Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
File: cc2ljxUk2CM2224M8qKf-vLaifg.mft (raw, json)
Hash identifier: WHC5VRqknBbGKpDYODz6l+OJQF3r3WWy+Om/PALWkzU=
Subject key identifier: DA:AA:8F:7D:7B:33:56:8E:58:0D:9B:A7:EA:F6:A2:83:56:09:11:E9
Authority key identifier: 71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
Certificate issuer: /CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Certificate serial: 0196AE0DB0064CF0AB6B2083061256705D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
Manifest number: 0D47
Signing time: Thu 08 May 2025 04:00:54 +0000
Manifest this update: Thu 08 May 2025 04:00:54 +0000
Manifest next update: Fri 09 May 2025 04:00:54 +0000
Files and hashes: 1: cc2ljxUk2CM2224M8qKf-vLaifg.crl (hash: aGxTGRhmJUSSRCqKdVXXS//2ERRyc2bDpT/DxRfVRio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:b0:06:4c:f0:ab:6b:20:83:06:12:56:70:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71cda58f1524d82336db6e0cf2a29ffaf2da89f8
Validity
Not Before: May 8 04:00:54 2025 GMT
Not After : May 9 04:00:54 2025 GMT
Subject: CN=daaa8f7d7b33568e580d9ba7eaf6a283560911e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:76:71:a4:92:40:c6:55:b6:75:89:e5:99:
f9:04:bb:36:17:74:d0:9c:32:bd:0c:d2:43:a9:8c:
91:27:97:0e:9c:67:7f:12:b6:b6:f7:c6:20:13:92:
04:e7:28:ff:30:2d:f1:ad:52:1c:86:7b:cd:18:75:
ec:23:11:7b:14:a4:94:64:e2:13:04:01:15:29:f3:
2d:95:c9:b0:0f:02:f2:59:7f:6d:fb:83:df:57:7d:
85:1e:c5:0b:54:3a:f5:57:d9:19:51:44:ed:ac:9e:
e2:97:ce:40:bd:a5:70:66:8f:2b:22:4c:92:06:3f:
82:a6:55:08:e7:cf:fc:6a:ea:eb:f9:c4:99:e7:bd:
85:6c:3f:9c:e7:e7:03:de:8b:cd:2c:55:c4:9b:a6:
e2:c0:ea:40:db:d8:5e:a4:03:d4:84:62:13:ef:e0:
89:25:fc:ea:14:e7:eb:02:dc:02:63:7c:ee:0d:0a:
6f:11:57:e9:0a:30:f1:eb:49:e0:d9:57:18:3e:7d:
59:9a:62:71:60:29:3c:4f:cd:61:88:e3:df:35:18:
69:46:84:13:ab:ee:cf:e1:2f:34:1a:52:8d:9f:b2:
27:72:21:23:99:bc:27:d9:39:55:05:2c:a8:b3:dc:
e2:32:90:b2:ec:02:ae:f5:97:62:c5:75:65:6d:f8:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AA:8F:7D:7B:33:56:8E:58:0D:9B:A7:EA:F6:A2:83:56:09:11:E9
X509v3 Authority Key Identifier:
keyid:71:CD:A5:8F:15:24:D8:23:36:DB:6E:0C:F2:A2:9F:FA:F2:DA:89:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc2ljxUk2CM2224M8qKf-vLaifg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a35540-aa58-4a3c-ab45-bc2d17fe8beb/1/cc2ljxUk2CM2224M8qKf-vLaifg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c4:08:e0:04:c6:18:2a:55:df:f9:62:b3:78:7d:71:b1:32:
