Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: UZlJsbHt9nDXlYpXriPoTj9uY0967UdEMYDoIRzwtZQ=
Subject key identifier: 0D:10:19:6F:62:02:75:27:73:AB:0B:61:A8:67:16:D3:E9:08:74:BD
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 0196440D384CA7043FA143A37FEF1658A6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 14F1
Signing time: Thu 17 Apr 2025 14:00:39 +0000
Manifest this update: Thu 17 Apr 2025 14:00:39 +0000
Manifest next update: Fri 18 Apr 2025 14:00:39 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: fPcdpLTHgh+1ye4YCQYcH1+6B6+eH04403v1BY2Lvsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:38:4c:a7:04:3f:a1:43:a3:7f:ef:16:58:a6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Apr 17 14:00:39 2025 GMT
Not After : Apr 18 14:00:39 2025 GMT
Subject: CN=0d10196f6202752773ab0b61a86716d3e90874bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:4a:01:97:c6:92:c9:61:a8:e0:21:12:54:
46:f0:d9:5c:ee:6a:52:c7:e4:63:0a:2e:dc:cb:7f:
51:9d:9d:c5:62:68:02:d4:46:bd:b6:fc:f8:20:13:
39:ac:4a:0d:21:c7:f9:06:d9:60:ad:22:6a:68:5d:
7a:4a:7b:d7:6b:65:ef:56:75:9e:4f:5d:1a:2f:f8:
44:04:62:45:05:1c:3a:1f:15:19:20:dd:b1:4e:b4:
90:8f:46:8b:11:6d:0c:89:d6:eb:c4:44:71:c5:4f:
c5:9c:fe:5d:7a:9b:8e:17:37:89:23:dc:99:b3:05:
24:7e:14:18:94:4e:43:80:8f:0d:a7:18:83:8b:13:
a4:0d:0f:24:b6:f2:85:f4:bd:02:2b:5c:b8:fe:35:
e3:4f:81:66:a0:ff:40:c7:03:f8:ac:26:12:91:f2:
97:03:1e:9b:8d:40:77:31:3c:9d:9f:ad:6a:85:1e:
90:33:bf:84:d3:85:c4:3f:1a:e4:3e:fe:86:da:dd:
58:7b:ff:16:8d:5c:b5:98:28:67:90:21:b6:8b:13:
c6:0f:3c:75:d2:e7:a0:d8:d6:3c:74:58:c9:11:f8:
17:20:6c:ac:17:6e:a8:67:04:7f:86:3f:c1:0d:55:
28:d3:d5:62:77:14:ce:38:0a:b6:ba:37:74:22:77:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:10:19:6F:62:02:75:27:73:AB:0B:61:A8:67:16:D3:E9:08:74:BD
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ff:3d:c9:60:9d:80:67:17:eb:0b:d1:e0:fd:0c:43:bd:20:
e9:57:fb:8d:13:cd:3c:93:a9:e2:d1:1f:0c:7b:0b:83:9b:e9:
ff:f0:ed:06:54:9c:30:fa:f4:3b:63:b0:bf:6d:28:ca:c8:9e:
ef:e0:e0:2e:a7:67:aa:af:5e:23:c5:cc:b0:6d:b0:f9:af:94:
47:d8:44:5a:2f:00:cb:40:45:80:5e:f6:6e:d9:66:d8:c0:bf:
b0:f4:bd:73:59:d7:01:a7:b7:b6:98:e9:4c:a3:72:86:77:a5:
da:39:32:5a:86:71:bd:9f:f1:00:5f:cc:de:fe:95:f3:10:55:
6d:d3:c3:27:f6:14:ef:9b:27:be:1e:1f:8c:e1:42:38:25:74:
53:7f:54:22:e3:bc:0f:6a:4a:3f:a1:ce:67:e7:b1:6c:75:69:
01:54:82:ca:85:7a:07:d2:d7:6d:64:53:0f:0a:3c:8b:6a:d7:
4a:ae:55:48:34:b7:10:8d:63:9e:3a:9e:77:90:51:42:05:cc:
b4:83:e2:65:52:d6:ae:35:2a:a5:bf:8c:31:70:f4:c6:50:df:
be:77:88:5d:3b:62:ad:18:91:10:59:d8:5b:be:89:96:f7:1e:
f1:42:3b:23:a9:83:ac:d4:0d:8a:9c:bf:c5:33:8e:17:25:70:
de:64:3a:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEDThMpwQ/oUOjf+8WWKatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwN2ZkZjQzN2M2ZjViYzczYzdkY2Q1NWNlNThjZDkyZTQ5
ZDYwMmUwHhcNMjUwNDE3MTQwMDM5WhcNMjUwNDE4MTQwMDM5WjAzMTEwLwYDVQQD
EygwZDEwMTk2ZjYyMDI3NTI3NzNhYjBiNjFhODY3MTZkM2U5MDg3NGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5slKAZfGkslhqOAhElRG8Nlc7mpS
x+RjCi7cy39RnZ3FYmgC1Ea9tvz4IBM5rEoNIcf5BtlgrSJqaF16SnvXa2XvVnWe
T10aL/hEBGJFBRw6HxUZIN2xTrSQj0aLEW0MidbrxERxxU/FnP5depuOFzeJI9yZ
swUkfhQYlE5DgI8NpxiDixOkDQ8ktvKF9L0CK1y4/jXjT4FmoP9AxwP4rCYSkfKX
Ax6bjUB3MTydn61qhR6QM7+E04XEPxrkPv6G2t1Ye/8WjVy1mChnkCG2ixPGDzx1
0ueg2NY8dFjJEfgXIGysF26oZwR/hj/BDVUo09VidxTOOAq2ujd0IneB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0QGW9iAnUnc6sLYahnFtPpCHS9MB8GA1UdIwQY
MBaAFLB/30N8b1vHPH3NVc5YzZLknWAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDIt
YTc4Yjk3ZWVhNWMxLzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDItYTc4Yjk3ZWVhNWMx
LzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv89yWCd
gGcX6wvR4P0MQ70g6Vf7jRPNPJOp4tEfDHsLg5vp//DtBlScMPr0O2Owv20oysie
7+DgLqdnqq9eI8XMsG2w+a+UR9hEWi8Ay0BFgF72btlm2MC/sPS9c1nXAae3tpjp
TKNyhnel2jkyWoZxvZ/xAF/M3v6V8xBVbdPDJ/YU75snvh4fjOFCOCV0U39UIuO8
D2pKP6HOZ+exbHVpAVSCyoV6B9LXbWRTDwo8i2rXSq5VSDS3EI1jnjqed5BRQgXM
tIPiZVLWrjUqpb+MMXD0xlDfvneIXTtirRiREFnYW76Jlvce8UI7I6mDrNQNipy/
xTOOFyVw3mQ6Rw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:17 2025 by rpki-client