Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
File: G9Id-yT32M4jEbpAdndUdL1QvmQ.mft (raw, json)
Hash identifier: OWrmHyKrpHPnQNOadOzFXfTQdu2p9f7Ui22Dq4GDOxI=
Subject key identifier: B7:55:C1:56:B4:23:C8:5D:69:23:88:1B:53:BB:16:26:CE:7B:96:0D
Authority key identifier: 1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
Certificate issuer: /CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Certificate serial: 01964A0F14D861FCD09F93F8D2430695F7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
Manifest number: 1503
Signing time: Fri 18 Apr 2025 18:00:24 +0000
Manifest this update: Fri 18 Apr 2025 18:00:24 +0000
Manifest next update: Sat 19 Apr 2025 18:00:24 +0000
Files and hashes: 1: G9Id-yT32M4jEbpAdndUdL1QvmQ.crl (hash: cORNwR1I1vriLfyZEibRgp7cSF/0Fcc4pLZd5JKSscY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:14:d8:61:fc:d0:9f:93:f8:d2:43:06:95:f7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd21dfb24f7d8ce2311ba4076775474bd50be64
Validity
Not Before: Apr 18 18:00:24 2025 GMT
Not After : Apr 19 18:00:24 2025 GMT
Subject: CN=b755c156b423c85d6923881b53bb1626ce7b960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:39:1e:50:51:81:bc:fc:a5:00:19:cd:14:
ea:c7:c4:d7:3a:fb:25:e5:6f:1b:d2:bd:5b:56:a5:
15:50:5e:07:b7:35:90:0d:53:b4:be:5a:2d:bc:35:
5c:e4:1f:3d:88:70:22:c0:7c:29:03:bd:d5:8e:8c:
a3:7e:e1:d1:76:4d:3a:a6:1a:0c:46:c0:67:c1:ba:
d3:81:ec:fe:bd:72:7b:72:8b:c5:b5:1b:0d:a9:a1:
ed:87:26:8d:02:1c:99:fd:ec:46:c3:31:f0:1b:ed:
91:1c:84:07:44:dc:bb:e8:54:35:1b:86:75:ea:03:
af:6d:d0:ab:85:ec:13:2d:d5:77:12:05:9b:06:7f:
2a:7b:ab:93:0b:73:ac:b1:40:88:bd:c1:53:67:ac:
96:a2:5f:f9:b9:4b:d4:bb:da:79:be:ca:62:08:a5:
f8:ac:65:37:20:35:2c:80:12:7b:bb:a2:d3:d8:73:
b2:46:1d:60:2c:89:8d:e2:17:da:8e:42:80:41:a1:
9f:4a:71:ad:c9:28:ef:5c:dd:6a:f7:ce:e4:f6:a7:
91:9b:12:dc:1b:44:30:5f:5f:dc:e7:bb:72:a0:53:
b0:4d:6f:d2:3e:44:c4:7a:82:18:6c:9b:40:8d:bb:
0f:1e:fb:39:75:98:35:a0:68:ba:cc:d9:c1:71:3f:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:55:C1:56:B4:23:C8:5D:69:23:88:1B:53:BB:16:26:CE:7B:96:0D
X509v3 Authority Key Identifier:
keyid:1B:D2:1D:FB:24:F7:D8:CE:23:11:BA:40:76:77:54:74:BD:50:BE:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9Id-yT32M4jEbpAdndUdL1QvmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08e15b-4a24-4ce0-9454-f87a322a7776/1/G9Id-yT32M4jEbpAdndUdL1QvmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:75:02:d0:e3:3a:bb:ce:05:73:43:6f:bd:c3:b6:f8:da:27:
