Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: cChG1IDOlqvk0kMlv0yiVdwN+cK36lAqMeI+62dhu0w=
Subject key identifier: 2A:D9:BA:04:02:37:03:53:12:7C:53:FC:60:88:D9:B8:D6:38:8D:10
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 01965537681B7FCEBABC01720C46406AEC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 22:00:16 +0000
Manifest this update: Sun 20 Apr 2025 22:00:16 +0000
Manifest next update: Mon 21 Apr 2025 22:00:16 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: 0tgxxCs12snEWPcA9vQlIgudkR9VMDF4met71eIXZtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:68:1b:7f:ce:ba:bc:01:72:0c:46:40:6a:ec:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Apr 20 22:00:16 2025 GMT
Not After : Apr 21 22:00:16 2025 GMT
Subject: CN=2ad9ba0402370353127c53fc6088d9b8d6388d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:45:0b:4b:b1:6c:92:d0:f7:fb:3d:f9:c2:
3d:a2:0f:bd:a3:d1:aa:7d:2b:18:23:a0:05:0e:f9:
27:60:58:23:a9:50:9b:e1:b8:f2:62:62:71:12:c6:
33:6b:1e:af:06:c3:70:8b:14:7d:fe:5b:09:a8:d5:
18:c1:52:df:88:ff:9e:47:47:de:ba:f3:96:ea:c8:
ee:29:b5:55:c7:cb:27:91:19:41:af:ed:0f:ec:39:
6c:cc:5c:13:b0:2e:ae:b0:5a:61:5b:c7:32:5c:d6:
52:c1:42:1b:26:15:38:c0:97:dc:95:ec:05:bd:7f:
8f:fb:2f:0a:ed:a6:17:30:17:16:29:a1:29:00:26:
8c:6f:27:9b:a5:94:82:87:35:38:8a:57:cf:ae:78:
4a:f2:11:ac:15:fa:7c:5d:2a:14:06:62:71:b8:3d:
5b:74:94:7c:fd:17:f4:55:55:c6:6c:74:37:98:df:
94:90:ed:0e:23:9e:4b:d0:27:bb:9b:37:8e:59:4c:
fd:ac:7d:d0:cf:8b:53:7d:78:ca:65:4a:dd:5d:ad:
14:31:15:37:88:f3:de:36:cc:e5:28:93:ee:8c:f1:
25:88:0b:65:fa:72:ae:c3:d8:f9:c3:d2:25:d2:e6:
a9:4f:eb:c1:69:a8:e7:2f:cd:ca:4f:ca:96:77:9b:
e2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:BA:04:02:37:03:53:12:7C:53:FC:60:88:D9:B8:D6:38:8D:10
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:35:18:13:b3:85:76:69:d4:0d:aa:0d:1a:4b:5b:05:ca:
4a:cf:e6:d5:5e:0e:da:d7:c3:15:d1:84:e0:62:96:b5:c9:ca:
8a:cc:75:1b:a1:85:82:19:d8:46:42:03:d3:54:b0:1a:57:86:
3a:d2:71:0d:3a:f4:41:8f:4e:c2:5f:72:84:35:96:24:e5:3e:
b8:31:42:54:28:d6:09:d3:ab:f0:64:8a:f5:db:e8:a1:88:b0:
2b:79:d3:9c:07:86:34:53:9e:a8:90:4a:f6:e1:56:12:6b:a3:
b6:fe:6a:3f:bb:5c:01:5a:d2:26:4f:00:ac:29:7d:de:b3:60:
07:00:6a:7b:d0:6b:cf:e8:90:f6:ee:c0:1e:57:10:79:00:bf:
6d:70:26:80:3a:17:12:e2:d0:c9:5f:d6:aa:4a:a0:f5:5c:b7:
89:9a:51:d5:a0:c9:88:2c:07:fa:83:f1:5e:d5:f6:54:4f:cd:
b9:40:2a:58:85:26:b1:85:48:b0:03:90:3c:54:12:db:e5:14:
6b:cb:5c:bf:24:b2:44:9b:36:78:b3:b7:65:00:8a:59:67:22:
33:19:78:7f:cb:f5:4a:c1:c5:bb:3c:16:ca:69:fd:7d:b4:88:
5f:06:bd:f8:30:57:53:60:34:9d:b5:e0:b4:da:db:76:e3:5d:
d5:43:9d:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN2gbf866vAFyDEZAauxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYzcxNTU0MWJhMzcyZDU5MGQ2ODc2N2Q3OGNlNjk4NDAw
MTMwNTkwHhcNMjUwNDIwMjIwMDE2WhcNMjUwNDIxMjIwMDE2WjAzMTEwLwYDVQQD
EygyYWQ5YmEwNDAyMzcwMzUzMTI3YzUzZmM2MDg4ZDliOGQ2Mzg4ZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8NFC0uxbJLQ9/s9+cI9og+9o9Gq
fSsYI6AFDvknYFgjqVCb4bjyYmJxEsYzax6vBsNwixR9/lsJqNUYwVLfiP+eR0fe
uvOW6sjuKbVVx8snkRlBr+0P7DlszFwTsC6usFphW8cyXNZSwUIbJhU4wJfclewF
vX+P+y8K7aYXMBcWKaEpACaMbyebpZSChzU4ilfPrnhK8hGsFfp8XSoUBmJxuD1b
dJR8/Rf0VVXGbHQ3mN+UkO0OI55L0Ce7mzeOWUz9rH3Qz4tTfXjKZUrdXa0UMRU3
iPPeNszlKJPujPEliAtl+nKuw9j5w9Il0uapT+vBaajnL83KT8qWd5viqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrZugQCNwNTEnxT/GCI2bjWOI0QMB8GA1UdIwQY
MBaAFCPHFVQbo3LVkNaHZ9eM5phAATBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMt
N2NlNjk4MGNiMWNjLzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMtN2NlNjk4MGNiMWNj
LzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfM1GBOz
hXZp1A2qDRpLWwXKSs/m1V4O2tfDFdGE4GKWtcnKisx1G6GFghnYRkID01SwGleG
OtJxDTr0QY9Owl9yhDWWJOU+uDFCVCjWCdOr8GSK9dvooYiwK3nTnAeGNFOeqJBK
9uFWEmujtv5qP7tcAVrSJk8ArCl93rNgBwBqe9Brz+iQ9u7AHlcQeQC/bXAmgDoX
EuLQyV/Wqkqg9Vy3iZpR1aDJiCwH+oPxXtX2VE/NuUAqWIUmsYVIsAOQPFQS2+UU
a8tcvySyRJs2eLO3ZQCKWWciMxl4f8v1SsHFuzwWymn9fbSIXwa9+DBXU2A0nbXg
tNrbduNd1UOd4w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:15 2025 by rpki-client