Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
File: 0m9HluwczjftJ86jmJgDukl2JR4.mft (raw, json)
Hash identifier: 0WuCdJAa0lot8NTmdUQapJs9KlIeCG+uNwoP6PFC8hI=
Subject key identifier: 44:DA:47:9B:AA:28:CC:5D:7E:FC:81:34:47:CF:11:A6:74:8B:A8:B2
Authority key identifier: D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E
Certificate issuer: /CN=d26f4796ec1cce37ed27cea3989803ba4976251e
Certificate serial: 01965A26F871FAA37DA2CCF720F0989278DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
Manifest number: 045C
Signing time: Mon 21 Apr 2025 21:00:25 +0000
Manifest this update: Mon 21 Apr 2025 21:00:25 +0000
Manifest next update: Tue 22 Apr 2025 21:00:25 +0000
Files and hashes: 1: 0m9HluwczjftJ86jmJgDukl2JR4.crl (hash: s6K8+ITOxZXcSyQED+dUgCD4PyMOg0Rr+94fbSAGtKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:f8:71:fa:a3:7d:a2:cc:f7:20:f0:98:92:78:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26f4796ec1cce37ed27cea3989803ba4976251e
Validity
Not Before: Apr 21 21:00:25 2025 GMT
Not After : Apr 22 21:00:25 2025 GMT
Subject: CN=44da479baa28cc5d7efc813447cf11a6748ba8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:9e:56:92:f6:3e:da:c2:62:c0:41:a7:de:
de:33:cb:71:82:95:f1:3d:d4:7b:ed:ae:d2:63:eb:
c5:a7:0d:5d:3b:94:15:f6:ec:de:2f:6f:00:16:46:
61:be:71:62:5b:9b:45:50:6a:6b:f1:74:76:bf:d8:
98:c7:98:6b:ee:e9:47:4c:64:98:17:af:86:78:a7:
02:2d:49:1d:ee:2d:76:e2:c7:ab:b3:74:7e:e2:04:
b1:20:4a:46:c4:50:9e:2c:47:f7:c5:c7:e4:20:1c:
14:a8:96:9f:bd:a4:54:b8:38:c5:8d:59:f1:f4:ad:
1b:59:a6:2d:ac:0c:52:ed:92:e7:ec:51:f7:87:48:
fb:3e:dc:12:59:9b:0d:e8:2f:23:af:cb:8c:9a:52:
3d:4b:20:17:37:ca:f0:3f:af:df:0e:29:3b:b9:a5:
ce:b5:bd:2b:5d:f4:41:a3:48:80:d2:f4:99:be:e1:
77:bb:a4:0d:b3:77:c6:3a:fa:98:3e:bc:8d:a8:8e:
a2:94:58:5a:85:d7:c9:6f:e4:55:d7:d2:15:d5:49:
7a:75:76:c9:a0:b6:3a:a6:24:bd:35:21:f1:55:fc:
af:9c:2e:34:a2:6e:ea:28:44:45:a8:bb:09:80:4c:
13:1c:bd:67:84:85:48:d7:90:1c:f5:7b:88:97:18:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:47:9B:AA:28:CC:5D:7E:FC:81:34:47:CF:11:A6:74:8B:A8:B2
X509v3 Authority Key Identifier:
keyid:D2:6F:47:96:EC:1C:CE:37:ED:27:CE:A3:98:98:03:BA:49:76:25:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m9HluwczjftJ86jmJgDukl2JR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/685711-a4ef-4e6c-b490-396d5ad896b8/1/0m9HluwczjftJ86jmJgDukl2JR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:06:90:8b:bb:cb:7c:a0:82:a2:33:de:b7:aa:db:cc:4a:
