Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
File: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft (raw, json)
Hash identifier: RyVAyIllpZXMsbw1tukuEXydWbKu5eFxi3+eOhOccLg=
Subject key identifier: A8:00:E4:BE:83:3A:14:B9:55:38:A1:BD:9E:87:DA:61:9A:B8:D2:6B
Authority key identifier: D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
Certificate issuer: /CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Certificate serial: 01965CF10AC3C58C5B0D00D3B584C15E28F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
Manifest number: 1491
Signing time: Tue 22 Apr 2025 10:00:22 +0000
Manifest this update: Tue 22 Apr 2025 10:00:22 +0000
Manifest next update: Wed 23 Apr 2025 10:00:22 +0000
Files and hashes: 1: 0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl (hash: 5nfuR7cHrQORUiVS4LUwYS/1gvkJVJQPuzWSMBui0cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:0a:c3:c5:8c:5b:0d:00:d3:b5:84:c1:5e:28:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2261dee6d54dd536ef700f2d9d8197c86093966
Validity
Not Before: Apr 22 10:00:22 2025 GMT
Not After : Apr 23 10:00:22 2025 GMT
Subject: CN=a800e4be833a14b95538a1bd9e87da619ab8d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:98:ff:ac:84:14:c8:86:76:29:6b:eb:7f:
91:a3:f9:fe:c4:f9:ed:db:e5:9c:07:54:a9:9e:6a:
79:36:f8:b7:b4:f6:d7:07:8e:a9:08:20:f8:da:53:
63:31:7d:a7:60:6e:42:d5:06:73:d3:73:96:c1:9f:
ec:b9:a3:de:c9:b3:07:15:c9:43:f2:de:0c:cf:e7:
b0:a3:d6:15:4b:6f:83:88:01:fe:e1:6a:51:51:33:
82:42:0a:cb:50:6e:e8:8d:02:63:f3:2a:f3:bb:a4:
d9:e3:0c:b9:b9:93:29:1b:ed:c8:88:61:52:ab:de:
76:a0:1a:cf:8b:67:24:e0:9f:f2:4b:af:7a:e8:7c:
10:b6:69:64:59:51:3b:a9:f9:a2:e9:72:0e:ba:1f:
e7:fc:06:90:13:80:f1:e8:6d:7e:14:75:e4:68:1f:
ef:e4:71:68:ca:e1:97:8a:7f:14:2f:09:8b:6f:b4:
0a:9b:2e:d4:04:b1:db:a4:4e:ca:14:08:dd:0e:dc:
4d:1b:e1:51:8c:c4:c6:c4:2a:7f:2e:11:94:d5:9b:
d4:2e:6d:45:28:c6:9a:00:44:1f:29:89:3d:f9:f9:
f1:c5:04:65:4e:ff:de:87:ef:60:f2:03:c7:ab:db:
c4:0d:ed:48:8a:ed:b9:95:5c:86:b9:d9:0d:18:62:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:E4:BE:83:3A:14:B9:55:38:A1:BD:9E:87:DA:61:9A:B8:D2:6B
X509v3 Authority Key Identifier:
keyid:D2:26:1D:EE:6D:54:DD:53:6E:F7:00:F2:D9:D8:19:7C:86:09:39:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iYd7m1U3VNu9wDy2dgZfIYJOWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bacec3-491b-440b-8b48-6f0f46f4d4b4/1/0iYd7m1U3VNu9wDy2dgZfIYJOWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:16:bb:fe:7e:f2:17:e7:87:b1:c2:d3:da:f0:47:3e:7a:1a:
