Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
File: PRf0av89iyHwD-6PY16uNKf0pNc.mft (raw, json)
Hash identifier: 0VZHjMwYJxixbrQvZk1WGmKvvGVIkYGy3I+XcqmLzkI=
Subject key identifier: 10:3C:27:4E:18:67:ED:4B:47:9E:BD:0D:07:D6:1E:62:52:26:94:8B
Authority key identifier: 3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
Certificate issuer: /CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Certificate serial: 0196BD80FBE3D4DEDFFB8E412F44E8868AA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
Manifest number: 0A22
Signing time: Sun 11 May 2025 04:01:08 +0000
Manifest this update: Sun 11 May 2025 04:01:08 +0000
Manifest next update: Mon 12 May 2025 04:01:08 +0000
Files and hashes: 1: PRf0av89iyHwD-6PY16uNKf0pNc.crl (hash: hx/r86CpwxBZjbp9WJRcoPAd37ysVoqXtlTCePybgUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:fb:e3:d4:de:df:fb:8e:41:2f:44:e8:86:8a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d17f46aff3d8b21f00fee8f635eae34a7f4a4d7
Validity
Not Before: May 11 04:01:08 2025 GMT
Not After : May 12 04:01:08 2025 GMT
Subject: CN=103c274e1867ed4b479ebd0d07d61e625226948b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:a7:6a:97:44:c8:74:a8:60:ac:27:c4:65:
bf:4b:98:ad:13:7a:e4:68:51:19:b4:90:9e:a5:ae:
38:ec:bf:15:d4:8a:11:fd:37:b9:e1:4a:ce:bb:4f:
e6:c0:38:2f:16:6a:b5:3f:c7:ac:9e:4d:2a:41:65:
50:30:00:7b:d4:b8:6b:28:b7:68:fe:b7:8b:aa:b5:
9a:6f:78:a1:dd:36:e3:72:8f:2e:5b:cb:17:81:bb:
15:c9:d3:f8:3e:4a:de:1a:10:c6:e2:1d:3e:18:d3:
05:60:e3:e8:8d:84:0d:29:84:9e:ff:5e:43:f8:25:
7f:14:30:e7:bf:0f:5a:49:22:e7:a3:89:41:1e:f5:
0f:66:72:c2:55:be:4c:2b:b7:fd:1c:3c:fb:2c:5c:
ac:31:75:96:39:de:47:37:f0:92:1a:99:19:ad:3b:
5f:a7:ab:46:dd:ea:3c:de:ce:c5:83:d7:67:b2:f3:
6f:ff:b8:6c:ba:b7:3c:2f:65:fb:95:81:35:9f:33:
bf:c8:9e:44:84:e7:83:72:7f:5b:41:da:ec:ce:e6:
07:69:3d:c4:8b:8a:1a:e9:c6:de:d3:01:75:54:0b:
38:29:0b:c5:7b:d5:ee:f9:1d:59:55:98:3b:7e:36:
1f:e8:65:f5:0c:5b:f8:0c:a0:42:54:a3:6c:86:a2:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:27:4E:18:67:ED:4B:47:9E:BD:0D:07:D6:1E:62:52:26:94:8B
X509v3 Authority Key Identifier:
keyid:3D:17:F4:6A:FF:3D:8B:21:F0:0F:EE:8F:63:5E:AE:34:A7:F4:A4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRf0av89iyHwD-6PY16uNKf0pNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b281c7-cd9a-4375-b84a-851ed529f222/1/PRf0av89iyHwD-6PY16uNKf0pNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9f:bd:56:e6:83:e8:d0:09:5d:93:8b:4c:d6:df:8c:23:ed:
c9:60:58:0e:cb:05:46:0c:cb:f9:cc:d1:5b:fc:54:71:6e:7f:
91:0b:70:16:be:67:d8:6d:d9:00:36:f5:ba:73:ea:bf:5a:bf:
ef:f6:ce:73:f3:85:4f:4e:56:f6:30:d8:98:9d:27:73:31:ea:
a4:9c:a0:c5:13:86:22:b0:fd:3f:e0:e2:51:af:b4:c5:0c:14:
00:c3:92:34:ae:37:37:d8:f6:f6:8c:df:78:cf:26:85:c0:50:
f8:80:7f:4e:bc:be:34:2a:0d:ec:05:2d:1d:ba:ba:d6:4d:e3:
14:86:88:58:eb:a2:f6:20:ba:27:f6:6b:3e:35:6f:6f:f3:45:
a1:d2:42:d8:e0:89:9c:68:85:87:98:e1:50:ee:c0:55:28:fb:
55:b3:77:82:71:2a:6c:3d:0e:f6:03:ab:ca:a4:9e:0e:81:1e:
db:3a:c8:94:55:59:d0:e3:f6:d7:2e:0d:9c:eb:b8:f6:52:a4:
ca:31:61:c8:2e:36:16:1e:f6:d2:a5:20:39:a4:40:96:3e:21:
40:37:de:ff:4d:a7:6f:47:2f:e0:a4:7a:71:22:0a:69:b3:17:
82:e4:e7:27:93:d9:a0:72:06:44:fe:12:ae:a4:9a:34:b0:97:
89:40:a4:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9gPvj1N7f+45BL0TohoqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTdmNDZhZmYzZDhiMjFmMDBmZWU4ZjYzNWVhZTM0YTdm
NGE0ZDcwHhcNMjUwNTExMDQwMTA4WhcNMjUwNTEyMDQwMTA4WjAzMTEwLwYDVQQD
EygxMDNjMjc0ZTE4NjdlZDRiNDc5ZWJkMGQwN2Q2MWU2MjUyMjY5NDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApK+napdEyHSoYKwnxGW/S5itE3rk
aFEZtJCepa447L8V1IoR/Te54UrOu0/mwDgvFmq1P8esnk0qQWVQMAB71LhrKLdo
/reLqrWab3ih3Tbjco8uW8sXgbsVydP4PkreGhDG4h0+GNMFYOPojYQNKYSe/15D
+CV/FDDnvw9aSSLno4lBHvUPZnLCVb5MK7f9HDz7LFysMXWWOd5HN/CSGpkZrTtf
p6tG3eo83s7Fg9dnsvNv/7hsurc8L2X7lYE1nzO/yJ5EhOeDcn9bQdrszuYHaT3E
i4oa6cbe0wF1VAs4KQvFe9Xu+R1ZVZg7fjYf6GX1DFv4DKBCVKNshqJ/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBA8J04YZ+1LR569DQfWHmJSJpSLMB8GA1UdIwQY
MBaAFD0X9Gr/PYsh8A/uj2NerjSn9KTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEt
ODUxZWQ1MjlmMjIyLzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iMjgxYzctY2Q5YS00Mzc1LWI4NGEtODUxZWQ1MjlmMjIy
LzEvUFJmMGF2ODlpeUh3RC02UFkxNnVOS2YwcE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5+9VuaD
6NAJXZOLTNbfjCPtyWBYDssFRgzL+czRW/xUcW5/kQtwFr5n2G3ZADb1unPqv1q/
7/bOc/OFT05W9jDYmJ0nczHqpJygxROGIrD9P+DiUa+0xQwUAMOSNK43N9j29ozf
eM8mhcBQ+IB/Try+NCoN7AUtHbq61k3jFIaIWOui9iC6J/ZrPjVvb/NFodJC2OCJ
nGiFh5jhUO7AVSj7VbN3gnEqbD0O9gOryqSeDoEe2zrIlFVZ0OP21y4NnOu49lKk
yjFhyC42Fh720qUgOaRAlj4hQDfe/02nb0cv4KR6cSIKabMXguTnJ5PZoHIGRP4S
rqSaNLCXiUCk9Q==
-----END CERTIFICATE-----
Generated at Sun May 11 13:00:53 2025 by rpki-client