Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: Ypc21eypvAyP0ElChCx0rHgSIb2iW/Wwmeh4/WBVYhA=
Subject key identifier: C8:2F:DD:98:6E:64:1B:4B:10:91:7B:95:47:66:CC:C3:08:8E:EB:57
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 0196591521F067446986CABAD8B01FA703B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 0E1D
Signing time: Mon 21 Apr 2025 16:01:19 +0000
Manifest this update: Mon 21 Apr 2025 16:01:19 +0000
Manifest next update: Tue 22 Apr 2025 16:01:19 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: Kz9RWq4orHd63CGjrWYA5qBnor/ovzY3Qi3oEdFjnQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:21:f0:67:44:69:86:ca:ba:d8:b0:1f:a7:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Apr 21 16:01:19 2025 GMT
Not After : Apr 22 16:01:19 2025 GMT
Subject: CN=c82fdd986e641b4b10917b954766ccc3088eeb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:44:6f:1a:a4:b1:b9:d4:3c:ab:8f:14:88:
22:8b:ca:c7:31:c2:e1:76:f4:e9:63:98:29:cd:98:
ec:30:f0:d6:ef:b4:e7:36:83:3a:94:8e:68:cf:dc:
6b:3a:48:08:79:0c:69:15:48:1e:f9:76:ec:7a:10:
70:43:b5:d2:a3:db:7b:da:4a:ba:0f:21:64:f9:da:
84:2c:15:20:f5:36:95:6a:5d:02:ab:e2:df:c3:34:
bc:ac:39:9a:07:00:13:c3:2a:41:eb:ec:17:45:7f:
c6:f2:9d:c7:a1:fb:e9:82:0a:bf:db:8c:19:cc:f3:
6c:42:ed:a8:51:0b:9b:16:54:7e:42:a2:aa:3e:b0:
c5:95:86:b0:0d:f9:6b:32:9a:ce:f6:22:c0:88:48:
19:fd:d9:45:bb:72:39:a3:6a:42:93:9c:c4:de:44:
8d:0d:c3:f8:9d:1a:19:6b:5f:9e:35:6e:ad:c2:39:
97:f7:56:ff:a4:46:ed:2d:16:bb:d4:dd:58:75:2f:
ee:92:ff:bc:e5:c8:1d:dd:15:67:05:99:1f:6f:7f:
cf:6c:28:b5:e4:94:e7:dc:b3:be:19:94:de:3f:a2:
40:35:c1:5b:13:31:ea:c1:cc:f8:35:8f:23:2d:39:
b5:61:86:f7:7f:02:ca:54:aa:58:20:71:db:1c:26:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2F:DD:98:6E:64:1B:4B:10:91:7B:95:47:66:CC:C3:08:8E:EB:57
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d1:9f:91:e7:4f:f2:96:30:e9:04:08:5a:e3:a6:a7:39:1e:
b7:01:fc:3c:0d:1d:52:7c:10:69:63:f7:07:f7:80:99:bb:20:
44:6f:32:6a:74:0e:ed:e1:cc:e7:ce:55:bc:3b:d8:5d:44:f5:
cb:cb:7b:2a:c4:a2:35:2a:9b:4f:3f:66:7d:ef:ce:6b:0a:0a:
6b:91:fb:9a:bd:51:5f:0c:e8:0c:76:36:4e:5a:3d:2b:c5:76:
1c:55:88:ce:a4:57:c4:e5:18:78:7f:3f:45:b3:ee:f4:54:35:
18:3e:ae:53:91:6b:e6:56:b9:d3:d3:4f:a3:ea:ef:28:a3:11:
dd:f3:b1:6b:26:24:06:4d:1d:5b:b3:c5:0e:e7:8d:fc:e6:51:
d5:7d:20:e2:1b:3d:2a:87:85:12:4c:94:c4:31:c4:05:bc:2f:
db:e2:fa:8e:54:9d:9f:e7:50:2a:a8:62:4f:49:92:19:0f:cd:
df:5a:02:b7:f7:94:48:d5:d4:54:6c:6c:bf:0f:02:f2:86:6a:
fd:af:ef:9f:47:ed:c3:2c:96:fe:79:68:17:14:66:eb:1d:30:
ef:03:36:06:8d:1c:de:a5:12:ce:07:ef:ac:29:56:4a:e6:79:
d6:fb:81:12:08:a8:95:53:33:d8:5b:7d:6c:17:1c:ea:a0:2a:
9c:c4:2e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFSHwZ0Rphsq62LAfpwO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5
Y2VlZWYwHhcNMjUwNDIxMTYwMTE5WhcNMjUwNDIyMTYwMTE5WjAzMTEwLwYDVQQD
EyhjODJmZGQ5ODZlNjQxYjRiMTA5MTdiOTU0NzY2Y2NjMzA4OGVlYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxxEbxqksbnUPKuPFIgii8rHMcLh
dvTpY5gpzZjsMPDW77TnNoM6lI5oz9xrOkgIeQxpFUge+XbsehBwQ7XSo9t72kq6
DyFk+dqELBUg9TaVal0Cq+LfwzS8rDmaBwATwypB6+wXRX/G8p3Hofvpggq/24wZ
zPNsQu2oUQubFlR+QqKqPrDFlYawDflrMprO9iLAiEgZ/dlFu3I5o2pCk5zE3kSN
DcP4nRoZa1+eNW6twjmX91b/pEbtLRa71N1YdS/ukv+85cgd3RVnBZkfb3/PbCi1
5JTn3LO+GZTeP6JANcFbEzHqwcz4NY8jLTm1YYb3fwLKVKpYIHHbHCYC2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgv3ZhuZBtLEJF7lUdmzMMIjutXMB8GA1UdIwQY
MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt
Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj
LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9GfkedP
8pYw6QQIWuOmpzketwH8PA0dUnwQaWP3B/eAmbsgRG8yanQO7eHM585VvDvYXUT1
y8t7KsSiNSqbTz9mfe/OawoKa5H7mr1RXwzoDHY2Tlo9K8V2HFWIzqRXxOUYeH8/
RbPu9FQ1GD6uU5Fr5la509NPo+rvKKMR3fOxayYkBk0dW7PFDueN/OZR1X0g4hs9
KoeFEkyUxDHEBbwv2+L6jlSdn+dQKqhiT0mSGQ/N31oCt/eUSNXUVGxsvw8C8oZq
/a/vn0ftwyyW/nloFxRm6x0w7wM2Bo0c3qUSzgfvrClWSuZ51vuBEgiolVMz2Ft9
bBcc6qAqnMQu4Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:12:29 2025 by rpki-client