Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json)
Hash identifier: a/OSVu45639mmUBGJ7vf99azD1rFX6d7h6+CrwIsRGE=
Subject key identifier: B2:59:38:56:55:FB:CC:F4:41:0F:12:A5:FE:95:F9:F0:FF:8E:94:D4
Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Certificate serial: 01965348F066F9699B9CB463DFBFE9003682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 13:00:11 +0000
Manifest this update: Sun 20 Apr 2025 13:00:11 +0000
Manifest next update: Mon 21 Apr 2025 13:00:11 +0000
Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: LomKkp42g5pm32uar0ZSnksVw8lZrnqNs62+FLia+1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:48:f0:66:f9:69:9b:9c:b4:63:df:bf:e9:00:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b
Validity
Not Before: Apr 20 13:00:11 2025 GMT
Not After : Apr 21 13:00:11 2025 GMT
Subject: CN=b259385655fbccf4410f12a5fe95f9f0ff8e94d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e1:1a:b5:f4:a0:56:4f:ec:fe:26:14:a9:3b:
c9:4d:7c:ed:4f:26:99:bb:58:ca:c2:98:2a:9b:17:
dc:30:b3:63:94:d2:ac:9e:7a:16:6f:9a:f9:bb:7f:
17:a8:c4:46:dc:cf:63:e4:f6:40:cb:f3:f3:15:1c:
83:4b:16:a4:88:98:75:0a:0e:7f:e8:1f:c8:67:5c:
52:64:65:34:71:60:a3:36:5b:89:8b:de:85:5c:08:
31:0d:40:c7:c5:f4:ec:62:15:6c:b1:89:29:4e:e4:
93:e1:d3:d5:76:fb:9c:eb:3d:1e:d6:21:d7:0f:c9:
96:4b:2c:b4:b7:1d:a5:d7:c7:7c:34:19:9c:3a:6c:
8e:fa:93:87:34:e0:90:0f:5f:d5:23:0b:16:be:84:
42:b3:23:16:df:22:ec:1a:5a:29:46:d6:56:0c:98:
d9:aa:c5:b0:b5:72:28:a7:b9:a6:16:56:c8:1f:46:
3b:12:47:ee:45:61:47:c6:b8:e9:05:75:22:0e:d5:
90:a4:90:a7:96:4d:b4:68:45:69:d1:c8:f0:d8:9f:
d6:8e:f2:bf:b6:d8:41:53:b3:c5:df:22:c6:5c:cc:
e6:88:e5:cf:81:16:0b:17:50:21:ec:66:ce:6d:8b:
e0:b7:d0:bf:c0:49:29:fd:28:89:4c:b4:19:96:ca:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:38:56:55:FB:CC:F4:41:0F:12:A5:FE:95:F9:F0:FF:8E:94:D4
X509v3 Authority Key Identifier:
keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2c:29:96:6c:3d:b7:f3:49:d9:8a:f6:21:8a:60:65:c7:65:
67:ab:fb:69:21:83:89:44:cf:44:03:d7:b6:53:71:dc:9d:3c:
5f:b5:cf:17:d9:75:52:60:e9:87:6d:6d:31:a8:43:38:5a:fe:
07:d1:22:4a:9a:f4:2d:19:c2:50:f2:32:90:9c:94:a4:1b:ca:
05:58:75:a4:6a:46:ed:dc:8f:dd:6c:42:91:da:9e:3f:c1:26:
a2:23:d9:34:4a:a7:c7:bf:54:8a:8d:00:b2:f2:e9:b9:e5:51:
ce:f4:71:96:56:5f:70:0e:96:38:6a:4b:e7:f7:8f:13:83:ee:
76:ec:f1:2a:93:5c:f9:28:2e:95:c9:b8:6f:6a:c8:30:5a:5a:
9c:ee:8e:74:f3:c1:97:d1:f0:ab:d9:b5:a2:cd:43:52:bd:8a:
b5:1f:c4:f7:0e:ba:bd:20:67:a7:bd:79:88:b4:42:3f:04:c4:
96:d7:1b:e6:b6:34:03:17:8d:42:a4:13:0c:ca:d2:30:29:f6:
a4:9a:5d:0e:da:28:e8:06:00:60:d8:ba:10:2d:1c:bb:59:39:
c3:bb:51:5f:30:a3:80:af:d2:de:a9:10:60:12:91:fc:42:65:
d8:6f:dd:71:fe:c8:87:84:51:73:5a:26:1c:28:80:4d:e9:91:
18:6a:fe:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSPBm+WmbnLRj37/pADaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYzUwMzUwMDM1NmMyMzcyZjc5NWIxMGQwZjdkNTg5ZGY2
OWZjOGIwHhcNMjUwNDIwMTMwMDExWhcNMjUwNDIxMTMwMDExWjAzMTEwLwYDVQQD
EyhiMjU5Mzg1NjU1ZmJjY2Y0NDEwZjEyYTVmZTk1ZjlmMGZmOGU5NGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eEatfSgVk/s/iYUqTvJTXztTyaZ
u1jKwpgqmxfcMLNjlNKsnnoWb5r5u38XqMRG3M9j5PZAy/PzFRyDSxakiJh1Cg5/
6B/IZ1xSZGU0cWCjNluJi96FXAgxDUDHxfTsYhVssYkpTuST4dPVdvuc6z0e1iHX
D8mWSyy0tx2l18d8NBmcOmyO+pOHNOCQD1/VIwsWvoRCsyMW3yLsGlopRtZWDJjZ
qsWwtXIop7mmFlbIH0Y7EkfuRWFHxrjpBXUiDtWQpJCnlk20aEVp0cjw2J/WjvK/
tthBU7PF3yLGXMzmiOXPgRYLF1Ah7GbObYvgt9C/wEkp/SiJTLQZlsr6SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJZOFZV+8z0QQ8Spf6V+fD/jpTUMB8GA1UdIwQY
MBaAFJ/FA1ADVsI3L3lbEND31YnfafyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEt
ODQwODE2NmJiNzYxLzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEtODQwODE2NmJiNzYx
LzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCwplmw9
t/NJ2Yr2IYpgZcdlZ6v7aSGDiUTPRAPXtlNx3J08X7XPF9l1UmDph21tMahDOFr+
B9EiSpr0LRnCUPIykJyUpBvKBVh1pGpG7dyP3WxCkdqeP8EmoiPZNEqnx79Uio0A
svLpueVRzvRxllZfcA6WOGpL5/ePE4PuduzxKpNc+Sgulcm4b2rIMFpanO6OdPPB
l9Hwq9m1os1DUr2KtR/E9w66vSBnp715iLRCPwTEltcb5rY0AxeNQqQTDMrSMCn2
pJpdDtoo6AYAYNi6EC0cu1k5w7tRXzCjgK/S3qkQYBKR/EJl2G/dcf7Ih4RRc1om
HCiATemRGGr+cA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:20:49 2025 by rpki-client