Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
File: tx6uq1CDkaFflcQpE_oAWhbCPA8.mft (raw, json)
Hash identifier: PjaNmxtpRUWI7B8YB7GXE3Jrgx+wBkycnIUL0YdZw/Q=
Subject key identifier: BE:2E:21:CF:B2:10:58:4D:5A:62:B6:0D:5F:31:1A:69:FD:93:3C:F4
Authority key identifier: B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
Certificate issuer: /CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Certificate serial: 0196C729206DC529F8F791B8C71BFB2A97DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
Manifest number: 0D3C
Signing time: Tue 13 May 2025 01:01:23 +0000
Manifest this update: Tue 13 May 2025 01:01:23 +0000
Manifest next update: Wed 14 May 2025 01:01:23 +0000
Files and hashes: 1: tx6uq1CDkaFflcQpE_oAWhbCPA8.crl (hash: BKetf9rcjoy2I2e/1b8cgYmkF9/uOkpjzYHEMeGoZ6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:20:6d:c5:29:f8:f7:91:b8:c7:1b:fb:2a:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71eaeab508391a15f95c42913fa005a16c23c0f
Validity
Not Before: May 13 01:01:23 2025 GMT
Not After : May 14 01:01:23 2025 GMT
Subject: CN=be2e21cfb210584d5a62b60d5f311a69fd933cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:4f:df:51:f8:eb:dc:b0:11:08:5a:5b:76:
64:f0:47:53:ba:4b:33:fb:ac:a9:44:86:99:8d:2b:
60:8d:bd:47:4a:45:ac:d8:59:ff:43:0c:30:ac:95:
3f:cd:cc:0d:a9:0e:20:b7:57:27:79:31:b7:55:1e:
c5:d8:39:3f:19:c8:d1:2a:d8:70:d6:23:1f:5a:75:
f6:2b:51:b6:98:19:3c:99:d0:67:d0:36:2a:d1:f0:
7d:af:9f:4b:b0:b9:59:de:0d:3a:10:97:a0:27:5f:
a2:e8:d9:cd:e5:f6:80:09:64:c9:9b:6e:74:5e:4b:
ac:ca:e7:59:d3:5f:a7:77:d3:c4:9a:93:b7:4c:2c:
49:28:a2:ad:c3:40:ad:9f:87:2f:f4:b8:ba:dd:da:
d2:f2:33:c8:0f:0f:db:54:c5:c0:88:9d:c7:c8:a1:
03:2a:2e:03:46:f9:eb:e1:3f:46:0d:db:a8:e5:c9:
01:6e:d0:c2:06:f2:6d:34:20:df:6c:be:b5:cb:8e:
a6:d0:04:f4:5d:aa:9f:4e:c4:8e:0f:63:0b:d0:09:
39:99:17:63:9b:3e:07:86:89:58:b5:6c:b7:41:be:
23:fd:04:66:91:71:19:23:cd:dd:02:0e:0e:4a:32:
f6:f4:b7:1f:07:61:4d:71:ad:c2:f0:2b:27:38:3b:
a1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:21:CF:B2:10:58:4D:5A:62:B6:0D:5F:31:1A:69:FD:93:3C:F4
X509v3 Authority Key Identifier:
keyid:B7:1E:AE:AB:50:83:91:A1:5F:95:C4:29:13:FA:00:5A:16:C2:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx6uq1CDkaFflcQpE_oAWhbCPA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/4c876e-765a-44ff-ac98-bee4d6c0b01e/1/tx6uq1CDkaFflcQpE_oAWhbCPA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a4:7d:5d:1a:d5:a0:e5:25:64:22:4a:13:c5:b7:0e:1d:97:
