Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
File: dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft (raw, json)
Hash identifier: KDroo70o9PHnHUFJuCjvEeJxe5189VgHZ2/3bQhnG0c=
Subject key identifier: 48:3D:BF:03:0D:C5:A1:43:C9:D2:88:50:67:35:72:D6:CD:F8:E0:C8
Authority key identifier: 76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
Certificate issuer: /CN=76d47c234a8b92f31d3989cc42219f80c947da19
Certificate serial: 019636F63787D93C5F5FBC767B8770505870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
Manifest number: 14EF
Signing time: Tue 15 Apr 2025 01:00:27 +0000
Manifest this update: Tue 15 Apr 2025 01:00:27 +0000
Manifest next update: Wed 16 Apr 2025 01:00:27 +0000
Files and hashes: 1: dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl (hash: ULvaoFR3eByLUhLxyMiknv6eLcQfDPcUKzpyfuEAqdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:f6:37:87:d9:3c:5f:5f:bc:76:7b:87:70:50:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d47c234a8b92f31d3989cc42219f80c947da19
Validity
Not Before: Apr 15 01:00:27 2025 GMT
Not After : Apr 16 01:00:27 2025 GMT
Subject: CN=483dbf030dc5a143c9d28850673572d6cdf8e0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:fa:a9:fb:98:0f:7b:46:d4:83:d9:f5:0f:
5f:b3:93:8f:43:db:d9:26:fc:82:e9:f4:01:7b:c6:
3b:0e:e9:8c:1c:45:0c:bb:c1:0c:4f:58:31:ac:0b:
64:c1:e0:e3:52:bc:31:bb:a5:3e:f0:c0:d0:12:ba:
5d:5a:15:e1:72:b2:28:4a:24:3a:2b:79:91:6e:ab:
89:d0:2f:e7:4a:7a:2c:19:e6:49:50:17:ab:a5:ae:
30:ee:be:5f:06:04:e8:2e:d7:f3:d5:fb:33:56:a8:
ba:94:5d:37:3f:cb:f6:b9:44:f8:b3:79:64:b9:77:
f8:39:3e:0e:57:0d:00:23:0b:02:9f:cf:48:6e:ce:
5d:e4:34:13:c4:69:24:71:85:a4:43:53:f1:e2:01:
84:9a:a0:19:df:63:6b:49:af:d2:fc:94:47:69:83:
75:60:5c:36:43:f8:40:2a:04:07:72:35:cc:a3:cf:
1d:45:f1:fc:53:f6:4a:db:1b:14:6a:08:ba:a9:f8:
96:b5:8e:1a:41:e6:b9:5b:6f:68:68:28:8a:89:cf:
7e:7b:bf:40:c2:12:7d:dc:92:7e:f3:23:6f:fa:0e:
ea:62:2d:60:ac:0e:b0:be:c9:f7:3f:10:d4:81:77:
6e:35:55:fb:ac:2d:74:60:12:75:3a:7d:cf:ad:1a:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3D:BF:03:0D:C5:A1:43:C9:D2:88:50:67:35:72:D6:CD:F8:E0:C8
X509v3 Authority Key Identifier:
keyid:76:D4:7C:23:4A:8B:92:F3:1D:39:89:CC:42:21:9F:80:C9:47:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtR8I0qLkvMdOYnMQiGfgMlH2hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/3550d9-3022-4dba-a75a-1c0d4a21cb23/1/dtR8I0qLkvMdOYnMQiGfgMlH2hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8c:4f:0b:7f:d3:89:d4:75:76:d8:2a:0e:97:44:70:b3:c7:
