Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: x73NlPzsCEfwd1NU91Rx4pQkE2WwhykWztiI4kJ2o/g=
Subject key identifier: 7E:8D:86:CA:C9:A5:8D:EB:C6:9E:29:04:C7:62:61:75:AB:91:2F:4F
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 01965E3B160C9AAC93E5FD4F693529DCAD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 0104
Signing time: Tue 22 Apr 2025 16:00:52 +0000
Manifest this update: Tue 22 Apr 2025 16:00:52 +0000
Manifest next update: Wed 23 Apr 2025 16:00:52 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: +kcDXHzcsqAwEnd0Jx2VMOmnXiOP9tluuvNInDOzSUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:3b:16:0c:9a:ac:93:e5:fd:4f:69:35:29:dc:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Apr 22 16:00:52 2025 GMT
Not After : Apr 23 16:00:52 2025 GMT
Subject: CN=7e8d86cac9a58debc69e2904c7626175ab912f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:55:f3:f6:6c:dd:da:c3:18:ac:7d:6f:1b:
8f:82:36:10:f8:90:1f:41:11:3f:82:15:f2:41:60:
02:06:e0:c3:54:34:63:d4:b7:52:c2:f0:66:49:49:
bd:3f:a5:bf:57:e4:da:9f:29:56:ee:92:86:97:69:
e5:36:f8:ec:0f:c0:52:a6:c1:94:61:d3:c4:67:41:
a7:9d:bd:3e:71:bd:f5:d5:00:3e:0e:6f:1c:4b:11:
dc:ca:75:de:72:4b:06:fa:9d:ed:0e:ab:38:ce:bd:
e8:1d:1e:8f:ee:12:da:3f:1f:1d:0e:c8:bd:39:38:
03:c9:b2:47:b9:1c:01:00:d1:02:14:3a:18:38:77:
38:67:70:3b:90:4b:22:1a:66:5b:b8:ce:f7:cc:d5:
78:0f:4a:a9:74:50:f6:1f:af:13:f3:64:5a:d4:65:
cf:cb:63:3b:71:71:58:19:49:d3:8c:97:8e:cf:84:
dd:64:de:52:9d:a0:c5:33:af:82:d5:f7:c8:08:e3:
5c:31:f0:c6:a6:2b:72:ea:23:48:42:cf:f8:ac:07:
cd:dc:8c:f9:51:22:ce:8a:4e:9c:fe:a6:19:50:10:
9e:58:0e:c5:ec:ae:70:ce:0c:ee:06:7c:be:4b:db:
b4:8d:31:f3:f8:9c:4e:d8:0b:0f:cc:61:16:7f:49:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8D:86:CA:C9:A5:8D:EB:C6:9E:29:04:C7:62:61:75:AB:91:2F:4F
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:74:5d:2c:de:31:95:f6:93:12:e8:50:c0:41:c8:8d:e1:cc:
e6:06:21:34:2d:ef:ae:ef:94:9e:d3:5c:25:07:d4:20:33:5f:
aa:c1:6c:13:e0:24:30:36:da:da:7a:32:cc:45:83:93:a1:d7:
c6:70:90:2d:f6:55:a7:3a:66:c9:4e:ba:c7:09:a5:e1:ca:87:
62:46:3e:73:20:b3:0d:c8:27:a1:ab:9f:b6:f3:04:ce:2d:32:
83:9a:97:fc:d3:43:f3:ad:46:2a:49:46:e4:f7:aa:60:0a:6a:
b2:00:e2:8e:69:af:e3:27:43:99:69:9f:54:8b:e4:e7:be:bc:
e4:27:3c:2f:e6:a1:e2:3d:90:ca:98:fa:e0:03:4d:9c:2c:a5:
a0:83:85:60:4b:c6:39:9d:a1:d1:a4:7a:11:64:1e:7b:13:6c:
91:9c:10:7c:f0:d1:22:a9:c7:7d:b7:b8:47:79:79:e8:59:f4:
a5:54:8c:24:15:08:2f:13:50:cd:77:2c:e9:d0:6d:16:85:e4:
e0:02:20:6f:02:a0:6b:b6:e5:a8:bd:63:c3:ff:7b:96:f1:93:
fe:24:b1:a3:9e:b6:b1:66:8a:f3:cf:81:f9:df:ef:38:b9:81:
d5:2f:ea:d3:a5:21:d9:83:f6:24:6f:43:3a:fb:1b:a7:43:41:
c7:1e:9f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeOxYMmqyT5f1PaTUp3K1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUwNDIyMTYwMDUyWhcNMjUwNDIzMTYwMDUyWjAzMTEwLwYDVQQD
Eyg3ZThkODZjYWM5YTU4ZGViYzY5ZTI5MDRjNzYyNjE3NWFiOTEyZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku1V8/Zs3drDGKx9bxuPgjYQ+JAf
QRE/ghXyQWACBuDDVDRj1LdSwvBmSUm9P6W/V+TanylW7pKGl2nlNvjsD8BSpsGU
YdPEZ0Gnnb0+cb311QA+Dm8cSxHcynXecksG+p3tDqs4zr3oHR6P7hLaPx8dDsi9
OTgDybJHuRwBANECFDoYOHc4Z3A7kEsiGmZbuM73zNV4D0qpdFD2H68T82Ra1GXP
y2M7cXFYGUnTjJeOz4TdZN5SnaDFM6+C1ffICONcMfDGpity6iNIQs/4rAfN3Iz5
USLOik6c/qYZUBCeWA7F7K5wzgzuBny+S9u0jTHz+JxO2AsPzGEWf0nLtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6NhsrJpY3rxp4pBMdiYXWrkS9PMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnRdLN4x
lfaTEuhQwEHIjeHM5gYhNC3vru+UntNcJQfUIDNfqsFsE+AkMDba2noyzEWDk6HX
xnCQLfZVpzpmyU66xwml4cqHYkY+cyCzDcgnoauftvMEzi0yg5qX/NND861GKklG
5PeqYApqsgDijmmv4ydDmWmfVIvk57685Cc8L+ah4j2Qypj64ANNnCyloIOFYEvG
OZ2h0aR6EWQeexNskZwQfPDRIqnHfbe4R3l56Fn0pVSMJBUILxNQzXcs6dBtFoXk
4AIgbwKga7blqL1jw/97lvGT/iSxo562sWaK88+B+d/vOLmB1S/q06Uh2YP2JG9D
Ovsbp0NBxx6fiQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:07 2025 by rpki-client