Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json)
Hash identifier: vrt/gExbrih+Lab5Fk+fF2dmE4VaSxieXQ1TmJxUh0g=
Subject key identifier: 40:40:95:E0:5B:E0:69:19:C0:1F:33:8C:B2:24:DE:94:31:CF:24:3E
Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Certificate serial: 01965424BE713E88C72EE2F4FF88BDFB6B0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 17:00:16 +0000
Manifest this update: Sun 20 Apr 2025 17:00:16 +0000
Manifest next update: Mon 21 Apr 2025 17:00:16 +0000
Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: qPJjvE+VCfKgH4rdOs09mCQdJBuuCS9c3iPwcdH0AiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:be:71:3e:88:c7:2e:e2:f4:ff:88:bd:fb:6b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524
Validity
Not Before: Apr 20 17:00:16 2025 GMT
Not After : Apr 21 17:00:16 2025 GMT
Subject: CN=404095e05be06919c01f338cb224de9431cf243e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:ea:20:12:4f:75:a6:20:44:c7:c6:b6:56:
72:11:8d:bb:66:17:1e:06:6d:2a:d8:8d:30:a1:01:
f1:2a:38:c1:9c:01:86:4d:fa:c7:33:93:31:d1:28:
32:b0:8b:1f:c2:fc:60:c5:8c:9b:66:15:4b:18:8a:
d5:58:44:fe:9c:91:fd:97:08:02:b0:77:f6:a2:a3:
56:1d:c6:66:3f:bb:ac:5f:f7:9c:73:3f:9d:64:0e:
ad:42:02:4e:a6:54:04:eb:3d:35:28:f8:1e:29:bf:
2a:7a:f5:06:ae:ed:da:35:95:e8:7b:d2:0d:42:de:
11:f6:b1:3b:13:62:a8:27:fe:27:3d:57:ce:b6:a1:
4c:2f:32:d4:db:c9:fd:58:f6:9c:45:82:b4:70:da:
48:9f:ab:b8:4a:96:0f:4f:b2:1f:75:a3:b6:b2:b9:
d0:5a:f8:d4:f8:f8:22:6e:5d:90:12:cb:72:41:ac:
9f:9e:ee:3c:43:df:9d:0f:61:9f:e0:18:54:b2:09:
1b:fe:52:37:3b:3c:01:28:bf:e4:75:2b:db:00:59:
02:2c:94:9b:8c:9d:04:3b:10:ef:45:ff:c0:ec:f7:
4a:71:a7:b2:6e:2b:cb:20:34:f7:36:7e:9e:fe:5f:
56:21:e3:ec:98:52:ae:1c:26:18:23:09:95:86:01:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:95:E0:5B:E0:69:19:C0:1F:33:8C:B2:24:DE:94:31:CF:24:3E
X509v3 Authority Key Identifier:
keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:a3:eb:b1:3a:22:5c:aa:86:b5:9c:7b:c7:d1:d7:fa:b6:
a6:2f:5a:be:55:02:28:ed:d9:9a:ae:f3:57:6b:ca:b2:00:99:
11:a0:31:fe:bf:7f:ec:80:0e:44:3a:20:02:44:95:0b:6e:b0:
fc:cf:d7:65:3c:44:83:cc:cd:82:22:eb:97:0e:05:27:a1:30:
71:46:f6:b8:cc:d4:cc:af:4c:3c:ca:a9:91:b0:df:66:b0:df:
e3:07:83:a0:b1:7e:e4:ba:26:e9:8f:b3:c8:7e:96:c0:a9:56:
34:78:d5:b7:a0:c0:37:67:93:3e:00:4a:77:53:4f:3d:fb:0d:
41:ed:60:48:00:a1:0a:db:ff:5d:8b:bf:e1:7c:2b:67:01:52:
b1:8d:9b:0e:42:df:89:41:17:11:94:04:40:b2:5d:5e:a2:73:
82:2f:3f:ca:da:44:6c:1b:84:8b:87:30:0f:b8:86:56:3b:65:
1a:35:f3:64:c8:2d:2b:3c:94:d8:82:c8:85:73:1b:aa:7d:2b:
8e:ec:e6:fa:e5:11:05:90:22:19:7f:0e:23:e8:74:b7:5f:6f:
58:3e:be:95:94:10:e0:0f:49:0d:e8:50:ec:5d:58:46:a3:f3:
d4:98:80:70:4d:6d:74:fb:f8:5b:45:73:b1:b8:a3:af:5e:de:
d6:6f:62:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJL5xPojHLuL0/4i9+2sPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz
ZWY1MjQwHhcNMjUwNDIwMTcwMDE2WhcNMjUwNDIxMTcwMDE2WjAzMTEwLwYDVQQD
Eyg0MDQwOTVlMDViZTA2OTE5YzAxZjMzOGNiMjI0ZGU5NDMxY2YyNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw47qIBJPdaYgRMfGtlZyEY27Zhce
Bm0q2I0woQHxKjjBnAGGTfrHM5Mx0SgysIsfwvxgxYybZhVLGIrVWET+nJH9lwgC
sHf2oqNWHcZmP7usX/eccz+dZA6tQgJOplQE6z01KPgeKb8qevUGru3aNZXoe9IN
Qt4R9rE7E2KoJ/4nPVfOtqFMLzLU28n9WPacRYK0cNpIn6u4SpYPT7IfdaO2srnQ
WvjU+Pgibl2QEstyQayfnu48Q9+dD2Gf4BhUsgkb/lI3OzwBKL/kdSvbAFkCLJSb
jJ0EOxDvRf/A7PdKcaeybivLIDT3Nn6e/l9WIePsmFKuHCYYIwmVhgGhKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBAleBb4GkZwB8zjLIk3pQxzyQ+MB8GA1UdIwQY
MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt
NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1
LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawej67E6
IlyqhrWce8fR1/q2pi9avlUCKO3Zmq7zV2vKsgCZEaAx/r9/7IAORDogAkSVC26w
/M/XZTxEg8zNgiLrlw4FJ6EwcUb2uMzUzK9MPMqpkbDfZrDf4weDoLF+5Lom6Y+z
yH6WwKlWNHjVt6DAN2eTPgBKd1NPPfsNQe1gSAChCtv/XYu/4XwrZwFSsY2bDkLf
iUEXEZQEQLJdXqJzgi8/ytpEbBuEi4cwD7iGVjtlGjXzZMgtKzyU2ILIhXMbqn0r
juzm+uURBZAiGX8OI+h0t19vWD6+lZQQ4A9JDehQ7F1YRqPz1JiAcE1tdPv4W0Vz
sbijr17e1m9itQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:07 2025 by rpki-client