Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
File: HJglkTOVXy7mNvuB8MDqYExmM1g.mft (raw, json)
Hash identifier: jCaaos9JSIBYIRkDAjGecfwpcVV9DS8wnQQMpHJawNc=
Subject key identifier: D6:98:D1:2E:8A:18:81:3B:04:01:38:3F:FD:B2:0E:B1:60:E4:BE:3E
Authority key identifier: 1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
Certificate issuer: /CN=1c98259133955f2ee636fb81f0c0ea604c663358
Certificate serial: 0196586F9B7CD83D19B82685917031A93D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
Manifest number: 01DF
Signing time: Mon 21 Apr 2025 13:00:31 +0000
Manifest this update: Mon 21 Apr 2025 13:00:31 +0000
Manifest next update: Tue 22 Apr 2025 13:00:31 +0000
Files and hashes: 1: HJglkTOVXy7mNvuB8MDqYExmM1g.crl (hash: V2+vzLwxPtLQEvM5jJnlQyC/jklzLfdNC1lZQgYFEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:9b:7c:d8:3d:19:b8:26:85:91:70:31:a9:3d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c98259133955f2ee636fb81f0c0ea604c663358
Validity
Not Before: Apr 21 13:00:31 2025 GMT
Not After : Apr 22 13:00:31 2025 GMT
Subject: CN=d698d12e8a18813b0401383ffdb20eb160e4be3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:b4:ed:68:95:0c:ec:b6:85:77:67:fd:32:
36:1b:3a:91:bd:ec:57:9e:dc:76:53:10:d1:ea:fa:
81:4d:93:9f:9a:40:fe:e9:82:a8:af:df:ac:ac:c7:
42:79:a0:59:f6:fa:d6:78:32:78:f8:20:08:29:c9:
a3:64:7d:07:5d:9a:e4:bb:2a:66:c1:8d:19:f7:88:
61:25:d7:f7:97:4d:ff:47:c4:76:8e:8c:14:8b:8d:
cd:8d:c3:68:0c:77:9d:40:85:d8:30:25:76:d1:9f:
d4:2d:75:cd:e4:cb:9f:c6:34:e9:61:86:10:61:38:
dd:ef:2d:d1:2d:6a:5d:60:ec:0e:64:8d:67:af:d2:
d0:2d:d2:c8:a3:6b:b4:45:7c:cf:46:79:73:01:c9:
4e:93:6b:29:50:91:35:58:a6:f8:f3:2f:01:04:60:
14:33:41:8b:26:84:c5:34:6b:d7:c9:c1:7d:15:22:
36:86:de:0f:05:7d:8b:b5:29:b2:67:0d:7c:c2:01:
63:7f:56:61:5e:a2:e8:04:09:13:e8:c6:aa:81:44:
87:f4:e2:f2:e9:34:81:0a:e1:35:ac:52:84:41:c2:
12:7a:8d:26:d3:63:38:4f:9e:20:20:cf:94:a0:ae:
c8:62:a0:bf:6a:73:ce:17:d0:32:3c:d5:d3:8d:d3:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:98:D1:2E:8A:18:81:3B:04:01:38:3F:FD:B2:0E:B1:60:E4:BE:3E
X509v3 Authority Key Identifier:
keyid:1C:98:25:91:33:95:5F:2E:E6:36:FB:81:F0:C0:EA:60:4C:66:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJglkTOVXy7mNvuB8MDqYExmM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e6cd77-8e75-4501-b3cb-53613377e317/1/HJglkTOVXy7mNvuB8MDqYExmM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e4:2f:c8:af:3e:1c:25:3f:63:9e:76:c9:6a:d0:96:fb:89:
a6:8c:27:b6:36:61:77:cf:82:d2:2f:89:9f:4f:dc:d5:b2:43:
7c:34:22:36:cc:05:64:66:3c:47:bf:28:9d:37:5a:e0:ea:68:
47:47:a0:1f:6e:de:0f:12:c1:d3:b2:bb:09:8f:e4:83:4d:b7:
51:e4:e8:6a:51:ec:63:c4:1d:8f:ae:5f:4a:ad:6b:89:20:46:
2a:9c:ee:28:c7:c3:22:97:c9:4b:d8:60:28:f8:2c:d6:a2:dc:
b3:b0:86:91:04:9f:2d:8a:f4:96:56:f1:45:35:8b:f9:7a:c1:
cc:7c:51:bb:14:54:8f:0e:5b:83:0f:03:ba:b2:ee:17:b7:e1:
66:17:03:08:21:1a:1e:80:ea:8b:5a:9b:4b:55:a6:bb:98:4d:
cc:8f:4b:b6:1c:b5:cf:db:c8:16:7c:f1:ad:12:83:61:c4:dc:
b0:be:ac:9f:e5:0d:cd:f4:1e:1d:14:21:b6:df:23:fd:9b:74:
13:14:4a:13:ad:f2:8c:ca:9d:4a:ae:8b:c7:59:b9:3b:a2:a2:
ad:a9:71:83:de:1c:4c:2d:c0:62:08:54:b2:c0:e2:f9:81:1b:
25:25:99:87:73:8b:6a:bd:8b:9c:36:da:67:e8:59:93:2b:31:
7f:1d:90:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb5t82D0ZuCaFkXAxqT00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTgyNTkxMzM5NTVmMmVlNjM2ZmI4MWYwYzBlYTYwNGM2
NjMzNTgwHhcNMjUwNDIxMTMwMDMxWhcNMjUwNDIyMTMwMDMxWjAzMTEwLwYDVQQD
EyhkNjk4ZDEyZThhMTg4MTNiMDQwMTM4M2ZmZGIyMGViMTYwZTRiZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqG07WiVDOy2hXdn/TI2GzqRvexX
ntx2UxDR6vqBTZOfmkD+6YKor9+srMdCeaBZ9vrWeDJ4+CAIKcmjZH0HXZrkuypm
wY0Z94hhJdf3l03/R8R2jowUi43NjcNoDHedQIXYMCV20Z/ULXXN5MufxjTpYYYQ
YTjd7y3RLWpdYOwOZI1nr9LQLdLIo2u0RXzPRnlzAclOk2spUJE1WKb48y8BBGAU
M0GLJoTFNGvXycF9FSI2ht4PBX2LtSmyZw18wgFjf1ZhXqLoBAkT6MaqgUSH9OLy
6TSBCuE1rFKEQcISeo0m02M4T54gIM+UoK7IYqC/anPOF9AyPNXTjdPoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaY0S6KGIE7BAE4P/2yDrFg5L4+MB8GA1UdIwQY
MBaAFByYJZEzlV8u5jb7gfDA6mBMZjNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lNmNkNzctOGU3NS00NTAxLWIzY2It
NTM2MTMzNzdlMzE3LzEvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9lNmNkNzctOGU3NS00NTAxLWIzY2ItNTM2MTMzNzdlMzE3
LzEvSEpnbGtUT1ZYeTdtTnZ1QjhNRHFZRXhtTTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuQvyK8+
HCU/Y552yWrQlvuJpowntjZhd8+C0i+Jn0/c1bJDfDQiNswFZGY8R78onTda4Opo
R0egH27eDxLB07K7CY/kg023UeToalHsY8Qdj65fSq1riSBGKpzuKMfDIpfJS9hg
KPgs1qLcs7CGkQSfLYr0llbxRTWL+XrBzHxRuxRUjw5bgw8DurLuF7fhZhcDCCEa
HoDqi1qbS1Wmu5hNzI9Lthy1z9vIFnzxrRKDYcTcsL6sn+UNzfQeHRQhtt8j/Zt0
ExRKE63yjMqdSq6Lx1m5O6Kiralxg94cTC3AYghUssDi+YEbJSWZh3OLar2LnDba
Z+hZkysxfx2QDg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:42:44 2025 by rpki-client