Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File: B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier: IlgvPd6xpoY3XXnq87ZawjT7wlzI07kdYHjk3PHSKnA=
Subject key identifier: 9A:B2:E7:A7:D3:D9:47:B5:99:69:24:9C:BA:83:2A:E7:83:45:37:29
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer: /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial: 019653EE49FAC5F3B48FFBEE3D0C0439446F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 16:00:47 +0000
Manifest this update: Sun 20 Apr 2025 16:00:47 +0000
Manifest next update: Mon 21 Apr 2025 16:00:47 +0000
Files and hashes: 1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: 2sAAZenh4fId40+05tlCNodo76PeuOPL36w3l9blo4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:49:fa:c5:f3:b4:8f:fb:ee:3d:0c:04:39:44:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Validity
Not Before: Apr 20 16:00:47 2025 GMT
Not After : Apr 21 16:00:47 2025 GMT
Subject: CN=9ab2e7a7d3d947b59969249cba832ae783453729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:42:87:0d:b0:73:c9:01:3e:d5:1a:87:ab:
02:42:27:f9:9d:c5:01:18:ee:77:5f:bf:85:ba:04:
7e:8b:2d:01:da:a7:d4:cc:62:26:c8:ef:e6:b3:d2:
02:e8:79:4b:fa:fe:f3:6b:30:ed:e8:80:b2:73:d4:
c1:4f:dc:a9:ef:e8:b6:75:07:ff:0e:56:7a:71:c1:
e9:de:02:59:bc:44:b4:4b:9d:02:e6:0a:79:2b:31:
7c:f5:07:a5:a8:5b:49:a1:af:81:f4:aa:56:94:7e:
a4:8e:e8:b2:ba:d8:ef:a1:61:69:fe:d2:c7:0f:46:
4f:56:3e:60:5f:c9:76:18:d8:8d:6a:9a:81:41:85:
5a:3c:53:94:25:1f:3c:1c:4f:28:95:69:5f:18:44:
ef:fe:49:2b:3f:dc:d0:04:12:2c:ee:dd:66:a0:48:
10:3a:27:09:0b:26:1c:2e:81:de:d5:5b:d9:cf:a0:
ef:b5:29:c2:02:d0:8e:d5:05:a8:22:bc:36:8b:96:
72:da:a0:16:7e:0c:19:e4:db:b2:a0:9d:2d:89:7c:
4b:c5:11:1a:89:6d:75:fb:e4:30:7e:e0:2f:a5:e9:
dc:1d:97:1b:bd:90:9d:32:d1:79:a9:e7:b8:65:13:
82:ed:c6:63:20:28:47:ac:bb:d9:d3:e3:06:3e:4a:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B2:E7:A7:D3:D9:47:B5:99:69:24:9C:BA:83:2A:E7:83:45:37:29
X509v3 Authority Key Identifier:
keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d3:1b:28:78:b7:9d:59:f3:4a:58:78:e2:f7:cd:02:b9:12:
ed:65:1f:f4:b4:ca:5a:c5:55:8c:94:4f:f4:1e:c2:80:e9:24:
66:0a:d7:57:76:98:20:5a:78:b0:eb:c5:41:28:1a:dc:ec:be:
a4:29:2c:c6:ca:d8:bd:78:ac:8c:8a:c6:0a:ad:ea:16:94:11:
19:94:fb:fc:dc:48:a4:f7:9c:7e:90:9f:a4:ef:cb:c5:b6:74:
57:47:d0:84:bd:e1:66:ff:fa:69:c4:85:49:01:95:a3:6a:15:
a3:67:95:53:68:c8:31:40:74:6c:6f:28:68:45:75:fa:ac:9c:
35:19:32:19:ee:13:e3:ff:af:20:31:37:fc:bd:22:96:07:61:
2b:92:a4:15:f3:ba:33:eb:51:67:bf:59:a8:a8:86:4a:8d:83:
a2:16:96:f4:c6:76:21:ed:55:0a:33:ae:7f:5d:6f:40:1d:e8:
b6:31:22:14:4e:29:d1:8f:18:e2:69:23:a1:c7:36:2f:b4:9a:
f8:7e:4a:ba:50:1b:2f:f8:9a:53:a0:16:35:d3:cd:33:f3:92:
56:9b:e6:c3:1a:d4:c6:39:c7:3a:4c:3d:70:89:76:7b:8c:6e:
9b:c3:f7:7b:b4:9e:1a:0e:e0:e4:ac:51:0b:ef:1b:1f:f5:03:
f2:35:7f:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7kn6xfO0j/vuPQwEOURvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTU5NGQyNmI4OGU4NjkxZDFkODE4NjAyM2I2OWViZjE4
ZDFmZTkwHhcNMjUwNDIwMTYwMDQ3WhcNMjUwNDIxMTYwMDQ3WjAzMTEwLwYDVQQD
Eyg5YWIyZTdhN2QzZDk0N2I1OTk2OTI0OWNiYTgzMmFlNzgzNDUzNzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut5Chw2wc8kBPtUah6sCQif5ncUB
GO53X7+FugR+iy0B2qfUzGImyO/ms9IC6HlL+v7zazDt6ICyc9TBT9yp7+i2dQf/
DlZ6ccHp3gJZvES0S50C5gp5KzF89QelqFtJoa+B9KpWlH6kjuiyutjvoWFp/tLH
D0ZPVj5gX8l2GNiNapqBQYVaPFOUJR88HE8olWlfGETv/kkrP9zQBBIs7t1moEgQ
OicJCyYcLoHe1VvZz6DvtSnCAtCO1QWoIrw2i5Zy2qAWfgwZ5NuyoJ0tiXxLxREa
iW11++QwfuAvpencHZcbvZCdMtF5qee4ZROC7cZjIChHrLvZ0+MGPkqLkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqy56fT2Ue1mWkknLqDKueDRTcpMB8GA1UdIwQY
MBaAFAellNJriOhpHR2BhgI7aevxjR/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2Qt
NGQ5NTYxZjhiOTY3LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kODE5YTctZTJhYi00MDUwLWFmY2QtNGQ5NTYxZjhiOTY3
LzEvQjZXVTBtdUk2R2tkSFlHR0FqdHA2X0dOSC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdMbKHi3
nVnzSlh44vfNArkS7WUf9LTKWsVVjJRP9B7CgOkkZgrXV3aYIFp4sOvFQSga3Oy+
pCksxsrYvXisjIrGCq3qFpQRGZT7/NxIpPecfpCfpO/LxbZ0V0fQhL3hZv/6acSF
SQGVo2oVo2eVU2jIMUB0bG8oaEV1+qycNRkyGe4T4/+vIDE3/L0ilgdhK5KkFfO6
M+tRZ79ZqKiGSo2DohaW9MZ2Ie1VCjOuf11vQB3otjEiFE4p0Y8Y4mkjocc2L7Sa
+H5KulAbL/iaU6AWNdPNM/OSVpvmwxrUxjnHOkw9cIl2e4xum8P3e7SeGg7g5KxR
C+8bH/UD8jV/NA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:39:31 2025 by rpki-client