Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
File: B5yXOPx7HkBkxcY2u6aotUk5HKg.mft (raw, json)
Hash identifier: kybEXtjXQEHdOUDQc7Rp1nPekyL0Ok3kkAM2Tpck4uU=
Subject key identifier: 20:E4:CC:D2:47:5B:20:13:96:AB:14:A7:8E:14:9C:DA:15:CA:40:6E
Authority key identifier: 07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
Certificate issuer: /CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Certificate serial: 0196C2393FA7ACD4ED2F092E942F012B4F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
Manifest number: 0C85
Signing time: Mon 12 May 2025 02:00:53 +0000
Manifest this update: Mon 12 May 2025 02:00:53 +0000
Manifest next update: Tue 13 May 2025 02:00:53 +0000
Files and hashes: 1: B5yXOPx7HkBkxcY2u6aotUk5HKg.crl (hash: tZgMm1MnaNMGEiJgqb3vX4Y25ol35wr+ehcOhiOGjrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:3f:a7:ac:d4:ed:2f:09:2e:94:2f:01:2b:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079c9738fc7b1e4064c5c636bba6a8b549391ca8
Validity
Not Before: May 12 02:00:53 2025 GMT
Not After : May 13 02:00:53 2025 GMT
Subject: CN=20e4ccd2475b201396ab14a78e149cda15ca406e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:bc:37:39:28:64:06:8a:c9:14:10:b3:97:
0e:3e:ee:6b:86:d2:e1:36:98:83:57:fd:43:1e:5b:
91:64:d3:63:66:e3:a9:ce:45:63:61:f1:64:d0:23:
6b:e9:3b:d5:36:d1:c7:9b:2f:21:d3:fe:00:d7:cd:
d1:36:00:d4:38:59:14:13:31:7d:78:b0:a5:ea:df:
b6:f4:f9:ac:c2:50:24:fd:03:80:92:a3:e0:6e:c1:
fd:e0:c7:f0:b9:81:63:36:c0:c1:3d:16:ca:4a:45:
19:e0:14:87:4c:1f:2a:f8:36:e4:f3:bb:4f:ff:cb:
94:6a:63:85:df:e4:1e:3a:76:89:ad:3c:50:8d:bd:
34:e8:cf:c4:92:8c:b4:e4:2b:21:ae:f5:6f:db:93:
56:d6:97:d5:3b:30:01:1c:49:99:c0:6c:d4:3e:90:
46:4a:6e:b5:b1:a9:79:e4:62:86:3c:55:08:fc:c3:
be:f3:f7:82:5b:9f:26:88:b3:59:6a:6e:66:23:14:
df:bf:16:2f:2d:78:02:df:1f:92:88:c1:61:0d:e8:
d3:ed:fa:92:06:53:6f:7c:7a:fd:09:35:f1:a2:90:
8a:5b:b7:7d:19:c3:3c:6a:5b:92:c6:71:1d:74:5b:
56:78:86:b0:3f:8b:44:55:cd:b8:5d:73:01:f2:50:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:CC:D2:47:5B:20:13:96:AB:14:A7:8E:14:9C:DA:15:CA:40:6E
X509v3 Authority Key Identifier:
keyid:07:9C:97:38:FC:7B:1E:40:64:C5:C6:36:BB:A6:A8:B5:49:39:1C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5yXOPx7HkBkxcY2u6aotUk5HKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3cfcd9-494c-41c8-81e2-d418153a30a6/1/B5yXOPx7HkBkxcY2u6aotUk5HKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c2:7b:01:8f:23:3a:73:de:85:37:84:ad:6f:64:c2:b2:43:
