Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: RyCgrEVOuF+SpibIPFINNjePwXEXjnBfKdXdqSPSg+0=
Subject key identifier: 34:58:9C:93:2E:25:AA:36:9C:EC:BB:C2:A3:71:A6:1F:A1:41:2F:54
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0196526D6933883C2E33FE267EC538B53528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 062E
Signing time: Sun 20 Apr 2025 09:00:24 +0000
Manifest this update: Sun 20 Apr 2025 09:00:24 +0000
Manifest next update: Mon 21 Apr 2025 09:00:24 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: C54+fuWL7CAvH5+7JpaFB9u97kPmsjUd9pWKetXVUtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:69:33:88:3c:2e:33:fe:26:7e:c5:38:b5:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Apr 20 09:00:24 2025 GMT
Not After : Apr 21 09:00:24 2025 GMT
Subject: CN=34589c932e25aa369cecbbc2a371a61fa1412f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:83:19:17:9b:47:a2:1e:42:61:ca:58:d4:8d:
83:9c:6c:27:21:a5:99:44:23:f1:b5:6e:70:db:1b:
27:47:e6:22:11:91:cd:40:4b:2c:8b:d5:77:06:50:
bb:0f:58:b0:57:b3:50:9f:ff:1c:42:b6:00:b1:92:
1a:3b:b4:db:81:3f:fd:b4:cb:36:30:e1:1b:9d:30:
ef:b2:54:d2:c9:00:f5:e8:ff:5c:09:12:5a:65:92:
45:b7:80:f8:1f:e4:b7:cf:56:25:99:94:58:bb:bf:
26:2e:cd:09:c0:52:3d:18:eb:e9:83:70:7f:33:93:
ac:ea:2d:6c:17:80:ee:da:03:d2:a5:d5:f2:9f:73:
6f:9a:18:1b:59:68:7f:b6:24:d3:8a:9f:64:01:7a:
0b:16:f0:3e:d1:43:15:1a:6e:9d:67:15:c2:9c:95:
a3:32:83:ed:a2:38:e4:69:bf:a9:4d:bf:3e:38:44:
64:ef:3d:d3:83:53:c7:60:18:15:d2:47:62:17:d3:
1b:6e:e9:a1:5d:50:95:38:b4:8a:20:0e:25:e0:95:
3f:d4:d5:f3:14:c2:a3:b6:2a:48:77:45:ab:98:8c:
cd:08:de:0c:97:a5:b6:ec:3f:aa:52:53:bf:38:6e:
76:4b:7c:44:0f:b4:55:33:47:fc:28:21:93:b0:0a:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:58:9C:93:2E:25:AA:36:9C:EC:BB:C2:A3:71:A6:1F:A1:41:2F:54
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:4b:42:d3:28:8e:45:b7:cd:7f:70:c3:f3:24:70:f8:d5:
68:e0:ad:e1:d6:57:ea:68:e1:cf:d9:e6:c8:74:1e:25:14:e0:
a2:59:d1:11:c7:69:0f:20:a9:cf:58:70:87:2e:e5:6f:3c:aa:
d7:62:24:d7:af:aa:4c:e8:76:36:8d:24:c7:e4:68:ee:a1:66:
9e:c4:20:f3:91:ee:9e:96:7d:8a:fd:df:a6:a7:dd:fe:f7:21:
ec:66:e1:00:42:b9:9c:27:59:1b:21:ac:c1:c6:02:e4:0a:a7:
12:5b:23:51:f1:8c:30:06:4a:c8:a9:da:fd:ae:34:9b:38:07:
f0:39:57:28:e8:37:41:6b:9f:fa:3c:b4:af:65:de:40:e0:9f:
d3:a9:cc:34:f4:8b:a6:5e:91:01:ca:d5:b5:9b:db:74:13:33:
ab:33:1f:3e:8e:22:54:4b:13:d3:9a:2c:11:0e:8f:2d:19:de:
95:3a:1e:39:d5:cd:bf:da:2a:72:7d:75:3d:eb:bd:73:43:f7:
65:28:14:e3:17:94:ae:0d:d2:6b:de:b8:9f:04:4e:b0:43:d5:
86:74:eb:44:cf:f1:61:14:c5:3f:21:38:dd:b2:74:1d:c6:9e:
2e:ef:a6:44:4f:df:8f:f5:52:be:8f:99:8d:66:50:3b:b3:dd:
76:12:e7:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbWkziDwuM/4mfsU4tTUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDIyMzRiYWM2MTcxMjcwM2UzOThhNmQ1YmYwNDhjNWM5
ZjQwMzIwHhcNMjUwNDIwMDkwMDI0WhcNMjUwNDIxMDkwMDI0WjAzMTEwLwYDVQQD
EygzNDU4OWM5MzJlMjVhYTM2OWNlY2JiYzJhMzcxYTYxZmExNDEyZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IMZF5tHoh5CYcpY1I2DnGwnIaWZ
RCPxtW5w2xsnR+YiEZHNQEssi9V3BlC7D1iwV7NQn/8cQrYAsZIaO7TbgT/9tMs2
MOEbnTDvslTSyQD16P9cCRJaZZJFt4D4H+S3z1YlmZRYu78mLs0JwFI9GOvpg3B/
M5Os6i1sF4Du2gPSpdXyn3NvmhgbWWh/tiTTip9kAXoLFvA+0UMVGm6dZxXCnJWj
MoPtojjkab+pTb8+OERk7z3Tg1PHYBgV0kdiF9MbbumhXVCVOLSKIA4l4JU/1NXz
FMKjtipId0WrmIzNCN4Ml6W27D+qUlO/OG52S3xED7RVM0f8KCGTsAqOEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRYnJMuJao2nOy7wqNxph+hQS9UMB8GA1UdIwQY
MBaAFK5CI0usYXEnA+OYptW/BIxcn0AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1Yjct
ZWUyYmNmMTg2ZjI0LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1YjctZWUyYmNmMTg2ZjI0
LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLZLQtMo
jkW3zX9ww/MkcPjVaOCt4dZX6mjhz9nmyHQeJRTgolnREcdpDyCpz1hwhy7lbzyq
12Ik16+qTOh2No0kx+Ro7qFmnsQg85HunpZ9iv3fpqfd/vch7GbhAEK5nCdZGyGs
wcYC5AqnElsjUfGMMAZKyKna/a40mzgH8DlXKOg3QWuf+jy0r2XeQOCf06nMNPSL
pl6RAcrVtZvbdBMzqzMfPo4iVEsT05osEQ6PLRnelToeOdXNv9oqcn11Peu9c0P3
ZSgU4xeUrg3Sa964nwROsEPVhnTrRM/xYRTFPyE43bJ0HcaeLu+mRE/fj/VSvo+Z
jWZQO7PddhLnag==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:33 2025 by rpki-client