Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: 43aWRWOr4aWtG8p9SLaVP24UX6tOQa5aChkaW58MH3s=
Subject key identifier: 73:AF:06:37:C8:BA:61:BB:1F:24:E9:04:B2:B3:2A:BC:D7:B5:40:9D
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 0196BF6F2AE08E46B2112DCD6464F4C28A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0ADD
Signing time: Sun 11 May 2025 13:00:55 +0000
Manifest this update: Sun 11 May 2025 13:00:55 +0000
Manifest next update: Mon 12 May 2025 13:00:55 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: hX0dA1wkY4RAulerZIhoKyayrZM1lOU5pWCWFdQk40c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:2a:e0:8e:46:b2:11:2d:cd:64:64:f4:c2:8a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: May 11 13:00:55 2025 GMT
Not After : May 12 13:00:55 2025 GMT
Subject: CN=73af0637c8ba61bb1f24e904b2b32abcd7b5409d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:91:bd:aa:23:40:e4:74:b3:8c:d7:e6:b0:da:
d6:12:8a:80:7b:e6:85:8c:85:ef:dd:8f:70:72:91:
61:6b:52:ad:0e:dc:22:ce:18:ee:6e:a2:34:8b:36:
e1:55:2a:f4:9f:4c:c5:d6:33:f8:8f:0b:55:56:3c:
32:b2:59:41:a2:08:44:dd:9b:7c:ad:83:a9:31:26:
f7:1a:eb:8b:6c:0b:96:21:52:5c:ba:21:c6:de:7c:
ac:c1:53:06:27:3c:e5:e1:d4:e2:de:09:ea:38:1b:
7f:e7:8e:17:c5:25:1b:cd:5a:56:bc:34:8e:ed:3a:
91:23:e4:f9:29:28:a6:9b:37:3d:cb:57:74:3b:cd:
9b:e7:e4:97:62:df:62:f0:43:15:4a:c9:6f:a2:5c:
15:c6:e9:da:5c:7f:24:8c:f8:b9:14:cc:a0:96:c8:
0c:75:80:ac:83:6c:7b:54:39:54:fc:1b:40:34:a2:
ea:0f:01:a1:e7:59:bf:dc:12:68:9e:52:02:7f:51:
b7:0e:eb:f3:2e:46:5d:e1:fb:cd:45:82:c5:59:86:
76:8d:69:57:72:ee:2d:24:8e:46:f4:fe:8c:11:de:
90:56:fc:5f:9a:93:f8:f4:20:fc:ea:0b:40:12:19:
95:8b:07:64:79:0a:82:d9:22:f3:ed:c2:aa:2b:1d:
f0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:06:37:C8:BA:61:BB:1F:24:E9:04:B2:B3:2A:BC:D7:B5:40:9D
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5d:4c:38:52:71:f7:a2:06:71:f0:11:fd:5c:c9:3b:9f:8f:
d4:02:6d:9c:0a:23:b9:38:db:22:ef:e9:33:d4:63:59:01:ec:
7a:62:6b:bb:0f:3f:0b:8a:4a:96:85:4d:ae:85:95:d1:6b:df:
ec:4e:ef:d9:6e:d3:7d:f8:f8:84:5c:ea:bb:ca:6a:84:a0:1b:
d6:c8:91:92:c0:3e:08:c5:e9:47:18:de:ac:dd:16:85:a8:ef:
cb:66:bd:1d:11:01:1f:bb:ce:08:dd:e1:9d:82:a1:5b:e0:9f:
7a:9c:37:26:29:fb:73:f0:59:ec:75:4e:d1:1b:57:db:7a:31:
e7:05:5c:e2:4b:64:69:e8:15:db:0b:73:18:d1:bd:bf:60:ab:
86:0f:ab:58:73:7e:fc:f7:32:d7:f8:51:83:a8:14:9d:cb:03:
36:05:ba:4e:a8:30:2a:45:29:2f:f0:24:9d:6e:15:a8:f0:90:
f8:4b:9a:ec:76:8b:d9:f1:51:24:b1:6a:d6:c5:59:43:22:91:
6c:1b:a3:79:79:71:a8:35:90:e4:24:0b:47:5b:6e:34:b3:f9:
89:05:1b:89:42:7a:72:d3:d2:7f:b7:fa:d7:78:d1:c6:75:44:
84:34:74:00:ae:ac:c7:3c:b9:4f:32:72:a9:d7:8a:2f:5e:b5:
06:3b:c3:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/byrgjkayES3NZGT0wop4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5
OTcwZWYwHhcNMjUwNTExMTMwMDU1WhcNMjUwNTEyMTMwMDU1WjAzMTEwLwYDVQQD
Eyg3M2FmMDYzN2M4YmE2MWJiMWYyNGU5MDRiMmIzMmFiY2Q3YjU0MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JG9qiNA5HSzjNfmsNrWEoqAe+aF
jIXv3Y9wcpFha1KtDtwizhjubqI0izbhVSr0n0zF1jP4jwtVVjwysllBoghE3Zt8
rYOpMSb3GuuLbAuWIVJcuiHG3nyswVMGJzzl4dTi3gnqOBt/544XxSUbzVpWvDSO
7TqRI+T5KSimmzc9y1d0O82b5+SXYt9i8EMVSslvolwVxunaXH8kjPi5FMyglsgM
dYCsg2x7VDlU/BtANKLqDwGh51m/3BJonlICf1G3DuvzLkZd4fvNRYLFWYZ2jWlX
cu4tJI5G9P6MEd6QVvxfmpP49CD86gtAEhmViwdkeQqC2SLz7cKqKx3w7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOvBjfIumG7HyTpBLKzKrzXtUCdMB8GA1UdIwQY
MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt
ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh
LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY11MOFJx
96IGcfAR/VzJO5+P1AJtnAojuTjbIu/pM9RjWQHsemJruw8/C4pKloVNroWV0Wvf
7E7v2W7Tffj4hFzqu8pqhKAb1siRksA+CMXpRxjerN0Whajvy2a9HREBH7vOCN3h
nYKhW+Cfepw3Jin7c/BZ7HVO0RtX23ox5wVc4ktkaegV2wtzGNG9v2Crhg+rWHN+
/Pcy1/hRg6gUncsDNgW6TqgwKkUpL/AknW4VqPCQ+Eua7HaL2fFRJLFq1sVZQyKR
bBujeXlxqDWQ5CQLR1tuNLP5iQUbiUJ6ctPSf7f613jRxnVEhDR0AK6sxzy5TzJy
qdeKL161BjvD3g==
-----END CERTIFICATE-----
Generated at Sun May 11 19:57:21 2025 by rpki-client