Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
File: 45WAim89Q2FJAcmQyc5jLhXt-gc.mft (raw, json)
Hash identifier: S0/NxX5kSoLW/EX8HkLGnQIHPWHWdi8Yh8Fv61hSdzI=
Subject key identifier: 63:C3:2B:9B:C3:E2:B1:5F:78:85:DA:BB:CA:36:FF:B5:78:9B:27:DC
Authority key identifier: E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
Certificate issuer: /CN=e395808a6f3d43614901c990c9ce632e15edfa07
Certificate serial: 01964DB50A007DC7A1188391D217B6F0FDA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
Manifest number: 0352
Signing time: Sat 19 Apr 2025 11:00:32 +0000
Manifest this update: Sat 19 Apr 2025 11:00:32 +0000
Manifest next update: Sun 20 Apr 2025 11:00:32 +0000
Files and hashes: 1: 45WAim89Q2FJAcmQyc5jLhXt-gc.crl (hash: +nyncXpe9MIGh4IWCjHZIN1M/BdJsgIfiBP0WbbumR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:0a:00:7d:c7:a1:18:83:91:d2:17:b6:f0:fd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e395808a6f3d43614901c990c9ce632e15edfa07
Validity
Not Before: Apr 19 11:00:32 2025 GMT
Not After : Apr 20 11:00:32 2025 GMT
Subject: CN=63c32b9bc3e2b15f7885dabbca36ffb5789b27dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:a7:c3:87:b2:5a:ab:59:cb:4b:2b:66:35:
95:c5:b3:4a:48:13:1e:a5:81:1c:a5:48:74:82:dc:
f2:e6:c3:6e:b1:e4:d7:ef:2c:51:7a:c4:64:c5:fc:
ad:0c:7a:d4:3c:a8:78:81:38:d9:b8:7d:62:b6:59:
d8:24:e6:36:13:66:a7:af:a0:ac:be:0e:42:65:7e:
d3:a5:26:d4:bf:70:e0:9c:6e:f6:f8:62:17:e6:3f:
35:f7:ff:14:9f:6b:d5:de:e2:84:4e:09:e0:d5:07:
ca:b5:db:91:54:c1:7f:4e:98:88:1f:60:69:de:bc:
6d:ca:01:ff:f5:20:d9:b7:b5:ea:0b:be:e6:41:56:
f8:81:b8:ba:9f:76:c1:ee:39:72:1f:f9:cf:b2:d5:
dd:98:f8:08:f5:17:51:59:87:f6:4c:24:9a:54:6f:
e2:1a:6a:d7:3f:f1:d8:f6:16:e3:fa:03:c5:c4:5c:
ec:dd:5c:18:58:c3:cd:dd:e3:e5:50:bf:ad:ed:52:
be:53:af:ee:13:03:4b:89:7f:e4:0d:6e:ca:36:e3:
f8:a1:c2:2b:01:06:6f:cc:9d:49:82:d7:f4:b8:5b:
e2:e5:9d:92:c9:04:a4:09:fc:60:04:9b:da:b3:b6:
b5:39:ea:cd:47:26:5a:4e:db:0f:6b:8f:58:79:c0:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C3:2B:9B:C3:E2:B1:5F:78:85:DA:BB:CA:36:FF:B5:78:9B:27:DC
X509v3 Authority Key Identifier:
keyid:E3:95:80:8A:6F:3D:43:61:49:01:C9:90:C9:CE:63:2E:15:ED:FA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WAim89Q2FJAcmQyc5jLhXt-gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3fabae-b80e-43c6-bd1f-f7973b18090b/1/45WAim89Q2FJAcmQyc5jLhXt-gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:90:af:6b:3a:2f:fe:bc:5e:6a:0c:0a:60:e4:35:78:ce:bd:
