Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: +/52JpGiA/43OxEQwGWO5d9Ml4YGj0RIp/EZ+EE8wHo=
Subject key identifier: 2F:25:29:9E:B4:18:41:B3:7F:47:9A:E9:24:9D:FD:EC:6C:45:93:ED
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 0196A84250751724B3AA8FA89DBE4B07796D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 0EB9
Signing time: Wed 07 May 2025 01:00:40 +0000
Manifest this update: Wed 07 May 2025 01:00:40 +0000
Manifest next update: Thu 08 May 2025 01:00:40 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: gNmmFx/p9ouK8tRQKUxVrZIV/FxXvanWnKacLH7NEr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:50:75:17:24:b3:aa:8f:a8:9d:be:4b:07:79:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: May 7 01:00:40 2025 GMT
Not After : May 8 01:00:40 2025 GMT
Subject: CN=2f25299eb41841b37f479ae9249dfdec6c4593ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:6b:e2:b2:fb:91:6e:41:22:2b:43:9d:d2:
da:04:11:c9:d0:43:66:8f:b6:dd:be:84:66:0b:4a:
b7:0c:2b:68:23:d7:8a:21:63:79:ae:fc:04:b8:5c:
3a:73:2c:73:9b:73:86:bf:a7:d2:a5:9d:07:62:45:
02:b1:09:15:df:95:6e:2c:63:04:89:31:64:61:a2:
02:32:15:e8:03:9d:c7:4a:b3:db:19:2c:6f:69:66:
69:34:da:c4:40:0b:02:a0:28:dc:bf:35:69:ae:ce:
4f:5f:dd:42:f8:15:f0:86:5a:86:ec:12:08:ce:4f:
a2:ef:da:14:49:05:ad:f6:ec:59:cb:8e:25:89:e3:
cc:71:42:6a:53:35:41:01:7c:0f:1e:d7:25:05:53:
8d:77:56:0b:6b:d8:75:4f:46:2c:fc:93:d5:a8:cd:
fe:85:c8:d2:17:67:af:f3:e8:57:4c:af:c9:71:a9:
74:d6:ae:93:42:2e:c8:16:63:69:b7:54:b5:45:5a:
16:80:9c:f8:e4:81:cf:c1:63:81:e3:68:56:d1:38:
9b:0c:d5:dc:42:86:cc:93:45:f7:97:10:b3:cf:14:
7d:70:ea:4b:86:81:b2:01:0e:bd:b0:12:da:39:78:
1d:2a:b5:68:77:4b:23:b5:3c:7b:5e:e4:da:11:4f:
fb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:29:9E:B4:18:41:B3:7F:47:9A:E9:24:9D:FD:EC:6C:45:93:ED
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:15:b3:ac:61:1a:c0:db:27:c8:d3:8e:2a:a4:d7:de:6d:
99:62:79:d1:9c:e8:97:67:17:d6:13:5b:c4:56:80:69:f3:b8:
41:fa:97:21:4c:47:27:df:10:b0:81:fa:4d:d9:f3:4e:f3:89:
1f:62:02:c5:8d:30:33:87:f4:3c:e5:74:d0:60:b7:e4:80:94:
63:82:bc:bb:ce:3d:8f:ea:1f:8d:40:3f:ab:fb:5b:93:74:e9:
57:a3:fc:1a:2d:79:e5:e4:bf:4c:5b:1a:e3:99:38:61:02:bf:
80:66:ab:5f:a1:53:3c:68:1b:ac:33:a5:91:08:a7:23:51:f6:
37:a1:2c:8d:9a:17:ce:b6:a5:b7:fa:72:45:b6:00:2b:d5:ac:
b9:09:2b:f2:28:9c:ed:ef:9f:5c:2f:5b:69:e9:a3:a2:7f:53:
8b:a8:99:01:d2:00:7f:8d:38:0e:95:42:11:46:e3:a3:35:93:
6b:89:d8:cb:93:d1:03:e9:1d:58:f4:eb:8a:2f:54:1d:fb:5e:
28:ab:b6:1d:94:fb:6f:7e:8e:b8:8e:d5:95:ed:45:75:c1:18:
f6:f0:70:38:1e:1f:23:db:97:18:99:e0:3f:66:02:0b:69:1a:
0a:ff:ca:97:ab:01:a6:08:42:2c:73:88:90:08:32:5a:a2:c9:
3b:2f:ce:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQlB1FySzqo+onb5LB3ltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MzQzODdlYmZlY2RhNjM3YTc2ZTExMTk5ZTFjZDAzMDdj
MmY0Y2EwHhcNMjUwNTA3MDEwMDQwWhcNMjUwNTA4MDEwMDQwWjAzMTEwLwYDVQQD
EygyZjI1Mjk5ZWI0MTg0MWIzN2Y0NzlhZTkyNDlkZmRlYzZjNDU5M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3Nr4rL7kW5BIitDndLaBBHJ0ENm
j7bdvoRmC0q3DCtoI9eKIWN5rvwEuFw6cyxzm3OGv6fSpZ0HYkUCsQkV35VuLGME
iTFkYaICMhXoA53HSrPbGSxvaWZpNNrEQAsCoCjcvzVprs5PX91C+BXwhlqG7BII
zk+i79oUSQWt9uxZy44liePMcUJqUzVBAXwPHtclBVONd1YLa9h1T0Ys/JPVqM3+
hcjSF2ev8+hXTK/Jcal01q6TQi7IFmNpt1S1RVoWgJz45IHPwWOB42hW0TibDNXc
QobMk0X3lxCzzxR9cOpLhoGyAQ69sBLaOXgdKrVod0sjtTx7XuTaEU/7hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8lKZ60GEGzf0ea6SSd/exsRZPtMB8GA1UdIwQY
MBaAFEg0OH6/7NpjenbhEZnhzQMHwvTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEt
NTkxYTJhNDE5NGNkLzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85ZWU2YzgtZjNlMi00ZmFlLTk5OGEtNTkxYTJhNDE5NGNk
LzEvU0RRNGZyX3MybU42ZHVFUm1lSE5Bd2ZDOU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoAVs6xh
GsDbJ8jTjiqk195tmWJ50Zzol2cX1hNbxFaAafO4QfqXIUxHJ98QsIH6TdnzTvOJ
H2ICxY0wM4f0POV00GC35ICUY4K8u849j+ofjUA/q/tbk3TpV6P8Gi155eS/TFsa
45k4YQK/gGarX6FTPGgbrDOlkQinI1H2N6EsjZoXzralt/pyRbYAK9WsuQkr8iic
7e+fXC9baemjon9Ti6iZAdIAf404DpVCEUbjozWTa4nYy5PRA+kdWPTrii9UHfte
KKu2HZT7b36OuI7Vle1FdcEY9vBwOB4fI9uXGJngP2YCC2kaCv/Kl6sBpghCLHOI
kAgyWqLJOy/OIQ==
-----END CERTIFICATE-----
Generated at Wed May 7 09:32:59 2025 by rpki-client