Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: rOyC0sqdgD8TFYgnwb8vC+eagpJoDefEV7yEx9qS29k=
Subject key identifier: 6A:08:5F:19:49:9C:6D:B2:31:85:09:EC:69:06:32:D1:DE:B3:DC:53
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 01965D95FF8BD53C3B1E9B957623FB0642DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 0502
Signing time: Tue 22 Apr 2025 13:00:33 +0000
Manifest this update: Tue 22 Apr 2025 13:00:33 +0000
Manifest next update: Wed 23 Apr 2025 13:00:33 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: d3qBfpmnZ1D/iNGf6Llp2hBdoxunpUWpXVZKnONpV3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:95:ff:8b:d5:3c:3b:1e:9b:95:76:23:fb:06:42:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Apr 22 13:00:33 2025 GMT
Not After : Apr 23 13:00:33 2025 GMT
Subject: CN=6a085f19499c6db2318509ec690632d1deb3dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ee:c0:f5:6e:51:19:8a:fb:b2:9f:3d:d9:f7:
46:2c:80:08:8d:45:ea:49:5c:14:18:fd:1b:f9:c5:
ea:4c:ac:e8:83:4b:cf:3d:48:8d:35:53:ed:68:06:
ac:f6:40:fd:83:bf:a2:43:04:34:3b:f4:fe:9c:77:
66:95:66:bd:44:07:4e:3e:fe:4b:88:df:f3:7d:83:
5c:bf:3e:25:6b:99:c3:1a:dd:48:b3:27:d9:a9:29:
6c:51:db:38:b9:14:fc:40:bd:b4:5f:4c:5e:40:94:
83:20:c6:32:25:f3:b7:cb:6d:17:3a:1e:58:a0:7c:
09:9a:b3:f0:42:70:78:f5:79:2e:93:42:35:aa:96:
c8:9b:bc:ca:98:6f:95:5c:0c:8c:f1:12:d7:8a:31:
c1:ef:28:d0:c9:42:d8:3e:0c:39:19:bf:45:99:a5:
42:7e:8f:ad:d8:58:f3:f2:12:50:b2:92:eb:0d:a0:
85:4d:2d:ba:42:d7:7d:ec:e3:ee:a5:e5:53:cd:da:
41:49:2f:4d:0b:b7:a3:52:8f:2c:0b:71:4b:be:14:
f5:19:f1:c6:de:a2:74:43:64:93:49:c1:28:5b:af:
fa:2f:fa:9a:3d:98:43:52:5c:90:cc:d3:55:75:cb:
6b:9f:6f:c3:18:78:fa:26:e0:83:b4:ca:f0:f5:6f:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:08:5F:19:49:9C:6D:B2:31:85:09:EC:69:06:32:D1:DE:B3:DC:53
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:a2:a9:82:c3:b1:31:1e:e6:59:c7:47:d6:09:0a:fb:e6:
ed:21:71:27:42:71:6b:8c:ad:7b:b8:e5:61:e0:7d:b8:95:a4:
21:7f:e0:5a:82:41:29:75:d6:a7:2c:3c:96:91:c4:b0:2c:52:
cb:1c:67:ef:2d:c2:37:df:36:d8:05:44:54:8d:e9:7c:3c:06:
ed:db:c3:87:a1:09:f3:fb:9e:4c:e6:b9:c6:00:6a:b3:f1:db:
5c:32:46:73:d5:fa:48:bd:ee:ec:26:bb:af:f5:87:5e:0a:7e:
76:40:91:91:50:c7:0d:15:04:bc:e2:66:b0:b3:9f:b6:81:a1:
2e:b9:52:25:15:ed:a5:30:d6:0c:71:f9:6d:1c:35:79:59:3c:
20:75:7e:5b:4d:68:45:84:c1:0f:3e:f5:26:d3:af:af:61:dd:
7e:e0:c1:5b:3d:49:2a:17:99:87:59:c7:8b:db:a6:0f:e5:93:
51:b2:d1:53:1f:51:03:05:74:75:50:fb:12:07:45:79:9b:f7:
ce:d4:0f:4b:d3:b4:ad:91:99:d4:fa:f6:7e:94:c0:2f:cc:38:
73:cc:1e:2f:83:56:70:5a:3b:5a:15:39:c2:52:ca:c3:b2:28:
80:97:1d:44:39:05:f7:ec:9a:ea:b6:a0:93:41:78:52:ba:94:
4b:83:f9:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdlf+L1Tw7HpuVdiP7BkLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NjRjN2YzZjc4Yjg3NmQ2YjA0M2MxNmNkZGJkZGViMWU3
OTViOWMwHhcNMjUwNDIyMTMwMDMzWhcNMjUwNDIzMTMwMDMzWjAzMTEwLwYDVQQD
Eyg2YTA4NWYxOTQ5OWM2ZGIyMzE4NTA5ZWM2OTA2MzJkMWRlYjNkYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne7A9W5RGYr7sp892fdGLIAIjUXq
SVwUGP0b+cXqTKzog0vPPUiNNVPtaAas9kD9g7+iQwQ0O/T+nHdmlWa9RAdOPv5L
iN/zfYNcvz4la5nDGt1IsyfZqSlsUds4uRT8QL20X0xeQJSDIMYyJfO3y20XOh5Y
oHwJmrPwQnB49Xkuk0I1qpbIm7zKmG+VXAyM8RLXijHB7yjQyULYPgw5Gb9FmaVC
fo+t2Fjz8hJQspLrDaCFTS26Qtd97OPupeVTzdpBSS9NC7ejUo8sC3FLvhT1GfHG
3qJ0Q2STScEoW6/6L/qaPZhDUlyQzNNVdctrn2/DGHj6JuCDtMrw9W/nwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoIXxlJnG2yMYUJ7GkGMtHes9xTMB8GA1UdIwQY
MBaAFNdkx/P3i4dtawQ8Fs3b3eseeVucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDIt
NWUyY2JmOTQyNDA1LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS84MjZkZTYtNTAzOS00MDM3LTg4MDItNWUyY2JmOTQyNDA1
LzEvMTJUSDhfZUxoMjFyQkR3V3pkdmQ2eDU1VzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELiiqYLD
sTEe5lnHR9YJCvvm7SFxJ0Jxa4yte7jlYeB9uJWkIX/gWoJBKXXWpyw8lpHEsCxS
yxxn7y3CN9822AVEVI3pfDwG7dvDh6EJ8/ueTOa5xgBqs/HbXDJGc9X6SL3u7Ca7
r/WHXgp+dkCRkVDHDRUEvOJmsLOftoGhLrlSJRXtpTDWDHH5bRw1eVk8IHV+W01o
RYTBDz71JtOvr2HdfuDBWz1JKheZh1nHi9umD+WTUbLRUx9RAwV0dVD7EgdFeZv3
ztQPS9O0rZGZ1Pr2fpTAL8w4c8weL4NWcFo7WhU5wlLKw7IogJcdRDkF9+ya6rag
k0F4UrqUS4P5NQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:58:50 2025 by rpki-client