5d:60:26:71:3c:12:50:33:88:04:7f:3d:18:b1:44:86:5b:75:
81:29:d9:e8:77:af:4f:e6:d7:b3:49:18:36:5e:bb:d1:e0:8e:
29:5e:c2:8f:1b:29:7f:e8:68:1a:aa:56:a2:71:f5:9e:6d:79:
9c:ce:0c:03:0f:0a:8b:e4:ff:a5:c7:e8:5d:e1:2f:c3:93:40:
aa:72:57:14:65:89:90:32:0c:07:d2:76:34:b0:fb:f3:f8:f0:
5c:5e:20:70:84:d6:e8:18:b6:2a:50:db:6c:37:81:3d:85:ef:
bc:2a:5b:15:09:85:40:df:1d:25:f8:5d:f0:c8:59:72:51:22:
bf:3d:44:9b:45:bd:ad:df:d7:b4:80:22:cf:7e:30:9e:6d:b8:
62:a1:5f:fb:39:37:77:bb:8d:7b:67:60:6c:e5:5a:99:f0:19:
07:51:6f:61:ad:3c:06:46:da:4e:f8:d2:cd:f1:77:f9:0b:80:
65:27:5e:70:8b:87:a6:20:9b:c4:d9:41:09:e1:1b:bd:28:e7:
d2:e8:37:ac:e3:40:00:77:02:3e:6f:6b:64:08:d3:0f:92:cb:
02:5c:ec:a7:47:2a:91:f2:5d:9d:79:e1:ef:e3:0b:b3:c9:63:
60:ee:7c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKSBtxSn495G4xxv7KpfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MWVhZWFiNTA4MzkxYTE1Zjk1YzQyOTEzZmEwMDVhMTZj
MjNjMGYwHhcNMjUwNTEzMDEwMTIzWhcNMjUwNTE0MDEwMTIzWjAzMTEwLwYDVQQD
EyhiZTJlMjFjZmIyMTA1ODRkNWE2MmI2MGQ1ZjMxMWE2OWZkOTMzY2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rFP31H469ywEQhaW3Zk8EdTuksz
+6ypRIaZjStgjb1HSkWs2Fn/QwwwrJU/zcwNqQ4gt1cneTG3VR7F2Dk/GcjRKthw
1iMfWnX2K1G2mBk8mdBn0DYq0fB9r59LsLlZ3g06EJegJ1+i6NnN5faACWTJm250
XkusyudZ01+nd9PEmpO3TCxJKKKtw0Ctn4cv9Li63drS8jPIDw/bVMXAiJ3HyKED
Ki4DRvnr4T9GDduo5ckBbtDCBvJtNCDfbL61y46m0AT0XaqfTsSOD2ML0Ak5mRdj
mz4HholYtWy3Qb4j/QRmkXEZI83dAg4OSjL29LcfB2FNca3C8CsnODuhbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4uIc+yEFhNWmK2DV8xGmn9kzz0MB8GA1UdIwQY
MBaAFLcerqtQg5GhX5XEKRP6AFoWwjwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgt
YmVlNGQ2YzBiMDFlLzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80Yzg3NmUtNzY1YS00NGZmLWFjOTgtYmVlNGQ2YzBiMDFl
LzEvdHg2dXExQ0RrYUZmbGNRcEVfb0FXaGJDUEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKR9XRrV
oOUlZCJKE8W3Dh2XXWAmcTwSUDOIBH89GLFEhlt1gSnZ6HevT+bXs0kYNl670eCO
KV7Cjxspf+hoGqpWonH1nm15nM4MAw8Ki+T/pcfoXeEvw5NAqnJXFGWJkDIMB9J2
NLD78/jwXF4gcITW6Bi2KlDbbDeBPYXvvCpbFQmFQN8dJfhd8MhZclEivz1Em0W9
rd/XtIAiz34wnm24YqFf+zk3d7uNe2dgbOVamfAZB1FvYa08BkbaTvjSzfF3+QuA
ZSdecIuHpiCbxNlBCeEbvSjn0ug3rONAAHcCPm9rZAjTD5LLAlzsp0cqkfJdnXnh
7+MLs8ljYO582A==
-----END CERTIFICATE-----
Generated at Tue May 13 11:12:49 2025 by rpki-client