Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
File: kO4Jv_TXomLQaTBzsll1WOSAdRg.mft (raw, json)
Hash identifier: UEsWwmXhalW3i2sJOsZKBLQ0eSWCgG6uR6UbToP+9XU=
Subject key identifier: 36:9D:D9:44:07:4E:C7:C3:94:80:5B:17:DB:AA:2F:60:D0:A9:59:A3
Authority key identifier: 90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
Certificate issuer: /CN=90ee09bff4d7a262d0693073b2597558e4807518
Certificate serial: 01965681A29BA85A7F2D1E95B9BDAEF924DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
Manifest number: 148C
Signing time: Mon 21 Apr 2025 04:00:58 +0000
Manifest this update: Mon 21 Apr 2025 04:00:58 +0000
Manifest next update: Tue 22 Apr 2025 04:00:58 +0000
Files and hashes: 1: kO4Jv_TXomLQaTBzsll1WOSAdRg.crl (hash: ILcGsUWzHTfmFyBZpe6bLE7HBd6omdWiObvZwBXEd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:a2:9b:a8:5a:7f:2d:1e:95:b9:bd:ae:f9:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ee09bff4d7a262d0693073b2597558e4807518
Validity
Not Before: Apr 21 04:00:58 2025 GMT
Not After : Apr 22 04:00:58 2025 GMT
Subject: CN=369dd944074ec7c394805b17dbaa2f60d0a959a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:fb:89:65:65:ee:bf:67:9b:e5:0b:e6:72:
15:f8:5f:37:b4:ad:ea:40:90:6e:77:80:df:50:68:
a2:95:69:05:e4:b0:52:e3:4d:6f:9a:46:01:2a:be:
63:cf:90:50:3e:d7:4f:1c:e2:7e:4b:2f:aa:e1:b0:
fb:47:05:a9:5e:4c:fe:55:09:ef:63:ac:28:3d:73:
d9:c7:fa:ba:04:15:58:fb:ca:01:d1:79:8d:96:b3:
ed:eb:30:4f:97:d8:83:83:1b:d8:17:b2:33:08:32:
40:9e:fb:8c:ab:ef:e1:fe:84:ba:f3:15:d4:42:33:
4f:36:89:7a:9b:8c:7b:3c:c0:56:87:23:ef:57:78:
84:c2:af:6c:96:8e:00:48:e6:62:d6:b9:6a:09:42:
33:e2:cc:4d:7a:7b:ef:f1:83:c7:09:55:30:9d:91:
00:98:05:82:56:bb:6e:25:dd:84:41:f1:0d:1f:07:
8f:db:3a:dd:72:ff:46:09:44:6a:89:bb:03:69:b3:
65:3c:05:b7:64:66:cd:aa:6c:a8:9a:3c:4c:b1:85:
56:f6:a2:8b:f0:2d:51:af:98:50:95:39:5d:f6:42:
b7:55:4b:d8:a3:ca:a9:db:cd:dd:52:c3:82:a1:85:
75:b3:3c:74:0b:e0:d8:68:27:51:dd:eb:c7:9f:37:
58:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:D9:44:07:4E:C7:C3:94:80:5B:17:DB:AA:2F:60:D0:A9:59:A3
X509v3 Authority Key Identifier:
keyid:90:EE:09:BF:F4:D7:A2:62:D0:69:30:73:B2:59:75:58:E4:80:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kO4Jv_TXomLQaTBzsll1WOSAdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3cb72-4e5a-4fbb-81dd-f8dc95350b85/1/kO4Jv_TXomLQaTBzsll1WOSAdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ff:85:53:2a:83:d7:14:40:eb:87:65:50:8a:c2:4f:de:e7:
