Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: xVKuI/dPtnLYYbTj3uscOGOnTaXiS6Z2gw9HV5avkjY=
Subject key identifier: 29:13:82:F6:E0:4F:71:17:9C:E4:43:29:71:1D:FE:43:22:39:AD:E1
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 0196549298231B72BCA13A153193E8A090F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 19:00:15 +0000
Manifest this update: Sun 20 Apr 2025 19:00:15 +0000
Manifest next update: Mon 21 Apr 2025 19:00:15 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: 1QHwN6j9EHFJwkOuyGLqk5xMpEoRND7tgJarZV+zidM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:98:23:1b:72:bc:a1:3a:15:31:93:e8:a0:90:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: Apr 20 19:00:15 2025 GMT
Not After : Apr 21 19:00:15 2025 GMT
Subject: CN=291382f6e04f71179ce44329711dfe432239ade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:6b:6e:aa:be:ad:32:74:64:d7:61:9a:54:
af:a0:68:63:93:d8:30:d1:77:a8:5b:6a:bc:3b:fb:
d9:1c:a3:62:50:c0:92:02:e9:58:b2:41:0e:b3:30:
ce:0c:c6:51:cb:36:04:2b:5f:6f:fb:96:18:83:25:
bb:c2:58:51:f9:58:97:af:a5:f8:98:e9:97:e3:67:
d1:e1:e2:e7:e6:17:c8:3f:93:bd:77:a3:f8:a6:b5:
79:1e:fa:76:02:a2:b5:f7:2e:40:73:b4:c4:a9:a9:
d5:c2:de:74:46:0b:56:ab:ea:ee:db:de:50:56:4d:
2c:16:75:92:a2:4c:5f:d6:19:60:61:66:4f:6b:a4:
90:4d:36:39:1c:8b:40:e1:2a:be:03:66:6f:7d:35:
ea:ca:9e:fd:ce:5a:c7:f8:79:3f:66:f8:47:48:00:
09:cc:6b:14:ca:34:8c:77:a0:ce:ba:b9:38:99:fb:
91:f0:d1:77:f6:e9:77:5e:cb:40:9a:6f:75:50:98:
6e:ff:e2:f4:48:2e:ed:97:9c:c7:91:d4:c5:d2:33:
4f:ea:90:2f:c3:67:e0:8e:ab:19:7a:63:0b:57:ca:
4d:20:46:ed:77:ce:3d:04:42:61:bd:8b:62:dc:32:
d9:64:22:5c:af:df:d7:f1:8d:13:2a:f1:00:3e:ff:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:13:82:F6:E0:4F:71:17:9C:E4:43:29:71:1D:FE:43:22:39:AD:E1
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:40:a8:ea:7d:08:e8:4c:b5:f1:13:b2:29:53:27:69:c1:08:
b0:ce:19:35:dd:fb:47:01:d6:4f:58:f9:11:21:a4:ab:7f:3c:
f6:9f:9e:cb:d3:c0:08:1a:0b:64:a2:b8:0a:e6:91:40:6c:68:
c1:6c:34:5c:fc:59:b9:6f:c3:80:f6:62:17:26:37:55:19:64:
a8:38:d6:96:2e:df:da:bd:2d:a8:9f:0c:90:1c:e7:f7:93:b4:
49:66:c6:8b:83:4e:70:75:c3:02:8b:3f:76:74:fb:31:09:a5:
78:67:80:0b:96:bb:79:d9:53:8b:3b:82:43:ae:3a:7d:c6:d4:
c5:25:cd:67:95:05:13:73:52:02:33:3e:4b:99:49:bc:94:de:
f0:97:0e:b8:d0:82:2d:89:f1:cd:49:d2:e6:1b:7c:d6:b6:26:
fa:49:a8:ec:82:0b:0a:f6:7f:c3:aa:81:37:f6:44:fe:8f:1e:
3a:34:fd:91:d3:ce:75:73:6c:d6:f1:f5:4f:bf:d0:4d:d4:bc:
11:1c:3a:44:6e:23:b6:a8:d7:48:55:5d:fa:f8:b4:f6:e4:ab:
e2:9d:3d:8a:22:05:2c:b1:6b:7f:55:4b:f3:16:51:15:f8:05:
f6:22:28:34:d3:cb:b7:71:6c:ec:75:86:2c:4a:df:f2:8f:b7:
2b:ef:ae:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkpgjG3K8oToVMZPooJD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNThhMzc3NWQwYzVlYjM4ZjIwZjBlZjlhMzYxMTA2MWE1
MTk1YjMwHhcNMjUwNDIwMTkwMDE1WhcNMjUwNDIxMTkwMDE1WjAzMTEwLwYDVQQD
EygyOTEzODJmNmUwNGY3MTE3OWNlNDQzMjk3MTFkZmU0MzIyMzlhZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB9rbqq+rTJ0ZNdhmlSvoGhjk9gw
0XeoW2q8O/vZHKNiUMCSAulYskEOszDODMZRyzYEK19v+5YYgyW7wlhR+ViXr6X4
mOmX42fR4eLn5hfIP5O9d6P4prV5Hvp2AqK19y5Ac7TEqanVwt50RgtWq+ru295Q
Vk0sFnWSokxf1hlgYWZPa6SQTTY5HItA4Sq+A2ZvfTXqyp79zlrH+Hk/ZvhHSAAJ
zGsUyjSMd6DOurk4mfuR8NF39ul3XstAmm91UJhu/+L0SC7tl5zHkdTF0jNP6pAv
w2fgjqsZemMLV8pNIEbtd849BEJhvYti3DLZZCJcr9/X8Y0TKvEAPv8Y8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkTgvbgT3EXnORDKXEd/kMiOa3hMB8GA1UdIwQY
MBaAFJFYo3ddDF6zjyDw75o2EQYaUZWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAt
OGQwNGY4Nzc5NDIzLzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81Yzc2NWMtODNmMy00NWQxLTg5MzAtOGQwNGY4Nzc5NDIz
LzEva1ZpamQxME1Yck9QSVBEdm1qWVJCaHBSbGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikCo6n0I
6Ey18ROyKVMnacEIsM4ZNd37RwHWT1j5ESGkq3889p+ey9PACBoLZKK4CuaRQGxo
wWw0XPxZuW/DgPZiFyY3VRlkqDjWli7f2r0tqJ8MkBzn95O0SWbGi4NOcHXDAos/
dnT7MQmleGeAC5a7edlTizuCQ646fcbUxSXNZ5UFE3NSAjM+S5lJvJTe8JcOuNCC
LYnxzUnS5ht81rYm+kmo7IILCvZ/w6qBN/ZE/o8eOjT9kdPOdXNs1vH1T7/QTdS8
ERw6RG4jtqjXSFVd+vi09uSr4p09iiIFLLFrf1VL8xZRFfgF9iIoNNPLt3Fs7HWG
LErf8o+3K++uIQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:16 2025 by rpki-client