Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json)
Hash identifier: 6lI6RvYQArG5Jx91zeG9saeLO9YYQPWJtN1MOKbKtd8=
Subject key identifier: FB:E4:76:A1:78:15:58:39:73:EC:04:2D:06:A1:AD:1B:04:8E:2E:1D
Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Certificate serial: 0196BA7F8B425ADAFC8B505E92ECBB68EA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
Manifest number: 10F0
Signing time: Sat 10 May 2025 14:00:42 +0000
Manifest this update: Sat 10 May 2025 14:00:42 +0000
Manifest next update: Sun 11 May 2025 14:00:42 +0000
Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: 5KdLyBwJOGqdA+fn/D56F5JrOiKqdI8y66JSEw742t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:8b:42:5a:da:fc:8b:50:5e:92:ec:bb:68:ea:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8
Validity
Not Before: May 10 14:00:42 2025 GMT
Not After : May 11 14:00:42 2025 GMT
Subject: CN=fbe476a17815583973ec042d06a1ad1b048e2e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:29:2d:d8:02:88:c2:fd:a5:07:9d:04:de:ce:
e0:2b:05:c0:a4:c0:f3:90:98:de:7b:26:7d:d4:d6:
a5:87:4f:e5:fe:5c:46:fc:bf:b8:cd:65:4d:03:88:
ea:59:d5:2f:01:c8:33:fb:58:39:77:15:bb:20:9b:
5b:a6:87:cf:02:24:0b:3d:92:2d:c4:2a:4e:38:e2:
a6:92:82:cc:1b:3f:45:e3:6b:86:c8:9e:61:8a:9b:
47:45:12:3c:e7:62:88:55:fc:5d:5a:d3:42:4a:5e:
6d:ae:8a:b5:39:dc:4c:ff:4f:7f:8b:76:96:ed:5a:
21:ed:9b:22:00:a4:8b:1b:e4:29:b9:16:f7:73:58:
11:a5:d4:8c:9d:18:fe:4f:cc:7d:0f:44:f1:ed:25:
e1:05:bb:59:9a:e3:a7:7d:92:84:3b:c5:64:39:8a:
00:f2:7d:e4:d4:a3:a8:da:44:f0:23:46:87:e0:2a:
46:a6:46:11:68:36:4c:85:84:43:91:c9:bc:0a:bc:
2e:2d:d3:3e:12:ff:00:87:3a:20:fb:d6:50:d3:94:
27:d0:09:40:c6:9e:4b:d1:fb:32:6f:fe:da:07:46:
40:6a:31:41:d7:b0:64:1f:d7:b5:d1:ac:b0:97:96:
3f:1f:97:4d:37:01:4d:bd:77:f4:b9:59:90:99:52:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E4:76:A1:78:15:58:39:73:EC:04:2D:06:A1:AD:1B:04:8E:2E:1D
X509v3 Authority Key Identifier:
keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:46:ae:9f:6c:ff:d2:35:f8:9d:dc:23:66:1f:68:03:92:7f:
8e:78:81:24:4a:2f:1a:e5:c0:e9:ac:5d:41:7b:16:84:60:bc:
16:e7:e7:c4:3c:6b:e9:dc:b3:e3:98:6e:9d:1c:64:fb:9f:04:
11:be:48:4d:9b:b1:a3:1b:96:2d:66:84:65:f1:60:36:97:e9:
ef:fa:60:6e:28:b5:74:cc:97:6e:b0:eb:31:15:a5:59:2a:17:
e2:60:95:98:87:e3:ea:fd:1a:ab:2e:b1:2f:63:a0:d1:f8:e0:
8c:be:5e:d6:31:dd:83:e5:90:56:82:5c:3e:40:cc:49:80:29:
3b:b3:ef:60:bc:93:da:97:9c:27:8f:43:71:89:2a:b3:70:4b:
5e:06:6c:07:fc:03:cc:db:a2:a0:15:d8:d8:7f:f6:96:b7:a4:
7c:32:ea:29:84:dc:72:f0:73:a9:cf:c9:10:1d:8d:cc:32:17:
46:d1:0a:17:20:a7:c3:2e:4c:29:cf:c0:8d:ce:8f:f3:5f:35:
78:b0:d9:ba:a9:a7:fd:34:99:47:d7:a3:40:ce:02:40:5c:4e:
fe:70:2e:68:46:f5:7c:02:fc:ce:15:ee:33:46:74:53:3e:30:
a0:5c:4c:2c:e0:68:4f:ff:3e:d5:4d:3f:94:28:34:a6:cd:56:
3f:86:5a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6f4tCWtr8i1Bekuy7aOqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTVlNGMxY2RlOGJjYjNiODQyMDc3MGQ1OWE4M2E3OTE3
YzhjYzgwHhcNMjUwNTEwMTQwMDQyWhcNMjUwNTExMTQwMDQyWjAzMTEwLwYDVQQD
EyhmYmU0NzZhMTc4MTU1ODM5NzNlYzA0MmQwNmExYWQxYjA0OGUyZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ckt2AKIwv2lB50E3s7gKwXApMDz
kJjeeyZ91Nalh0/l/lxG/L+4zWVNA4jqWdUvAcgz+1g5dxW7IJtbpofPAiQLPZIt
xCpOOOKmkoLMGz9F42uGyJ5hiptHRRI852KIVfxdWtNCSl5troq1OdxM/09/i3aW
7Voh7ZsiAKSLG+QpuRb3c1gRpdSMnRj+T8x9D0Tx7SXhBbtZmuOnfZKEO8VkOYoA
8n3k1KOo2kTwI0aH4CpGpkYRaDZMhYRDkcm8CrwuLdM+Ev8Ahzog+9ZQ05Qn0AlA
xp5L0fsyb/7aB0ZAajFB17BkH9e10aywl5Y/H5dNNwFNvXf0uVmQmVKRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvkdqF4FVg5c+wELQahrRsEji4dMB8GA1UdIwQY
MBaAFJml5MHN6LyzuEIHcNWag6eRfIzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NWI4NDgtMGZjMy00M2MzLThhY2Ut
MGRjM2MyMWJkNjI4LzEvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81NWI4NDgtMGZjMy00M2MzLThhY2UtMGRjM2MyMWJkNjI4
LzEvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUaun2z/
0jX4ndwjZh9oA5J/jniBJEovGuXA6axdQXsWhGC8FufnxDxr6dyz45hunRxk+58E
Eb5ITZuxoxuWLWaEZfFgNpfp7/pgbii1dMyXbrDrMRWlWSoX4mCVmIfj6v0aqy6x
L2Og0fjgjL5e1jHdg+WQVoJcPkDMSYApO7PvYLyT2pecJ49DcYkqs3BLXgZsB/wD
zNuioBXY2H/2lrekfDLqKYTccvBzqc/JEB2NzDIXRtEKFyCnwy5MKc/Ajc6P8181
eLDZuqmn/TSZR9ejQM4CQFxO/nAuaEb1fAL8zhXuM0Z0Uz4woFxMLOBoT/8+1U0/
lCg0ps1WP4Za2g==
-----END CERTIFICATE-----
Generated at Sat May 10 18:54:21 2025 by rpki-client