Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json)
Hash identifier: Fmk/CKr9KRp3JQfG/KLugIV+z9z7o6yDgmBO5+A4uZU=
Subject key identifier: 3C:0F:DB:23:54:BE:CF:15:53:19:1A:39:AC:54:B8:57:9B:0D:64:7B
Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Certificate serial: 01965BDED891FCF6723BCAAA97BC77233691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
Manifest number: 0977
Signing time: Tue 22 Apr 2025 05:00:53 +0000
Manifest this update: Tue 22 Apr 2025 05:00:53 +0000
Manifest next update: Wed 23 Apr 2025 05:00:53 +0000
Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: WFVvnyaR71XY0lOoD0vNUdnidXFnGyHekGnuxQ5YAEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:d8:91:fc:f6:72:3b:ca:aa:97:bc:77:23:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c
Validity
Not Before: Apr 22 05:00:53 2025 GMT
Not After : Apr 23 05:00:53 2025 GMT
Subject: CN=3c0fdb2354becf1553191a39ac54b8579b0d647b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:36:6b:10:e3:56:49:66:1a:f2:73:89:dd:
f6:10:50:ab:bc:47:34:fe:58:a7:56:8e:1f:7f:ef:
0f:43:c2:46:0d:1f:fa:cb:01:51:d7:56:ee:01:90:
ee:c3:2f:1c:85:26:f4:ad:a6:78:7f:2d:1c:a7:4d:
c9:94:b9:ea:f5:8a:0d:a9:5e:fe:5f:bd:c7:b4:cf:
ff:44:cd:4c:7c:7c:14:cc:f8:09:c1:5a:78:8c:d2:
63:cb:ae:16:63:b7:c9:00:dd:45:be:f8:b1:e9:7f:
65:6f:b1:25:06:25:2b:7c:f8:62:63:89:38:be:c0:
42:4f:6e:0d:29:e2:d4:2d:28:77:6e:e1:9f:be:e9:
ea:c9:22:2a:7b:a8:97:a7:75:36:dc:35:fa:03:1f:
9d:47:8d:81:f6:14:6d:0b:ab:e8:d0:4d:6f:5a:bb:
52:2c:9e:82:fb:ab:e5:67:7c:51:04:f6:5d:5e:81:
c1:d6:0d:72:1d:dd:14:32:d2:69:c6:c4:8d:b0:b3:
e3:ed:5d:2c:d2:0d:1c:a9:bf:f3:9a:b4:4a:dd:3f:
96:3a:da:32:df:9a:27:59:fc:24:da:7c:40:70:98:
d9:b7:cb:8f:ef:0c:89:d8:bd:08:5f:df:9a:ce:ac:
f5:94:4d:c9:ab:f3:cf:56:8f:84:72:83:a8:47:b3:
8d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:DB:23:54:BE:CF:15:53:19:1A:39:AC:54:B8:57:9B:0D:64:7B
X509v3 Authority Key Identifier:
keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:46:42:89:d9:2e:43:ba:c2:c6:9f:f1:22:d4:50:00:aa:e3:
b3:8f:71:ed:d1:80:cf:6e:81:6f:cc:38:1a:c3:27:87:62:c0:
05:68:58:12:5b:fb:2c:df:45:cc:2a:55:ef:76:9b:9a:07:11:
52:66:a0:c6:dc:0a:2f:82:a4:fd:7c:c8:11:45:8f:e7:3a:12:
bb:6d:99:e2:ef:bb:b0:7e:bc:ba:2b:a1:bd:22:f4:f8:6f:88:
7e:ce:54:ee:00:b6:0a:1e:25:2c:fd:e9:a0:fa:22:64:fd:8a:
9f:7b:c4:f0:f2:e1:95:6d:c6:aa:11:81:86:4d:4e:de:85:77:
82:60:b7:f1:36:26:05:a4:90:ef:3d:2c:79:ae:a0:02:64:3b:
f1:d0:66:f9:44:29:07:43:a8:cc:66:0e:19:44:4d:96:23:41:
e4:f2:c6:79:2e:52:c3:a8:90:b9:ae:0d:0e:00:6d:72:f3:aa:
76:bc:ee:20:90:11:19:4e:db:04:a9:57:bc:ca:52:05:b3:d5:
4f:a1:c9:98:c9:e3:44:1f:65:e4:09:09:96:3c:09:3f:80:95:
c9:22:07:55:98:17:71:89:dc:e6:63:18:03:2c:9a:b4:cc:35:
c5:85:b3:b4:1d:8c:e6:f6:47:96:7c:ea:1d:e6:6d:da:7a:4b:
10:4a:fb:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3tiR/PZyO8qql7x3IzaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi
MTdkOWMwHhcNMjUwNDIyMDUwMDUzWhcNMjUwNDIzMDUwMDUzWjAzMTEwLwYDVQQD
EygzYzBmZGIyMzU0YmVjZjE1NTMxOTFhMzlhYzU0Yjg1NzliMGQ2NDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGA2axDjVklmGvJzid32EFCrvEc0
/linVo4ff+8PQ8JGDR/6ywFR11buAZDuwy8chSb0raZ4fy0cp03JlLnq9YoNqV7+
X73HtM//RM1MfHwUzPgJwVp4jNJjy64WY7fJAN1Fvvix6X9lb7ElBiUrfPhiY4k4
vsBCT24NKeLULSh3buGfvunqySIqe6iXp3U23DX6Ax+dR42B9hRtC6vo0E1vWrtS
LJ6C+6vlZ3xRBPZdXoHB1g1yHd0UMtJpxsSNsLPj7V0s0g0cqb/zmrRK3T+WOtoy
35onWfwk2nxAcJjZt8uP7wyJ2L0IX9+azqz1lE3Jq/PPVo+EcoOoR7ONvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwP2yNUvs8VUxkaOaxUuFebDWR7MB8GA1UdIwQY
MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt
YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx
LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEZCidku
Q7rCxp/xItRQAKrjs49x7dGAz26Bb8w4GsMnh2LABWhYElv7LN9FzCpV73abmgcR
UmagxtwKL4Kk/XzIEUWP5zoSu22Z4u+7sH68uiuhvSL0+G+Ifs5U7gC2Ch4lLP3p
oPoiZP2Kn3vE8PLhlW3GqhGBhk1O3oV3gmC38TYmBaSQ7z0sea6gAmQ78dBm+UQp
B0OozGYOGURNliNB5PLGeS5Sw6iQua4NDgBtcvOqdrzuIJARGU7bBKlXvMpSBbPV
T6HJmMnjRB9l5AkJljwJP4CVySIHVZgXcYnc5mMYAyyatMw1xYWztB2M5vZHlnzq
HeZt2npLEEr7Yw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:47 2025 by rpki-client