Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: Z/eTfTGemotP3bYHD1aucbRIZkIn7VPgiXmnTyQpxTo=
Subject key identifier: 52:30:B2:13:AB:70:60:DA:A9:B1:83:FD:C5:FE:DF:5A:A8:0B:33:A9
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 0196AF56B48212EB7439F84E8D49AB14CB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 10:00:17 +0000
Manifest this update: Thu 08 May 2025 10:00:17 +0000
Manifest next update: Fri 09 May 2025 10:00:17 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: zRAPMFT120hwCUTL8QJl6U4cpJXpqHuWadqVONshATY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:b4:82:12:eb:74:39:f8:4e:8d:49:ab:14:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: May 8 10:00:17 2025 GMT
Not After : May 9 10:00:17 2025 GMT
Subject: CN=5230b213ab7060daa9b183fdc5fedf5aa80b33a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:74:86:c9:9c:65:68:04:14:cb:4a:2e:92:
6d:81:e3:0d:dc:d1:db:09:9a:b4:70:f1:71:c6:ef:
cb:ad:3a:9f:ff:d6:78:7f:d0:1a:ac:0d:39:e1:c9:
9f:7d:80:e9:2b:da:fd:fa:ea:f5:41:30:c8:9f:52:
18:1d:b9:9f:09:f8:bf:9b:d1:b8:64:63:3a:17:ea:
46:d3:39:39:cf:f3:ef:6c:32:e8:c9:ab:0a:f1:de:
65:6b:e6:14:c9:04:a0:86:36:02:40:8c:f4:15:21:
f3:74:f5:85:ee:93:d8:1e:3d:ca:0f:9b:3e:3f:f5:
1f:69:72:ee:f9:dd:f4:f8:a6:4f:fb:54:68:6c:f6:
c1:43:ea:ed:c3:a4:c1:e3:62:37:6b:12:e5:2a:28:
21:2c:67:c9:f9:ab:42:ec:a7:1b:3b:40:29:73:bd:
56:a6:32:45:67:b1:a6:5b:68:da:ae:0a:46:1b:04:
74:28:9c:1d:e3:e2:3e:8e:83:74:5f:e8:d4:2f:36:
af:64:e8:a5:d7:fa:fd:49:d4:c3:27:ae:a8:ac:23:
3f:3e:0f:dd:72:57:33:4a:91:69:3f:a9:2f:26:38:
f7:8f:38:a8:a5:86:42:b6:ed:b2:68:65:c9:e2:67:
d7:0f:81:8f:1d:84:e1:3c:f8:0b:94:a7:30:ec:87:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:30:B2:13:AB:70:60:DA:A9:B1:83:FD:C5:FE:DF:5A:A8:0B:33:A9
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:06:ed:3c:20:16:5c:58:3b:15:0a:de:1f:76:29:c6:6a:
89:00:eb:f6:60:c6:5b:2a:8d:e4:26:dc:a0:67:cf:c0:12:74:
65:17:13:46:65:29:9e:02:0d:b5:a2:bb:ba:38:30:af:ef:9d:
a1:d9:44:6a:94:cd:41:95:75:7c:8b:55:7c:cc:b8:fe:43:6c:
bb:80:fc:26:91:8b:68:a6:2c:0d:41:37:96:66:99:e0:92:c5:
31:c9:a6:1f:50:a2:a0:e3:db:e0:26:d6:89:8a:03:b8:de:15:
b5:5a:b0:0b:12:8c:26:0c:0a:25:5a:eb:76:4e:c4:62:05:14:
79:d4:7a:db:f6:9c:98:18:3c:00:be:50:ad:39:78:94:7b:ec:
a7:20:94:97:5b:6a:f9:a3:97:57:64:ef:7b:37:13:c7:b7:b1:
b0:fd:87:db:72:91:79:37:bb:3f:cc:ec:ba:83:17:9d:c7:ca:
55:7a:c5:93:08:1b:11:21:4a:df:7e:4c:bf:96:e4:e5:80:f7:
bc:05:2e:53:88:53:6b:06:80:14:7e:14:31:4e:8b:ca:fd:5b:
47:52:e5:12:ff:ba:b5:cd:42:27:5c:71:e8:46:db:2b:66:3e:
e6:79:2c:e4:53:10:31:96:a8:6d:31:46:e3:d3:58:b9:e6:71:
56:a4:cc:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavVrSCEut0OfhOjUmrFMtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjE4NThjZDM3ZmIzOGIyYWNmYTVjYjRlZjQzZTNjMzA4
ZDNkNjEwHhcNMjUwNTA4MTAwMDE3WhcNMjUwNTA5MTAwMDE3WjAzMTEwLwYDVQQD
Eyg1MjMwYjIxM2FiNzA2MGRhYTliMTgzZmRjNWZlZGY1YWE4MGIzM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rF0hsmcZWgEFMtKLpJtgeMN3NHb
CZq0cPFxxu/LrTqf/9Z4f9AarA054cmffYDpK9r9+ur1QTDIn1IYHbmfCfi/m9G4
ZGM6F+pG0zk5z/PvbDLoyasK8d5la+YUyQSghjYCQIz0FSHzdPWF7pPYHj3KD5s+
P/UfaXLu+d30+KZP+1RobPbBQ+rtw6TB42I3axLlKighLGfJ+atC7KcbO0Apc71W
pjJFZ7GmW2jargpGGwR0KJwd4+I+joN0X+jULzavZOil1/r9SdTDJ66orCM/Pg/d
clczSpFpP6kvJjj3jziopYZCtu2yaGXJ4mfXD4GPHYThPPgLlKcw7IdMQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIwshOrcGDaqbGD/cX+31qoCzOpMB8GA1UdIwQY
MBaAFInxhYzTf7OLKs+ly070PjwwjT1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMt
M2ZlNGY3Y2JhZGFiLzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zODNiNzAtZGJmMy00ZmYzLWIxNTMtM2ZlNGY3Y2JhZGFi
LzEvaWZHRmpOTl9zNHNxejZYTFR2US1QRENOUFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZW4G7Twg
FlxYOxUK3h92KcZqiQDr9mDGWyqN5CbcoGfPwBJ0ZRcTRmUpngINtaK7ujgwr++d
odlEapTNQZV1fItVfMy4/kNsu4D8JpGLaKYsDUE3lmaZ4JLFMcmmH1CioOPb4CbW
iYoDuN4VtVqwCxKMJgwKJVrrdk7EYgUUedR62/acmBg8AL5QrTl4lHvspyCUl1tq
+aOXV2TvezcTx7exsP2H23KReTe7P8zsuoMXncfKVXrFkwgbESFK335Mv5bk5YD3
vAUuU4hTawaAFH4UMU6Lyv1bR1LlEv+6tc1CJ1xx6EbbK2Y+5nks5FMQMZaobTFG
49NYueZxVqTMBQ==
-----END CERTIFICATE-----
Generated at Thu May 8 20:36:47 2025 by rpki-client