Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: MjympNi45oZ/NiPdOscp3a1wDmxgcQrW2Q8/GL/WgFM=
Subject key identifier: E5:61:98:20:69:1A:A3:8D:8C:F5:75:F8:8C:1B:AB:48:2C:F5:0B:82
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 0196447AEB89450798456A15A3276E5F7E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0916
Signing time: Thu 17 Apr 2025 16:00:28 +0000
Manifest this update: Thu 17 Apr 2025 16:00:28 +0000
Manifest next update: Fri 18 Apr 2025 16:00:28 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: GaQj6KgfZgMlxgsy3f/C8XXPuD+z6ZwR0ERXce9Gzls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7a:eb:89:45:07:98:45:6a:15:a3:27:6e:5f:7e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Apr 17 16:00:28 2025 GMT
Not After : Apr 18 16:00:28 2025 GMT
Subject: CN=e5619820691aa38d8cf575f88c1bab482cf50b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3f:a9:24:4e:b3:e7:59:2e:9d:cc:84:6c:62:
2a:c1:a9:06:9b:59:ba:83:eb:20:55:25:e7:05:31:
33:a4:8a:37:4d:46:b8:7a:ed:ba:8e:86:24:b2:7c:
0d:42:18:11:54:78:0c:d9:4a:06:74:c7:db:64:19:
67:68:4b:ea:90:7f:0c:b7:4b:ce:35:b4:ce:6a:e8:
46:ba:9e:c2:71:c8:86:ef:b9:e3:c4:3b:5b:ac:64:
ff:7e:0c:01:f6:03:a4:b6:d9:8b:5c:c9:26:49:e0:
c6:5f:ec:ac:84:4c:2e:e0:50:d0:2c:17:e1:d8:a1:
f4:30:54:5e:df:b3:a8:05:1d:e1:2a:c9:b3:10:9a:
26:8e:8e:71:46:4b:ab:74:09:74:92:8c:88:09:de:
74:79:ee:30:7e:86:e1:0a:5b:8c:42:5d:da:34:e5:
b1:9b:d5:d5:76:03:6c:c2:5a:2d:70:69:c7:e0:5d:
e2:ed:56:bb:fd:25:c7:38:b4:86:2d:04:6a:57:16:
70:11:4a:81:e0:29:62:d3:9f:a8:79:3a:b9:e8:aa:
89:95:a4:1c:14:ed:25:f1:af:c7:84:0f:69:09:6e:
47:fe:ce:67:75:9d:6d:15:e9:da:93:53:1d:4d:38:
49:34:58:c2:61:dd:35:fa:27:8d:34:19:d8:b4:38:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:61:98:20:69:1A:A3:8D:8C:F5:75:F8:8C:1B:AB:48:2C:F5:0B:82
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:df:00:7d:3c:f2:41:b0:ce:40:c3:5c:34:61:a3:4b:2e:
35:fd:7a:1b:80:4a:5d:d5:1e:c8:ba:bc:50:29:ae:59:f7:a8:
59:79:25:59:bc:5b:6a:82:12:44:9f:f8:09:da:16:b7:17:8a:
14:70:ad:86:72:89:b0:5d:94:7b:15:8c:8c:99:0a:0c:87:5e:
2d:36:e8:7b:ac:ac:ec:d4:02:0f:3f:62:a6:19:75:94:70:d2:
41:0c:73:7e:20:6b:0e:a5:79:1d:21:1f:b7:5e:ef:6d:6c:1d:
64:34:21:13:d7:f1:25:94:ff:2f:08:9f:a2:91:7c:2b:35:71:
e5:44:29:21:e6:af:aa:fa:0b:40:5d:b3:3f:1a:c7:e2:00:10:
f6:79:14:bc:a8:9a:4d:d9:06:24:95:83:c3:f1:a0:17:ac:59:
bc:87:0a:c4:24:83:ab:7f:e7:18:23:cc:3d:db:c5:69:27:fe:
b5:ba:36:b6:cb:61:7b:e0:66:66:34:0f:58:22:d1:41:47:75:
bd:4c:d4:19:30:bd:3f:52:74:21:be:c2:35:36:5f:86:d0:66:
87:2b:32:86:d8:22:e4:e1:ff:4e:8d:b2:6b:8d:5d:9e:a0:58:
3b:2f:f7:01:c5:91:34:d1:44:f3:24:91:42:ae:22:f3:5d:a5:
15:cc:55:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEeuuJRQeYRWoVoyduX36GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl
MDEzNWIwHhcNMjUwNDE3MTYwMDI4WhcNMjUwNDE4MTYwMDI4WjAzMTEwLwYDVQQD
EyhlNTYxOTgyMDY5MWFhMzhkOGNmNTc1Zjg4YzFiYWI0ODJjZjUwYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8T+pJE6z51kuncyEbGIqwakGm1m6
g+sgVSXnBTEzpIo3TUa4eu26joYksnwNQhgRVHgM2UoGdMfbZBlnaEvqkH8Mt0vO
NbTOauhGup7CcciG77njxDtbrGT/fgwB9gOkttmLXMkmSeDGX+yshEwu4FDQLBfh
2KH0MFRe37OoBR3hKsmzEJomjo5xRkurdAl0koyICd50ee4wfobhCluMQl3aNOWx
m9XVdgNswlotcGnH4F3i7Va7/SXHOLSGLQRqVxZwEUqB4Cli05+oeTq56KqJlaQc
FO0l8a/HhA9pCW5H/s5ndZ1tFenak1MdTThJNFjCYd01+ieNNBnYtDjrWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVhmCBpGqONjPV1+Iwbq0gs9QuCMB8GA1UdIwQY
MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt
N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw
LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNzfAH08
8kGwzkDDXDRho0suNf16G4BKXdUeyLq8UCmuWfeoWXklWbxbaoISRJ/4CdoWtxeK
FHCthnKJsF2UexWMjJkKDIdeLTboe6ys7NQCDz9iphl1lHDSQQxzfiBrDqV5HSEf
t17vbWwdZDQhE9fxJZT/LwifopF8KzVx5UQpIeavqvoLQF2zPxrH4gAQ9nkUvKia
TdkGJJWDw/GgF6xZvIcKxCSDq3/nGCPMPdvFaSf+tbo2tsthe+BmZjQPWCLRQUd1
vUzUGTC9P1J0Ib7CNTZfhtBmhysyhtgi5OH/To2ya41dnqBYOy/3AcWRNNFE8ySR
Qq4i812lFcxVnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 00:04:12 2025 by rpki-client