Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier: DBhUEY6qENS8IylFtt4DoEondN3nrYCsc8Aqyuo5/oE=
Subject key identifier: D9:8C:46:1B:53:69:92:B0:82:2A:9F:D6:2E:8E:1A:D9:17:E0:C4:11
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer: /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial: 01964E23738EF41EAF8B42EA64A7D159A8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number: 090B
Signing time: Sat 19 Apr 2025 13:01:08 +0000
Manifest this update: Sat 19 Apr 2025 13:01:08 +0000
Manifest next update: Sun 20 Apr 2025 13:01:08 +0000
Files and hashes: 1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: 2QqWOSMd69yTWESQiJWq2XANkLqH6dR+Yg0O9DFK5LM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:73:8e:f4:1e:af:8b:42:ea:64:a7:d1:59:a8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
Validity
Not Before: Apr 19 13:01:08 2025 GMT
Not After : Apr 20 13:01:08 2025 GMT
Subject: CN=d98c461b536992b0822a9fd62e8e1ad917e0c411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:b1:75:db:3b:2c:a1:dd:a1:3b:ab:83:5d:
f4:a2:d4:9e:6b:5a:a9:ab:67:1a:8c:c0:13:3c:8f:
71:03:75:41:50:d6:98:43:3d:bd:f7:fd:1d:98:28:
40:f4:a0:87:64:2f:e6:64:52:53:8b:73:2f:db:d0:
1f:94:60:5b:be:dd:f0:f7:0e:e5:4f:80:a5:4d:b8:
1a:6f:75:96:7a:8c:89:7f:57:86:23:d0:71:2c:26:
c9:06:fc:4d:fe:cb:20:ff:a2:c1:1e:54:cd:c1:a5:
59:13:95:5a:ba:f6:fa:10:a1:d8:bc:e1:bb:5c:ec:
4a:51:95:24:88:8c:90:73:15:26:6d:af:32:90:06:
66:76:a8:94:e6:34:c2:63:30:ac:f7:21:40:9a:32:
c0:4d:71:0d:c9:c7:97:1b:b3:ae:67:9f:ea:f7:2c:
2f:91:d8:a4:b1:a3:18:27:b9:8d:01:aa:ae:8c:d3:
a7:95:c3:ec:ae:26:34:be:93:d1:e2:ab:be:6c:cf:
c9:e5:a8:44:98:ba:13:20:bd:9a:71:f7:54:95:07:
c0:67:6e:dd:06:73:c9:83:86:6b:6c:e9:d3:22:5b:
89:e1:62:0b:3d:83:1c:bb:38:ca:95:15:fa:d8:66:
60:45:52:3f:dc:99:d4:0d:8f:0e:8f:ff:89:35:18:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:46:1B:53:69:92:B0:82:2A:9F:D6:2E:8E:1A:D9:17:E0:C4:11
X509v3 Authority Key Identifier:
keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0c:c3:48:9d:36:7c:1d:8d:b5:39:15:38:43:4f:ca:5e:66:
86:20:37:39:ea:77:8e:f6:a4:ea:e9:cb:e6:dc:75:d6:0b:56:
a8:94:a6:ff:b6:d1:d5:e7:d8:b7:b9:bb:fc:cd:5f:28:71:3e:
78:8d:23:43:34:98:64:01:da:c1:7c:53:49:e8:e2:db:8f:64:
2c:2a:66:3a:8c:12:b4:e6:91:f1:17:6a:75:76:16:28:30:e5:
5a:21:71:15:ba:1e:5f:1b:2b:bf:22:31:54:50:06:07:0d:1c:
18:f5:99:40:22:72:21:7d:d4:72:26:e0:f9:f3:7c:c7:68:05:
cc:ae:9c:a3:1a:76:fd:e5:7b:ef:21:7b:de:5e:dd:c3:6c:a9:
e8:8b:d5:09:54:92:25:55:0e:22:f7:f1:08:c5:cb:01:07:73:
1f:2a:1a:e8:66:39:e1:22:1d:9a:07:4b:85:2d:59:7b:25:04:
ad:c9:8e:3e:31:cf:8c:66:cc:32:e6:17:4b:32:4e:63:e4:b7:
30:03:95:88:bb:22:ea:bd:8e:8d:2f:3d:d8:dd:33:fe:9d:dd:
8b:f3:f5:7f:b3:78:7c:18:47:d0:26:df:4c:5e:ed:65:e2:97:
32:5d:d9:b5:55:3a:69:bc:30:7c:1e:97:78:14:14:60:82:49:
bd:bc:56:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOI3OO9B6vi0LqZKfRWajjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2FmZjBkZjQ4MDgzYzdlMjFkNzk0YWIxNDdiYjk3MTEx
NDEyNDQwHhcNMjUwNDE5MTMwMTA4WhcNMjUwNDIwMTMwMTA4WjAzMTEwLwYDVQQD
EyhkOThjNDYxYjUzNjk5MmIwODIyYTlmZDYyZThlMWFkOTE3ZTBjNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiByxdds7LKHdoTurg130otSea1qp
q2cajMATPI9xA3VBUNaYQz299/0dmChA9KCHZC/mZFJTi3Mv29AflGBbvt3w9w7l
T4ClTbgab3WWeoyJf1eGI9BxLCbJBvxN/ssg/6LBHlTNwaVZE5Vauvb6EKHYvOG7
XOxKUZUkiIyQcxUmba8ykAZmdqiU5jTCYzCs9yFAmjLATXENyceXG7OuZ5/q9ywv
kdiksaMYJ7mNAaqujNOnlcPsriY0vpPR4qu+bM/J5ahEmLoTIL2acfdUlQfAZ27d
BnPJg4ZrbOnTIluJ4WILPYMcuzjKlRX62GZgRVI/3JnUDY8Oj/+JNRhwOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmMRhtTaZKwgiqf1i6OGtkX4MQRMB8GA1UdIwQY
MBaAFCN6/w30gIPH4h15SrFHu5cRFBJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTNyX0RmU0FnOGZpSFhsS3NVZTdseEVVRWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kMWMwODgtNzQwZS00MWI5LTg5OWMt
N2NhN2NiYjMxZTNkLzEvSTNyX0RmU0FnOGZpSFhsS3NVZTdseEVVRWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kMWMwODgtNzQwZS00MWI5LTg5OWMtN2NhN2NiYjMxZTNk
LzEvSTNyX0RmU0FnOGZpSFhsS3NVZTdseEVVRWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQzDSJ02
fB2NtTkVOENPyl5mhiA3Oep3jvak6unL5tx11gtWqJSm/7bR1efYt7m7/M1fKHE+
eI0jQzSYZAHawXxTSeji249kLCpmOowStOaR8RdqdXYWKDDlWiFxFboeXxsrvyIx
VFAGBw0cGPWZQCJyIX3Ucibg+fN8x2gFzK6coxp2/eV77yF73l7dw2yp6IvVCVSS
JVUOIvfxCMXLAQdzHyoa6GY54SIdmgdLhS1ZeyUErcmOPjHPjGbMMuYXSzJOY+S3
MAOViLsi6r2OjS892N0z/p3di/P1f7N4fBhH0CbfTF7tZeKXMl3ZtVU6abwwfB6X
eBQUYIJJvbxWRA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:25:04 2025 by rpki-client