b1:99:ae:6a:28:c1:63:34:8b:e3:c9:0e:1b:fb:05:7b:2e:f0:
f9:35:0e:cf:02:3e:d3:84:42:22:31:10:c2:49:d1:82:ba:4b:
fe:79:d2:43:c5:74:c2:2c:c8:29:23:44:cf:af:c6:f7:db:3a:
15:09:95:1e:da:0a:07:f3:16:0d:62:cc:e5:39:65:0b:89:65:
b4:25:ae:18:94:e3:a9:a4:16:d3:07:95:9f:6b:4f:3e:3f:a2:
07:0a:16:cc:32:a3:33:0e:42:ed:6e:d6:a9:31:dc:d6:62:e1:
8d:76:dd:2e:24:1a:50:5e:d7:f8:31:b5:c9:e0:cd:22:d5:89:
6e:5e:5f:d5:be:db:2c:57:dd:ee:15:68:51:86:07:18:7e:5a:
64:c8:42:72:83:e0:73:60:45:94:4a:aa:65:18:47:4e:8c:5c:
2d:c7:94:55:8b:de:88:15:4e:d2:b1:f3:0e:b6:42:bd:da:d7:
46:25:69:ac:3e:25:41:ea:f9:b5:c4:1d:00:d2:bf:cb:37:a6:
24:e3:e5:6d:c5:92:8a:08:b6:f5:66:97:7f:bb:9e:17:bc:5a:
06:90:d9:1e:b1:07:d7:cb:27:e8:38:e3:a4:58:24:77:e0:5f:
f1:61:b6:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDxTYYfzQn5P40kMGlffnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDIxZGZiMjRmN2Q4Y2UyMzExYmE0MDc2Nzc1NDc0YmQ1
MGJlNjQwHhcNMjUwNDE4MTgwMDI0WhcNMjUwNDE5MTgwMDI0WjAzMTEwLwYDVQQD
EyhiNzU1YzE1NmI0MjNjODVkNjkyMzg4MWI1M2JiMTYyNmNlN2I5NjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpM5HlBRgbz8pQAZzRTqx8TXOvsl
5W8b0r1bVqUVUF4HtzWQDVO0vlotvDVc5B89iHAiwHwpA73VjoyjfuHRdk06phoM
RsBnwbrTgez+vXJ7covFtRsNqaHthyaNAhyZ/exGwzHwG+2RHIQHRNy76FQ1G4Z1
6gOvbdCrhewTLdV3EgWbBn8qe6uTC3OssUCIvcFTZ6yWol/5uUvUu9p5vspiCKX4
rGU3IDUsgBJ7u6LT2HOyRh1gLImN4hfajkKAQaGfSnGtySjvXN1q987k9qeRmxLc
G0QwX1/c57tyoFOwTW/SPkTEeoIYbJtAjbsPHvs5dZg1oGi6zNnBcT8jLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLdVwVa0I8hdaSOIG1O7FibOe5YNMB8GA1UdIwQY
MBaAFBvSHfsk99jOIxG6QHZ3VHS9UL5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQt
Zjg3YTMyMmE3Nzc2LzEvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wOGUxNWItNGEyNC00Y2UwLTk0NTQtZjg3YTMyMmE3Nzc2
LzEvRzlJZC15VDMyTTRqRWJwQWRuZFVkTDFRdm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHUC0OM6
u84Fc0NvvcO2+NonsZmuaijBYzSL48kOG/sFey7w+TUOzwI+04RCIjEQwknRgrpL
/nnSQ8V0wizIKSNEz6/G99s6FQmVHtoKB/MWDWLM5TllC4lltCWuGJTjqaQW0weV
n2tPPj+iBwoWzDKjMw5C7W7WqTHc1mLhjXbdLiQaUF7X+DG1yeDNItWJbl5f1b7b
LFfd7hVoUYYHGH5aZMhCcoPgc2BFlEqqZRhHToxcLceUVYveiBVO0rHzDrZCvdrX
RiVprD4lQer5tcQdANK/yzemJOPlbcWSigi29WaXf7ueF7xaBpDZHrEH18sn6Djj
pFgkd+Bf8WG2ig==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:03:40 2025 by rpki-client