Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier: tbgpIugJ/mDtcTFafau8gvQQWnTGdPGrLj+AtspLoq8=
Subject key identifier: 4B:65:ED:3D:0C:58:D0:BC:0F:9E:C0:CF:C8:4F:02:72:19:3E:D8:CD
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer: /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial: 01965A5E111A0669E9EFE9FDD0B1050CC187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 22:00:36 +0000
Manifest this update: Mon 21 Apr 2025 22:00:36 +0000
Manifest next update: Tue 22 Apr 2025 22:00:36 +0000
Files and hashes: 1: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: GnurPhr7fSAXer/98l6Wzt6ZoazbJFBEtOQKenLP688=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5e:11:1a:06:69:e9:ef:e9:fd:d0:b1:05:0c:c1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Validity
Not Before: Apr 21 22:00:36 2025 GMT
Not After : Apr 22 22:00:36 2025 GMT
Subject: CN=4b65ed3d0c58d0bc0f9ec0cfc84f0272193ed8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:90:4b:e8:16:fc:c0:05:9d:4d:46:c0:1d:07:
1a:03:fe:b8:aa:58:1d:94:f8:03:13:10:2f:a9:c8:
e1:b1:78:26:fc:f8:0f:25:96:a5:55:e7:a5:35:c1:
9f:b0:14:cf:47:4e:32:4c:6f:9c:a0:42:15:58:8e:
64:cd:ab:fc:bd:90:1b:6a:f3:62:af:93:4c:17:ae:
35:e0:0d:a0:3f:e4:1d:10:4d:c3:96:77:2a:8c:2c:
16:ce:67:80:9e:61:59:5f:67:3c:73:30:bf:c9:23:
e2:e3:15:f7:20:af:72:3a:5b:99:3a:78:d4:78:c9:
38:25:c0:ec:11:5f:2b:21:3a:fb:72:96:2e:4d:6c:
4c:38:0a:7a:38:98:7b:89:eb:b5:4c:c5:8b:e7:b4:
b1:26:a5:fb:57:d5:e4:c7:89:c7:1f:21:96:ad:6d:
23:b2:da:32:96:ce:4b:c6:08:06:e4:c7:bd:4f:37:
8b:fe:42:7e:e8:e7:d5:d1:cb:7c:db:b9:3d:31:fa:
da:bb:5f:34:98:0c:07:f4:6b:f7:82:b2:5d:16:4a:
34:4c:b0:a1:47:10:e4:f4:57:d4:16:9f:8d:b4:49:
d7:b4:3a:6b:37:12:22:a7:1e:d1:fc:51:ca:33:4f:
a1:8f:3f:36:72:95:b6:28:e4:61:e3:f3:c4:43:76:
93:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:65:ED:3D:0C:58:D0:BC:0F:9E:C0:CF:C8:4F:02:72:19:3E:D8:CD
X509v3 Authority Key Identifier:
keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:68:5e:19:3b:bd:41:a6:5f:3a:c6:2a:c0:64:10:a5:76:
80:4f:79:12:72:97:1e:05:4a:27:56:41:2f:a2:2c:95:04:00:
06:79:b7:cd:0d:df:0c:4d:96:56:ef:73:92:17:db:56:c8:c4:
53:8e:1e:16:9d:26:48:17:14:4f:6e:54:ca:d0:81:5d:95:a2:
ab:e0:e9:4c:bd:c4:67:31:ad:aa:11:10:ff:d9:ab:75:22:4e:
9c:ab:9d:b5:d2:00:1a:07:3b:fa:34:c9:5c:4e:fd:90:f7:bc:
34:90:7c:fc:01:45:e4:df:7b:8d:bd:f0:74:72:f6:60:85:89:
06:be:64:c9:c7:45:5d:34:73:79:bd:e1:87:4e:61:ae:51:e4:
59:9a:8e:c6:64:d3:a7:17:b9:3b:92:31:33:bf:7a:10:1c:cb:
6e:4e:1e:e2:cd:25:94:fc:ab:3f:5e:37:3f:dd:40:21:ed:b4:
b4:de:06:fe:18:8c:c7:73:9f:66:58:20:07:5d:d2:d2:70:f9:
d3:07:5f:ce:89:80:30:74:46:29:5d:34:9c:73:ab:a4:b7:f5:
37:50:6f:5c:90:95:16:55:5b:07:4e:3d:41:4e:3c:72:58:12:
f7:c0:6c:4f:18:49:cc:b4:d1:6c:ac:e4:59:88:76:d0:e2:77:
7d:d8:fe:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXhEaBmnp7+n90LEFDMGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MGQ5ZmU3OTNiMThlZWY5MWRjNzZmYmNiYTJiMmNmYzUy
ZTBiYzQwHhcNMjUwNDIxMjIwMDM2WhcNMjUwNDIyMjIwMDM2WjAzMTEwLwYDVQQD
Eyg0YjY1ZWQzZDBjNThkMGJjMGY5ZWMwY2ZjODRmMDI3MjE5M2VkOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZBL6Bb8wAWdTUbAHQcaA/64qlgd
lPgDExAvqcjhsXgm/PgPJZalVeelNcGfsBTPR04yTG+coEIVWI5kzav8vZAbavNi
r5NMF6414A2gP+QdEE3DlncqjCwWzmeAnmFZX2c8czC/ySPi4xX3IK9yOluZOnjU
eMk4JcDsEV8rITr7cpYuTWxMOAp6OJh7ieu1TMWL57SxJqX7V9Xkx4nHHyGWrW0j
stoyls5LxggG5Me9TzeL/kJ+6OfV0ct827k9Mfrau180mAwH9Gv3grJdFko0TLCh
RxDk9FfUFp+NtEnXtDprNxIipx7R/FHKM0+hjz82cpW2KORh4/PEQ3aTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtl7T0MWNC8D57Az8hPAnIZPtjNMB8GA1UdIwQY
MBaAFJkNn+eTsY7vkdx2+8uiss/FLgvEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYt
ZTI5NmY4MThhZGU5LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZjFhYWUtYzVmOS00MmM3LWE3ZmYtZTI5NmY4MThhZGU5
LzEvbVEyZjU1T3hqdS1SM0hiN3k2S3l6OFV1QzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTVoXhk7
vUGmXzrGKsBkEKV2gE95EnKXHgVKJ1ZBL6IslQQABnm3zQ3fDE2WVu9zkhfbVsjE
U44eFp0mSBcUT25UytCBXZWiq+DpTL3EZzGtqhEQ/9mrdSJOnKudtdIAGgc7+jTJ
XE79kPe8NJB8/AFF5N97jb3wdHL2YIWJBr5kycdFXTRzeb3hh05hrlHkWZqOxmTT
pxe5O5IxM796EBzLbk4e4s0llPyrP143P91AIe20tN4G/hiMx3OfZlggB13S0nD5
0wdfzomAMHRGKV00nHOrpLf1N1BvXJCVFlVbB049QU48clgS98BsTxhJzLTRbKzk
WYh20OJ3fdj+zA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:41 2025 by rpki-client