Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier: h+4Uie2pB5sFYxp5wwZoREkzZ32iTrXN+4Sm79blsy4=
Subject key identifier: 88:A5:CE:25:6A:59:49:BD:BE:10:47:55:D3:60:EA:F9:24:B1:5F:FD
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer: /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial: 0196C34C7D14D2BAA3FF692CA673BD562ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number: 07D3
Signing time: Mon 12 May 2025 07:01:31 +0000
Manifest this update: Mon 12 May 2025 07:01:31 +0000
Manifest next update: Tue 13 May 2025 07:01:31 +0000
Files and hashes: 1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: Jp5mxhS5umtsM0fLdPeXMrE20SVvKijZxjr/d7lzXsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:7d:14:d2:ba:a3:ff:69:2c:a6:73:bd:56:2e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Validity
Not Before: May 12 07:01:31 2025 GMT
Not After : May 13 07:01:31 2025 GMT
Subject: CN=88a5ce256a5949bdbe104755d360eaf924b15ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:2a:65:ea:54:8a:6f:80:ec:94:40:3f:0e:
ee:f9:6f:de:0a:53:7a:38:87:85:84:4d:cf:ae:bc:
c8:c9:3f:cf:85:96:f4:89:59:9c:d0:eb:b4:93:0b:
ab:e4:1e:94:08:23:0f:1e:4c:31:02:63:3e:e3:05:
f9:de:0a:87:85:f6:07:6d:bd:c9:6f:87:ab:03:a1:
72:b0:62:f1:c2:93:28:e1:aa:3a:9e:ac:eb:ab:22:
e0:d1:ba:1c:6f:08:d2:2a:3f:fd:b6:38:53:b7:72:
14:68:02:23:fb:9d:81:ff:c5:c9:59:25:c3:08:b0:
7c:00:de:79:be:16:84:cf:61:f1:93:b8:9a:4b:1f:
d8:e8:17:f9:1c:3d:63:ef:be:a2:47:3e:c7:53:fd:
83:ce:e6:be:95:8b:29:71:0c:00:97:e4:5c:bc:9e:
1d:47:cf:44:0a:21:d7:79:4b:cc:a4:23:c7:29:c4:
4c:44:10:e2:10:af:f1:86:bf:a6:d9:00:22:7a:da:
25:58:b1:36:99:d7:5e:ce:c6:fc:59:73:b8:7e:17:
dc:69:4b:96:35:5f:24:55:9d:28:ca:39:5f:c6:5f:
a4:79:39:bf:52:55:4e:07:ab:70:6e:fc:25:2f:22:
ef:e2:ec:38:2a:2b:f3:9e:6a:e0:21:74:45:b5:5a:
07:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:CE:25:6A:59:49:BD:BE:10:47:55:D3:60:EA:F9:24:B1:5F:FD
X509v3 Authority Key Identifier:
keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6f:81:58:d1:17:2f:cd:20:f6:70:0b:79:5a:b6:8c:58:ab:
71:82:ab:f5:8a:42:fb:5b:b9:34:02:04:d8:2e:25:f2:21:83:
89:f1:43:bc:a3:e2:c9:f9:fe:ac:6c:00:7b:68:09:fc:e8:1a:
3b:cb:0f:26:6d:78:a0:13:55:55:ea:53:d6:38:06:c6:7d:c0:
86:ca:31:b9:c6:7e:a7:fe:80:5f:66:69:09:c3:18:8c:d5:d9:
87:bb:bd:42:08:37:52:96:50:ed:e6:86:73:e7:89:1a:d9:2a:
77:ab:94:bd:62:59:f6:f6:31:9f:51:92:c6:c8:27:19:a3:95:
77:f1:a3:64:77:9e:74:07:9a:c9:db:6a:af:c4:42:c2:73:ad:
e5:5c:63:0a:22:bc:87:0a:ad:cb:56:77:f7:a7:6f:d1:5b:50:
f6:fb:00:3d:e8:d5:25:bb:74:23:96:f9:6c:9d:94:7a:c6:c0:
27:6c:11:e0:62:a3:f2:16:e4:ae:50:28:69:48:e8:f9:84:b7:
61:14:d9:b9:76:fe:a6:fc:e8:da:29:1c:a4:73:c9:03:59:2f:
02:3c:3d:36:c4:74:cf:74:5d:bd:77:52:0d:9f:3a:3d:42:3e:
ea:80:17:64:19:92:31:dd:55:3b:93:3e:a4:5f:37:55:b6:7e:
2a:ed:23:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTH0U0rqj/2kspnO9Vi7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMTU3OGEyZTYyMzczNmEwNmE1ZTE5ZDkxYmQwOTYyMGQw
NmFkOTQwHhcNMjUwNTEyMDcwMTMxWhcNMjUwNTEzMDcwMTMxWjAzMTEwLwYDVQQD
Eyg4OGE1Y2UyNTZhNTk0OWJkYmUxMDQ3NTVkMzYwZWFmOTI0YjE1ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86kqZepUim+A7JRAPw7u+W/eClN6
OIeFhE3PrrzIyT/PhZb0iVmc0Ou0kwur5B6UCCMPHkwxAmM+4wX53gqHhfYHbb3J
b4erA6FysGLxwpMo4ao6nqzrqyLg0bocbwjSKj/9tjhTt3IUaAIj+52B/8XJWSXD
CLB8AN55vhaEz2Hxk7iaSx/Y6Bf5HD1j776iRz7HU/2Dzua+lYspcQwAl+RcvJ4d
R89ECiHXeUvMpCPHKcRMRBDiEK/xhr+m2QAietolWLE2mddezsb8WXO4fhfcaUuW
NV8kVZ0oyjlfxl+keTm/UlVOB6twbvwlLyLv4uw4KivznmrgIXRFtVoHqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIilziVqWUm9vhBHVdNg6vkksV/9MB8GA1UdIwQY
MBaAFG0VeKLmI3NqBqXhnZG9CWINBq2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC85NGJmNTItNzgzOC00MjcwLWE5MWMt
N2FkYmRhZGM2ZTg2LzEvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC85NGJmNTItNzgzOC00MjcwLWE5MWMtN2FkYmRhZGM2ZTg2
LzEvYlJWNG91WWpjMm9HcGVHZGtiMEpZZzBHclpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2+BWNEX
L80g9nALeVq2jFircYKr9YpC+1u5NAIE2C4l8iGDifFDvKPiyfn+rGwAe2gJ/Oga
O8sPJm14oBNVVepT1jgGxn3AhsoxucZ+p/6AX2ZpCcMYjNXZh7u9Qgg3UpZQ7eaG
c+eJGtkqd6uUvWJZ9vYxn1GSxsgnGaOVd/GjZHeedAeaydtqr8RCwnOt5VxjCiK8
hwqty1Z396dv0VtQ9vsAPejVJbt0I5b5bJ2UesbAJ2wR4GKj8hbkrlAoaUjo+YS3
YRTZuXb+pvzo2ikcpHPJA1kvAjw9NsR0z3RdvXdSDZ86PUI+6oAXZBmSMd1VO5M+
pF83VbZ+Ku0jJw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:52:38 2025 by rpki-client