Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
File: U3XfISulmO4KW_aAsh9QxPx9aOE.mft (raw, json)
Hash identifier: ce+PnCLDqdc7uR0ff7y8bh7l5IHiti58dnpZ0/N8J8k=
Subject key identifier: 79:E6:38:EE:7A:4A:E4:FD:27:8F:90:9C:9B:7C:54:09:4D:3B:15:74
Authority key identifier: 53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
Certificate issuer: /CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Certificate serial: 01965793AB6EFD6274C68C3037844FCF7327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
Manifest number: 0C99
Signing time: Mon 21 Apr 2025 09:00:17 +0000
Manifest this update: Mon 21 Apr 2025 09:00:17 +0000
Manifest next update: Tue 22 Apr 2025 09:00:17 +0000
Files and hashes: 1: U3XfISulmO4KW_aAsh9QxPx9aOE.crl (hash: kEpU0NoNkwZCPut4kNnA9650FPxdOpycpt7t31Kd1qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:ab:6e:fd:62:74:c6:8c:30:37:84:4f:cf:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5375df212ba598ee0a5bf680b21f50c4fc7d68e1
Validity
Not Before: Apr 21 09:00:17 2025 GMT
Not After : Apr 22 09:00:17 2025 GMT
Subject: CN=79e638ee7a4ae4fd278f909c9b7c54094d3b1574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3d:46:fd:6f:45:69:28:41:61:0e:6d:65:8a:
39:21:6d:fc:b5:d2:95:19:e6:1d:8f:4a:d1:16:96:
25:eb:a7:42:2f:ab:6b:fd:96:ba:18:48:0e:37:35:
c8:d6:c5:22:b9:20:0b:f2:f6:68:9f:a9:3f:7d:53:
81:dd:8d:9b:e1:a6:9e:d3:1f:1b:50:b8:69:0a:ce:
ce:dd:7b:9c:66:d5:f0:31:fa:e3:20:80:91:0b:d9:
9a:4a:16:e5:2b:5b:94:45:a6:14:a7:ba:9c:01:3a:
c9:56:1e:ac:ab:97:ce:74:2d:1a:7b:6c:2a:1b:05:
66:28:48:d8:22:e1:89:c0:cc:17:88:b7:66:bc:66:
0a:50:67:db:13:8b:4d:66:c4:d1:2b:88:97:13:f0:
82:a6:f6:b6:a2:7e:15:34:30:b5:1f:eb:7a:39:04:
ce:88:99:d1:a8:b6:eb:75:27:2d:66:50:a3:20:8b:
ee:b8:a6:2c:b5:67:11:f5:b9:e7:dd:b1:21:76:78:
f0:d5:59:85:41:5b:10:66:9e:c5:c7:d9:21:b2:cb:
1f:2e:fa:ce:4e:74:a2:8c:b9:e6:03:b6:1d:37:aa:
39:ab:19:42:a5:1a:14:21:8b:b6:68:22:ca:bd:64:
5b:7b:b1:9b:f6:43:30:1e:bd:c8:a6:69:d9:96:9c:
69:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E6:38:EE:7A:4A:E4:FD:27:8F:90:9C:9B:7C:54:09:4D:3B:15:74
X509v3 Authority Key Identifier:
keyid:53:75:DF:21:2B:A5:98:EE:0A:5B:F6:80:B2:1F:50:C4:FC:7D:68:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3XfISulmO4KW_aAsh9QxPx9aOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c4fb00-39c5-48a5-903b-252fd967bfcc/1/U3XfISulmO4KW_aAsh9QxPx9aOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:17:62:69:f6:92:ca:3f:76:71:78:6d:8f:73:9a:79:5c:de:
