Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: Pb5fXK/UOLVJ0kFbJ8a1Twq2ca7hYq9I15ulF8TJJ5E=
Subject key identifier: A9:5B:97:C6:8A:62:19:AD:3E:C4:7E:99:02:6F:D0:1F:27:81:E5:D6
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 01965CF15B31816C4975410B26BB9506583C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0AD8
Signing time: Tue 22 Apr 2025 10:00:43 +0000
Manifest this update: Tue 22 Apr 2025 10:00:43 +0000
Manifest next update: Wed 23 Apr 2025 10:00:43 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: KiCStWoSkTgm/fuoYa/fXPphw4qXlgxicwdne9PMlDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:5b:31:81:6c:49:75:41:0b:26:bb:95:06:58:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Apr 22 10:00:43 2025 GMT
Not After : Apr 23 10:00:43 2025 GMT
Subject: CN=a95b97c68a6219ad3ec47e99026fd01f2781e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0e:63:5c:a2:32:ae:8b:45:c7:63:c1:1e:9e:
d5:92:52:03:00:aa:54:f0:60:df:f6:44:76:90:51:
95:c5:6c:7e:79:d4:e2:bf:43:c5:39:d3:7c:29:29:
04:a7:ff:48:9b:e7:09:06:0f:96:09:8a:9c:7d:cf:
04:76:69:b6:3d:d9:3e:93:37:25:e2:0c:23:72:87:
c6:68:cf:21:c3:59:06:f1:eb:cf:06:9e:5a:30:fb:
3f:e2:de:78:50:ac:0d:c9:34:38:2f:90:df:10:5e:
18:87:40:95:4f:b8:df:71:67:7b:32:e6:a5:ff:f0:
7e:36:a9:8b:0f:86:89:a6:ff:5e:44:01:d3:2f:79:
2b:9a:75:4d:0a:39:56:9a:b1:52:d3:f2:3a:ad:05:
bf:b6:01:90:6e:89:00:65:a4:b0:5d:7d:69:28:77:
f6:e5:2e:19:57:b3:d1:67:4d:4d:70:59:eb:77:75:
8a:e5:2c:d5:db:e4:25:dc:23:ab:bc:03:50:17:c4:
5b:5e:85:cb:f6:9d:01:c2:52:2e:84:9d:15:03:11:
25:e0:7d:88:41:22:42:6c:68:6d:02:5f:68:10:a5:
58:27:02:8e:12:22:b2:64:b1:1b:77:a0:bc:f7:2e:
a1:b1:67:ae:bd:b0:90:73:16:f3:29:05:0b:7b:51:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5B:97:C6:8A:62:19:AD:3E:C4:7E:99:02:6F:D0:1F:27:81:E5:D6
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ee:a7:5c:54:6c:98:f0:3b:b1:22:63:78:93:c4:fa:8c:14:
84:6e:b6:76:12:c1:45:45:b5:80:aa:f6:b4:08:b6:db:33:3b:
07:34:ef:47:d7:8b:bb:bd:40:ec:52:94:f3:c1:35:e4:38:2f:
74:f9:87:35:3e:fb:b0:aa:ec:18:ce:8c:50:dd:6d:26:e6:75:
60:02:20:67:ce:08:93:36:98:20:95:02:0f:2a:ef:a7:9d:a5:
ea:54:7d:c8:28:ce:83:16:e4:cb:83:83:a6:26:6f:92:ce:93:
30:3e:99:b5:3b:48:76:2a:34:0b:1b:07:18:ab:1c:c8:7b:19:
2b:57:d6:6d:0b:a8:f4:a6:e2:bd:44:9e:fe:68:0e:ce:31:59:
0b:94:0c:6a:9d:eb:1a:92:97:ce:9a:1c:f5:bc:cc:ea:a1:c7:
96:6e:cc:71:6d:b2:a2:62:da:da:b3:45:15:bc:c6:18:11:76:
89:ed:23:a7:80:10:77:bd:b9:58:9c:15:b6:ca:0d:18:c2:ca:
1e:28:50:53:8d:72:74:b8:12:10:69:f8:e7:e9:07:fe:9c:00:
20:e7:62:4f:e1:3d:e6:2e:38:95:66:a9:17:1a:89:41:70:f2:
fb:ae:33:5e:33:5a:ce:72:12:49:3f:dd:8b:72:c2:61:4f:d1:
b5:a1:ad:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8VsxgWxJdUELJruVBlg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw
NmQzODYwHhcNMjUwNDIyMTAwMDQzWhcNMjUwNDIzMTAwMDQzWjAzMTEwLwYDVQQD
EyhhOTViOTdjNjhhNjIxOWFkM2VjNDdlOTkwMjZmZDAxZjI3ODFlNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA5jXKIyrotFx2PBHp7VklIDAKpU
8GDf9kR2kFGVxWx+edTiv0PFOdN8KSkEp/9Im+cJBg+WCYqcfc8Edmm2Pdk+kzcl
4gwjcofGaM8hw1kG8evPBp5aMPs/4t54UKwNyTQ4L5DfEF4Yh0CVT7jfcWd7Mual
//B+NqmLD4aJpv9eRAHTL3krmnVNCjlWmrFS0/I6rQW/tgGQbokAZaSwXX1pKHf2
5S4ZV7PRZ01NcFnrd3WK5SzV2+Ql3COrvANQF8RbXoXL9p0BwlIuhJ0VAxEl4H2I
QSJCbGhtAl9oEKVYJwKOEiKyZLEbd6C89y6hsWeuvbCQcxbzKQULe1Fg7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlbl8aKYhmtPsR+mQJv0B8ngeXWMB8GA1UdIwQY
MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt
YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4
LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+6nXFRs
mPA7sSJjeJPE+owUhG62dhLBRUW1gKr2tAi22zM7BzTvR9eLu71A7FKU88E15Dgv
dPmHNT77sKrsGM6MUN1tJuZ1YAIgZ84IkzaYIJUCDyrvp52l6lR9yCjOgxbky4OD
piZvks6TMD6ZtTtIdio0CxsHGKscyHsZK1fWbQuo9KbivUSe/mgOzjFZC5QMap3r
GpKXzpoc9bzM6qHHlm7McW2yomLa2rNFFbzGGBF2ie0jp4AQd725WJwVtsoNGMLK
HihQU41ydLgSEGn45+kH/pwAIOdiT+E95i44lWapFxqJQXDy+64zXjNaznISST/d
i3LCYU/RtaGt0w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:29 2025 by rpki-client