Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
File: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft (raw, json)
Hash identifier: K3sjflch/pVeUSKbNxdIWWU2xh4ubP5yssSy+6pXiwA=
Subject key identifier: CC:72:FA:29:1B:CD:6A:FF:21:F8:69:07:F4:C2:05:48:2E:C5:A4:96
Authority key identifier: 8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
Certificate issuer: /CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Certificate serial: 0196580248D38DE3DC84BED0AA15D3B51E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
Manifest number: 14FC
Signing time: Mon 21 Apr 2025 11:01:06 +0000
Manifest this update: Mon 21 Apr 2025 11:01:06 +0000
Manifest next update: Tue 22 Apr 2025 11:01:06 +0000
Files and hashes: 1: j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl (hash: Kf+vFTvQMwuloNEUhRAfVkDFl1/ndTvqeUhsPM21OWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:48:d3:8d:e3:dc:84:be:d0:aa:15:d3:b5:1e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f49f4a4cd829344519f452a3b0e1e66fe8d3e25
Validity
Not Before: Apr 21 11:01:06 2025 GMT
Not After : Apr 22 11:01:06 2025 GMT
Subject: CN=cc72fa291bcd6aff21f86907f4c205482ec5a496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:da:dd:d8:9f:36:a5:0e:a1:84:c3:23:f8:
d9:28:42:1c:39:52:5f:68:8f:14:90:06:2f:44:39:
20:17:b1:f4:76:5f:51:5f:fa:b8:0f:b9:1c:46:da:
bf:a5:5f:0c:2c:18:44:14:26:39:23:5a:88:fd:a3:
49:86:c5:42:4b:77:ee:e5:5f:70:78:2f:e1:f4:ca:
4c:fb:1c:46:64:d3:9b:74:55:c1:33:96:96:22:40:
14:52:32:21:0f:6c:d6:d9:65:cc:fe:fd:34:23:65:
4e:2c:c7:92:b4:ba:03:66:d0:68:cd:e6:3b:74:89:
27:9d:88:17:f4:4c:e8:a4:ad:0d:95:c4:ff:85:01:
89:e1:7b:70:d2:74:e2:e9:cc:a9:91:09:c2:05:05:
ac:9a:2f:81:0d:60:5a:cc:0d:d8:a7:ef:f3:20:b5:
64:a7:d2:70:36:b4:34:31:63:f6:2d:bb:6d:32:64:
81:c6:54:c9:f0:37:28:f9:27:b4:13:ea:3b:a4:f0:
ab:40:7b:4f:4a:03:fd:07:f9:86:e5:6b:96:2b:13:
13:f0:70:47:a9:e5:ee:f7:99:f3:7b:0b:8a:1a:df:
a6:b5:cf:98:d6:cf:43:7a:92:17:51:19:4a:fe:37:
5f:2c:09:db:f9:09:89:3d:bb:0b:aa:df:92:4b:d4:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:72:FA:29:1B:CD:6A:FF:21:F8:69:07:F4:C2:05:48:2E:C5:A4:96
X509v3 Authority Key Identifier:
keyid:8F:49:F4:A4:CD:82:93:44:51:9F:45:2A:3B:0E:1E:66:FE:8D:3E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6658c0-5653-4a9f-a8e8-140aada54b61/1/j0n0pM2Ck0RRn0UqOw4eZv6NPiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:22:f2:bc:62:20:1e:fb:5d:62:8f:1e:66:58:8d:50:24:49:
78:76:c9:f9:2b:f4:e5:dc:4d:06:74:57:14:be:8a:6d:45:f5:
2a:fd:12:59:cc:5e:7e:36:52:d3:44:10:59:05:2d:1e:7a:bc:
12:ef:35:90:af:95:f2:3e:e8:f0:53:64:51:f4:64:9d:f2:5e:
b3:f7:c6:38:cf:eb:8b:3a:35:a7:e6:51:15:d8:b3:d4:fc:16:
18:82:a5:52:dc:a2:bd:b7:62:99:e2:58:00:32:f2:77:2e:a7:
6a:f3:4f:b7:37:bf:e1:f1:6e:ec:34:3b:bc:12:50:3b:03:b2:
9a:7a:33:21:2b:f3:eb:9a:ca:db:1f:f4:61:5a:e8:78:25:de:
3f:9b:06:a9:93:81:6e:47:7d:78:b3:63:e7:d6:0e:7e:78:bb:
71:ee:27:ed:bf:a7:70:d8:e5:1b:e8:56:cb:aa:ee:89:8a:b6:
e5:da:0e:dc:54:10:f7:b0:88:c2:09:6a:14:7f:0c:4f:84:93:
ab:88:56:a6:33:04:08:25:76:6c:ca:c3:c4:c9:7d:93:a4:7c:
be:cb:3c:e5:80:e4:9a:12:15:81:00:f3:44:4d:e1:04:42:61:
1c:2e:15:b0:15:3c:cb:2b:4d:5f:a9:c5:57:c2:0b:9b:b5:e8:
ee:09:69:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYAkjTjePchL7QqhXTtR5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDlmNGE0Y2Q4MjkzNDQ1MTlmNDUyYTNiMGUxZTY2ZmU4
ZDNlMjUwHhcNMjUwNDIxMTEwMTA2WhcNMjUwNDIyMTEwMTA2WjAzMTEwLwYDVQQD
EyhjYzcyZmEyOTFiY2Q2YWZmMjFmODY5MDdmNGMyMDU0ODJlYzVhNDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjba3difNqUOoYTDI/jZKEIcOVJf
aI8UkAYvRDkgF7H0dl9RX/q4D7kcRtq/pV8MLBhEFCY5I1qI/aNJhsVCS3fu5V9w
eC/h9MpM+xxGZNObdFXBM5aWIkAUUjIhD2zW2WXM/v00I2VOLMeStLoDZtBozeY7
dIknnYgX9EzopK0NlcT/hQGJ4Xtw0nTi6cypkQnCBQWsmi+BDWBazA3Yp+/zILVk
p9JwNrQ0MWP2LbttMmSBxlTJ8Dco+Se0E+o7pPCrQHtPSgP9B/mG5WuWKxMT8HBH
qeXu95nzewuKGt+mtc+Y1s9DepIXURlK/jdfLAnb+QmJPbsLqt+SS9RgBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxy+ikbzWr/IfhpB/TCBUguxaSWMB8GA1UdIwQY
MBaAFI9J9KTNgpNEUZ9FKjsOHmb+jT4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgt
MTQwYWFkYTU0YjYxLzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi82NjU4YzAtNTY1My00YTlmLWE4ZTgtMTQwYWFkYTU0YjYx
LzEvajBuMHBNMkNrMFJSbjBVcU93NGVadjZOUGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyLyvGIg
HvtdYo8eZliNUCRJeHbJ+Sv05dxNBnRXFL6KbUX1Kv0SWcxefjZS00QQWQUtHnq8
Eu81kK+V8j7o8FNkUfRknfJes/fGOM/rizo1p+ZRFdiz1PwWGIKlUtyivbdimeJY
ADLydy6navNPtze/4fFu7DQ7vBJQOwOymnozISvz65rK2x/0YVroeCXeP5sGqZOB
bkd9eLNj59YOfni7ce4n7b+ncNjlG+hWy6ruiYq25doO3FQQ97CIwglqFH8MT4ST
q4hWpjMECCV2bMrDxMl9k6R8vss85YDkmhIVgQDzRE3hBEJhHC4VsBU8yytNX6nF
V8ILm7Xo7glp1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:18 2025 by rpki-client