Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json)
Hash identifier: aKjdA6kAtCpnBKJfrWrHhF6YXsRv5AYKR+bnk3pIYoI=
Subject key identifier: 61:CF:A9:8F:FC:8C:AB:28:70:00:A7:7F:5A:E3:FB:6C:2C:E1:0C:EF
Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9
Certificate serial: 0196549317EC5A9325758856859888AEFE4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 19:00:48 +0000
Manifest this update: Sun 20 Apr 2025 19:00:48 +0000
Manifest next update: Mon 21 Apr 2025 19:00:48 +0000
Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: n0CCGc4DZ2kt3LPnJMh0hVnT+1Lxcc4K6diIRvlDBA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:17:ec:5a:93:25:75:88:56:85:98:88:ae:fe:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9
Validity
Not Before: Apr 20 19:00:48 2025 GMT
Not After : Apr 21 19:00:48 2025 GMT
Subject: CN=61cfa98ffc8cab287000a77f5ae3fb6c2ce10cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:e3:8c:0c:62:1d:75:41:5b:d3:49:37:41:
96:ab:51:cf:0b:f0:66:2d:3d:b8:52:76:e3:02:53:
7d:61:c8:23:13:3f:a2:18:2b:1d:a1:73:9b:4c:ef:
52:21:c7:21:22:c4:47:69:e0:6c:f9:28:e8:95:77:
80:38:6c:8c:b0:f5:38:ce:6f:8b:e9:c5:4c:b5:ff:
a5:e7:b8:c5:21:68:57:21:2e:21:b5:7e:16:10:59:
38:5e:91:67:f8:32:49:20:aa:9b:33:a2:3a:11:a8:
87:a6:c7:0b:29:2d:17:e8:7b:7d:c0:88:65:fc:a5:
df:11:50:d8:b2:65:45:b1:6c:69:14:c9:11:3e:43:
7a:5e:7f:36:19:12:45:8c:27:21:7e:6d:3b:9c:d2:
a4:e1:1d:25:e6:37:52:bd:23:0c:79:c4:e6:aa:39:
03:cc:ef:0a:f4:8d:c1:b4:9a:10:84:86:2e:35:00:
9c:b7:c2:93:d3:c9:9d:ef:19:40:17:ae:37:47:d7:
13:da:34:9c:0a:db:55:0b:00:a5:28:1e:3c:42:65:
9c:be:e9:82:b6:dd:43:df:a2:61:b8:bf:64:87:24:
23:48:e7:64:71:12:98:b9:49:01:fc:69:96:60:37:
21:c0:8d:c8:bc:7b:6e:12:20:26:6e:2f:63:fc:6b:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:A9:8F:FC:8C:AB:28:70:00:A7:7F:5A:E3:FB:6C:2C:E1:0C:EF
X509v3 Authority Key Identifier:
keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:48:82:12:97:f4:b0:e7:1b:93:97:f9:46:5f:49:be:93:9f:
60:9b:65:dc:16:4d:ec:4a:bb:64:d6:85:ef:f3:7f:47:64:ef:
9e:06:75:52:ba:b7:ae:6d:15:5a:ce:da:29:60:74:f5:48:0c:
11:8e:e6:2f:de:0f:1e:c6:84:6e:c7:0c:ae:39:78:00:49:17:
63:60:b1:e5:56:36:c6:2a:61:b3:26:45:ab:be:9b:89:ba:be:
75:3b:06:ae:62:ea:b6:38:98:0f:07:e5:f2:ff:60:8d:2b:e1:
8d:58:1e:65:4a:17:23:c7:05:ab:0e:ce:5b:85:40:47:fe:06:
fd:f1:7e:b1:4c:37:70:d5:84:69:1e:49:3e:5c:f7:dc:01:f9:
77:2a:c9:84:7e:0b:ce:1d:82:6d:55:dc:d5:c9:f3:53:1b:e5:
40:90:ba:a1:45:26:59:a2:5c:b7:35:25:81:b2:64:c4:ac:20:
80:5c:15:36:35:7c:d0:68:2f:ab:c7:ef:90:27:d2:73:9c:fe:
e8:05:ff:6d:cb:52:21:eb:f4:11:d5:35:66:8a:98:ba:cb:fa:
c9:9f:aa:99:45:29:d8:6d:3d:09:1d:7e:7b:92:40:a3:8a:5f:
8e:6b:59:26:87:4f:b0:c8:07:7d:a6:77:dd:24:ff:65:eb:26:
2e:8c:f0:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkxfsWpMldYhWhZiIrv5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MDk3ZDVmNzdhMDg2NDM1MDBhNDM2ZDBlOThmMDMzZDBm
NTQ4ZjkwHhcNMjUwNDIwMTkwMDQ4WhcNMjUwNDIxMTkwMDQ4WjAzMTEwLwYDVQQD
Eyg2MWNmYTk4ZmZjOGNhYjI4NzAwMGE3N2Y1YWUzZmI2YzJjZTEwY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c3jjAxiHXVBW9NJN0GWq1HPC/Bm
LT24UnbjAlN9YcgjEz+iGCsdoXObTO9SIcchIsRHaeBs+SjolXeAOGyMsPU4zm+L
6cVMtf+l57jFIWhXIS4htX4WEFk4XpFn+DJJIKqbM6I6EaiHpscLKS0X6Ht9wIhl
/KXfEVDYsmVFsWxpFMkRPkN6Xn82GRJFjCchfm07nNKk4R0l5jdSvSMMecTmqjkD
zO8K9I3BtJoQhIYuNQCct8KT08md7xlAF643R9cT2jScCttVCwClKB48QmWcvumC
tt1D36JhuL9khyQjSOdkcRKYuUkB/GmWYDchwI3IvHtuEiAmbi9j/GsSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHPqY/8jKsocACnf1rj+2ws4QzvMB8GA1UdIwQY
MBaAFHgJfV93oIZDUApDbQ6Y8DPQ9Uj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEt
YTE4ZTQwMDZmODBhLzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEtYTE4ZTQwMDZmODBh
LzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEiCEpf0
sOcbk5f5Rl9JvpOfYJtl3BZN7Eq7ZNaF7/N/R2TvngZ1Urq3rm0VWs7aKWB09UgM
EY7mL94PHsaEbscMrjl4AEkXY2Cx5VY2xiphsyZFq76bibq+dTsGrmLqtjiYDwfl
8v9gjSvhjVgeZUoXI8cFqw7OW4VAR/4G/fF+sUw3cNWEaR5JPlz33AH5dyrJhH4L
zh2CbVXc1cnzUxvlQJC6oUUmWaJctzUlgbJkxKwggFwVNjV80Ggvq8fvkCfSc5z+
6AX/bctSIev0EdU1ZoqYusv6yZ+qmUUp2G09CR1+e5JAo4pfjmtZJodPsMgHfaZ3
3ST/ZesmLozwCw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:11 2025 by rpki-client