Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: /byuGrDx340LHV1lG0hMhhfAi4O2yMTL+4OOBbTQP5o=
Subject key identifier: E3:4B:F5:45:66:5E:1E:0E:7A:B4:11:A4:40:15:8E:5B:1F:47:35:55
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 01965236DC56AB9D1C4712D6EB8DFABBC52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 148C
Signing time: Sun 20 Apr 2025 08:00:49 +0000
Manifest this update: Sun 20 Apr 2025 08:00:49 +0000
Manifest next update: Mon 21 Apr 2025 08:00:49 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: VHBUI3swFaHRpjufMih9fx+j6AZA9wM5K356LSOYgg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:dc:56:ab:9d:1c:47:12:d6:eb:8d:fa:bb:c5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Apr 20 08:00:49 2025 GMT
Not After : Apr 21 08:00:49 2025 GMT
Subject: CN=e34bf545665e1e0e7ab411a440158e5b1f473555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:62:9d:30:18:a0:12:11:66:d0:21:66:9b:
0d:8a:c4:66:17:7b:de:97:17:dc:da:3f:88:1c:2e:
79:90:b6:14:ba:79:97:0c:3d:de:7c:45:b0:09:23:
6a:48:89:cf:e8:2d:02:29:a7:43:70:33:d1:4d:52:
3a:13:ec:6b:70:a0:87:8a:41:c7:e5:fe:09:b6:98:
8a:7a:f9:9a:33:b2:86:4d:f8:41:64:d1:d3:bc:e4:
8f:98:ce:97:59:44:8c:45:09:eb:a1:e4:57:67:61:
53:bf:75:b9:4c:a0:18:82:d9:00:3c:1f:09:db:f5:
a1:8e:10:3d:12:be:52:58:b2:9f:11:70:3e:cd:3f:
b2:f8:1c:fc:d3:55:02:81:1b:d0:05:21:5a:1f:e3:
bc:34:91:54:a2:0d:ae:c1:63:61:04:d5:01:0c:91:
93:06:4c:d7:7f:ce:6a:e9:ea:66:36:d2:f1:46:b0:
2d:e4:71:3b:8c:ab:06:34:5d:7c:1c:2f:f8:1f:79:
63:de:f7:05:3a:e0:ca:5f:72:2e:30:e2:e2:c5:ab:
16:3f:1c:e0:3b:88:16:2c:57:8b:a1:ef:36:f0:d2:
30:26:e3:1b:69:6c:6c:95:4f:87:18:bb:6e:3b:a4:
64:14:b6:bf:02:3f:18:7b:eb:46:5b:61:1a:57:64:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:F5:45:66:5E:1E:0E:7A:B4:11:A4:40:15:8E:5B:1F:47:35:55
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a1:d6:c6:cf:de:03:c3:14:7b:6a:17:c2:61:35:e6:63:63:
cd:af:82:b9:cf:cd:57:99:15:56:ee:20:b4:56:d1:25:28:a5:
2a:c0:50:0d:0d:6d:23:ce:62:31:a6:d1:c5:1c:e9:a2:f9:60:
42:02:e1:94:42:3a:58:9f:b3:7f:de:c0:0d:2b:d8:c6:ec:8c:
a9:78:02:32:a9:93:55:5b:ed:b9:ab:64:af:00:37:d8:a7:8e:
68:fd:48:ee:b4:c2:85:ef:ee:20:97:25:d6:c3:81:cb:b6:1c:
54:a7:30:a2:f5:41:17:d4:69:47:d1:bc:b8:a8:7a:5c:f4:f0:
1b:5a:9c:9d:99:d7:e3:8a:b0:08:86:c9:59:a4:c1:1f:02:ae:
40:6c:ad:85:2a:b8:dc:67:92:57:8a:98:29:22:6b:3d:85:cf:
09:99:8c:21:6e:ce:20:59:7f:a1:73:98:0a:40:e6:ff:10:8c:
40:66:25:e8:dd:e6:97:d9:25:f9:86:e3:59:d8:31:09:6e:54:
30:78:a8:16:af:4d:76:ee:f0:6b:1b:43:ce:8b:af:96:35:3f:
0a:1f:0c:3a:25:e0:c3:35:71:1b:cb:86:70:6c:5a:86:4d:14:
6d:c0:c6:cc:0d:49:f1:f1:cf:04:02:09:f3:7d:b3:c7:16:55:
8a:88:9a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNtxWq50cRxLW6436u8UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMGJjYWJlYzQzNzlmMmQzYjk0MTg3NDEwZDJlNmUwMzFh
NzQxNzEwHhcNMjUwNDIwMDgwMDQ5WhcNMjUwNDIxMDgwMDQ5WjAzMTEwLwYDVQQD
EyhlMzRiZjU0NTY2NWUxZTBlN2FiNDExYTQ0MDE1OGU1YjFmNDczNTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyJinTAYoBIRZtAhZpsNisRmF3ve
lxfc2j+IHC55kLYUunmXDD3efEWwCSNqSInP6C0CKadDcDPRTVI6E+xrcKCHikHH
5f4JtpiKevmaM7KGTfhBZNHTvOSPmM6XWUSMRQnroeRXZ2FTv3W5TKAYgtkAPB8J
2/WhjhA9Er5SWLKfEXA+zT+y+Bz801UCgRvQBSFaH+O8NJFUog2uwWNhBNUBDJGT
BkzXf85q6epmNtLxRrAt5HE7jKsGNF18HC/4H3lj3vcFOuDKX3IuMOLixasWPxzg
O4gWLFeLoe828NIwJuMbaWxslU+HGLtuO6RkFLa/Aj8Ye+tGW2EaV2QwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONL9UVmXh4OerQRpEAVjlsfRzVVMB8GA1UdIwQY
MBaAFH0Lyr7EN58tO5QYdBDS5uAxp0FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjIt
OTcxNWNkNjk4ZTMyLzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjItOTcxNWNkNjk4ZTMy
LzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKHWxs/e
A8MUe2oXwmE15mNjza+Cuc/NV5kVVu4gtFbRJSilKsBQDQ1tI85iMabRxRzpovlg
QgLhlEI6WJ+zf97ADSvYxuyMqXgCMqmTVVvtuatkrwA32KeOaP1I7rTChe/uIJcl
1sOBy7YcVKcwovVBF9RpR9G8uKh6XPTwG1qcnZnX44qwCIbJWaTBHwKuQGythSq4
3GeSV4qYKSJrPYXPCZmMIW7OIFl/oXOYCkDm/xCMQGYl6N3ml9kl+YbjWdgxCW5U
MHioFq9Ndu7waxtDzouvljU/Ch8MOiXgwzVxG8uGcGxahk0UbcDGzA1J8fHPBAIJ
832zxxZVioialw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:58 2025 by rpki-client