fc:18:49:07:09:24:d8:f6:40:48:47:c7:0e:6e:cc:16:fd:24:
20:52:18:e9:c7:4e:7d:e3:82:c1:79:02:c2:f6:14:7e:f6:e8:
cd:fb:af:d6:41:56:3e:07:b8:1f:af:85:2c:36:4e:08:b9:4e:
5b:d1:1f:a4:07:7a:4c:fd:a5:cb:1c:c0:45:4c:d2:f3:ad:a0:
cc:49:4b:68:74:5e:1c:e0:99:2b:05:62:23:a8:c0:59:bb:cb:
99:a6:a5:cf:87:87:1d:33:5f:cd:c3:c8:b6:60:e4:d1:e1:54:
e9:f5:89:44:99:6b:34:8f:fd:24:cf:31:d8:ea:a5:f5:03:de:
bb:48:9f:ed:75:d8:2f:c3:21:bf:ac:4f:f6:5e:bb:6a:d1:43:
d2:8d:15:c6:96:65:65:6e:5f:6d:b2:b2:b9:50:f7:90:94:cc:
98:ff:a6:20:0c:26:9e:11:d8:c5:f2:c9:7d:8d:a3:cc:33:30:
4a:5e:4d:10:87:95:2c:b4:97:12:29:46:d7:72:c5:47:f2:de:
aa:7a:b1:6e:b8:59:3c:1a:16:aa:b0:21:df:05:e5:48:fd:a4:
16:59:33:0b:e2:2a:92:ec:e4:76:ea:ab:f3:94:e7:74:e4:7b:
8c:ac:3e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk6tu/WJ0xowwN4RPz3MnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzVkZjIxMmJhNTk4ZWUwYTViZjY4MGIyMWY1MGM0ZmM3
ZDY4ZTEwHhcNMjUwNDIxMDkwMDE3WhcNMjUwNDIyMDkwMDE3WjAzMTEwLwYDVQQD
Eyg3OWU2MzhlZTdhNGFlNGZkMjc4ZjkwOWM5YjdjNTQwOTRkM2IxNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz1G/W9FaShBYQ5tZYo5IW38tdKV
GeYdj0rRFpYl66dCL6tr/Za6GEgONzXI1sUiuSAL8vZon6k/fVOB3Y2b4aae0x8b
ULhpCs7O3XucZtXwMfrjIICRC9maShblK1uURaYUp7qcATrJVh6sq5fOdC0ae2wq
GwVmKEjYIuGJwMwXiLdmvGYKUGfbE4tNZsTRK4iXE/CCpva2on4VNDC1H+t6OQTO
iJnRqLbrdSctZlCjIIvuuKYstWcR9bnn3bEhdnjw1VmFQVsQZp7Fx9khsssfLvrO
TnSijLnmA7YdN6o5qxlCpRoUIYu2aCLKvWRbe7Gb9kMwHr3IpmnZlpxpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnmOO56SuT9J4+QnJt8VAlNOxV0MB8GA1UdIwQY
MBaAFFN13yErpZjuClv2gLIfUMT8fWjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNGZiMDAtMzljNS00OGE1LTkwM2It
MjUyZmQ5NjdiZmNjLzEvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNGZiMDAtMzljNS00OGE1LTkwM2ItMjUyZmQ5NjdiZmNj
LzEvVTNYZklTdWxtTzRLV19hQXNoOVF4UHg5YU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxdiafaS
yj92cXhtj3OaeVze/BhJBwkk2PZASEfHDm7MFv0kIFIY6cdOfeOCwXkCwvYUfvbo
zfuv1kFWPge4H6+FLDZOCLlOW9EfpAd6TP2lyxzARUzS862gzElLaHReHOCZKwVi
I6jAWbvLmaalz4eHHTNfzcPItmDk0eFU6fWJRJlrNI/9JM8x2Oql9QPeu0if7XXY
L8Mhv6xP9l67atFD0o0VxpZlZW5fbbKyuVD3kJTMmP+mIAwmnhHYxfLJfY2jzDMw
Sl5NEIeVLLSXEilG13LFR/LeqnqxbrhZPBoWqrAh3wXlSP2kFlkzC+Iqkuzkduqr
85TndOR7jKw+wA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:32 2025 by rpki-client