02:0f:c9:d9:01:63:f9:0d:ca:b4:da:7d:b8:f4:d7:ff:28:8e:
24:71:0f:a2:b3:06:23:c7:1c:6e:19:94:4f:46:52:98:2b:d4:
29:9b:d8:80:a5:e7:18:8c:06:10:52:74:af:26:7b:d3:ef:73:
83:db:92:dc:7b:25:79:02:19:8e:bd:b0:e7:4d:eb:21:30:81:
78:f7:96:2c:63:68:1e:f3:0d:ec:7c:5b:ec:fd:13:72:8e:18:
91:e4:18:c9:23:76:87:f6:06:fb:f4:c1:b1:c2:84:03:90:59:
ea:63:7f:ff:c7:fb:27:5e:54:b6:79:38:87:17:f9:ed:60:27:
5b:41:e4:e2:7b:5e:aa:9f:fb:a4:af:91:5e:ba:31:b4:ac:55:
38:56:2a:02:01:db:96:d0:bb:37:84:a9:d8:1d:54:6e:5a:4b:
64:f7:03:ab:3b:df:7b:4a:4d:97:24:f3:52:34:48:a6:b8:3d:
53:00:fa:95:16:ba:38:61:74:04:e3:d1:81:4e:06:ab:3a:24:
b3:fe:b1:cd:f2:b8:b8:4f:81:ac:e6:1e:22:31:35:c6:25:54:
65:47:f6:76:68:49:56:14:2f:57:f5:fc:61:3f:f1:47:6a:41:
08:0f:29:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJvhx+qN9osz3IPCYknjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmY0Nzk2ZWMxY2NlMzdlZDI3Y2VhMzk4OTgwM2JhNDk3
NjI1MWUwHhcNMjUwNDIxMjEwMDI1WhcNMjUwNDIyMjEwMDI1WjAzMTEwLwYDVQQD
Eyg0NGRhNDc5YmFhMjhjYzVkN2VmYzgxMzQ0N2NmMTFhNjc0OGJhOGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+qeVpL2PtrCYsBBp97eM8txgpXx
PdR77a7SY+vFpw1dO5QV9uzeL28AFkZhvnFiW5tFUGpr8XR2v9iYx5hr7ulHTGSY
F6+GeKcCLUkd7i124sers3R+4gSxIEpGxFCeLEf3xcfkIBwUqJafvaRUuDjFjVnx
9K0bWaYtrAxS7ZLn7FH3h0j7PtwSWZsN6C8jr8uMmlI9SyAXN8rwP6/fDik7uaXO
tb0rXfRBo0iA0vSZvuF3u6QNs3fGOvqYPryNqI6ilFhahdfJb+RV19IV1Ul6dXbJ
oLY6piS9NSHxVfyvnC40om7qKERFqLsJgEwTHL1nhIVI15Ac9XuIlxip5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETaR5uqKMxdfvyBNEfPEaZ0i6iyMB8GA1UdIwQY
MBaAFNJvR5bsHM437SfOo5iYA7pJdiUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG05SGx1d2N6amZ0Sjg2am1KZ0R1a2wySlI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82ODU3MTEtYTRlZi00ZTZjLWI0OTAt
Mzk2ZDVhZDg5NmI4LzEvMG05SGx1d2N6amZ0Sjg2am1KZ0R1a2wySlI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82ODU3MTEtYTRlZi00ZTZjLWI0OTAtMzk2ZDVhZDg5NmI4
LzEvMG05SGx1d2N6amZ0Sjg2am1KZ0R1a2wySlI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN8GkIu7
y3yggqIz3req28xKAg/J2QFj+Q3KtNp9uPTX/yiOJHEPorMGI8ccbhmUT0ZSmCvU
KZvYgKXnGIwGEFJ0ryZ70+9zg9uS3HsleQIZjr2w503rITCBePeWLGNoHvMN7Hxb
7P0Tco4YkeQYySN2h/YG+/TBscKEA5BZ6mN//8f7J15Utnk4hxf57WAnW0Hk4nte
qp/7pK+RXroxtKxVOFYqAgHbltC7N4Sp2B1UblpLZPcDqzvfe0pNlyTzUjRIprg9
UwD6lRa6OGF0BOPRgU4Gqzoks/6xzfK4uE+BrOYeIjE1xiVUZUf2dmhJVhQvV/X8
YT/xR2pBCA8pOw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:49 2025 by rpki-client