Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: Lmg6/pi/uAVcPYcQci3pk3dYRg+nkDy/YmuW9dlZFG8=
Subject key identifier: 5F:05:F3:E2:8E:86:D1:08:6E:4D:0F:65:FA:D2:49:F0:9D:97:4E:31
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 0196CCF3F085E653DEB012E505030960A3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 05C2
Signing time: Wed 14 May 2025 04:01:00 +0000
Manifest this update: Wed 14 May 2025 04:01:00 +0000
Manifest next update: Thu 15 May 2025 04:01:00 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: 0uU7eHDW0fQfcbJ2RgW98pRNEs5YVtMNZhBgl0djYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:f0:85:e6:53:de:b0:12:e5:05:03:09:60:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: May 14 04:01:00 2025 GMT
Not After : May 15 04:01:00 2025 GMT
Subject: CN=5f05f3e28e86d1086e4d0f65fad249f09d974e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:bf:e9:0b:a5:ff:a4:30:51:ee:d2:80:2f:
97:40:ab:a5:fa:f5:5c:1c:ab:57:cc:f3:1c:28:88:
ec:28:18:e3:06:b9:81:d1:e5:ec:59:a3:4f:b2:e2:
7a:52:8c:ba:64:44:27:1d:df:53:06:5c:bc:96:6a:
55:2a:67:69:64:61:fb:58:bc:45:38:dd:a8:fb:b0:
ca:0e:63:51:df:c0:43:7e:a4:28:3c:26:31:7a:a7:
ec:c5:d6:98:d1:f7:65:a2:53:ed:32:bb:7c:f0:44:
f3:ac:e6:49:06:d3:47:0c:77:bb:6e:ec:5b:f9:54:
67:b9:d8:fc:59:72:7b:44:10:62:a8:4a:d7:de:ba:
48:e6:18:7c:1c:35:e1:8b:70:e4:da:16:94:c6:5a:
3a:c2:6c:f2:8a:2b:a7:ee:c5:6e:a8:5d:97:10:ea:
b7:1d:69:a0:de:b4:3d:8b:9d:cd:4f:7b:b3:d8:d0:
d4:97:da:2d:5d:41:a6:2a:7f:b9:af:c6:78:a7:26:
09:58:03:83:25:54:28:74:86:ab:d2:a2:b4:f2:bf:
5c:d7:62:f6:ec:5e:db:bf:b2:05:5a:66:b0:4b:ca:
db:8a:1b:47:6c:0e:eb:a3:3a:1e:29:e8:d3:fa:46:
c3:04:a1:ab:0b:5f:bd:3c:38:61:36:83:11:e5:38:
b7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:F3:E2:8E:86:D1:08:6E:4D:0F:65:FA:D2:49:F0:9D:97:4E:31
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:db:de:e6:59:81:73:bb:d0:13:20:45:ca:e6:eb:b5:bd:21:
8d:6d:7c:fa:8b:3e:b4:eb:cb:81:af:cd:b0:c9:47:56:83:f0:
e3:d5:dc:4f:d5:c6:53:95:da:0e:9d:4f:9d:29:43:ae:ce:fc:
b3:d4:80:50:db:37:80:55:e1:16:73:41:04:20:f9:66:20:fb:
07:fa:dc:e7:ea:84:3c:78:6f:b2:22:f7:10:6b:48:46:49:ba:
28:44:e3:f3:e8:90:17:db:a2:cc:2e:c6:7f:61:bb:8e:82:cc:
8e:00:5c:a5:74:0e:52:3e:61:62:b6:6c:92:3f:60:f2:47:37:
e0:7d:7d:c8:f6:59:20:28:f6:ce:7c:94:a4:db:d7:e8:39:11:
49:ef:00:da:e7:40:ae:9f:77:f8:5c:44:11:40:c5:1b:cb:7f:
2c:fb:67:56:f6:8a:43:5b:0e:15:ad:18:6a:37:a7:0a:b8:06:
c2:aa:f3:e4:37:b9:67:76:db:a7:39:ae:f3:e4:4e:24:e5:77:
e4:9c:84:f9:40:fb:c6:51:85:af:3a:ea:d9:7d:41:96:b9:b7:
06:b3:56:cf:be:e6:3e:a8:c3:6a:2a:f8:26:9b:f3:fc:4b:fd:
8e:72:f7:74:f2:ca:d5:70:56:54:c5:db:9b:e2:72:1e:2e:eb:
14:84:ba:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbM8/CF5lPesBLlBQMJYKP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2
YTdmNTQwHhcNMjUwNTE0MDQwMTAwWhcNMjUwNTE1MDQwMTAwWjAzMTEwLwYDVQQD
Eyg1ZjA1ZjNlMjhlODZkMTA4NmU0ZDBmNjVmYWQyNDlmMDlkOTc0ZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhS/6Qul/6QwUe7SgC+XQKul+vVc
HKtXzPMcKIjsKBjjBrmB0eXsWaNPsuJ6Uoy6ZEQnHd9TBly8lmpVKmdpZGH7WLxF
ON2o+7DKDmNR38BDfqQoPCYxeqfsxdaY0fdlolPtMrt88ETzrOZJBtNHDHe7buxb
+VRnudj8WXJ7RBBiqErX3rpI5hh8HDXhi3Dk2haUxlo6wmzyiiun7sVuqF2XEOq3
HWmg3rQ9i53NT3uz2NDUl9otXUGmKn+5r8Z4pyYJWAODJVQodIar0qK08r9c12L2
7F7bv7IFWmawS8rbihtHbA7rozoeKejT+kbDBKGrC1+9PDhhNoMR5Ti3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8F8+KOhtEIbk0PZfrSSfCdl04xMB8GA1UdIwQY
MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct
NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2
LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItve5lmB
c7vQEyBFyubrtb0hjW18+os+tOvLga/NsMlHVoPw49XcT9XGU5XaDp1PnSlDrs78
s9SAUNs3gFXhFnNBBCD5ZiD7B/rc5+qEPHhvsiL3EGtIRkm6KETj8+iQF9uizC7G
f2G7joLMjgBcpXQOUj5hYrZskj9g8kc34H19yPZZICj2znyUpNvX6DkRSe8A2udA
rp93+FxEEUDFG8t/LPtnVvaKQ1sOFa0YajenCrgGwqrz5De5Z3bbpzmu8+ROJOV3
5JyE+UD7xlGFrzrq2X1Blrm3BrNWz77mPqjDair4Jpvz/Ev9jnL3dPLK1XBWVMXb
m+JyHi7rFIS6cw==
-----END CERTIFICATE-----
Generated at Wed May 14 12:25:52 2025 by rpki-client