Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier: ILRqIsYnCdgd7I722tSomvfVgUKHj0K3Ar15c6zwdXw=
Subject key identifier: BE:01:B8:01:19:31:52:95:E6:84:36:96:CD:90:EE:C5:32:71:0A:7B
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial: 0196545BDACE765ACDB311A3C79112E2397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number: 029C
Signing time: Sun 20 Apr 2025 18:00:27 +0000
Manifest this update: Sun 20 Apr 2025 18:00:27 +0000
Manifest next update: Mon 21 Apr 2025 18:00:27 +0000
Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: ofne/PVB5TIiz+a1W4dndx7JKZnm1EMhwlDN130PpFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5b:da:ce:76:5a:cd:b3:11:a3:c7:91:12:e2:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Validity
Not Before: Apr 20 18:00:27 2025 GMT
Not After : Apr 21 18:00:27 2025 GMT
Subject: CN=be01b80119315295e6843696cd90eec532710a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:8c:b2:d2:f2:65:5b:b2:91:c1:ba:75:c5:
16:52:4a:f2:b2:55:0e:33:95:2a:0a:fa:64:15:70:
76:d7:d3:cc:54:bf:44:ad:2d:59:16:2c:8f:59:82:
2f:93:03:db:8b:75:ad:fe:d0:39:5d:08:7c:f5:fc:
c3:2a:7a:7f:ad:22:77:ad:35:05:2f:fc:02:37:4f:
b6:ce:26:e2:4d:25:cc:94:34:c5:1d:f6:8e:23:ba:
30:46:49:ef:ed:7c:40:98:cb:d3:6a:42:ee:4c:d4:
e3:ba:67:1b:4a:dd:de:68:bf:bc:ae:4c:3d:6e:43:
60:8b:42:82:c9:11:45:bc:11:bb:20:dd:1d:f4:74:
48:86:c4:04:ac:b4:d1:4a:a2:9a:f1:73:ff:e2:d1:
c7:81:bd:e5:a3:76:f4:de:ab:ed:0d:69:21:e7:a8:
b5:67:ed:ad:56:d4:8e:be:91:69:cb:1d:e2:37:e9:
db:a8:24:25:9a:22:65:e2:e3:76:25:9e:11:92:68:
59:32:28:78:c2:00:af:1f:3e:36:88:e3:9b:1b:7e:
0c:6c:fd:eb:2b:56:dd:52:5b:51:fe:1b:c2:e5:17:
af:6b:0f:42:e7:87:aa:38:69:a2:3d:9d:44:7f:50:
5b:c2:4c:dd:44:4b:ff:e1:0b:73:7c:22:53:c7:12:
1b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:01:B8:01:19:31:52:95:E6:84:36:96:CD:90:EE:C5:32:71:0A:7B
X509v3 Authority Key Identifier:
keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:81:4f:98:7d:2e:3f:d3:8d:98:86:33:d1:96:76:4d:ec:70:
78:f8:fe:bf:62:ae:5c:c7:8b:e2:4c:66:92:6b:a0:e4:e5:98:
d5:7f:cd:b4:60:52:c2:f1:68:c2:92:f1:9a:71:ba:bb:7c:74:
f2:57:15:14:a8:8a:0b:03:82:79:70:9f:75:53:7f:15:ac:95:
c5:9c:60:08:78:6b:2a:90:a1:6f:ac:41:0d:92:40:c4:b4:b5:
d9:43:0d:55:08:a0:7b:3b:8c:cc:68:77:0b:44:54:66:11:fb:
0a:f9:15:1e:8d:52:b6:1c:c2:f3:37:ff:6d:b1:c7:74:80:34:
01:2f:00:eb:25:05:0a:3f:44:e8:2d:17:2a:5f:33:33:9e:d5:
07:1d:18:c1:7b:82:68:d3:fa:01:b2:81:c8:48:e7:04:68:14:
8b:5c:54:22:b4:6b:8c:5e:26:77:26:2f:15:87:4e:cc:fb:21:
9e:f2:d1:6d:39:ca:36:cd:68:f4:27:c3:5c:d8:d2:ef:cb:f2:
29:b2:6f:13:ea:be:3f:49:ef:6f:7c:de:ce:a1:b3:a1:65:5f:
54:bd:41:29:ae:f9:d1:cf:eb:a7:6b:a3:35:40:65:9f:51:21:
e0:8d:00:9a:6d:23:45:dc:8c:e5:0d:e3:d0:75:70:ae:e1:9c:
9d:83:99:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUW9rOdlrNsxGjx5ES4jl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk
Yjk5MGQwHhcNMjUwNDIwMTgwMDI3WhcNMjUwNDIxMTgwMDI3WjAzMTEwLwYDVQQD
EyhiZTAxYjgwMTE5MzE1Mjk1ZTY4NDM2OTZjZDkwZWVjNTMyNzEwYTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySeMstLyZVuykcG6dcUWUkryslUO
M5UqCvpkFXB219PMVL9ErS1ZFiyPWYIvkwPbi3Wt/tA5XQh89fzDKnp/rSJ3rTUF
L/wCN0+2zibiTSXMlDTFHfaOI7owRknv7XxAmMvTakLuTNTjumcbSt3eaL+8rkw9
bkNgi0KCyRFFvBG7IN0d9HRIhsQErLTRSqKa8XP/4tHHgb3lo3b03qvtDWkh56i1
Z+2tVtSOvpFpyx3iN+nbqCQlmiJl4uN2JZ4RkmhZMih4wgCvHz42iOObG34MbP3r
K1bdUltR/hvC5Revaw9C54eqOGmiPZ1Ef1BbwkzdREv/4QtzfCJTxxIbZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4BuAEZMVKV5oQ2ls2Q7sUycQp7MB8GA1UdIwQY
MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt
YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi
LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYFPmH0u
P9ONmIYz0ZZ2TexwePj+v2KuXMeL4kxmkmug5OWY1X/NtGBSwvFowpLxmnG6u3x0
8lcVFKiKCwOCeXCfdVN/FayVxZxgCHhrKpChb6xBDZJAxLS12UMNVQigezuMzGh3
C0RUZhH7CvkVHo1SthzC8zf/bbHHdIA0AS8A6yUFCj9E6C0XKl8zM57VBx0YwXuC
aNP6AbKByEjnBGgUi1xUIrRrjF4mdyYvFYdOzPshnvLRbTnKNs1o9CfDXNjS78vy
KbJvE+q+P0nvb3zezqGzoWVfVL1BKa750c/rp2ujNUBln1Eh4I0Amm0jRdyM5Q3j
0HVwruGcnYOZ3Q==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:33 2025 by rpki-client