Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: 6tY7w8wGE66txq0XJRaYbzBTE2k1WIWUE4YZHUy00dQ=
Subject key identifier: B1:05:9A:F0:F9:DF:6D:AB:21:FF:38:D1:CF:11:A9:2E:1B:1B:C9:35
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 0196C34B6536C0117FD90E223B77227CB747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 07:00:20 +0000
Manifest this update: Mon 12 May 2025 07:00:20 +0000
Manifest next update: Tue 13 May 2025 07:00:20 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: 4Mu3t3Eg/l6z87DETlPebZAm7qnWfPeIjgVAdQ0w/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:65:36:c0:11:7f:d9:0e:22:3b:77:22:7c:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: May 12 07:00:20 2025 GMT
Not After : May 13 07:00:20 2025 GMT
Subject: CN=b1059af0f9df6dab21ff38d1cf11a92e1b1bc935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:ac:04:3b:51:20:cf:25:56:3b:50:7e:4f:
5c:75:23:cd:7d:7b:00:ad:13:f1:3d:7e:3e:88:d4:
a3:b8:82:db:ee:a6:e5:0b:84:f4:54:ba:a6:e1:f1:
e0:a8:2e:32:6a:b1:04:36:7f:27:3e:0a:2c:5c:e5:
48:24:1d:fa:42:3f:81:e3:6e:e7:78:a3:0a:42:19:
49:0c:98:e6:a9:29:9d:ae:60:19:27:ea:8a:bb:a9:
af:6c:44:75:93:07:fe:2b:ab:5d:fe:08:df:c8:18:
a8:43:f7:51:59:c1:6d:74:20:c6:79:6a:49:55:d5:
b4:32:e0:ac:db:4c:6f:9a:bc:b1:2c:33:e7:60:2a:
66:32:fe:e6:12:d6:b9:ca:ec:80:1f:d4:dd:26:a1:
1c:c4:6d:22:bc:01:54:ae:31:0c:cd:0f:b5:0e:02:
a4:71:eb:f7:e9:ac:76:f9:1f:ce:0e:cb:d4:7a:b8:
93:64:9c:13:89:75:cb:a6:47:0d:f7:24:30:6b:06:
0e:9b:59:05:85:0c:6f:0a:5d:70:9f:d4:03:b5:0a:
ab:26:eb:42:a3:bc:3b:1d:97:f8:17:03:0e:70:d4:
cb:20:99:4a:aa:b7:ea:15:10:62:ef:f3:df:ed:ce:
46:16:5e:05:a0:0a:f5:44:7a:a2:01:e4:15:7b:a7:
9d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:05:9A:F0:F9:DF:6D:AB:21:FF:38:D1:CF:11:A9:2E:1B:1B:C9:35
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a0:2f:d2:8d:40:05:54:f9:1f:71:ce:1e:07:2e:75:ec:04:
58:44:dc:94:12:80:40:7f:a1:f9:d6:0b:0f:61:be:67:03:1e:
c0:f6:2c:9f:51:09:f7:33:b3:cc:41:0a:a4:4f:c0:19:44:79:
07:2d:27:04:6b:32:b7:68:58:44:66:76:1b:74:2e:75:a8:5d:
b4:bb:64:a1:9a:4f:83:05:36:eb:2c:00:dd:bb:c6:b4:72:54:
21:95:2c:b6:ec:35:d5:f4:e8:e5:0c:b5:94:52:b4:20:6f:82:
07:98:30:29:de:83:e6:96:cf:2d:31:5c:91:f7:ca:e3:a1:2b:
2b:b4:76:ea:2f:9e:8a:5a:48:a6:c1:33:20:2f:bb:63:07:ed:
21:bb:e0:e4:86:6c:df:0a:5c:ee:9b:19:bb:06:fe:f4:a0:27:
41:cc:9a:93:88:ba:9d:19:44:8a:d8:54:8d:3f:0a:51:53:56:
66:84:aa:0b:ad:75:ed:be:92:6d:2b:47:6b:14:fb:7e:d2:30:
8a:66:e7:53:29:04:9d:cb:b9:c3:e9:5d:aa:b4:97:38:3d:2a:
8f:86:00:82:36:28:72:e4:4c:43:af:dd:aa:82:31:3e:2d:ee:
7c:94:ab:9d:bf:cb:db:27:f7:95:0b:8f:81:c4:3d:2b:1b:f1:
c0:7e:0e:95
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbDS2U2wBF/2Q4iO3cifLdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2
N2ZlOTkwHhcNMjUwNTEyMDcwMDIwWhcNMjUwNTEzMDcwMDIwWjAzMTEwLwYDVQQD
EyhiMTA1OWFmMGY5ZGY2ZGFiMjFmZjM4ZDFjZjExYTkyZTFiMWJjOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2usBDtRIM8lVjtQfk9cdSPNfXsA
rRPxPX4+iNSjuILb7qblC4T0VLqm4fHgqC4yarEENn8nPgosXOVIJB36Qj+B427n
eKMKQhlJDJjmqSmdrmAZJ+qKu6mvbER1kwf+K6td/gjfyBioQ/dRWcFtdCDGeWpJ
VdW0MuCs20xvmryxLDPnYCpmMv7mEta5yuyAH9TdJqEcxG0ivAFUrjEMzQ+1DgKk
cev36ax2+R/ODsvUeriTZJwTiXXLpkcN9yQwawYOm1kFhQxvCl1wn9QDtQqrJutC
o7w7HZf4FwMOcNTLIJlKqrfqFRBi7/Pf7c5GFl4FoAr1RHqiAeQVe6edNwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLEFmvD5322rIf840c8RqS4bG8k1MB8GA1UdIwQY
MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi
LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz
YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqAv
0o1ABVT5H3HOHgcudewEWETclBKAQH+h+dYLD2G+ZwMewPYsn1EJ9zOzzEEKpE/A
GUR5By0nBGsyt2hYRGZ2G3QudahdtLtkoZpPgwU26ywA3bvGtHJUIZUstuw11fTo
5Qy1lFK0IG+CB5gwKd6D5pbPLTFckffK46ErK7R26i+eilpIpsEzIC+7YwftIbvg
5IZs3wpc7psZuwb+9KAnQcyak4i6nRlEithUjT8KUVNWZoSqC6117b6SbStHaxT7
ftIwimbnUykEncu5w+ldqrSXOD0qj4YAgjYocuRMQ6/dqoIxPi3ufJSrnb/L2yf3
lQuPgcQ9KxvxwH4OlQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:43:13 2025 by rpki-client