Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: atvro5hHhSljy1pbsWq2HraVqbUxU2voUUOpQQgWSoo=
Subject key identifier: 41:AD:A6:3F:77:C2:2A:9D:FB:D6:C4:C0:B7:09:D2:F5:42:F9:25:D7
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 01965F841646F8DBB3236A96A7D3BAE915A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0C3C
Signing time: Tue 22 Apr 2025 22:00:13 +0000
Manifest this update: Tue 22 Apr 2025 22:00:13 +0000
Manifest next update: Wed 23 Apr 2025 22:00:13 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: r3bvz5fvZrCw9UY67fgPoSUC5NPkx0j759brwdKUdBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:16:46:f8:db:b3:23:6a:96:a7:d3:ba:e9:15:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Apr 22 22:00:13 2025 GMT
Not After : Apr 23 22:00:13 2025 GMT
Subject: CN=41ada63f77c22a9dfbd6c4c0b709d2f542f925d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:1d:1e:63:ae:54:65:4d:9b:09:fb:aa:ba:
71:41:d5:83:b7:18:c1:ad:35:64:75:9b:63:cd:76:
0f:8d:19:7d:17:88:2c:93:2b:fa:d9:0f:b0:2a:49:
1b:2c:f5:a2:0c:e9:5a:9c:90:e1:3b:ba:5e:81:3d:
3d:55:83:e5:c8:d5:4e:d0:6d:59:f3:b7:58:eb:86:
e8:c7:b5:05:c0:a8:75:62:e6:19:13:40:f6:d7:f9:
74:1d:bc:92:ff:f5:10:09:b0:55:65:ae:44:b1:72:
e0:1e:c4:cd:16:36:83:98:97:c6:3f:5e:30:fb:29:
54:ec:36:5d:a8:02:fc:7d:a7:34:ae:c8:6d:98:75:
a1:d4:60:f5:3f:e9:54:70:50:3d:66:17:10:52:4b:
79:5c:26:91:88:c7:8d:3f:af:b7:77:cd:7e:f7:4e:
f4:18:8b:15:1a:77:cb:c4:68:c0:b3:ca:57:e7:c7:
0c:5b:0e:2d:32:6d:84:4d:c9:b0:f0:de:af:19:c0:
47:bd:5d:3a:e6:95:3f:85:68:95:7c:90:0f:02:90:
55:05:08:92:b6:4f:8c:c9:9b:ef:e3:ee:a7:5b:69:
d9:ff:31:59:6d:c1:f6:82:53:6f:38:34:b6:37:68:
27:13:ce:82:ce:63:58:9c:ad:81:f4:15:5a:5a:6a:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AD:A6:3F:77:C2:2A:9D:FB:D6:C4:C0:B7:09:D2:F5:42:F9:25:D7
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:d7:63:7b:ba:03:4b:f3:6c:18:1d:ce:74:70:b5:f6:a6:
27:b0:13:fe:2a:42:5f:bb:a1:4b:c8:88:9b:c6:fa:5d:5d:c8:
ed:7a:42:c9:67:c9:95:f6:b9:df:13:ee:e6:d7:57:b6:a1:82:
e5:a4:30:52:2d:51:34:b6:d4:15:17:91:a6:e0:97:09:de:1b:
8c:68:d1:1b:92:39:06:c8:d6:31:9e:84:d2:4d:3d:e9:d4:7a:
49:ae:a9:e1:7c:50:d8:0c:e3:cb:84:1e:80:7d:a3:95:28:eb:
5d:58:58:98:c7:67:03:94:14:e0:5d:a2:5c:2b:d2:62:74:56:
aa:5a:f1:03:55:8b:1d:83:c9:7e:e7:0a:a1:39:3d:06:39:5c:
05:a8:80:b6:da:91:df:e4:32:16:be:53:a8:fd:51:b0:b5:d2:
6d:18:2b:ea:5d:31:16:6f:a4:05:27:ad:9b:50:c6:0d:cf:ec:
ba:ba:dd:30:10:11:e5:6d:d4:63:8c:1c:63:e4:f7:fd:1d:95:
5f:7a:8b:f2:64:ed:d2:17:2f:a1:50:d1:9f:74:8c:19:dc:67:
e2:52:70:64:18:86:a0:6a:8a:66:e0:a6:f6:f1:08:b4:18:e4:
2a:bf:93:28:34:46:31:16:5e:d7:6a:90:e9:da:f9:3f:6f:86:
d3:02:29:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhBZG+NuzI2qWp9O66RWpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWY3MTMyYjljMjMxODc5ZWFlZGQ1Y2E0ZGMzMmIxNjVm
MGM3ZjMwHhcNMjUwNDIyMjIwMDEzWhcNMjUwNDIzMjIwMDEzWjAzMTEwLwYDVQQD
Eyg0MWFkYTYzZjc3YzIyYTlkZmJkNmM0YzBiNzA5ZDJmNTQyZjkyNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jsdHmOuVGVNmwn7qrpxQdWDtxjB
rTVkdZtjzXYPjRl9F4gskyv62Q+wKkkbLPWiDOlanJDhO7pegT09VYPlyNVO0G1Z
87dY64box7UFwKh1YuYZE0D21/l0HbyS//UQCbBVZa5EsXLgHsTNFjaDmJfGP14w
+ylU7DZdqAL8fac0rshtmHWh1GD1P+lUcFA9ZhcQUkt5XCaRiMeNP6+3d81+9070
GIsVGnfLxGjAs8pX58cMWw4tMm2ETcmw8N6vGcBHvV065pU/hWiVfJAPApBVBQiS
tk+MyZvv4+6nW2nZ/zFZbcH2glNvODS2N2gnE86CzmNYnK2B9BVaWmqvCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGtpj93wiqd+9bEwLcJ0vVC+SXXMB8GA1UdIwQY
MBaAFKTvcTK5wjGHnq7dXKTcMrFl8MfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzIt
YmM0NzJiNzg2NjUzLzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzItYmM0NzJiNzg2NjUz
LzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOLXY3u6
A0vzbBgdznRwtfamJ7AT/ipCX7uhS8iIm8b6XV3I7XpCyWfJlfa53xPu5tdXtqGC
5aQwUi1RNLbUFReRpuCXCd4bjGjRG5I5BsjWMZ6E0k096dR6Sa6p4XxQ2Azjy4Qe
gH2jlSjrXVhYmMdnA5QU4F2iXCvSYnRWqlrxA1WLHYPJfucKoTk9BjlcBaiAttqR
3+QyFr5TqP1RsLXSbRgr6l0xFm+kBSetm1DGDc/surrdMBAR5W3UY4wcY+T3/R2V
X3qL8mTt0hcvoVDRn3SMGdxn4lJwZBiGoGqKZuCm9vEItBjkKr+TKDRGMRZe12qQ
6dr5P2+G0wIpdQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:51:25 2025 by rpki-client