Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: 0GZVrHG551Saq8FFlTmwG41qR49+hXCdU869iKVv7FA=
Subject key identifier: 3E:23:E2:BA:5F:11:B1:D9:1D:FD:7B:8E:21:5C:66:B6:4C:36:EB:AC
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 01965349602DA2A6F2D4DDF710153F7B38C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 14F9
Signing time: Sun 20 Apr 2025 13:00:39 +0000
Manifest this update: Sun 20 Apr 2025 13:00:39 +0000
Manifest next update: Mon 21 Apr 2025 13:00:39 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: NG7dM24/WxfdK/Z/bQz5eZPKObwpnVxywG7BYnOLmRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:60:2d:a2:a6:f2:d4:dd:f7:10:15:3f:7b:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Apr 20 13:00:39 2025 GMT
Not After : Apr 21 13:00:39 2025 GMT
Subject: CN=3e23e2ba5f11b1d91dfd7b8e215c66b64c36ebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:a8:f3:9a:bd:1e:3a:32:5c:0a:18:bb:e3:
70:9a:6d:d4:8c:03:bc:9e:13:cb:bf:90:70:ef:ec:
0c:9a:39:3d:62:5e:78:6f:21:0f:dc:85:f6:9e:13:
b3:f9:18:0d:a8:1e:20:13:6c:fa:60:3f:4c:77:0b:
cc:ec:96:95:f3:e2:cf:6e:2b:80:a8:d9:b9:85:72:
c7:7e:2c:dc:86:7d:ef:2c:22:4f:f6:73:87:64:1c:
16:44:7a:48:83:77:13:a7:5b:4f:cb:88:7b:74:a1:
68:d8:68:05:4b:30:17:ea:bf:85:2f:bc:f5:9a:c2:
1a:5a:3a:bf:ad:fe:13:21:d6:d7:50:fd:c2:8f:89:
d9:1c:75:50:a2:ef:bb:8c:e8:09:89:ca:1d:77:f4:
4b:db:da:74:1e:cf:cc:5a:9d:85:12:c3:a4:ec:e2:
88:2d:21:c6:61:e0:22:c7:27:11:7a:73:dd:b9:ae:
d8:24:4b:55:e2:ee:db:8e:2e:e1:f6:eb:93:18:bc:
af:ce:5c:39:6f:02:e5:0f:7a:23:b6:fc:d8:9e:fd:
ea:50:11:d0:22:33:ae:e3:b5:4b:3a:6e:77:81:d0:
de:4a:fe:40:47:31:55:ed:79:80:ff:9c:84:40:1f:
dd:a8:3f:a2:50:da:29:02:b2:f8:04:48:8d:e8:be:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:23:E2:BA:5F:11:B1:D9:1D:FD:7B:8E:21:5C:66:B6:4C:36:EB:AC
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:15:2b:5f:c2:29:d6:dc:cd:05:4e:35:71:4c:ce:49:fe:e4:
cd:d6:a2:57:60:6f:23:85:9b:e3:89:dc:0f:27:55:56:9d:7e:
29:72:f1:27:ea:a3:c2:5e:64:ec:d4:9c:ad:a0:f0:24:c2:6d:
df:ce:fb:4d:8a:1e:e7:23:4a:a2:bf:88:09:b6:5d:1c:4d:e8:
d0:27:9d:9e:01:2d:98:7a:93:76:b2:23:b2:9a:15:b8:9b:de:
b3:82:41:11:85:58:42:8b:9e:41:92:46:8d:61:db:1d:26:22:
3d:a4:6c:a5:28:57:57:2b:be:7f:ff:8b:98:22:ff:80:a2:14:
50:5b:73:bd:3f:ba:85:e6:4c:63:18:2b:74:5e:b0:2c:1d:76:
c5:d2:92:65:f4:99:ca:06:04:e4:4d:8b:6d:9d:83:d1:77:fe:
af:62:a9:b0:66:53:e4:38:4f:b0:34:cf:7f:4e:1f:51:3e:bf:
4b:2a:c7:a2:f4:70:8c:a6:e8:06:1f:8c:a1:aa:93:7a:41:42:
44:3c:97:01:16:ee:0e:1e:4c:93:34:63:a0:81:ef:6d:76:8b:
89:d4:fa:c1:f3:3a:c6:bd:1d:d0:f2:97:6b:a3:da:5a:63:6c:
e4:ed:3e:73:ef:e3:cf:dc:33:9d:4d:46:98:56:d2:a4:b6:9f:
21:3c:94:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSWAtoqby1N33EBU/ezjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODM3OTk5NjdlY2QwNGM1MzYxNDg5ZWU0Y2ZhMDk4Y2U0
MzY4NzEwHhcNMjUwNDIwMTMwMDM5WhcNMjUwNDIxMTMwMDM5WjAzMTEwLwYDVQQD
EygzZTIzZTJiYTVmMTFiMWQ5MWRmZDdiOGUyMTVjNjZiNjRjMzZlYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SCo85q9HjoyXAoYu+Nwmm3UjAO8
nhPLv5Bw7+wMmjk9Yl54byEP3IX2nhOz+RgNqB4gE2z6YD9MdwvM7JaV8+LPbiuA
qNm5hXLHfizchn3vLCJP9nOHZBwWRHpIg3cTp1tPy4h7dKFo2GgFSzAX6r+FL7z1
msIaWjq/rf4TIdbXUP3Cj4nZHHVQou+7jOgJicodd/RL29p0Hs/MWp2FEsOk7OKI
LSHGYeAixycRenPdua7YJEtV4u7bji7h9uuTGLyvzlw5bwLlD3ojtvzYnv3qUBHQ
IjOu47VLOm53gdDeSv5ARzFV7XmA/5yEQB/dqD+iUNopArL4BEiN6L40jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4j4rpfEbHZHf17jiFcZrZMNuusMB8GA1UdIwQY
MBaAFP6DeZln7NBMU2FInuTPoJjOQ2hxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYt
YzczYmVkY2RjYTZkLzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYtYzczYmVkY2RjYTZk
LzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBUrX8Ip
1tzNBU41cUzOSf7kzdaiV2BvI4Wb44ncDydVVp1+KXLxJ+qjwl5k7NScraDwJMJt
3877TYoe5yNKor+ICbZdHE3o0CedngEtmHqTdrIjspoVuJves4JBEYVYQoueQZJG
jWHbHSYiPaRspShXVyu+f/+LmCL/gKIUUFtzvT+6heZMYxgrdF6wLB12xdKSZfSZ
ygYE5E2LbZ2D0Xf+r2KpsGZT5DhPsDTPf04fUT6/SyrHovRwjKboBh+MoaqTekFC
RDyXARbuDh5MkzRjoIHvbXaLidT6wfM6xr0d0PKXa6PaWmNs5O0+c+/jz9wznU1G
mFbSpLafITyUmA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:42:45 2025 by rpki-client