9f:5f:aa:e1:28:37:e2:fb:15:0b:3e:eb:80:33:e5:b4:b1:30:
b1:72:42:9d:ff:14:b7:2e:5c:45:bb:ca:56:c7:f7:87:e7:fc:
36:cd:27:fe:5d:af:fa:6f:0a:ee:a9:6a:8a:7e:8d:77:58:75:
f0:3f:6b:df:1b:29:4d:ab:0c:89:5a:7c:2e:7a:49:7b:a2:9d:
97:ed:33:ce:76:e0:8f:24:6f:41:5a:7d:29:92:6f:cf:8d:93:
d3:bc:73:62:72:64:c0:03:a0:9b:e0:71:6f:a9:03:60:f1:cc:
da:4b:32:44:a1:af:22:5b:0c:3e:ea:a0:13:ef:5d:72:cf:63:
f0:03:ce:1c:e5:29:cf:bc:b3:f8:97:28:7f:5a:6a:6a:63:15:
35:4b:c2:e9:0b:54:71:b7:27:75:f7:89:9e:b6:dd:a6:62:48:
84:5a:cf:07:bb:18:3f:8d:62:27:9e:eb:83:44:bf:a1:b9:2a:
3e:ff:6b:ef:a2:d0:e6:11:ab:11:f5:ae:a7:60:ce:96:24:e1:
e1:96:e3:5b:96:22:ee:62:42:39:da:db:f4:f2:c9:fa:25:d8:
0e:a4:35:51:87:f0:fa:21:2e:a7:c3:61:08:98:dc:56:8f:64:
95:f9:86:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZauDbAGTPCrayCDBhJWcF1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxY2RhNThmMTUyNGQ4MjMzNmRiNmUwY2YyYTI5ZmZhZjJk
YTg5ZjgwHhcNMjUwNTA4MDQwMDU0WhcNMjUwNTA5MDQwMDU0WjAzMTEwLwYDVQQD
EyhkYWFhOGY3ZDdiMzM1NjhlNTgwZDliYTdlYWY2YTI4MzU2MDkxMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74V2caSSQMZVtnWJ5Zn5BLs2F3TQ
nDK9DNJDqYyRJ5cOnGd/Era298YgE5IE5yj/MC3xrVIchnvNGHXsIxF7FKSUZOIT
BAEVKfMtlcmwDwLyWX9t+4PfV32FHsULVDr1V9kZUUTtrJ7il85AvaVwZo8rIkyS
Bj+CplUI58/8aurr+cSZ572FbD+c5+cD3ovNLFXEm6biwOpA29hepAPUhGIT7+CJ
JfzqFOfrAtwCY3zuDQpvEVfpCjDx60ng2VcYPn1ZmmJxYCk8T81hiOPfNRhpRoQT
q+7P4S80GlKNn7InciEjmbwn2TlVBSyos9ziMpCy7AKu9ZdixXVlbfhiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqqj317M1aOWA2bp+r2ooNWCRHpMB8GA1UdIwQY
MBaAFHHNpY8VJNgjNttuDPKin/ry2on4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzU1NDAtYWE1OC00YTNjLWFiNDUt
YmMyZDE3ZmU4YmViLzEvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzU1NDAtYWE1OC00YTNjLWFiNDUtYmMyZDE3ZmU4YmVi
LzEvY2MybGp4VWsyQ00yMjI0TThxS2YtdkxhaWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMQI4ATG
GCpV3/lis3h9cbEyn1+q4Sg34vsVCz7rgDPltLEwsXJCnf8Uty5cRbvKVsf3h+f8
Ns0n/l2v+m8K7qlqin6Nd1h18D9r3xspTasMiVp8LnpJe6Kdl+0zznbgjyRvQVp9
KZJvz42T07xzYnJkwAOgm+Bxb6kDYPHM2ksyRKGvIlsMPuqgE+9dcs9j8APOHOUp
z7yz+Jcof1pqamMVNUvC6QtUcbcndfeJnrbdpmJIhFrPB7sYP41iJ57rg0S/obkq
Pv9r76LQ5hGrEfWup2DOliTh4ZbjW5Yi7mJCOdrb9PLJ+iXYDqQ1UYfw+iEup8Nh
CJjcVo9klfmGsQ==
-----END CERTIFICATE-----
Generated at Thu May 8 06:43:37 2025 by rpki-client