00:6b:74:61:1c:b7:98:bb:e4:e2:8f:80:d3:df:f6:19:08:77:
a9:8f:73:78:fe:3e:cf:3b:8d:11:09:44:a0:79:16:00:38:50:
ee:54:f3:0c:2e:4d:ff:14:b1:95:26:b6:c2:d1:c6:e1:40:71:
61:f7:14:f2:fc:fd:93:1f:70:a2:45:2a:b2:ef:2a:86:6b:9e:
cf:c2:11:0a:89:53:48:41:64:98:1d:2b:ec:a1:ea:07:d5:82:
14:bd:2c:0a:4e:cc:27:1b:ec:c4:94:cd:97:85:aa:c6:d1:21:
a3:5b:25:77:66:cb:92:86:4a:01:56:c3:fb:22:7e:c7:6a:e5:
c5:f3:34:4b:bb:dd:7b:95:86:5a:22:2d:ed:c0:cb:b6:1d:e9:
59:5d:7e:c1:7a:97:73:67:61:ba:70:da:a4:8f:17:cf:b2:67:
be:05:78:a8:5c:b5:c8:55:49:cb:7d:c8:5b:91:ec:46:dd:8b:
cc:1f:7d:b9:5f:71:0b:11:cd:d7:5b:15:65:59:56:74:60:93:
78:78:ca:74:48:e5:33:09:40:52:a0:72:22:35:85:8b:83:f6:
07:9f:ac:59:dd:e6:99:ab:77:ac:3f:6d:8f:65:fa:99:87:4e:
22:87:dc:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOT+nrNTtLwkulC8BK09YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWM5NzM4ZmM3YjFlNDA2NGM1YzYzNmJiYTZhOGI1NDkz
OTFjYTgwHhcNMjUwNTEyMDIwMDUzWhcNMjUwNTEzMDIwMDUzWjAzMTEwLwYDVQQD
EygyMGU0Y2NkMjQ3NWIyMDEzOTZhYjE0YTc4ZTE0OWNkYTE1Y2E0MDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok68NzkoZAaKyRQQs5cOPu5rhtLh
NpiDV/1DHluRZNNjZuOpzkVjYfFk0CNr6TvVNtHHmy8h0/4A183RNgDUOFkUEzF9
eLCl6t+29PmswlAk/QOAkqPgbsH94MfwuYFjNsDBPRbKSkUZ4BSHTB8q+Dbk87tP
/8uUamOF3+QeOnaJrTxQjb006M/Ekoy05CshrvVv25NW1pfVOzABHEmZwGzUPpBG
Sm61sal55GKGPFUI/MO+8/eCW58miLNZam5mIxTfvxYvLXgC3x+SiMFhDejT7fqS
BlNvfHr9CTXxopCKW7d9GcM8aluSxnEddFtWeIawP4tEVc24XXMB8lBFUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDkzNJHWyATlqsUp44UnNoVykBuMB8GA1UdIwQY
MBaAFAeclzj8ex5AZMXGNrumqLVJORyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTIt
ZDQxODE1M2EzMGE2LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zY2ZjZDktNDk0Yy00MWM4LTgxZTItZDQxODE1M2EzMGE2
LzEvQjV5WE9QeDdIa0JreGNZMnU2YW90VWs1SEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsJ7AY8j
OnPehTeErW9kwrJDAGt0YRy3mLvk4o+A09/2GQh3qY9zeP4+zzuNEQlEoHkWADhQ
7lTzDC5N/xSxlSa2wtHG4UBxYfcU8vz9kx9wokUqsu8qhmuez8IRColTSEFkmB0r
7KHqB9WCFL0sCk7MJxvsxJTNl4WqxtEho1sld2bLkoZKAVbD+yJ+x2rlxfM0S7vd
e5WGWiIt7cDLth3pWV1+wXqXc2dhunDapI8Xz7JnvgV4qFy1yFVJy33IW5HsRt2L
zB99uV9xCxHN11sVZVlWdGCTeHjKdEjlMwlAUqByIjWFi4P2B5+sWd3mmat3rD9t
j2X6mYdOIofc7w==
-----END CERTIFICATE-----
Generated at Mon May 12 11:13:51 2025 by rpki-client