Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
File: pnUQ3cUswCV-TCVS9b1XVURUxgs.mft (raw, json)
Hash identifier: J9CtgL/iMGMFt6oAjms4/bmyw+9BtT9RCn9FRXcuP2c=
Subject key identifier: D4:DD:01:E3:14:AC:EE:35:68:F8:92:DC:A9:9C:D6:19:DB:AE:B5:EA
Authority key identifier: A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B
Certificate issuer: /CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
Certificate serial: 019659B999C8D0E87F38F0D692AA1B70E963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
Manifest number: 047E
Signing time: Mon 21 Apr 2025 19:00:57 +0000
Manifest this update: Mon 21 Apr 2025 19:00:57 +0000
Manifest next update: Tue 22 Apr 2025 19:00:57 +0000
Files and hashes: 1: pnUQ3cUswCV-TCVS9b1XVURUxgs.crl (hash: Muv0l5a7hnQyCnAzp++PUESVObkKUuw8+ii/MwYuk2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:99:c8:d0:e8:7f:38:f0:d6:92:aa:1b:70:e9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
Validity
Not Before: Apr 21 19:00:57 2025 GMT
Not After : Apr 22 19:00:57 2025 GMT
Subject: CN=d4dd01e314acee3568f892dca99cd619dbaeb5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:1a:9c:07:be:aa:14:72:11:74:f9:f5:12:
e8:5c:82:80:b5:8e:fa:84:01:5b:6e:89:1e:62:ed:
fb:60:e0:b2:ed:69:50:96:5a:ce:b3:a7:d5:41:07:
66:c4:0e:4a:73:4c:c2:ff:91:d9:9d:83:45:5e:fa:
53:ed:c9:13:94:58:0f:88:88:6e:3b:0e:e1:e0:33:
68:b7:74:66:9f:32:57:bc:14:fb:7b:be:17:8a:48:
fe:be:b8:ac:0c:7b:7c:9c:ab:74:1a:e3:53:30:26:
6a:a8:3b:84:b0:13:fd:3e:2f:65:b7:80:fb:bd:9c:
74:0e:22:b9:76:9f:66:47:14:b3:05:e6:9c:d5:25:
3e:32:e3:03:f3:d4:eb:d6:bf:17:7b:7f:f2:00:33:
a9:40:71:95:ca:5a:6a:54:1f:21:81:4d:70:cc:c9:
b2:0e:cd:1b:5f:dc:c7:2b:9d:c2:8c:6b:37:07:54:
0d:11:ae:ec:e2:3a:0b:ac:47:8a:61:56:79:96:aa:
c9:1e:e7:b3:bc:ba:b4:77:67:20:91:d1:78:6a:71:
72:21:64:5f:e9:92:65:2c:cc:21:9b:c7:82:1e:ee:
3e:d7:84:b2:6f:42:a6:3b:68:bc:6b:a6:a1:1c:a0:
47:72:ed:57:b8:db:34:16:ea:64:6e:3e:e0:e7:01:
24:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:01:E3:14:AC:EE:35:68:F8:92:DC:A9:9C:D6:19:DB:AE:B5:EA
X509v3 Authority Key Identifier:
keyid:A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:78:50:97:89:9b:0f:2c:db:18:33:b6:c1:84:4b:f0:11:33:
c3:d9:d0:de:7b:19:9f:4b:2a:a5:17:49:7f:c7:af:2a:31:95:
8c:d7:d2:be:99:f5:83:f2:bf:a5:63:8c:21:47:cd:e3:db:c5:
10:56:85:08:c5:c2:e8:69:e5:1c:1a:e4:9e:10:ed:88:c6:a9:
94:5e:e9:c9:20:2e:eb:be:35:e3:4a:d0:0c:51:83:21:64:81:
a3:fd:76:ae:58:0a:92:52:ed:2e:57:a0:0f:b5:bf:f1:76:d6:
fd:ba:3d:1b:df:73:00:f2:83:c4:1d:6e:2d:ad:4d:37:7d:fc:
3a:f4:17:c3:6a:91:fe:ec:17:d3:60:58:6a:ed:c3:80:fb:5e:
b7:fb:bd:0e:c2:97:be:79:34:6a:58:c8:a7:11:9c:c0:b1:4b:
a8:5a:41:61:fe:5f:ac:2e:05:fb:3a:5e:5d:ef:c4:8e:c3:2d:
81:0b:9e:6e:f2:19:7a:3f:02:8c:47:06:74:24:2d:5d:20:c0:
8b:2b:3c:fe:e4:cc:17:4a:76:aa:79:f4:19:84:79:02:4b:ea:
78:6c:54:32:a0:f6:d9:ae:08:63:6b:af:0c:0d:ad:7c:d0:86:
6d:ca:e9:20:f4:73:e0:30:e4:63:2d:5c:aa:60:64:64:fa:c7:
df:4d:05:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuZnI0Oh/OPDWkqobcOljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NzUxMGRkYzUyY2MwMjU3ZTRjMjU1MmY1YmQ1NzU1NDQ1
NGM2MGIwHhcNMjUwNDIxMTkwMDU3WhcNMjUwNDIyMTkwMDU3WjAzMTEwLwYDVQQD
EyhkNGRkMDFlMzE0YWNlZTM1NjhmODkyZGNhOTljZDYxOWRiYWViNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdAanAe+qhRyEXT59RLoXIKAtY76
hAFbbokeYu37YOCy7WlQllrOs6fVQQdmxA5Kc0zC/5HZnYNFXvpT7ckTlFgPiIhu
Ow7h4DNot3RmnzJXvBT7e74Xikj+vrisDHt8nKt0GuNTMCZqqDuEsBP9Pi9lt4D7
vZx0DiK5dp9mRxSzBeac1SU+MuMD89Tr1r8Xe3/yADOpQHGVylpqVB8hgU1wzMmy
Ds0bX9zHK53CjGs3B1QNEa7s4joLrEeKYVZ5lqrJHuezvLq0d2cgkdF4anFyIWRf
6ZJlLMwhm8eCHu4+14Syb0KmO2i8a6ahHKBHcu1XuNs0Fupkbj7g5wEk+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTdAeMUrO41aPiS3Kmc1hnbrrXqMB8GA1UdIwQY
MBaAFKZ1EN3FLMAlfkwlUvW9V1VEVMYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG5VUTNjVXN3Q1YtVENWUzliMVhWVVJVeGdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMzFmNzgtNjhiYi00NzI5LWJkNjUt
NjBkMjU1YmUwNDc5LzEvcG5VUTNjVXN3Q1YtVENWUzliMVhWVVJVeGdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9lMzFmNzgtNjhiYi00NzI5LWJkNjUtNjBkMjU1YmUwNDc5
LzEvcG5VUTNjVXN3Q1YtVENWUzliMVhWVVJVeGdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnhQl4mb
DyzbGDO2wYRL8BEzw9nQ3nsZn0sqpRdJf8evKjGVjNfSvpn1g/K/pWOMIUfN49vF
EFaFCMXC6GnlHBrknhDtiMaplF7pySAu674140rQDFGDIWSBo/12rlgKklLtLleg
D7W/8XbW/bo9G99zAPKDxB1uLa1NN338OvQXw2qR/uwX02BYau3DgPtet/u9DsKX
vnk0aljIpxGcwLFLqFpBYf5frC4F+zpeXe/EjsMtgQuebvIZej8CjEcGdCQtXSDA
iys8/uTMF0p2qnn0GYR5AkvqeGxUMqD22a4IY2uvDA2tfNCGbcrpIPRz4DDkYy1c
qmBkZPrH300F2g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:56:50 2025 by rpki-client