Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.mft (raw, json)
Hash identifier: asBGaCYypi/+cP72Vp/uzZr0H4OElQiZv6N8QvjfJAc=
Subject key identifier: 8C:1A:E2:D4:78:15:BF:84:BA:55:75:34:16:DE:59:3D:78:2A:FA:7F
Authority key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Certificate issuer: /CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Certificate serial: 01965CF218BEA38581BA7BC46F9DE8C045D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
Manifest number: 0588
Signing time: Tue 22 Apr 2025 10:01:32 +0000
Manifest this update: Tue 22 Apr 2025 10:01:32 +0000
Manifest next update: Wed 23 Apr 2025 10:01:32 +0000
Files and hashes: 1: e8kubfMbNUWhlv4DW8taJTBqf1Q.crl (hash: 4Bi59fFJyS/YnPbaIY68wIDhIRm8+xdGHEXPL7MrXZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:18:be:a3:85:81:ba:7b:c4:6f:9d:e8:c0:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Validity
Not Before: Apr 22 10:01:32 2025 GMT
Not After : Apr 23 10:01:32 2025 GMT
Subject: CN=8c1ae2d47815bf84ba55753416de593d782afa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:7b:c7:81:be:69:89:d5:fd:8c:1f:22:ec:
c0:ca:26:04:32:e4:84:32:c2:39:0f:bc:84:51:6f:
8b:28:9f:2a:a0:f8:aa:23:a8:c2:38:23:c3:a4:67:
5f:31:0c:7f:c9:b7:47:21:d7:88:bc:8f:2e:3b:a5:
2d:a8:65:c4:e7:13:fc:01:1b:7a:22:04:17:4a:14:
b7:b9:90:63:03:4d:fa:24:2c:c9:48:ea:9c:ea:c4:
5e:49:93:73:a8:93:a9:b4:60:81:35:77:49:56:8c:
33:c7:f9:a6:58:0d:68:95:c6:96:31:1a:c7:ce:0f:
1b:2a:1c:22:2f:b2:14:70:a6:8a:8f:42:2a:e5:86:
27:56:de:4b:07:97:44:92:eb:e7:95:2c:fb:a5:7f:
58:07:14:63:b6:a1:1d:47:d7:2f:20:aa:af:c1:36:
13:29:b8:c2:10:74:3b:b4:ad:4b:8e:d6:55:48:a8:
76:aa:7c:5d:ad:1c:1f:14:0e:05:8b:27:35:31:9c:
4c:1f:de:c3:62:e8:14:c8:a9:a4:bc:5e:16:de:c3:
8a:c2:d0:c5:fa:58:50:fa:f3:75:e4:88:b5:f4:77:
87:f2:f7:9f:ee:ce:47:33:13:be:0b:90:7a:27:0d:
56:17:f3:ad:23:63:0f:68:c1:2c:f6:e7:c7:3a:7d:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1A:E2:D4:78:15:BF:84:BA:55:75:34:16:DE:59:3D:78:2A:FA:7F
X509v3 Authority Key Identifier:
keyid:7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:eb:6e:df:b9:f5:ec:8a:d2:0d:97:e3:11:33:10:87:35:00:
a1:89:98:ef:50:2d:6b:ee:10:b3:78:20:06:a5:b9:c8:fe:2a:
ed:40:db:8f:94:65:42:5b:a0:ec:a5:73:99:cd:1c:f0:9c:ab:
0e:4a:64:c2:ea:7a:4f:cc:86:45:dc:21:ea:a3:38:b8:3c:a2:
fe:b6:5d:d4:6d:0a:a3:96:c8:c3:08:29:88:f9:cb:9f:00:ed:
16:1c:2e:1d:83:6a:e5:05:9a:b3:f1:32:fb:d1:75:a5:be:58:
54:89:c0:53:f2:c2:d6:df:0d:eb:11:ef:b8:1f:78:f6:4c:ba:
55:62:7d:a7:ae:d5:c6:63:8a:67:8a:d9:cc:6d:15:ec:2a:48:
4f:6b:c9:90:fc:42:fc:06:e1:ef:b3:20:07:b1:6a:f0:30:fe:
ee:1c:76:83:fc:3e:8e:91:1d:e4:6f:f5:49:6e:56:a2:40:9c:
75:41:82:a5:0d:00:27:de:17:74:f2:a6:f7:c3:c4:4b:a6:ba:
f7:8d:be:97:f2:f9:c9:e3:8c:04:7d:c9:76:84:df:4a:76:17:
b9:06:1b:82:55:61:17:af:12:17:55:21:30:2f:55:d3:54:75:
41:4f:ea:05:43:9a:1d:37:20:04:91:fb:18:34:c7:2d:bc:60:
62:e5:11:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8hi+o4WBunvEb53owEXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYzkyZTZkZjMxYjM1NDVhMTk2ZmUwMzViY2I1YTI1MzA2
YTdmNTQwHhcNMjUwNDIyMTAwMTMyWhcNMjUwNDIzMTAwMTMyWjAzMTEwLwYDVQQD
Eyg4YzFhZTJkNDc4MTViZjg0YmE1NTc1MzQxNmRlNTkzZDc4MmFmYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TR7x4G+aYnV/YwfIuzAyiYEMuSE
MsI5D7yEUW+LKJ8qoPiqI6jCOCPDpGdfMQx/ybdHIdeIvI8uO6UtqGXE5xP8ARt6
IgQXShS3uZBjA036JCzJSOqc6sReSZNzqJOptGCBNXdJVowzx/mmWA1olcaWMRrH
zg8bKhwiL7IUcKaKj0Iq5YYnVt5LB5dEkuvnlSz7pX9YBxRjtqEdR9cvIKqvwTYT
KbjCEHQ7tK1LjtZVSKh2qnxdrRwfFA4Fiyc1MZxMH97DYugUyKmkvF4W3sOKwtDF
+lhQ+vN15Ii19HeH8vef7s5HMxO+C5B6Jw1WF/OtI2MPaMEs9ufHOn009wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwa4tR4Fb+EulV1NBbeWT14Kvp/MB8GA1UdIwQY
MBaAFHvJLm3zGzVFoZb+A1vLWiUwan9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDct
NGJkYjU4ODEyMDg2LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9jMTkwYjEtNTYyZi00NWIxLTlhMDctNGJkYjU4ODEyMDg2
LzEvZThrdWJmTWJOVVdobHY0RFc4dGFKVEJxZjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+tu37n1
7IrSDZfjETMQhzUAoYmY71Ata+4Qs3ggBqW5yP4q7UDbj5RlQlug7KVzmc0c8Jyr
Dkpkwup6T8yGRdwh6qM4uDyi/rZd1G0Ko5bIwwgpiPnLnwDtFhwuHYNq5QWas/Ey
+9F1pb5YVInAU/LC1t8N6xHvuB949ky6VWJ9p67VxmOKZ4rZzG0V7CpIT2vJkPxC
/Abh77MgB7Fq8DD+7hx2g/w+jpEd5G/1SW5WokCcdUGCpQ0AJ94XdPKm98PES6a6
942+l/L5yeOMBH3JdoTfSnYXuQYbglVhF68SF1UhMC9V01R1QU/qBUOaHTcgBJH7
GDTHLbxgYuURAg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:25 2025 by rpki-client