Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: UU4YYProg251sjynlNkYlU13ozwu6IjSuO1DxnZyj2U=
Subject key identifier: BA:5A:5F:F8:81:5F:C9:0B:04:4E:CB:33:E8:AE:A9:27:56:3C:55:BA
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 01965A5DD8FC683226F331EEDC08F5615BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 22:00:21 +0000
Manifest this update: Mon 21 Apr 2025 22:00:21 +0000
Manifest next update: Tue 22 Apr 2025 22:00:21 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: fkY5s19pImCwDPjA5mmPzLJq+CDEzb5U8+IIb8bowF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:d8:fc:68:32:26:f3:31:ee:dc:08:f5:61:5b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Apr 21 22:00:21 2025 GMT
Not After : Apr 22 22:00:21 2025 GMT
Subject: CN=ba5a5ff8815fc90b044ecb33e8aea927563c55ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:4f:eb:f2:33:c7:49:e3:86:d4:77:24:58:
7f:e2:e4:80:6a:dd:e9:92:12:78:bf:18:0a:d9:43:
eb:10:86:71:bd:6b:5e:c9:29:9e:de:cd:96:8a:b0:
41:67:1f:50:33:31:fe:be:e7:75:97:fe:78:e5:b6:
02:1e:0c:82:8d:50:ce:2c:38:0e:a1:2a:c5:ff:fd:
3e:4c:c7:37:e3:21:41:ee:d6:06:38:e8:ff:84:fa:
37:5b:9c:cc:b8:92:f9:ef:bf:7c:e1:c0:81:6d:04:
fe:a5:38:a8:ba:72:bc:9b:94:9a:2b:21:71:7c:84:
bf:01:a6:ed:0f:0d:f2:b0:da:cd:b8:bc:64:73:ed:
64:60:4f:44:58:7b:fc:6d:e1:49:94:ea:7c:03:a9:
94:9c:4e:59:a6:18:0a:98:75:37:0c:27:06:8e:00:
e8:ef:64:59:a1:d2:95:e6:bc:17:f9:76:43:5c:f4:
ff:93:45:ac:1b:78:9f:4c:d0:92:ff:c7:a3:14:1c:
22:e5:67:83:7e:af:8e:e1:dd:c8:c7:e6:35:07:0d:
63:79:dd:cf:b2:cd:8c:1a:d2:ce:ac:ab:e8:98:50:
f7:8e:ec:54:56:28:38:e0:cc:cc:4a:c3:87:d7:47:
86:94:0d:6f:2f:76:89:fb:07:3d:7c:d2:be:0a:55:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5A:5F:F8:81:5F:C9:0B:04:4E:CB:33:E8:AE:A9:27:56:3C:55:BA
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:37:76:c7:ec:6e:e6:e3:f3:e0:13:c7:e9:75:c9:94:b5:c0:
12:5b:7c:8b:7a:b4:f8:14:d0:a9:23:66:46:13:68:5a:61:a9:
96:a0:ff:2a:cf:02:e6:74:b4:28:a7:4d:d8:f0:af:1d:d7:66:
53:40:f3:8f:65:9c:36:dc:33:c4:77:dc:2f:43:65:25:17:65:
b4:a3:2f:71:2f:8f:1a:44:45:30:1e:04:87:de:db:fd:0c:6f:
08:ee:94:80:4b:ab:b9:a7:82:e2:8f:d1:da:c6:4b:95:b4:db:
e5:4b:30:cc:d7:07:8d:a4:1b:4d:f7:5b:cd:dd:92:54:bd:db:
19:cd:d1:f0:29:38:82:d3:d5:ce:1d:94:5c:db:95:3c:2a:85:
a2:94:00:44:6b:78:41:b7:14:d0:ac:a5:64:6b:10:09:53:7c:
44:81:c7:a1:8c:0d:18:8f:67:ab:3b:5e:e6:8f:dd:f7:eb:52:
37:19:3a:74:4c:4d:30:1b:66:73:f2:8e:ac:82:ca:a1:85:d7:
63:f9:e7:12:6c:ad:2f:8f:df:95:ad:72:90:e1:0d:92:34:4c:
b1:87:59:9f:7e:06:23:d6:68:f5:d9:75:97:79:ed:49:9e:53:
4b:3e:8a:56:da:e5:d5:f7:ea:bd:c9:f9:a4:66:00:88:9a:6a:
c3:f9:14:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaXdj8aDIm8zHu3Aj1YVuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NTZlZTdlNDg0YWUyZWYwOTIwZDA5NWJjYWUyNjhmYWZk
Njk2MTkwHhcNMjUwNDIxMjIwMDIxWhcNMjUwNDIyMjIwMDIxWjAzMTEwLwYDVQQD
EyhiYTVhNWZmODgxNWZjOTBiMDQ0ZWNiMzNlOGFlYTkyNzU2M2M1NWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkRP6/Izx0njhtR3JFh/4uSAat3p
khJ4vxgK2UPrEIZxvWteySme3s2WirBBZx9QMzH+vud1l/545bYCHgyCjVDOLDgO
oSrF//0+TMc34yFB7tYGOOj/hPo3W5zMuJL577984cCBbQT+pTiounK8m5SaKyFx
fIS/AabtDw3ysNrNuLxkc+1kYE9EWHv8beFJlOp8A6mUnE5ZphgKmHU3DCcGjgDo
72RZodKV5rwX+XZDXPT/k0WsG3ifTNCS/8ejFBwi5WeDfq+O4d3Ix+Y1Bw1jed3P
ss2MGtLOrKvomFD3juxUVig44MzMSsOH10eGlA1vL3aJ+wc9fNK+ClVpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpaX/iBX8kLBE7LM+iuqSdWPFW6MB8GA1UdIwQY
MBaAFNRW7n5ISuLvCSDQlbyuJo+v1pYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUt
NTRlOWZmZDNiYmUwLzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82ZTljMjctNGUxNS00ODg1LTg3YWUtNTRlOWZmZDNiYmUw
LzEvMUZidWZraEs0dThKSU5DVnZLNG1qNl9XbGhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDd2x+xu
5uPz4BPH6XXJlLXAElt8i3q0+BTQqSNmRhNoWmGplqD/Ks8C5nS0KKdN2PCvHddm
U0Dzj2WcNtwzxHfcL0NlJRdltKMvcS+PGkRFMB4Eh97b/QxvCO6UgEuruaeC4o/R
2sZLlbTb5UswzNcHjaQbTfdbzd2SVL3bGc3R8Ck4gtPVzh2UXNuVPCqFopQARGt4
QbcU0KylZGsQCVN8RIHHoYwNGI9nqzte5o/d9+tSNxk6dExNMBtmc/KOrILKoYXX
Y/nnEmytL4/fla1ykOENkjRMsYdZn34GI9Zo9dl1l3ntSZ5TSz6KVtrl1ffqvcn5
pGYAiJpqw/kUUw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:44 2025 by rpki-client