c8:38:07:48:ed:ab:10:f2:f1:09:20:85:96:82:50:48:09:68:
d4:3e:cb:c3:d1:58:14:89:0a:1d:41:47:0c:c4:e4:5a:b2:f2:
f6:18:33:69:da:d9:8a:2c:a8:68:a5:01:5b:e4:d7:dc:5a:21:
ea:bd:0b:cb:63:a5:ff:c2:98:1c:e9:82:58:d0:a7:b4:ca:36:
71:d7:de:0e:2b:a7:99:fa:ac:f9:63:ad:5e:da:33:44:d1:06:
e4:0f:99:8a:eb:8c:34:5d:ba:6b:5b:ac:99:6c:cc:5f:35:1a:
22:7f:67:a1:e7:af:6f:fc:c4:7e:8a:4d:7d:71:46:7c:00:73:
13:09:48:6f:9b:f9:fb:0e:f8:76:8c:02:fe:07:ba:a6:b6:5e:
06:d1:c2:22:b1:eb:86:51:a7:58:86:f3:7f:72:11:32:25:13:
f9:27:a1:2d:35:22:5f:b5:54:4e:78:c6:da:9e:35:59:df:97:
b3:10:cc:99:7e:a1:b5:5b:ca:0f:67:4d:d5:44:d2:60:bf:9d:
41:fa:7e:40:0f:eb:17:ac:0b:2f:56:bf:c2:2d:14:85:e5:67:
24:36:c6:97:f9:c5:7a:21:50:cc:c6:54:fd:63:f1:2d:03:44:
7d:9f:4b:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgaKbqFp/LR6Vub2u+STaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWUwOWJmZjRkN2EyNjJkMDY5MzA3M2IyNTk3NTU4ZTQ4
MDc1MTgwHhcNMjUwNDIxMDQwMDU4WhcNMjUwNDIyMDQwMDU4WjAzMTEwLwYDVQQD
EygzNjlkZDk0NDA3NGVjN2MzOTQ4MDViMTdkYmFhMmY2MGQwYTk1OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndn7iWVl7r9nm+UL5nIV+F83tK3q
QJBud4DfUGiilWkF5LBS401vmkYBKr5jz5BQPtdPHOJ+Sy+q4bD7RwWpXkz+VQnv
Y6woPXPZx/q6BBVY+8oB0XmNlrPt6zBPl9iDgxvYF7IzCDJAnvuMq+/h/oS68xXU
QjNPNol6m4x7PMBWhyPvV3iEwq9slo4ASOZi1rlqCUIz4sxNenvv8YPHCVUwnZEA
mAWCVrtuJd2EQfENHweP2zrdcv9GCURqibsDabNlPAW3ZGbNqmyomjxMsYVW9qKL
8C1Rr5hQlTld9kK3VUvYo8qp283dUsOCoYV1szx0C+DYaCdR3evHnzdYNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDad2UQHTsfDlIBbF9uqL2DQqVmjMB8GA1UdIwQY
MBaAFJDuCb/016Ji0Gkwc7JZdVjkgHUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQt
ZjhkYzk1MzUwYjg1LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mM2NiNzItNGU1YS00ZmJiLTgxZGQtZjhkYzk1MzUwYjg1
LzEva080SnZfVFhvbUxRYVRCenNsbDFXT1NBZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMf+FUyqD
1xRA64dlUIrCT97nyDgHSO2rEPLxCSCFloJQSAlo1D7Lw9FYFIkKHUFHDMTkWrLy
9hgzadrZiiyoaKUBW+TX3Foh6r0Ly2Ol/8KYHOmCWNCntMo2cdfeDiunmfqs+WOt
XtozRNEG5A+ZiuuMNF26a1usmWzMXzUaIn9noeevb/zEfopNfXFGfABzEwlIb5v5
+w74dowC/ge6prZeBtHCIrHrhlGnWIbzf3IRMiUT+SehLTUiX7VUTnjG2p41Wd+X
sxDMmX6htVvKD2dN1UTSYL+dQfp+QA/rF6wLL1a/wi0UheVnJDbGl/nFeiFQzMZU
/WPxLQNEfZ9L2w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:33 2025 by rpki-client