Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier: 1H93O8opJFF9uWIZ7RKnYmfZg/DHUuWbaQniXi81zHA=
Subject key identifier: AD:AD:F0:8E:3B:54:65:71:41:54:11:30:87:F7:0F:68:86:6C:94:1F
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer: /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial: 0196515ADAB2D2DBE7C64BF8FF78A1108A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number: 04B3
Signing time: Sun 20 Apr 2025 04:00:30 +0000
Manifest this update: Sun 20 Apr 2025 04:00:30 +0000
Manifest next update: Mon 21 Apr 2025 04:00:30 +0000
Files and hashes: 1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: NTOCA1X9VJNCJTkpZyH0cO7zyzY5WcN5xk9WwVFpI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:da:b2:d2:db:e7:c6:4b:f8:ff:78:a1:10:8a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
Validity
Not Before: Apr 20 04:00:30 2025 GMT
Not After : Apr 21 04:00:30 2025 GMT
Subject: CN=adadf08e3b5465714154113087f70f68866c941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:be:47:5e:79:ca:00:c4:ba:19:86:9e:7c:
37:73:79:e6:03:a4:2c:09:bf:31:2a:ab:63:8d:04:
5b:45:d0:c4:26:4a:16:50:8e:02:34:03:47:4c:e8:
06:70:03:9f:6a:02:10:1a:31:04:e7:58:fd:3f:8e:
66:d0:37:c4:d5:33:5d:49:d3:2f:ae:a3:d7:5a:41:
5a:3c:3d:4d:da:6c:8a:ae:41:b6:1e:07:87:a0:5d:
24:4c:c2:2e:47:59:68:e9:9b:1b:dd:00:b3:47:d1:
e3:65:86:7a:80:06:b1:f6:ea:53:03:55:d0:8f:e8:
e0:d8:cd:63:bc:f3:81:2b:f3:fa:31:b5:2f:3a:7e:
4f:0b:84:46:91:1d:02:76:a6:6f:ac:e1:95:b0:90:
98:41:32:7b:e9:03:98:b0:02:b5:6a:8c:26:55:b1:
64:5c:e4:8e:46:5f:36:d2:f3:3d:5b:f8:ff:32:cd:
91:61:aa:a7:dc:ce:42:af:74:dd:23:7c:78:0b:d3:
53:bd:ce:4a:84:7a:9c:c0:63:63:d5:94:1b:04:50:
6f:a0:83:08:de:05:e3:b9:8d:26:45:e5:b9:04:39:
de:f1:cc:d7:fd:ef:c9:76:9b:b4:5f:6c:b4:6c:20:
6d:fe:2f:ae:38:c2:7c:ab:74:e9:c8:99:0e:af:93:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:F0:8E:3B:54:65:71:41:54:11:30:87:F7:0F:68:86:6C:94:1F
X509v3 Authority Key Identifier:
keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f5:7c:be:2a:3d:c3:9a:4a:03:cb:92:f7:ac:48:56:02:9d:
e1:a4:76:3b:8a:4b:79:79:bc:73:ef:73:47:ce:a0:74:da:78:
5a:80:58:7f:c0:1e:97:d8:d0:6d:c9:00:91:c1:8d:56:95:88:
aa:82:c1:49:5b:15:0b:a0:9a:db:f9:fe:cb:64:de:96:df:86:
86:54:ac:ee:d6:3e:61:3f:2d:7c:ac:14:56:22:5a:5b:ef:74:
ba:ed:f8:54:4b:dc:e9:14:5f:88:c4:0e:8c:66:e2:f7:2e:9f:
f4:5c:80:d4:34:c3:21:2c:0b:a9:7f:2a:30:3e:c8:ce:96:0b:
e0:eb:c8:2f:e9:e8:36:37:cf:a0:e4:1b:d7:72:6b:32:85:7d:
c5:2c:9f:39:f7:ff:6a:18:63:ae:53:b3:39:d2:91:81:ea:bf:
13:5d:38:57:86:d4:81:b9:38:52:42:b4:13:fc:da:00:74:87:
e2:06:84:be:9c:ab:fd:c9:e0:8d:7d:20:e1:7f:59:a6:fb:16:
62:70:ea:75:cf:dd:63:02:d7:a6:bb:c8:65:40:c9:e5:ca:ae:
b5:50:f8:46:42:17:0a:b0:17:e4:cb:e4:95:0c:3d:9b:eb:64:
18:c4:ad:fd:ae:ad:e5:d5:14:7a:06:fd:35:df:90:dc:f0:09:
6f:1e:55:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWtqy0tvnxkv4/3ihEIoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOWVmMjA5M2RhMTVlZWM5MGVmYjgzN2I5NTAxNjQ2Njlm
NjE5OGIwHhcNMjUwNDIwMDQwMDMwWhcNMjUwNDIxMDQwMDMwWjAzMTEwLwYDVQQD
EyhhZGFkZjA4ZTNiNTQ2NTcxNDE1NDExMzA4N2Y3MGY2ODg2NmM5NDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRm+R155ygDEuhmGnnw3c3nmA6Qs
Cb8xKqtjjQRbRdDEJkoWUI4CNANHTOgGcAOfagIQGjEE51j9P45m0DfE1TNdSdMv
rqPXWkFaPD1N2myKrkG2HgeHoF0kTMIuR1lo6Zsb3QCzR9HjZYZ6gAax9upTA1XQ
j+jg2M1jvPOBK/P6MbUvOn5PC4RGkR0CdqZvrOGVsJCYQTJ76QOYsAK1aowmVbFk
XOSORl820vM9W/j/Ms2RYaqn3M5Cr3TdI3x4C9NTvc5KhHqcwGNj1ZQbBFBvoIMI
3gXjuY0mReW5BDne8czX/e/Jdpu0X2y0bCBt/i+uOMJ8q3TpyJkOr5PtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2t8I47VGVxQVQRMIf3D2iGbJQfMB8GA1UdIwQY
MBaAFNCe8gk9oV7skO+4N7lQFkZp9hmLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgt
NmIyZTY4ZGRlMWUzLzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iOWVjMmItZDI2Yy00OGE2LWE1ODgtNmIyZTY4ZGRlMWUz
LzEvMEo3eUNUMmhYdXlRNzdnM3VWQVdSbW4yR1lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofV8vio9
w5pKA8uS96xIVgKd4aR2O4pLeXm8c+9zR86gdNp4WoBYf8Ael9jQbckAkcGNVpWI
qoLBSVsVC6Ca2/n+y2Telt+GhlSs7tY+YT8tfKwUViJaW+90uu34VEvc6RRfiMQO
jGbi9y6f9FyA1DTDISwLqX8qMD7IzpYL4OvIL+noNjfPoOQb13JrMoV9xSyfOff/
ahhjrlOzOdKRgeq/E104V4bUgbk4UkK0E/zaAHSH4gaEvpyr/cngjX0g4X9ZpvsW
YnDqdc/dYwLXprvIZUDJ5cqutVD4RkIXCrAX5MvklQw9m+tkGMSt/a6t5dUUegb9
Nd+Q3PAJbx5V7w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:32 2025 by rpki-client