Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: 2Ud5VkC+XUgrhUecJ3a8kKpkSN3OJfmzggE9ON+9yQs=
Subject key identifier: 9B:01:25:B5:D0:91:21:BF:51:EA:B8:B4:AE:C5:52:FA:0A:A4:FC:CC
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 01965CBA766FE2E551A6DAFB272E9E9DFB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 035B
Signing time: Tue 22 Apr 2025 09:00:45 +0000
Manifest this update: Tue 22 Apr 2025 09:00:45 +0000
Manifest next update: Wed 23 Apr 2025 09:00:45 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: TdNO2FwCo/7VBogLMXrcfQr9aLluRo6nZPzcA1xOf2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:76:6f:e2:e5:51:a6:da:fb:27:2e:9e:9d:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Apr 22 09:00:45 2025 GMT
Not After : Apr 23 09:00:45 2025 GMT
Subject: CN=9b0125b5d09121bf51eab8b4aec552fa0aa4fccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:30:3c:9f:0f:d8:fa:39:c5:4b:65:15:38:
fd:97:71:43:f3:9a:67:69:cd:c5:35:03:63:81:a7:
d9:e0:52:a4:44:73:ad:f5:a3:5b:13:1c:74:56:a3:
d9:a7:57:b6:64:4e:3a:32:8d:4b:36:fb:c7:2f:04:
8a:0c:4b:27:89:c0:08:e2:d1:27:23:5c:e5:be:8d:
57:61:f4:8b:5e:cc:73:b1:27:e2:75:0e:da:de:f2:
b5:df:ff:df:a7:95:9f:84:24:54:b2:ad:9d:65:7c:
eb:aa:5a:95:86:17:79:ed:8c:65:97:0b:a9:15:32:
f0:47:47:e6:11:4b:68:2b:1c:9d:e8:43:d4:56:33:
f0:67:75:01:aa:cf:8e:6a:c1:8b:6d:77:5e:d8:77:
b7:b6:e0:89:49:ae:aa:d0:7d:90:a8:71:e1:dd:bb:
e7:17:d3:49:ff:41:31:8d:9f:fe:82:3b:e1:df:ce:
8c:54:b8:51:75:22:0d:68:a4:d7:e2:3f:04:b4:4d:
20:50:6f:bf:2c:0d:ee:a8:c8:1d:0c:47:b2:f2:5b:
74:1d:a0:6f:a9:e9:66:9a:82:98:d0:f2:f0:1e:30:
b5:28:8a:2f:35:f0:d8:7c:a4:07:14:b2:d6:02:02:
6a:c1:b9:f2:b8:67:31:17:b6:98:d2:71:74:c9:de:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:25:B5:D0:91:21:BF:51:EA:B8:B4:AE:C5:52:FA:0A:A4:FC:CC
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7c:77:be:bd:c7:56:f4:f1:94:c9:ef:f3:7c:91:84:d7:2d:
54:b1:57:2a:84:ec:8c:f6:16:b8:0f:d6:cf:88:5c:47:fa:ad:
b6:2f:f6:18:86:96:f8:ab:97:c0:e7:3c:34:d2:b0:ab:31:50:
92:1b:7e:47:7e:f0:d6:94:fe:32:b1:13:8a:09:90:0b:3b:5a:
20:47:7f:7d:42:b7:d9:1a:20:a0:a8:34:fb:87:6f:a9:06:94:
bf:dd:04:8a:9d:c9:9f:51:e8:7a:0e:09:06:95:8e:53:e3:1c:
a8:9d:f8:6b:88:40:57:9c:df:11:e6:55:11:d0:1b:60:2c:08:
23:c4:ad:68:fc:fc:10:4e:ea:b9:ec:1a:13:a7:dd:49:06:8f:
26:60:5c:b3:c8:e4:1d:74:1b:21:c1:35:68:bd:3d:42:f4:aa:
a1:98:a1:4e:52:94:cb:df:0b:93:92:98:21:f0:0f:3d:b2:ca:
bd:bc:83:0b:f5:06:f6:c3:41:64:c5:05:f6:ea:6d:12:ac:b7:
a6:9d:67:a9:05:c3:27:73:5f:7a:20:cb:6f:a9:cc:38:a2:a1:
9c:d2:b7:e7:03:60:72:8a:1b:f1:39:d2:3a:f8:c5:ab:25:d2:
49:79:20:d1:0f:44:26:78:dc:07:ee:5a:39:6c:46:7b:31:25:
4e:60:bb:04
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZcunZv4uVRptr7Jy6enftGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjUwNDIyMDkwMDQ1WhcNMjUwNDIzMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg5YjAxMjViNWQwOTEyMWJmNTFlYWI4YjRhZWM1NTJmYTBhYTRmY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueowPJ8P2Po5xUtlFTj9l3FD85pn
ac3FNQNjgafZ4FKkRHOt9aNbExx0VqPZp1e2ZE46Mo1LNvvHLwSKDEsnicAI4tEn
I1zlvo1XYfSLXsxzsSfidQ7a3vK13//fp5WfhCRUsq2dZXzrqlqVhhd57Yxllwup
FTLwR0fmEUtoKxyd6EPUVjPwZ3UBqs+OasGLbXde2He3tuCJSa6q0H2QqHHh3bvn
F9NJ/0ExjZ/+gjvh386MVLhRdSINaKTX4j8EtE0gUG+/LA3uqMgdDEey8lt0HaBv
qelmmoKY0PLwHjC1KIovNfDYfKQHFLLWAgJqwbnyuGcxF7aY0nF0yd6YfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJsBJbXQkSG/Ueq4tK7FUvoKpPzMMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3x3
vr3HVvTxlMnv83yRhNctVLFXKoTsjPYWuA/Wz4hcR/qtti/2GIaW+KuXwOc8NNKw
qzFQkht+R37w1pT+MrETigmQCztaIEd/fUK32RogoKg0+4dvqQaUv90Eip3Jn1Ho
eg4JBpWOU+McqJ34a4hAV5zfEeZVEdAbYCwII8StaPz8EE7quewaE6fdSQaPJmBc
s8jkHXQbIcE1aL09QvSqoZihTlKUy98Lk5KYIfAPPbLKvbyDC/UG9sNBZMUF9upt
Eqy3pp1nqQXDJ3NfeiDLb6nMOKKhnNK35wNgcoob8TnSOvjFqyXSSXkg0Q9EJnjc
B+5aOWxGezElTmC7BA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:00:06 2025 by rpki-client