Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: 8Fp6CwqtESON/WCwcfOe5e87G0zj3DEAdSnA7FtbmfA=
Subject key identifier: CF:F1:3D:14:0F:7D:C6:E3:2D:5C:41:33:96:AF:14:53:E8:E3:2F:A3
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 01965F4D688F2CF7F8AE6A2FC778D23C238F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: F4
Signing time: Tue 22 Apr 2025 21:00:30 +0000
Manifest this update: Tue 22 Apr 2025 21:00:30 +0000
Manifest next update: Wed 23 Apr 2025 21:00:30 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: mQcP3XZqzA5vbRYcY+AgZKJeCooeD9qSXuXZxwpNZ6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:68:8f:2c:f7:f8:ae:6a:2f:c7:78:d2:3c:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Apr 22 21:00:30 2025 GMT
Not After : Apr 23 21:00:30 2025 GMT
Subject: CN=cff13d140f7dc6e32d5c413396af1453e8e32fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b1:66:e7:de:e6:51:ff:24:5a:73:21:40:
60:40:1d:43:ac:1e:01:56:c9:77:90:ff:a3:7f:c4:
b4:6c:8d:0c:88:df:fc:7b:ac:30:c5:81:ac:63:aa:
d3:b2:87:ca:85:e2:93:fc:8b:57:ff:43:10:b1:15:
8f:1e:67:b0:5e:43:7a:b4:01:2a:ac:38:47:52:a6:
d7:e0:fa:59:28:38:b4:99:fe:56:db:fc:03:c3:4e:
0f:15:79:14:7d:32:8f:aa:60:50:07:09:98:54:1d:
c6:6c:63:18:99:34:59:8c:ef:b4:20:9f:53:4e:e5:
ce:c6:42:04:cd:d4:6a:e9:6c:c2:09:24:08:a8:ac:
b5:39:13:58:ad:c2:58:62:de:a6:cb:96:bc:70:0b:
27:7c:f9:5f:29:70:14:a5:9a:2a:ce:7c:82:08:27:
1c:8f:91:5b:76:5c:18:8e:7d:8d:79:6d:d3:11:88:
39:25:67:79:75:c5:7d:79:3a:db:1a:70:f4:27:d5:
0c:fc:43:4e:fc:5f:73:45:67:a4:de:7b:bb:74:bd:
60:2a:ab:de:94:97:3c:f2:54:0b:29:2d:4b:90:6c:
49:ed:c3:a3:28:fd:25:6a:e2:24:35:93:f1:fc:28:
cc:26:04:ef:7e:ed:88:34:da:17:d6:50:72:4b:64:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:3D:14:0F:7D:C6:E3:2D:5C:41:33:96:AF:14:53:E8:E3:2F:A3
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d3:e9:83:c5:0d:83:68:a4:77:85:0b:10:b8:8a:89:b5:64:
7c:b7:37:88:f8:e5:c6:9f:af:33:b2:93:0d:df:c1:28:51:77:
ca:b0:d8:23:8e:73:5f:c0:3f:bd:10:f6:46:ce:f6:dd:9d:e9:
b4:07:a8:fa:56:65:38:9b:4b:52:60:c9:89:92:f5:af:3c:ee:
d3:75:94:3a:68:ab:dc:60:b6:6d:b1:47:ec:81:fc:33:6b:3e:
0f:0f:92:3f:7a:27:d9:54:c6:d4:28:05:0a:07:ff:66:89:df:
6c:ba:54:f4:48:8c:56:af:be:b3:72:d2:80:6b:a7:24:57:5f:
3e:c3:53:60:c2:0e:f5:68:2b:04:bc:5e:d9:82:08:92:c2:07:
c2:1b:b9:a7:7c:15:26:fb:f3:5f:2b:75:1c:5a:5c:ce:86:d5:
59:81:45:be:60:a3:f1:33:39:53:d3:a2:c2:17:6b:b9:51:1d:
7f:3b:0e:94:3d:b9:6c:c6:86:6f:3f:3e:50:25:73:ee:dd:5f:
5d:29:9e:ec:59:d5:5d:5e:28:c0:18:24:0e:bf:1a:0a:a1:76:
0a:d6:e4:ad:76:4d:46:26:17:86:22:1e:45:51:76:a8:2b:d3:
ae:77:e4:16:c9:6f:df:4a:3d:1d:24:06:29:12:e7:b8:3d:38:
fa:ac:90:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfTWiPLPf4rmovx3jSPCOPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2U3NTdkMDQzYWQzMTdmMmQ0MDQzYTczY2M1ZmFmOTc0
MzQ2MGUwHhcNMjUwNDIyMjEwMDMwWhcNMjUwNDIzMjEwMDMwWjAzMTEwLwYDVQQD
EyhjZmYxM2QxNDBmN2RjNmUzMmQ1YzQxMzM5NmFmMTQ1M2U4ZTMyZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqxZufe5lH/JFpzIUBgQB1DrB4B
Vsl3kP+jf8S0bI0MiN/8e6wwxYGsY6rTsofKheKT/ItX/0MQsRWPHmewXkN6tAEq
rDhHUqbX4PpZKDi0mf5W2/wDw04PFXkUfTKPqmBQBwmYVB3GbGMYmTRZjO+0IJ9T
TuXOxkIEzdRq6WzCCSQIqKy1ORNYrcJYYt6my5a8cAsnfPlfKXAUpZoqznyCCCcc
j5FbdlwYjn2NeW3TEYg5JWd5dcV9eTrbGnD0J9UM/ENO/F9zRWek3nu7dL1gKqve
lJc88lQLKS1LkGxJ7cOjKP0lauIkNZPx/CjMJgTvfu2INNoX1lByS2RVWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/xPRQPfcbjLVxBM5avFFPo4y+jMB8GA1UdIwQY
MBaAFL1+dX0EOtMX8tQEOnPMX6+XQ0YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUt
NmRkODY3MGZhM2UwLzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUtNmRkODY3MGZhM2Uw
LzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdPpg8UN
g2ikd4ULELiKibVkfLc3iPjlxp+vM7KTDd/BKFF3yrDYI45zX8A/vRD2Rs723Z3p
tAeo+lZlOJtLUmDJiZL1rzzu03WUOmir3GC2bbFH7IH8M2s+Dw+SP3on2VTG1CgF
Cgf/ZonfbLpU9EiMVq++s3LSgGunJFdfPsNTYMIO9WgrBLxe2YIIksIHwhu5p3wV
JvvzXyt1HFpczobVWYFFvmCj8TM5U9OiwhdruVEdfzsOlD25bMaGbz8+UCVz7t1f
XSme7FnVXV4owBgkDr8aCqF2CtbkrXZNRiYXhiIeRVF2qCvTrnfkFslv30o9HSQG
KRLnuD04+qyQvg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:46:51 2025 by rpki-client