Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: Gu23WxUmBIhWQnqDihOlTIzW9KuN7LIi0t/rhYcEXs8=
Subject key identifier: 0F:F0:F5:F0:F1:5D:52:73:79:83:47:1B:C4:E8:96:AB:D5:29:AF:23
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 019654C9D0F90B9C0D08976E24DDFF19D78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 0258
Signing time: Sun 20 Apr 2025 20:00:34 +0000
Manifest this update: Sun 20 Apr 2025 20:00:34 +0000
Manifest next update: Mon 21 Apr 2025 20:00:34 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: 0uE7qjsBHgYhJa9HZTvQrj0h9dTHKIGvlxI+2TTUt7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:d0:f9:0b:9c:0d:08:97:6e:24:dd:ff:19:d7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Apr 20 20:00:34 2025 GMT
Not After : Apr 21 20:00:34 2025 GMT
Subject: CN=0ff0f5f0f15d52737983471bc4e896abd529af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:60:49:bb:9f:81:f3:bf:f4:a1:fd:70:60:
4a:3d:c2:bb:40:c4:f1:a5:f9:a1:50:dc:47:f8:f3:
be:e0:98:12:1f:69:ef:37:35:cb:05:fa:7d:35:6b:
30:85:9c:ab:45:fc:26:72:1d:3a:c4:e5:6a:46:90:
22:7b:69:13:90:51:ff:01:35:78:2f:b8:15:55:77:
8b:38:eb:03:d6:23:f8:6a:75:58:e5:bd:05:b4:50:
09:38:15:06:51:97:ab:d1:6f:31:de:f7:21:23:85:
86:98:ad:e3:41:2f:73:ea:65:de:81:ab:66:e1:2d:
0d:f6:d2:d5:79:9d:00:a2:54:61:7a:9d:38:3a:c0:
84:ef:4a:5f:49:9c:2a:6a:0a:96:0f:f6:9f:98:93:
17:84:3c:60:c4:8b:d6:27:1e:3c:0d:2d:f6:e1:5c:
6e:ad:b9:75:57:fd:98:56:f7:6d:69:10:e2:b6:33:
0d:de:ca:5e:4d:30:37:80:55:27:d1:eb:59:7f:82:
b8:9e:6d:bb:25:6e:c4:96:d5:e2:a3:e1:1f:32:73:
76:c9:2d:0c:35:f1:ba:e4:ac:44:d6:d6:ab:b1:72:
db:76:a3:f7:73:2e:c2:c5:c1:9b:93:66:55:e3:14:
18:84:67:9e:48:e4:b7:be:91:7b:e6:c6:e2:56:d3:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F0:F5:F0:F1:5D:52:73:79:83:47:1B:C4:E8:96:AB:D5:29:AF:23
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:38:15:bf:01:aa:81:70:d6:0f:2e:35:f7:17:22:23:88:87:
0b:21:e4:36:85:f0:09:3b:10:29:08:4c:65:a4:aa:be:e5:e9:
03:5c:b8:37:3d:57:ff:91:29:6b:c5:e1:fb:f4:ea:1a:6f:40:
2a:64:fe:85:e8:85:a5:fc:8d:a8:78:6c:e9:fb:ec:51:4c:5c:
3f:2c:0c:a2:fc:fc:b9:f4:72:54:fd:ca:0f:92:5f:2e:b1:32:
05:c4:b3:b3:df:2c:81:5a:e1:c6:15:cd:ae:8d:f6:56:eb:7e:
f0:29:1c:2d:e6:43:81:cd:9c:f6:f9:c9:dd:ca:ea:eb:e9:3a:
01:0e:d9:6c:14:24:13:d6:7b:41:30:95:3e:7c:aa:72:25:32:
52:78:0c:98:a1:9a:72:ee:98:a3:9f:e2:fe:b9:92:ae:0e:b5:
6d:af:e4:63:3f:9c:65:ef:6f:ad:93:83:59:ee:e2:29:9f:14:
9b:a6:56:92:06:0e:8d:1a:15:23:f8:13:cc:ff:53:9a:25:cf:
15:5e:7a:1b:81:ba:8a:08:f3:41:23:3d:93:81:61:cf:5a:81:
f0:c4:cd:53:f6:7d:13:62:47:b5:57:e2:82:e8:4a:e0:d2:63:
3a:2d:5e:2f:1a:5f:f3:50:91:cc:e1:24:60:cc:4f:c1:c8:54:
5c:b7:a0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUydD5C5wNCJduJN3/GdeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZmI2YjRjNDc5MTY2ODkxMTExNWM2OWUyNjk2NGYzZDVl
Y2EyZjQwHhcNMjUwNDIwMjAwMDM0WhcNMjUwNDIxMjAwMDM0WjAzMTEwLwYDVQQD
EygwZmYwZjVmMGYxNWQ1MjczNzk4MzQ3MWJjNGU4OTZhYmQ1MjlhZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNVgSbufgfO/9KH9cGBKPcK7QMTx
pfmhUNxH+PO+4JgSH2nvNzXLBfp9NWswhZyrRfwmch06xOVqRpAie2kTkFH/ATV4
L7gVVXeLOOsD1iP4anVY5b0FtFAJOBUGUZer0W8x3vchI4WGmK3jQS9z6mXegatm
4S0N9tLVeZ0AolRhep04OsCE70pfSZwqagqWD/afmJMXhDxgxIvWJx48DS324Vxu
rbl1V/2YVvdtaRDitjMN3speTTA3gFUn0etZf4K4nm27JW7EltXio+EfMnN2yS0M
NfG65KxE1tarsXLbdqP3cy7CxcGbk2ZV4xQYhGeeSOS3vpF75sbiVtPBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/w9fDxXVJzeYNHG8TolqvVKa8jMB8GA1UdIwQY
MBaAFLT7a0xHkWaJERFcaeJpZPPV7KL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTIt
N2NiYTM1Y2I2YjgxLzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC85MDE2MDctYjFlZS00OWYwLWJkZTItN2NiYTM1Y2I2Yjgx
LzEvdFB0clRFZVJab2tSRVZ4cDRtbGs4OVhzb3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDgVvwGq
gXDWDy419xciI4iHCyHkNoXwCTsQKQhMZaSqvuXpA1y4Nz1X/5Epa8Xh+/TqGm9A
KmT+heiFpfyNqHhs6fvsUUxcPywMovz8ufRyVP3KD5JfLrEyBcSzs98sgVrhxhXN
ro32Vut+8CkcLeZDgc2c9vnJ3crq6+k6AQ7ZbBQkE9Z7QTCVPnyqciUyUngMmKGa
cu6Yo5/i/rmSrg61ba/kYz+cZe9vrZODWe7iKZ8Um6ZWkgYOjRoVI/gTzP9TmiXP
FV56G4G6igjzQSM9k4Fhz1qB8MTNU/Z9E2JHtVfiguhK4NJjOi1eLxpf81CRzOEk
YMxPwchUXLegRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:45:56 2025 by rpki-client