Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: cpPHKJ9BGHt7/EA9j8QV5KxH8RiYxyz1lv749y1wfxk=
Subject key identifier: A2:2C:EF:30:F9:8B:3F:09:50:AF:46:46:D4:0E:07:E9:F1:1E:21:33
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 01965FBB6C6091A2609D2D62DB0C8F121DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 1506
Signing time: Tue 22 Apr 2025 23:00:40 +0000
Manifest this update: Tue 22 Apr 2025 23:00:40 +0000
Manifest next update: Wed 23 Apr 2025 23:00:40 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: ee/9EUAVoc+1TgmBBdOagVF+yqWdVVnBwc5pT+UKMRw=)
2: YHDrFWwxkrS_T2zm-XD8OnCCk3I.roa (hash: ats4DX7q3HbDaXBiSmUVMOKuQb0H1KPc5eA6NgFMmhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:bb:6c:60:91:a2:60:9d:2d:62:db:0c:8f:12:1d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Apr 22 23:00:40 2025 GMT
Not After : Apr 23 23:00:40 2025 GMT
Subject: CN=a22cef30f98b3f0950af4646d40e07e9f11e2133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:04:e0:fb:8d:30:70:0e:2d:2d:c9:fc:ac:
d1:99:a3:e7:13:38:6c:ab:c7:c9:ef:b6:9d:bf:2d:
22:62:73:94:6a:5c:d7:72:25:78:0f:84:b6:e9:0a:
f3:21:13:31:71:7c:c9:80:17:bb:ec:a8:03:74:d9:
be:96:dd:f9:a1:ef:1b:f2:88:64:b1:c1:19:42:04:
bc:1d:a1:df:5c:97:fa:06:54:1c:51:07:93:35:11:
b6:43:0f:19:ba:cd:08:cd:03:95:68:bb:aa:b7:20:
73:6c:8d:e0:e8:dd:d6:8f:2c:65:db:1a:5f:15:31:
5a:5b:29:9a:06:99:28:cb:ab:8a:67:a7:af:0e:d7:
3c:8d:fd:5b:c5:d6:ff:cd:4a:cf:30:44:96:fc:82:
df:4b:0e:a7:5e:8f:a6:fe:0a:41:18:8a:c7:84:1f:
58:df:12:d9:a0:56:7e:1d:ce:4f:7e:40:f3:3a:98:
c2:68:ea:54:f9:3a:e5:96:2b:c9:26:09:a1:a0:4e:
b9:de:4b:c7:77:24:af:8f:d8:7f:16:d2:cf:4b:6f:
f3:71:62:d0:42:67:68:fd:3b:1d:83:12:cd:77:b3:
75:14:96:4d:63:92:9f:93:7a:66:f4:49:be:db:0c:
70:f5:80:23:3d:96:7f:9e:2a:8c:70:2b:9c:fd:6c:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2C:EF:30:F9:8B:3F:09:50:AF:46:46:D4:0E:07:E9:F1:1E:21:33
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ca:74:87:fe:c9:61:d6:45:6f:dd:93:48:14:0b:3e:d2:98:
f5:9b:9f:75:f7:24:c0:41:ef:ce:79:7e:ae:7c:6d:50:3b:b2:
00:02:7b:bc:ff:c0:db:f9:bd:53:59:41:6f:51:33:42:58:18:
d3:80:6b:52:b1:8b:39:b4:b2:9f:d5:c5:50:1c:9c:3f:5d:84:
ae:d3:a4:53:1e:bd:0a:46:68:5d:03:d7:50:fa:ed:d5:a7:29:
c4:81:93:99:e3:49:e2:91:38:48:bc:0e:1c:db:11:79:6b:04:
a0:fc:79:9c:cd:7f:b3:e3:32:44:aa:3b:f6:60:b4:01:63:51:
57:5c:3f:ce:d3:0c:35:ad:53:6d:ab:9b:d1:09:7c:25:7d:0e:
ea:65:74:b9:6e:06:86:9f:60:b5:c8:69:a6:c7:cd:d6:4f:53:
9c:a5:2e:0c:ff:39:d0:29:2f:99:1c:83:6b:84:1c:da:8f:df:
5a:a0:5e:43:4e:89:e8:6d:05:b8:d2:29:cd:e0:b1:c3:10:47:
3a:05:74:0c:e1:eb:1d:13:56:20:1e:c0:9d:fb:e9:81:f9:1e:
f6:43:e3:59:00:07:8d:df:af:21:88:97:5e:eb:df:16:b9:b0:
f7:e1:86:58:dd:1c:5b:12:f0:5f:a5:df:00:12:71:ab:a3:91:
66:58:75:a2
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZfu2xgkaJgnS1i2wyPEh3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2I5MDk0Y2I3Y2RhMTM4YmQwMTAwMTNlYjllY2MzMzE5
MDMwNDEwHhcNMjUwNDIyMjMwMDQwWhcNMjUwNDIzMjMwMDQwWjAzMTEwLwYDVQQD
EyhhMjJjZWYzMGY5OGIzZjA5NTBhZjQ2NDZkNDBlMDdlOWYxMWUyMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshME4PuNMHAOLS3J/KzRmaPnEzhs
q8fJ77advy0iYnOUalzXciV4D4S26QrzIRMxcXzJgBe77KgDdNm+lt35oe8b8ohk
scEZQgS8HaHfXJf6BlQcUQeTNRG2Qw8Zus0IzQOVaLuqtyBzbI3g6N3Wjyxl2xpf
FTFaWymaBpkoy6uKZ6evDtc8jf1bxdb/zUrPMESW/ILfSw6nXo+m/gpBGIrHhB9Y
3xLZoFZ+Hc5PfkDzOpjCaOpU+TrllivJJgmhoE653kvHdySvj9h/FtLPS2/zcWLQ
Qmdo/TsdgxLNd7N1FJZNY5Kfk3pm9Em+2wxw9YAjPZZ/niqMcCuc/WyvtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKIs7zD5iz8JUK9GRtQOB+nxHiEzMB8GA1UdIwQY
MBaAFPnLkJTLfNoTi9AQAT657MMxkDBBMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jdVFsTXQ4MmhPTDBCQUJQcm5zd3pHUU1FRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvNjI0NTQ2LTRhYzgtNGRiZS04Njk3
LWFhY2U4NzhiYWI2NS8xLzEtY3VRbE10ODJoT0wwQkFCUHJuc3d6R1FNRUUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhLzYyNDU0Ni00YWM4LTRkYmUtODY5Ny1hYWNlODc4YmFi
NjUvMS8xLWN1UWxNdDgyaE9MMEJBQlBybnN3ekdRTUVFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsp0
h/7JYdZFb92TSBQLPtKY9ZufdfckwEHvznl+rnxtUDuyAAJ7vP/A2/m9U1lBb1Ez
QlgY04BrUrGLObSyn9XFUBycP12ErtOkUx69CkZoXQPXUPrt1acpxIGTmeNJ4pE4
SLwOHNsReWsEoPx5nM1/s+MyRKo79mC0AWNRV1w/ztMMNa1Tbaub0Ql8JX0O6mV0
uW4Ghp9gtchppsfN1k9TnKUuDP850CkvmRyDa4Qc2o/fWqBeQ06J6G0FuNIpzeCx
wxBHOgV0DOHrHRNWIB7Anfvpgfke9kPjWQAHjd+vIYiXXuvfFrmw9+GGWN0cWxLw
X6XfABJxq6ORZlh1og==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:46:56 2025 by rpki-client