Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: xaYKc19eoSDBUzcSfaxY4EpqfsJCi+R3nBAhlKSAzyc=
Subject key identifier: DA:E8:F6:80:2D:B3:C3:F5:47:F0:67:26:20:69:51:A4:BC:74:AB:42
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 0196BE5C8C26BFE9CE5895240EC47DE68C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 1502
Signing time: Sun 11 May 2025 08:00:58 +0000
Manifest this update: Sun 11 May 2025 08:00:58 +0000
Manifest next update: Mon 12 May 2025 08:00:58 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: kY/aGCV+uEPXJW9VDtAWDM4uXfKJyu7GsNavoduol4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:8c:26:bf:e9:ce:58:95:24:0e:c4:7d:e6:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: May 11 08:00:58 2025 GMT
Not After : May 12 08:00:58 2025 GMT
Subject: CN=dae8f6802db3c3f547f06726206951a4bc74ab42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:d0:53:df:1f:15:eb:1d:d4:a7:ed:df:0d:
4b:37:b0:09:a8:22:b3:79:c6:a9:f4:c9:ae:67:b6:
4b:5d:22:0a:94:2e:8e:98:6a:ad:c7:10:f2:5d:e5:
b4:7b:25:41:99:84:5a:a8:ec:e5:06:cc:52:28:67:
fc:a8:bd:fa:51:8b:b1:6e:ed:87:51:41:a5:d1:eb:
18:f5:08:e3:21:90:f8:df:3b:17:62:f8:dc:2d:a9:
e9:4a:cc:55:e6:3d:8d:e5:c9:d8:21:fb:54:25:c0:
2e:df:38:8e:1a:c6:9e:6c:82:35:55:73:6a:e1:0d:
1f:d6:20:c4:74:47:32:61:77:11:5b:6e:a1:74:32:
9e:13:0d:f7:b1:d5:f1:22:81:22:76:dc:be:99:01:
4a:c1:b4:98:b4:2e:6d:09:2a:79:96:57:55:55:70:
df:9c:17:9b:89:50:b9:da:f7:b9:01:18:1d:31:d8:
00:aa:b2:4e:8f:2e:96:dc:24:d6:89:b0:dd:95:b2:
2b:69:9a:30:30:a4:36:6b:c4:79:e3:1b:ad:ab:aa:
d2:fe:29:f7:69:87:2d:3f:80:54:50:c2:44:ab:c0:
39:19:f8:73:a8:c5:48:fc:a4:87:d3:90:df:ec:7f:
e0:cb:6e:b1:e2:41:83:2a:6b:20:4e:7d:96:b0:7a:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:F6:80:2D:B3:C3:F5:47:F0:67:26:20:69:51:A4:BC:74:AB:42
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:dc:d6:2b:10:b6:3f:23:04:33:6f:db:a4:2b:44:92:cd:
ab:5c:5d:49:03:7a:bd:af:d3:4c:bd:30:7e:94:bf:10:54:57:
0a:e3:36:85:f4:86:1f:14:99:b9:90:c3:1b:c8:06:28:a8:dc:
41:80:dc:89:b8:f3:c2:8f:0f:38:9b:40:00:78:61:fa:71:c7:
b9:a2:47:a9:8d:26:c2:eb:0b:30:98:6c:eb:dd:85:e9:3d:18:
50:ab:6a:a8:59:2e:86:e0:a0:6e:9e:1a:26:02:e4:c3:14:96:
c9:20:cf:50:65:fb:d3:6c:56:fe:6f:b9:b0:60:04:f4:55:cb:
0e:5a:a8:a3:3f:23:02:ed:25:50:67:be:24:4e:3d:87:59:04:
d7:0e:3f:cd:b5:e2:42:2d:77:82:ad:08:30:dd:d6:92:4a:96:
6a:87:6a:6a:9c:bb:1f:7c:a8:93:e0:b1:b1:86:0d:b7:59:5c:
a9:f3:67:d0:43:2d:5d:a1:6a:db:51:e4:7b:7a:39:a4:9b:e2:
9c:9f:72:0d:f5:1b:51:0d:92:bb:e0:45:d3:90:6b:37:d4:ca:
c0:14:9c:c9:0d:75:38:3d:f4:6c:94:91:d2:aa:0f:17:93:7e:
62:83:23:40:e7:56:08:bb:47:a4:a5:ed:ef:69:f1:8f:59:6a:
60:f8:9d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XIwmv+nOWJUkDsR95oxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYmU1NTRjYzNhNDMzM2NkNmRhZTQ0MDc2OGU5YzNiODMz
NDRiOGUwHhcNMjUwNTExMDgwMDU4WhcNMjUwNTEyMDgwMDU4WjAzMTEwLwYDVQQD
EyhkYWU4ZjY4MDJkYjNjM2Y1NDdmMDY3MjYyMDY5NTFhNGJjNzRhYjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLTQU98fFesd1Kft3w1LN7AJqCKz
ecap9MmuZ7ZLXSIKlC6OmGqtxxDyXeW0eyVBmYRaqOzlBsxSKGf8qL36UYuxbu2H
UUGl0esY9QjjIZD43zsXYvjcLanpSsxV5j2N5cnYIftUJcAu3ziOGsaebII1VXNq
4Q0f1iDEdEcyYXcRW26hdDKeEw33sdXxIoEidty+mQFKwbSYtC5tCSp5lldVVXDf
nBebiVC52ve5ARgdMdgAqrJOjy6W3CTWibDdlbIraZowMKQ2a8R54xutq6rS/in3
aYctP4BUUMJEq8A5GfhzqMVI/KSH05Df7H/gy26x4kGDKmsgTn2WsHr3VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNro9oAts8P1R/BnJiBpUaS8dKtCMB8GA1UdIwQY
MBaAFI++VUzDpDM81trkQHaOnDuDNEuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajc1VlRNT2tNenpXMnVSQWRvNmNPNE0wUzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy84N2YxZGEtNjdmNC00MjU0LTk5NGUt
NGVhMWRlNzAyNTI4LzEvajc1VlRNT2tNenpXMnVSQWRvNmNPNE0wUzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy84N2YxZGEtNjdmNC00MjU0LTk5NGUtNGVhMWRlNzAyNTI4
LzEvajc1VlRNT2tNenpXMnVSQWRvNmNPNE0wUzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID/c1isQ
tj8jBDNv26QrRJLNq1xdSQN6va/TTL0wfpS/EFRXCuM2hfSGHxSZuZDDG8gGKKjc
QYDcibjzwo8POJtAAHhh+nHHuaJHqY0mwusLMJhs692F6T0YUKtqqFkuhuCgbp4a
JgLkwxSWySDPUGX702xW/m+5sGAE9FXLDlqooz8jAu0lUGe+JE49h1kE1w4/zbXi
Qi13gq0IMN3WkkqWaodqapy7H3yok+CxsYYNt1lcqfNn0EMtXaFq21Hke3o5pJvi
nJ9yDfUbUQ2Su+BF05BrN9TKwBScyQ11OD30bJSR0qoPF5N+YoMjQOdWCLtHpKXt
72nxj1lqYPid2A==
-----END CERTIFICATE-----
Generated at Sun May 11 12:22:37 2025 by rpki-client