e3:9e:1c:94:ca:c0:7e:a9:c2:d5:ec:42:70:38:53:0d:3b:a7:
e0:0d:35:86:63:10:66:1c:1e:50:e6:49:76:ae:7a:37:b3:9d:
91:f9:bb:5c:80:fc:3c:30:45:b9:02:a2:b1:ff:0b:34:f9:d4:
d8:69:52:7f:fc:12:81:65:4e:f5:d7:63:a6:e9:a7:16:bb:31:
98:e3:15:0b:b5:1f:6d:ee:41:0f:87:a0:0a:d0:80:b7:94:e4:
17:4e:43:77:57:ae:db:54:53:60:02:c9:28:36:b8:df:7c:45:
46:3d:16:73:84:14:c3:0a:84:b6:65:db:35:50:bb:00:60:6d:
86:2a:51:b9:5b:0d:ba:8e:ed:6f:86:fa:9c:36:0e:ff:0d:73:
17:ba:e0:7f:52:74:c1:17:fd:22:0d:8b:9f:30:06:1c:05:a6:
19:92:97:2c:2f:33:96:80:a5:29:98:5e:33:37:36:d3:30:04:
cf:9f:25:ad:50:7d:4d:24:c4:f2:eb:05:5b:31:9c:3d:ae:a2:
e0:0d:34:cf:cb:e8:14:34:d8:87:28:c3:ad:07:67:f6:50:ab:
45:d1:bf:2a:3e:44:5c:9e:33:be:eb:60:5d:b4:64:91:af:0e:
13:ef:f8:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtQoAfcehGIOR0he28P2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU4MDhhNmYzZDQzNjE0OTAxYzk5MGM5Y2U2MzJlMTVl
ZGZhMDcwHhcNMjUwNDE5MTEwMDMyWhcNMjUwNDIwMTEwMDMyWjAzMTEwLwYDVQQD
Eyg2M2MzMmI5YmMzZTJiMTVmNzg4NWRhYmJjYTM2ZmZiNTc4OWIyN2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzGnw4eyWqtZy0srZjWVxbNKSBMe
pYEcpUh0gtzy5sNuseTX7yxResRkxfytDHrUPKh4gTjZuH1itlnYJOY2E2anr6Cs
vg5CZX7TpSbUv3DgnG72+GIX5j819/8Un2vV3uKETgng1QfKtduRVMF/TpiIH2Bp
3rxtygH/9SDZt7XqC77mQVb4gbi6n3bB7jlyH/nPstXdmPgI9RdRWYf2TCSaVG/i
GmrXP/HY9hbj+gPFxFzs3VwYWMPN3ePlUL+t7VK+U6/uEwNLiX/kDW7KNuP4ocIr
AQZvzJ1Jgtf0uFvi5Z2SyQSkCfxgBJvas7a1OerNRyZaTtsPa49YecBb+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPDK5vD4rFfeIXau8o2/7V4myfcMB8GA1UdIwQY
MBaAFOOVgIpvPUNhSQHJkMnOYy4V7foHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYt
Zjc5NzNiMTgwOTBiLzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZmFiYWUtYjgwZS00M2M2LWJkMWYtZjc5NzNiMTgwOTBi
LzEvNDVXQWltODlRMkZKQWNtUXljNWpMaFh0LWdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5Cvazov
/rxeagwKYOQ1eM69454clMrAfqnC1exCcDhTDTun4A01hmMQZhweUOZJdq56N7Od
kfm7XID8PDBFuQKisf8LNPnU2GlSf/wSgWVO9ddjpumnFrsxmOMVC7Ufbe5BD4eg
CtCAt5TkF05Dd1eu21RTYALJKDa433xFRj0Wc4QUwwqEtmXbNVC7AGBthipRuVsN
uo7tb4b6nDYO/w1zF7rgf1J0wRf9Ig2LnzAGHAWmGZKXLC8zloClKZheMzc20zAE
z58lrVB9TSTE8usFWzGcPa6i4A00z8voFDTYhyjDrQdn9lCrRdG/Kj5EXJ4zvutg
XbRkka8OE+/48Q==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:49:03 2025 by rpki-client