Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: DazynQzIZERXt/1Qa9x4IFuo+ukTMxKgk4yRGdfplWo=
Subject key identifier: 70:1F:A8:2A:3F:17:36:DC:D5:CF:33:5E:D6:15:AD:3C:AE:C9:53:08
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 0196B7B5D28C11F8BC1F043FC39FD313EE11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 091D
Signing time: Sat 10 May 2025 01:01:08 +0000
Manifest this update: Sat 10 May 2025 01:01:08 +0000
Manifest next update: Sun 11 May 2025 01:01:08 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: qDTqAqfx5qREc666uNUcg1wkLKqS4mQ2UTl3ZCXO/j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:d2:8c:11:f8:bc:1f:04:3f:c3:9f:d3:13:ee:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: May 10 01:01:08 2025 GMT
Not After : May 11 01:01:08 2025 GMT
Subject: CN=701fa82a3f1736dcd5cf335ed615ad3caec95308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:62:cf:48:81:83:1d:eb:3d:66:36:c3:e2:
ad:51:65:b1:eb:73:7b:90:47:fa:b1:6f:49:79:1f:
d3:96:d2:33:fb:73:cc:7b:42:11:6f:16:c7:70:ea:
35:17:c5:3b:06:70:de:08:73:ed:0d:a6:2a:ad:c2:
0e:bd:e6:2a:d1:eb:e0:af:c2:99:a5:a4:b8:21:ad:
fd:c8:b9:e3:e1:70:2b:7f:6b:ae:f8:70:fe:70:38:
4e:8a:25:6a:25:03:36:fc:5c:8c:50:6e:83:f9:66:
45:ad:ae:91:56:59:31:30:5b:55:57:4f:cc:8c:0b:
e4:71:fa:d5:da:81:a8:9f:b4:5e:41:a6:9c:5f:9f:
69:5f:bc:71:d4:8a:e5:a6:e3:dc:d3:3e:48:9a:39:
8f:5a:b8:c2:91:00:44:c6:8c:b1:a5:c8:a5:dd:f0:
9b:39:47:87:d7:78:32:1f:ba:ff:13:ba:74:58:fe:
32:de:14:f8:da:92:df:d9:ec:ad:16:f5:3c:1a:6e:
bb:02:f2:9d:67:1f:70:d0:62:bb:27:e8:d6:f7:a6:
f6:2c:f2:48:e7:b2:c9:50:d2:90:11:db:a2:46:20:
e2:47:7e:a9:e1:e3:2c:56:93:a0:9b:2f:0e:6f:41:
57:7a:59:5f:45:93:ca:f5:af:5b:75:6c:8d:ca:95:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1F:A8:2A:3F:17:36:DC:D5:CF:33:5E:D6:15:AD:3C:AE:C9:53:08
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:66:9c:fe:c1:76:0b:cd:18:42:56:32:ce:1c:fd:ed:87:ae:
9f:d3:af:54:15:32:11:00:55:19:2d:23:ef:fb:ce:17:a3:1e:
2b:4b:68:ef:68:b6:22:5e:06:9a:b9:15:85:3e:63:3e:b2:4c:
07:ec:8f:1c:c6:f5:ad:98:16:62:3e:80:c6:72:37:3c:d1:42:
50:28:0b:98:e8:69:90:be:91:42:96:f9:32:5a:15:00:4c:f1:
6f:62:e0:17:6e:45:f9:57:23:95:8e:d5:0e:87:48:be:ae:ea:
53:8b:3b:bd:46:91:e6:4c:af:93:d9:b9:3c:d6:bf:9a:2f:4f:
ea:b3:16:77:25:c1:c4:41:6c:e6:bc:15:2b:6c:85:24:2c:e7:
94:ad:5e:95:ef:a1:55:80:c3:84:ff:98:0d:50:95:8c:66:18:
a7:ff:64:49:97:07:39:6a:8c:24:fc:d0:41:c6:96:88:f1:1a:
25:ae:ef:96:47:1e:e0:47:a0:f1:3e:8c:72:63:be:8b:06:21:
77:14:64:63:74:61:bf:43:20:f5:cd:4b:25:5a:28:fb:e6:bc:
7a:ce:62:fa:da:df:62:af:5d:57:21:dd:7c:05:5f:0e:e3:a8:
10:98:da:5b:30:71:3b:e0:a2:34:58:63:7e:61:e4:6c:ab:c2:
49:e5:a9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tdKMEfi8HwQ/w5/TE+4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMWQ3ODkyN2FiOTljOWU3MzhhZmU5YjAxNjIxNGE0ODgw
YWQxNTQwHhcNMjUwNTEwMDEwMTA4WhcNMjUwNTExMDEwMTA4WjAzMTEwLwYDVQQD
Eyg3MDFmYTgyYTNmMTczNmRjZDVjZjMzNWVkNjE1YWQzY2FlYzk1MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oBiz0iBgx3rPWY2w+KtUWWx63N7
kEf6sW9JeR/TltIz+3PMe0IRbxbHcOo1F8U7BnDeCHPtDaYqrcIOveYq0evgr8KZ
paS4Ia39yLnj4XArf2uu+HD+cDhOiiVqJQM2/FyMUG6D+WZFra6RVlkxMFtVV0/M
jAvkcfrV2oGon7ReQaacX59pX7xx1IrlpuPc0z5ImjmPWrjCkQBExoyxpcil3fCb
OUeH13gyH7r/E7p0WP4y3hT42pLf2eytFvU8Gm67AvKdZx9w0GK7J+jW96b2LPJI
57LJUNKQEduiRiDiR36p4eMsVpOgmy8Ob0FXellfRZPK9a9bdWyNypVWMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAfqCo/Fzbc1c8zXtYVrTyuyVMIMB8GA1UdIwQY
MBaAFOAdeJJ6uZyec4r+mwFiFKSICtFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQt
NzA4OTBlNTRkYThiLzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iOGZiYzUtNWE4Yi00YTJiLTk0MTQtNzA4OTBlNTRkYThi
LzEvNEIxNGtucTVuSjV6aXY2YkFXSVVwSWdLMFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzWac/sF2
C80YQlYyzhz97Yeun9OvVBUyEQBVGS0j7/vOF6MeK0to72i2Il4GmrkVhT5jPrJM
B+yPHMb1rZgWYj6AxnI3PNFCUCgLmOhpkL6RQpb5MloVAEzxb2LgF25F+VcjlY7V
DodIvq7qU4s7vUaR5kyvk9m5PNa/mi9P6rMWdyXBxEFs5rwVK2yFJCznlK1ele+h
VYDDhP+YDVCVjGYYp/9kSZcHOWqMJPzQQcaWiPEaJa7vlkce4Eeg8T6McmO+iwYh
dxRkY3Rhv0Mg9c1LJVoo++a8es5i+trfYq9dVyHdfAVfDuOoEJjaWzBxO+CiNFhj
fmHkbKvCSeWpcg==
-----END CERTIFICATE-----
Generated at Sat May 10 10:13:23 2025 by rpki-client