Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json)
Hash identifier: SlhgZnvPnNcaXdDx/ySgAZTFwYVAwnq5u2U5HorOfvk=
Subject key identifier: 2A:8F:1B:57:E5:DD:51:55:40:5A:FD:56:BC:DD:30:5E:19:08:F0:53
Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593
Certificate serial: 019654932CCC5B2055FBD22325A2C12C2D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
Manifest number: 144D
Signing time: Sun 20 Apr 2025 19:00:53 +0000
Manifest this update: Sun 20 Apr 2025 19:00:53 +0000
Manifest next update: Mon 21 Apr 2025 19:00:53 +0000
Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: Ciax6bAydNnys8ZtiE4Aso2USpNh75yNzIANhA/ieB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:2c:cc:5b:20:55:fb:d2:23:25:a2:c1:2c:2d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593
Validity
Not Before: Apr 20 19:00:53 2025 GMT
Not After : Apr 21 19:00:53 2025 GMT
Subject: CN=2a8f1b57e5dd5155405afd56bcdd305e1908f053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:61:82:35:48:96:af:1a:09:9a:c7:24:f1:
3b:f0:a0:d3:4e:1c:b1:cf:84:e1:14:50:30:c7:75:
13:6b:de:ff:fe:67:60:57:24:7d:86:2e:ad:96:4a:
c8:40:54:ac:61:95:ad:33:25:07:c7:52:92:b9:19:
ed:ca:61:fd:a9:cf:30:f3:19:01:6d:f0:14:14:c9:
ed:73:e3:82:9a:74:50:12:eb:b4:e2:fb:6d:4c:d4:
ba:22:c4:4c:21:26:88:af:f5:05:18:14:03:01:9d:
3e:4e:45:fc:5e:59:4d:c9:38:c0:63:13:ef:69:59:
20:40:2c:1e:54:6b:5c:e5:9c:dd:00:38:0f:a5:bc:
60:23:0b:0a:8d:ee:d9:aa:53:3f:29:60:98:b0:c9:
13:36:bb:fd:52:07:a1:ad:94:cd:b5:28:52:d0:72:
9d:59:ef:f4:b3:90:c9:9c:14:e8:fd:df:cd:1e:88:
aa:db:7c:2f:62:9b:65:0f:a0:63:97:31:e7:ed:86:
cd:1e:47:7e:b2:53:e5:c3:fd:a4:0e:21:53:80:0d:
cf:04:20:c9:de:be:3a:13:1b:e9:6b:76:0a:8f:0a:
30:01:29:29:7d:12:f6:31:e5:ec:67:9e:6a:1e:bf:
1c:2c:6c:74:d4:df:71:20:d5:e0:1a:a6:61:88:00:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8F:1B:57:E5:DD:51:55:40:5A:FD:56:BC:DD:30:5E:19:08:F0:53
X509v3 Authority Key Identifier:
keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:30:a6:a3:c3:03:b0:61:e8:f2:e3:da:c1:ef:b2:35:06:9c:
49:8d:d8:72:36:b9:5f:9c:cd:f5:9c:54:02:15:eb:c6:5d:1e:
2f:6d:e1:07:f5:4f:7f:0e:07:d1:d4:9f:6c:a2:85:a9:5f:e7:
61:72:da:4f:2c:35:2a:2a:a1:83:d0:a2:9f:3c:73:3c:a8:1e:
dd:d9:33:42:47:94:6e:b5:c4:fc:18:17:04:36:af:16:ab:c2:
67:24:79:75:82:92:c3:f9:5a:93:69:d5:6f:ec:30:82:9b:34:
02:71:6e:7a:df:d2:0d:25:a3:19:33:c6:08:9b:b2:c0:e6:31:
69:3a:67:bb:a5:e3:99:2e:19:55:62:13:b7:89:aa:d5:34:13:
8d:a8:ba:ed:0d:19:52:59:f5:10:51:cc:a1:8b:c9:56:e8:79:
0b:2a:20:a2:f8:af:91:72:87:93:a9:69:03:8d:a0:9c:a8:41:
a0:13:09:42:b4:cf:1c:2c:04:d5:a9:28:ee:c3:79:a7:bb:9d:
a9:d9:76:25:3e:4a:4d:ab:d6:84:13:2a:77:94:1e:46:81:ac:
ae:f0:56:ca:c9:c9:24:d7:19:71:06:83:b5:ec:c8:21:c0:86:
d7:43:5f:dd:fe:c1:36:46:fd:9c:4c:c0:b3:78:ac:1e:54:69:
97:10:60:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkyzMWyBV+9IjJaLBLC0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky
OTg1OTMwHhcNMjUwNDIwMTkwMDUzWhcNMjUwNDIxMTkwMDUzWjAzMTEwLwYDVQQD
EygyYThmMWI1N2U1ZGQ1MTU1NDA1YWZkNTZiY2RkMzA1ZTE5MDhmMDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8dhgjVIlq8aCZrHJPE78KDTThyx
z4ThFFAwx3UTa97//mdgVyR9hi6tlkrIQFSsYZWtMyUHx1KSuRntymH9qc8w8xkB
bfAUFMntc+OCmnRQEuu04vttTNS6IsRMISaIr/UFGBQDAZ0+TkX8XllNyTjAYxPv
aVkgQCweVGtc5ZzdADgPpbxgIwsKje7ZqlM/KWCYsMkTNrv9UgehrZTNtShS0HKd
We/0s5DJnBTo/d/NHoiq23wvYptlD6BjlzHn7YbNHkd+slPlw/2kDiFTgA3PBCDJ
3r46Exvpa3YKjwowASkpfRL2MeXsZ55qHr8cLGx01N9xINXgGqZhiADowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqPG1fl3VFVQFr9VrzdMF4ZCPBTMB8GA1UdIwQY
MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt
NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm
LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzCmo8MD
sGHo8uPawe+yNQacSY3Ycja5X5zN9ZxUAhXrxl0eL23hB/VPfw4H0dSfbKKFqV/n
YXLaTyw1Kiqhg9CinzxzPKge3dkzQkeUbrXE/BgXBDavFqvCZyR5dYKSw/lak2nV
b+wwgps0AnFuet/SDSWjGTPGCJuywOYxaTpnu6XjmS4ZVWITt4mq1TQTjai67Q0Z
Uln1EFHMoYvJVuh5CyogovivkXKHk6lpA42gnKhBoBMJQrTPHCwE1ako7sN5p7ud
qdl2JT5KTavWhBMqd5QeRoGsrvBWysnJJNcZcQaDtezIIcCG10Nf3f7BNkb9nEzA
s3isHlRplxBgLA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:50:58 2025 by rpki-client