318318892e71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:1e:af:15:ef:73:5e:84:07:d7:1a:59:47:
32:bd:12:a4:40:ed:c0:43:ab:6a:0e:79:39:4f:c6:
ed:6c:13:3c:d8:fa:a1:10:fd:e1:d7:15:b8:b5:f5:
ad:da:d6:de:a2:d4:19:a7:56:2d:1f:17:d0:1d:f1:
22:92:f2:39:36:d0:f5:3d:4c:26:6a:09:03:54:da:
c4:97:7f:99:c0:e7:b1:34:9d:79:60:f1:0e:c3:20:
0c:a2:d0:a5:d8:b0:be:df:59:d1:fe:a7:fb:0d:bf:
16:7b:08:60:77:fd:21:53:df:7c:3e:2d:83:ed:e5:
82:74:11:5b:74:91:6d:29:b4:1d:69:cf:8a:4b:10:
d8:97:3e:1f:d4:04:cc:a0:22:af:b6:c3:08:8c:5e:
1f:e5:ab:5e:80:9f:fb:f1:db:49:77:43:42:a3:04:
30:bf:96:1e:ea:6d:68:c2:4d:0a:54:23:00:80:01:
51:69:ec:02:c7:90:47:ed:3c:89:3d:3e:72:81:e5:
39:0e:67:ef:aa:ae:13:8e:2f:ad:02:c7:86:ef:f2:
72:01:5f:0d:52:74:5b:7e:98:8f:0c:8b:18:24:0b:
10:d3:3e:e5:6f:23:f2:33:6b:66:c0:31:eb:8d:f0:
44:c9:31:3f:a8:c9:ac:f9:91:8a:6f:a5:95:79:ef:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:28:93:6F:C7:03:AE:7F:D8:6B:2C:60:80:D3:18:31:88:92:E7:1D
X509v3 Authority Key Identifier:
keyid:33:59:64:0D:9C:8B:63:43:E0:86:AA:F8:BE:8B:30:E8:C3:1D:2B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1lkDZyLY0Pghqr4vosw6MMdK40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/d330c9-3a00-4e85-8a74-bddc3143b313/1/M1lkDZyLY0Pghqr4vosw6MMdK40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:61:f4:a7:cc:35:0e:21:79:e5:26:12:3e:06:8e:c1:13:98:
c2:e0:f0:74:1a:a9:28:6a:28:2f:0d:09:0d:44:44:37:7c:84:
bb:0a:34:72:a7:1a:22:8d:ad:81:e2:4a:9d:6a:84:85:1c:d4:
87:98:66:cc:cd:7f:1b:bc:90:e9:92:f9:89:93:32:4c:04:c3:
9c:dd:98:f7:f5:03:b7:d3:54:8c:64:10:da:de:67:d9:b0:b5:
b3:82:49:a8:ef:8f:22:6c:fa:6f:b4:f4:76:83:57:b3:62:b2:
42:c5:c7:83:58:56:21:89:0d:f1:8b:c3:6c:15:b0:a2:22:ba:
57:b1:12:93:62:2d:53:6e:d7:9f:dd:07:13:af:4c:ae:d0:29:
93:90:0c:63:09:67:77:9f:46:f6:b4:da:d9:32:18:e6:57:f4:
d9:c5:d5:93:ad:07:ab:d3:07:89:78:34:1e:89:bf:80:f3:32:
9e:29:ff:5d:36:4b:cc:f4:3c:b4:91:76:5e:6a:09:3f:af:89:
52:74:23:f9:f8:37:f9:9d:78:ae:50:55:44:e9:dc:2e:21:f5:
20:42:41:d8:18:de:9b:26:b8:b9:23:c6:40:82:d1:6d:dc:de:
7e:c1:57:3e:06:76:e9:48:ed:56:30:3c:ae:a4:d5:d3:77:5c:
88:78:d4:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDS9tZFZQY5RUmIURZ/t5XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTk2NDBkOWM4YjYzNDNlMDg2YWFmOGJlOGIzMGU4YzMx
ZDJiOGQwHhcNMjUwNTEyMDcwMDUwWhcNMjUwNTEzMDcwMDUwWjAzMTEwLwYDVQQD
EyhmNjI4OTM2ZmM3MDNhZTdmZDg2YjJjNjA4MGQzMTgzMTg4OTJlNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRwerxXvc16EB9caWUcyvRKkQO3A
Q6tqDnk5T8btbBM82PqhEP3h1xW4tfWt2tbeotQZp1YtHxfQHfEikvI5NtD1PUwm
agkDVNrEl3+ZwOexNJ15YPEOwyAMotCl2LC+31nR/qf7Db8Wewhgd/0hU998Pi2D
7eWCdBFbdJFtKbQdac+KSxDYlz4f1ATMoCKvtsMIjF4f5ategJ/78dtJd0NCowQw
v5Ye6m1owk0KVCMAgAFRaewCx5BH7TyJPT5ygeU5Dmfvqq4Tji+tAseG7/JyAV8N
UnRbfpiPDIsYJAsQ0z7lbyPyM2tmwDHrjfBEyTE/qMms+ZGKb6WVee8TewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYok2/HA65/2GssYIDTGDGIkucdMB8GA1UdIwQY
MBaAFDNZZA2ci2ND4Iaq+L6LMOjDHSuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQt
YmRkYzMxNDNiMzEzLzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9kMzMwYzktM2EwMC00ZTg1LThhNzQtYmRkYzMxNDNiMzEz
LzEvTTFsa0RaeUxZMFBnaHFyNHZvc3c2TU1kSzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmH0p8w1
DiF55SYSPgaOwROYwuDwdBqpKGooLw0JDUREN3yEuwo0cqcaIo2tgeJKnWqEhRzU
h5hmzM1/G7yQ6ZL5iZMyTATDnN2Y9/UDt9NUjGQQ2t5n2bC1s4JJqO+PImz6b7T0
doNXs2KyQsXHg1hWIYkN8YvDbBWwoiK6V7ESk2ItU27Xn90HE69MrtApk5AMYwln
d59G9rTa2TIY5lf02cXVk60Hq9MHiXg0Hom/gPMynin/XTZLzPQ8tJF2XmoJP6+J
UnQj+fg3+Z14rlBVROncLiH1IEJB2Bjemya4uSPGQILRbdzefsFXPgZ26UjtVjA8
rqTV03dciHjUoQ==
-----END CERTIFICATE-----
Generated at Mon May 12 14:32:37 2025 by rpki-client