Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: dsnZUDHkWBYiE+EIzb94W6RfeTYgbirHLFPQrjUeW/I=
Subject key identifier: 88:3F:72:6F:3D:CC:D9:C6:9B:C9:0E:D6:F6:32:AB:52:E6:F5:7A:1C
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 0196534953943F2D0B044E59CB7237E024D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 14F8
Signing time: Sun 20 Apr 2025 13:00:36 +0000
Manifest this update: Sun 20 Apr 2025 13:00:36 +0000
Manifest next update: Mon 21 Apr 2025 13:00:36 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: 7MiRAJ6+uVFQEKRGQvCUM73RUvSaE3ZqTD9aDO/59KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:53:94:3f:2d:0b:04:4e:59:cb:72:37:e0:24:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Apr 20 13:00:36 2025 GMT
Not After : Apr 21 13:00:36 2025 GMT
Subject: CN=883f726f3dccd9c69bc90ed6f632ab52e6f57a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:38:b7:5e:0e:69:1d:69:31:50:97:37:89:
ef:a8:04:f0:84:5a:24:d7:05:1a:33:06:84:c2:60:
36:9e:ed:5d:03:22:1d:92:af:b4:fd:ec:44:3c:e8:
92:fe:b3:56:bc:25:6c:6e:a3:4b:d2:a6:89:d0:62:
a6:b2:81:03:63:43:f0:5f:e7:77:13:ab:08:37:91:
7b:85:93:6f:91:46:a5:4b:14:9d:86:74:43:75:bd:
5a:17:f0:fc:23:ee:8f:d4:b8:72:d6:60:f1:74:81:
d9:64:2f:79:4f:95:06:73:21:a0:e2:05:f7:0e:7c:
f0:b3:75:e9:33:d2:16:b4:dd:92:d9:10:cd:22:cb:
63:76:a0:6e:43:79:ed:76:8a:95:8e:1b:47:01:f6:
2f:94:b1:9b:b9:b7:20:ff:8a:97:bf:93:8c:f2:1c:
17:5d:f7:99:eb:c8:02:cb:5b:da:d0:c2:95:d8:b9:
4a:df:f1:0b:e6:df:33:82:f7:3e:54:81:26:d9:f2:
9a:b6:eb:c4:17:46:53:29:a7:b8:46:51:57:31:e3:
6f:45:93:d9:e5:b8:84:37:6e:ed:dc:1f:4e:08:6b:
b4:64:13:27:75:b7:31:74:4b:40:fe:8a:bd:8a:8b:
3a:11:49:94:c0:39:27:48:c7:bf:c0:ed:37:f6:31:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:72:6F:3D:CC:D9:C6:9B:C9:0E:D6:F6:32:AB:52:E6:F5:7A:1C
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:85:27:8e:4b:d5:95:10:87:df:38:84:be:99:3b:d6:61:21:
42:3b:7e:cc:84:65:38:d5:21:05:2c:f1:ef:53:73:92:73:0f:
60:0c:d3:8d:08:49:1e:12:90:55:ce:95:53:7a:c8:21:a2:ea:
ae:28:04:84:01:87:0c:2d:cf:1c:1e:18:07:b9:b4:27:5f:ee:
6a:61:1b:9a:54:ff:ca:98:db:0a:c9:07:77:3c:7a:d1:89:bb:
c1:94:ad:c4:85:47:f7:35:ca:29:c1:4d:fe:d9:6d:ca:75:f5:
92:7c:1b:69:89:b7:f6:84:12:28:b8:d1:07:d6:68:78:6b:da:
93:cc:06:ee:9b:36:46:a1:5a:30:01:1b:51:cb:1a:20:36:de:
29:16:c4:10:3d:63:b9:cd:d2:3b:89:88:23:c3:4d:5d:4d:a2:
de:e3:89:40:5d:e6:73:e3:63:29:c1:41:d7:07:68:ae:e5:0c:
79:bf:ad:40:2a:7a:70:16:56:ef:a0:e6:21:a4:13:23:aa:25:
6d:75:b4:53:b5:d7:e8:79:9f:1f:1d:6b:d0:ba:82:09:ee:ec:
1f:a2:f2:04:d9:2c:78:1a:8c:b0:07:d5:26:15:37:92:31:db:
f0:b7:bd:cc:a2:b0:bc:ee:11:94:a2:c3:45:c2:ce:05:75:8e:
a8:af:a2:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSVOUPy0LBE5Zy3I34CTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjUwNDIwMTMwMDM2WhcNMjUwNDIxMTMwMDM2WjAzMTEwLwYDVQQD
Eyg4ODNmNzI2ZjNkY2NkOWM2OWJjOTBlZDZmNjMyYWI1MmU2ZjU3YTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPY4t14OaR1pMVCXN4nvqATwhFok
1wUaMwaEwmA2nu1dAyIdkq+0/exEPOiS/rNWvCVsbqNL0qaJ0GKmsoEDY0PwX+d3
E6sIN5F7hZNvkUalSxSdhnRDdb1aF/D8I+6P1Lhy1mDxdIHZZC95T5UGcyGg4gX3
Dnzws3XpM9IWtN2S2RDNIstjdqBuQ3ntdoqVjhtHAfYvlLGbubcg/4qXv5OM8hwX
XfeZ68gCy1va0MKV2LlK3/EL5t8zgvc+VIEm2fKatuvEF0ZTKae4RlFXMeNvRZPZ
5biEN27t3B9OCGu0ZBMndbcxdEtA/oq9ios6EUmUwDknSMe/wO039jGINwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg/cm89zNnGm8kO1vYyq1Lm9XocMB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoUnjkvV
lRCH3ziEvpk71mEhQjt+zIRlONUhBSzx71NzknMPYAzTjQhJHhKQVc6VU3rIIaLq
rigEhAGHDC3PHB4YB7m0J1/uamEbmlT/ypjbCskHdzx60Ym7wZStxIVH9zXKKcFN
/tltynX1knwbaYm39oQSKLjRB9ZoeGvak8wG7ps2RqFaMAEbUcsaIDbeKRbEED1j
uc3SO4mII8NNXU2i3uOJQF3mc+NjKcFB1wdoruUMeb+tQCp6cBZW76DmIaQTI6ol
bXW0U7XX6HmfHx1r0LqCCe7sH6LyBNkseBqMsAfVJhU3kjHb8Le9zKKwvO4RlKLD
RcLOBXWOqK+ixw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:50 2025 by rpki-client