c5:a1:19:f7:6b:92:c9:2c:bc:c9:dd:63:06:65:18:75:fa:29:
37:81:3f:63:48:0a:57:aa:f3:e0:18:14:25:76:05:e0:79:a7:
b5:7c:2e:05:16:7d:70:cc:96:b8:93:a5:61:98:18:91:2c:52:
d6:79:a0:ed:d7:0f:fa:77:1c:ff:c5:2b:cf:ff:d2:c6:ed:06:
a4:8c:b7:b0:dc:f6:77:a0:81:51:d0:43:83:c1:f6:a1:28:49:
03:cf:34:af:25:77:9e:7a:a3:fb:7c:81:d2:6d:a8:95:8e:64:
e1:6c:c5:23:55:03:66:ff:15:07:ed:c1:d7:d6:13:0d:4d:b7:
e8:b5:aa:db:86:da:6c:e8:02:b3:8b:1c:db:cd:f7:a8:a6:96:
ad:19:f8:df:aa:c9:81:eb:29:7d:9f:8d:e4:10:48:f1:00:4e:
31:c2:7f:d9:7c:bc:89:e9:d4:71:5c:27:42:a4:24:e0:ce:5b:
0c:da:59:27:83:fe:c8:90:ab:4a:6a:04:c4:91:83:39:a5:44:
9b:71:1c:ab:c5:73:81:17:4d:0e:21:20:15:7a:81:58:a2:8e:
a2:99:ae:a0:6f:22:98:94:40:e1:8f:24:5d:8d:27:78:5a:d3:
8f:7e:ac:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8QrDxYxbDQDTtYTBXijxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMjYxZGVlNmQ1NGRkNTM2ZWY3MDBmMmQ5ZDgxOTdjODYw
OTM5NjYwHhcNMjUwNDIyMTAwMDIyWhcNMjUwNDIzMTAwMDIyWjAzMTEwLwYDVQQD
EyhhODAwZTRiZTgzM2ExNGI5NTUzOGExYmQ5ZTg3ZGE2MTlhYjhkMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiSY/6yEFMiGdilr63+Ro/n+xPnt
2+WcB1Spnmp5Nvi3tPbXB46pCCD42lNjMX2nYG5C1QZz03OWwZ/suaPeybMHFclD
8t4Mz+ewo9YVS2+DiAH+4WpRUTOCQgrLUG7ojQJj8yrzu6TZ4wy5uZMpG+3IiGFS
q952oBrPi2ck4J/yS6966HwQtmlkWVE7qfmi6XIOuh/n/AaQE4Dx6G1+FHXkaB/v
5HFoyuGXin8ULwmLb7QKmy7UBLHbpE7KFAjdDtxNG+FRjMTGxCp/LhGU1ZvULm1F
KMaaAEQfKYk9+fnxxQRlTv/eh+9g8gPHq9vEDe1Iiu25lVyGudkNGGLL9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgA5L6DOhS5VTihvZ6H2mGauNJrMB8GA1UdIwQY
MBaAFNImHe5tVN1TbvcA8tnYGXyGCTlmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgt
NmYwZjQ2ZjRkNGI0LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYWNlYzMtNDkxYi00NDBiLThiNDgtNmYwZjQ2ZjRkNGI0
LzEvMGlZZDdtMVUzVk51OXdEeTJkZ1pmSVlKT1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBa7/n7y
F+eHscLT2vBHPnoaxaEZ92uSySy8yd1jBmUYdfopN4E/Y0gKV6rz4BgUJXYF4Hmn
tXwuBRZ9cMyWuJOlYZgYkSxS1nmg7dcP+ncc/8Urz//Sxu0GpIy3sNz2d6CBUdBD
g8H2oShJA880ryV3nnqj+3yB0m2olY5k4WzFI1UDZv8VB+3B19YTDU236LWq24ba
bOgCs4sc2833qKaWrRn436rJgespfZ+N5BBI8QBOMcJ/2Xy8ienUcVwnQqQk4M5b
DNpZJ4P+yJCrSmoExJGDOaVEm3Ecq8VzgRdNDiEgFXqBWKKOopmuoG8imJRA4Y8k
XY0neFrTj36s3w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:06 2025 by rpki-client