50:dc:6a:7c:66:4a:37:21:89:94:e6:d8:86:2b:a6:13:66:42:
ef:d0:27:6d:ec:15:43:6c:82:7d:cf:0a:e0:96:b6:eb:25:41:
7c:b2:db:45:21:55:3a:c4:42:77:a1:33:7e:fd:67:29:6d:4a:
ba:9c:41:f4:0d:f8:1e:16:8d:98:78:5c:2b:47:b2:03:fd:09:
5f:3a:c3:0c:08:2e:59:0b:ff:ca:9d:8d:f7:0e:fa:81:23:4f:
33:45:b7:0e:0e:27:b8:73:44:90:78:ee:e0:e7:11:7a:92:ef:
02:a8:e6:10:a0:5b:1e:fb:b8:a7:f8:37:c8:32:01:da:c9:93:
9d:98:53:18:cd:cd:fc:ae:a7:28:43:c1:3b:d8:7d:b3:7d:d9:
38:4d:68:20:51:b5:8e:e0:83:20:67:eb:a2:a2:33:23:55:52:
5d:56:c2:c3:8d:70:05:b0:14:29:5d:f4:58:44:d8:43:48:1a:
fb:8e:01:14:67:67:d5:c8:ba:65:53:ef:a8:69:fb:09:e2:30:
2b:9c:1a:e6:a4:40:8e:2e:26:e5:b4:8a:1a:ef:0b:06:fa:6c:
2b:62:5c:c9:44:ef:a8:47:98:d8:45:22:15:ce:69:e4:34:86:
06:3c:58:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY29jeH2TxfX7x2e4dwUFhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZDQ3YzIzNGE4YjkyZjMxZDM5ODljYzQyMjE5ZjgwYzk0
N2RhMTkwHhcNMjUwNDE1MDEwMDI3WhcNMjUwNDE2MDEwMDI3WjAzMTEwLwYDVQQD
Eyg0ODNkYmYwMzBkYzVhMTQzYzlkMjg4NTA2NzM1NzJkNmNkZjhlMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUT6qfuYD3tG1IPZ9Q9fs5OPQ9vZ
JvyC6fQBe8Y7DumMHEUMu8EMT1gxrAtkweDjUrwxu6U+8MDQErpdWhXhcrIoSiQ6
K3mRbquJ0C/nSnosGeZJUBerpa4w7r5fBgToLtfz1fszVqi6lF03P8v2uUT4s3lk
uXf4OT4OVw0AIwsCn89Ibs5d5DQTxGkkcYWkQ1Px4gGEmqAZ32NrSa/S/JRHaYN1
YFw2Q/hAKgQHcjXMo88dRfH8U/ZK2xsUagi6qfiWtY4aQea5W29oaCiKic9+e79A
whJ93JJ+8yNv+g7qYi1grA6wvsn3PxDUgXduNVX7rC10YBJ1On3PrRq/FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg9vwMNxaFDydKIUGc1ctbN+ODIMB8GA1UdIwQY
MBaAFHbUfCNKi5LzHTmJzEIhn4DJR9oZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8zNTUwZDktMzAyMi00ZGJhLWE3NWEt
MWMwZDRhMjFjYjIzLzEvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8zNTUwZDktMzAyMi00ZGJhLWE3NWEtMWMwZDRhMjFjYjIz
LzEvZHRSOEkwcUxrdk1kT1luTVFpR2ZnTWxIMmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYxPC3/T
idR1dtgqDpdEcLPHUNxqfGZKNyGJlObYhiumE2ZC79AnbewVQ2yCfc8K4Ja26yVB
fLLbRSFVOsRCd6Ezfv1nKW1KupxB9A34HhaNmHhcK0eyA/0JXzrDDAguWQv/yp2N
9w76gSNPM0W3Dg4nuHNEkHju4OcRepLvAqjmEKBbHvu4p/g3yDIB2smTnZhTGM3N
/K6nKEPBO9h9s33ZOE1oIFG1juCDIGfroqIzI1VSXVbCw41wBbAUKV30WETYQ0ga
+44BFGdn1ci6ZVPvqGn7CeIwK5wa5qRAji4m5bSKGu8LBvpsK2JcyUTvqEeY2EUi
Fc5p5DSGBjxY4Q==
-----END CERTIFICATE-----
Generated at Tue Apr 15 05:51:51 2025 by rpki-client