Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier: JNJ7Ex5Ad6NFymjiBo5AVgR9o8zGnBs5Ld6LQ13dOA4=
Subject key identifier: B3:FB:69:1A:3A:5F:C8:37:77:C9:DC:5E:25:D6:56:06:9D:D3:3E:6F
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial: 0196594B8C36F02296998919E25792A59C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number: 0F5F
Signing time: Mon 21 Apr 2025 17:00:45 +0000
Manifest this update: Mon 21 Apr 2025 17:00:45 +0000
Manifest next update: Tue 22 Apr 2025 17:00:45 +0000
Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: sVLFLLPTS8J+JnL5tifji/ER+tX5xbyG3OI029qGfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:8c:36:f0:22:96:99:89:19:e2:57:92:a5:9c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Validity
Not Before: Apr 21 17:00:45 2025 GMT
Not After : Apr 22 17:00:45 2025 GMT
Subject: CN=b3fb691a3a5fc83777c9dc5e25d656069dd33e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:d7:fa:55:50:86:31:79:5d:89:2f:b8:2b:
82:d3:1f:70:04:b9:08:ef:84:97:b1:a5:d3:97:36:
48:92:03:a9:6c:d9:fb:18:e9:77:49:41:6c:55:8a:
36:8a:bc:27:d8:51:2b:71:56:f0:fe:16:25:d3:f0:
d9:81:59:75:f6:9a:9f:5e:3d:13:fb:8c:f3:e1:53:
ff:07:69:db:0e:d0:a3:96:36:fd:5c:27:08:26:96:
10:d9:a9:8e:77:00:c4:de:a4:7c:68:08:d3:99:6d:
91:27:7d:0a:f7:3d:85:44:03:d0:00:b8:68:76:66:
42:d4:b9:e7:f2:7d:26:04:d7:7a:21:69:e2:f1:18:
24:d0:2f:96:f4:ee:63:87:e6:af:a8:04:ae:44:88:
87:55:b0:bd:a7:6c:dd:c2:24:61:cc:40:fc:ed:17:
f5:ea:74:5c:e4:9b:53:3f:b3:7b:13:d9:17:31:21:
ff:81:5c:72:f2:57:ed:a7:fa:6c:8f:b7:55:c9:9a:
42:07:7e:b8:1f:5f:f7:9e:13:bc:86:92:42:93:f0:
fe:5e:31:26:2e:aa:e1:33:47:57:b6:e2:94:17:56:
e0:93:92:46:e5:38:d0:2e:3d:e3:b3:dd:4f:0b:97:
37:58:39:82:f1:b7:41:2c:c6:41:4e:62:cc:da:e8:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FB:69:1A:3A:5F:C8:37:77:C9:DC:5E:25:D6:56:06:9D:D3:3E:6F
X509v3 Authority Key Identifier:
keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6c:51:79:91:8c:4b:9f:50:30:a1:c7:1d:b5:08:bb:ea:aa:
1e:c2:24:25:ab:3f:27:23:15:db:28:15:84:b1:8f:15:57:3f:
37:85:f6:75:ed:bb:1d:03:82:5d:26:da:2d:5a:fe:6c:df:df:
f2:5a:49:74:2c:60:80:08:64:c2:0c:20:16:59:ce:69:1b:79:
58:87:ab:52:83:86:ca:24:22:74:58:1d:50:78:00:20:fe:e3:
42:e5:e2:a9:e8:e7:42:46:93:9e:f2:c5:83:80:cd:66:c0:e9:
71:f7:c8:85:37:39:c0:20:aa:22:96:3a:1a:27:ba:10:10:78:
99:d3:a3:06:04:be:c7:fe:cf:dc:3b:6f:19:60:43:d8:37:c4:
6f:a4:48:d7:dd:4f:10:c4:ba:91:69:ae:b2:ab:29:97:2f:7c:
05:5d:d6:74:70:0b:76:22:49:1b:d2:0c:ba:14:3a:44:cf:fc:
1c:00:ec:ca:c7:de:4a:03:38:03:91:92:92:91:e6:f6:b2:56:
07:18:08:55:f8:4a:39:3c:24:38:e3:fa:ee:29:82:c9:12:3f:
87:90:fe:d6:7b:96:5c:01:0f:f0:59:c0:e7:f1:ae:fe:66:80:
fb:9d:09:21:de:fa:6a:90:5d:da:5d:50:c6:ec:53:0d:c2:8a:
85:11:37:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZS4w28CKWmYkZ4leSpZx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj
MGZmOGIwHhcNMjUwNDIxMTcwMDQ1WhcNMjUwNDIyMTcwMDQ1WjAzMTEwLwYDVQQD
EyhiM2ZiNjkxYTNhNWZjODM3NzdjOWRjNWUyNWQ2NTYwNjlkZDMzZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxjX+lVQhjF5XYkvuCuC0x9wBLkI
74SXsaXTlzZIkgOpbNn7GOl3SUFsVYo2irwn2FErcVbw/hYl0/DZgVl19pqfXj0T
+4zz4VP/B2nbDtCjljb9XCcIJpYQ2amOdwDE3qR8aAjTmW2RJ30K9z2FRAPQALho
dmZC1Lnn8n0mBNd6IWni8Rgk0C+W9O5jh+avqASuRIiHVbC9p2zdwiRhzED87Rf1
6nRc5JtTP7N7E9kXMSH/gVxy8lftp/psj7dVyZpCB364H1/3nhO8hpJCk/D+XjEm
LqrhM0dXtuKUF1bgk5JG5TjQLj3js91PC5c3WDmC8bdBLMZBTmLM2ug1/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLP7aRo6X8g3d8ncXiXWVgad0z5vMB8GA1UdIwQY
MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt
NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk
LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmxReZGM
S59QMKHHHbUIu+qqHsIkJas/JyMV2ygVhLGPFVc/N4X2de27HQOCXSbaLVr+bN/f
8lpJdCxggAhkwgwgFlnOaRt5WIerUoOGyiQidFgdUHgAIP7jQuXiqejnQkaTnvLF
g4DNZsDpcffIhTc5wCCqIpY6Gie6EBB4mdOjBgS+x/7P3DtvGWBD2DfEb6RI191P
EMS6kWmusqsply98BV3WdHALdiJJG9IMuhQ6RM/8HADsysfeSgM4A5GSkpHm9rJW
BxgIVfhKOTwkOOP67imCyRI/h5D+1nuWXAEP8FnA5/Gu/maA+50JId76apBd2l1Q
xuxTDcKKhRE3XQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:00 2025 by rpki-client