Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: v6AXuUSO9PIl0MHPp+jtwOH49B1GdGMWqNVAhQQf/TQ=
Subject key identifier: ED:F9:70:AD:CC:45:3F:E9:14:32:56:A3:F9:BF:46:00:78:74:2E:E9
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 0196B33397A2049BA26730ED711980E96858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 04:00:24 +0000
Manifest this update: Fri 09 May 2025 04:00:24 +0000
Manifest next update: Sat 10 May 2025 04:00:24 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: sLiGP4AJx4GgaH1cAvMonxm77jmfBsIecJF05FVJx3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:97:a2:04:9b:a2:67:30:ed:71:19:80:e9:68:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: May 9 04:00:24 2025 GMT
Not After : May 10 04:00:24 2025 GMT
Subject: CN=edf970adcc453fe9143256a3f9bf460078742ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:8a:6b:24:32:97:74:c0:e8:61:42:82:44:
80:0f:12:bd:b3:b4:79:00:53:d5:c6:e4:d3:aa:07:
b6:d2:54:92:80:30:18:b9:b3:8f:ae:39:a2:9f:1d:
61:a0:d8:af:c5:aa:86:dd:b7:88:cd:9a:0f:5f:63:
0b:a6:15:b9:7c:cf:8b:7d:46:d7:d4:42:b0:89:c4:
bf:37:f7:33:37:3f:91:2a:58:9b:c9:d9:95:ad:1c:
01:4b:d2:52:86:57:47:ab:9e:db:1e:9a:3c:a7:6b:
24:23:3c:12:a7:a6:56:cb:e2:73:b3:91:82:4c:47:
63:4d:28:5d:99:be:63:bd:9c:d8:b9:81:5f:87:d8:
ce:10:e8:3c:43:8c:23:c5:5f:68:ab:37:da:e7:59:
49:d9:a0:c3:ab:8a:c0:45:f3:7f:11:12:a5:9d:99:
8f:ba:af:65:12:04:a3:1f:ce:87:98:18:37:47:72:
0a:b8:bf:55:2e:dd:90:c1:fe:22:e5:27:e6:a4:66:
cc:58:c7:8f:0b:d3:08:73:9c:23:94:d7:21:62:1d:
64:72:a6:21:48:0c:98:23:13:4c:08:35:d7:68:d8:
bb:66:c6:9c:a9:5a:29:14:dd:1e:4f:a3:1b:77:01:
44:11:b6:10:25:8d:cb:14:47:21:67:25:ff:9b:15:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F9:70:AD:CC:45:3F:E9:14:32:56:A3:F9:BF:46:00:78:74:2E:E9
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:91:bc:dc:e3:f2:8f:1a:a6:35:a3:e2:3f:fc:48:5c:0d:
c8:6d:b2:44:0c:15:19:2e:d8:d2:c4:48:ed:e2:27:09:72:b0:
a5:83:2c:a8:62:47:1e:b6:2e:28:ac:4b:0b:52:38:ca:eb:8f:
59:3a:14:06:25:3a:6c:72:0a:52:b5:e6:fc:eb:9b:80:34:6c:
ef:e5:3b:8d:92:cc:05:52:0c:d6:09:46:c0:3d:3c:fe:41:dd:
0b:3c:9f:6c:ff:71:76:14:77:06:41:eb:37:42:18:3e:d5:88:
f8:cb:a8:32:cd:b2:95:1e:c6:86:da:a0:c0:fa:bb:07:5e:48:
aa:23:3b:48:ab:e1:39:46:1b:06:c5:96:28:0b:15:a3:62:16:
93:7f:d2:7e:0b:04:8b:6a:eb:b9:55:08:05:b9:42:9a:08:7b:
80:4c:9f:c7:ee:13:b3:3c:61:a4:4c:e0:a1:c8:1a:82:47:73:
e1:c8:f4:dd:20:49:ef:38:75:6c:97:9c:ea:80:42:88:38:e0:
ad:63:d9:43:50:1f:1a:48:4b:c8:ee:da:37:dd:ab:22:f3:b4:
50:e8:ec:ac:55:09:3b:8b:55:c6:b4:0c:8f:99:4c:b2:16:a2:
9d:b2:cd:98:a3:f8:88:33:50:96:0c:45:93:26:bb:ba:13:3d:
ca:f8:f1:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM5eiBJuiZzDtcRmA6WhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDRhOTZmZTFlZDAyOGQ1OTEyZDc3YTUwMGIwOTQ3OGJk
MTgzMjIwHhcNMjUwNTA5MDQwMDI0WhcNMjUwNTEwMDQwMDI0WjAzMTEwLwYDVQQD
EyhlZGY5NzBhZGNjNDUzZmU5MTQzMjU2YTNmOWJmNDYwMDc4NzQyZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3KKayQyl3TA6GFCgkSADxK9s7R5
AFPVxuTTqge20lSSgDAYubOPrjminx1hoNivxaqG3beIzZoPX2MLphW5fM+LfUbX
1EKwicS/N/czNz+RKlibydmVrRwBS9JShldHq57bHpo8p2skIzwSp6ZWy+Jzs5GC
TEdjTShdmb5jvZzYuYFfh9jOEOg8Q4wjxV9oqzfa51lJ2aDDq4rARfN/ERKlnZmP
uq9lEgSjH86HmBg3R3IKuL9VLt2Qwf4i5SfmpGbMWMePC9MIc5wjlNchYh1kcqYh
SAyYIxNMCDXXaNi7ZsacqVopFN0eT6MbdwFEEbYQJY3LFEchZyX/mxX2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO35cK3MRT/pFDJWo/m/RgB4dC7pMB8GA1UdIwQY
MBaAFP7UqW/h7QKNWRLXelALCUeL0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUt
ODg5OWQxMDU4YjY0LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUtODg5OWQxMDU4YjY0
LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozmRvNzj
8o8apjWj4j/8SFwNyG2yRAwVGS7Y0sRI7eInCXKwpYMsqGJHHrYuKKxLC1I4yuuP
WToUBiU6bHIKUrXm/OubgDRs7+U7jZLMBVIM1glGwD08/kHdCzyfbP9xdhR3BkHr
N0IYPtWI+MuoMs2ylR7GhtqgwPq7B15IqiM7SKvhOUYbBsWWKAsVo2IWk3/SfgsE
i2rruVUIBblCmgh7gEyfx+4TszxhpEzgocgagkdz4cj03SBJ7zh1bJec6oBCiDjg
rWPZQ1AfGkhLyO7aN92rIvO0UOjsrFUJO4tVxrQMj5lMshainbLNmKP4iDNQlgxF
kya7uhM9yvjxBw==
-----END CERTIFICATE-----
Generated at Fri May 9 10:12:56 2025 by rpki-client