Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: 7TgcQnSIRJe3AJGmEQ/9j2HwPogB9n/WGFbxRB99wu4=
Subject key identifier: 88:61:7F:5B:FF:E5:D2:24:58:EE:6E:E0:5E:35:8C:97:25:66:7C:15
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 019652A4C974A52272EBFAA4180D79E1C6FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 08E5
Signing time: Sun 20 Apr 2025 10:00:53 +0000
Manifest this update: Sun 20 Apr 2025 10:00:53 +0000
Manifest next update: Mon 21 Apr 2025 10:00:53 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: 7AKwGZIRNcZSj289hJ43X5RZgDSJn6kbGJ+j5E/srwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:c9:74:a5:22:72:eb:fa:a4:18:0d:79:e1:c6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Apr 20 10:00:53 2025 GMT
Not After : Apr 21 10:00:53 2025 GMT
Subject: CN=88617f5bffe5d22458ee6ee05e358c9725667c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:60:98:23:5b:b7:ff:5d:d1:39:f7:97:4b:
16:20:e6:1b:2d:1b:b0:1e:20:a2:f1:85:2e:fd:2e:
f5:e6:83:c2:2e:5a:8e:12:63:a1:c1:ce:bb:01:21:
bf:b9:d1:91:25:c3:67:46:77:9c:c6:b3:7f:7f:c3:
6f:78:be:46:d4:9d:92:73:2e:c5:37:6f:6b:95:c2:
f1:62:bb:bc:3c:75:2b:c9:ba:ce:29:73:61:af:21:
61:62:c8:9b:5d:6f:4c:66:21:60:0b:07:e4:85:9c:
79:b6:b9:3d:44:f2:01:fb:c9:bd:ce:cd:d3:c0:33:
f8:ed:a6:da:79:e4:e2:7e:83:12:23:08:32:5d:c6:
cd:09:0c:45:59:7b:74:22:24:82:4b:24:64:85:fc:
d0:95:5a:1e:ad:21:5c:cc:ef:58:31:91:dc:f3:92:
c9:1e:4d:0a:05:3b:3f:95:30:3b:f5:b3:7b:a5:8f:
45:41:d6:99:00:85:21:4a:6f:0b:73:65:9c:56:18:
99:1c:bb:98:b3:0f:77:2b:3c:1d:42:58:8d:d6:9e:
19:c2:99:6c:11:6a:d5:61:91:36:ea:74:68:76:a5:
1a:a3:b7:f3:59:a2:f6:04:29:28:69:45:b1:b2:b8:
f6:51:96:7a:74:e3:9c:64:c1:a8:e9:c8:42:28:e8:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:7F:5B:FF:E5:D2:24:58:EE:6E:E0:5E:35:8C:97:25:66:7C:15
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:58:2d:bd:21:63:eb:31:28:fe:f3:d9:2e:f0:42:50:cb:3b:
61:d5:24:cc:42:e7:76:fd:0c:89:92:87:63:5e:14:c9:ce:4a:
3f:ef:ce:e3:07:6d:c5:0b:ec:d6:a6:63:fd:ac:d4:51:ca:31:
3e:f8:f6:41:89:d6:05:ea:9c:06:2e:49:4d:4f:63:3e:1b:1b:
44:00:03:ed:b3:4f:58:af:32:89:0f:8c:3d:24:91:03:a9:f4:
7d:ec:58:ed:17:fe:10:8f:00:ea:2f:0c:0e:f7:49:26:2b:98:
f2:df:02:9a:bd:8b:5e:57:89:1d:48:f0:42:29:ff:0e:8d:9a:
e1:92:12:70:52:78:6f:2c:83:4f:2e:35:77:b6:86:3e:d0:20:
c8:fe:5e:3c:92:4c:0e:0b:65:e7:86:ca:c6:23:28:99:64:d4:
61:7d:97:47:ee:f3:0e:ad:2d:5d:4d:8f:69:58:45:d5:01:f4:
4d:5d:69:7f:ed:8a:69:6b:49:58:58:23:db:fe:a6:59:0c:b7:
ee:d7:7b:a6:f1:75:bf:a3:18:af:27:dd:42:c5:16:da:ec:82:
4b:cb:38:0b:7a:89:e6:87:c8:f1:a5:c5:db:d2:bc:f1:24:70:
3a:92:20:90:b8:db:1b:72:fb:6b:4c:9a:27:67:7c:2d:46:7e:
34:93:45:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpMl0pSJy6/qkGA154cb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzcwODExNmIwNGJjMmI3Njc1M2UxYTQzMGI3Y2JlZTA5
Y2RiYTUwHhcNMjUwNDIwMTAwMDUzWhcNMjUwNDIxMTAwMDUzWjAzMTEwLwYDVQQD
Eyg4ODYxN2Y1YmZmZTVkMjI0NThlZTZlZTA1ZTM1OGM5NzI1NjY3YzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXhgmCNbt/9d0Tn3l0sWIOYbLRuw
HiCi8YUu/S715oPCLlqOEmOhwc67ASG/udGRJcNnRnecxrN/f8NveL5G1J2Scy7F
N29rlcLxYru8PHUrybrOKXNhryFhYsibXW9MZiFgCwfkhZx5trk9RPIB+8m9zs3T
wDP47abaeeTifoMSIwgyXcbNCQxFWXt0IiSCSyRkhfzQlVoerSFczO9YMZHc85LJ
Hk0KBTs/lTA79bN7pY9FQdaZAIUhSm8Lc2WcVhiZHLuYsw93KzwdQliN1p4Zwpls
EWrVYZE26nRodqUao7fzWaL2BCkoaUWxsrj2UZZ6dOOcZMGo6chCKOiCJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhhf1v/5dIkWO5u4F41jJclZnwVMB8GA1UdIwQY
MBaAFAg3CBFrBLwrdnU+GkMLfL7gnNulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUt
MGYyOTI5OTZmODZjLzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUtMGYyOTI5OTZmODZj
LzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1gtvSFj
6zEo/vPZLvBCUMs7YdUkzELndv0MiZKHY14Uyc5KP+/O4wdtxQvs1qZj/azUUcox
Pvj2QYnWBeqcBi5JTU9jPhsbRAAD7bNPWK8yiQ+MPSSRA6n0fexY7Rf+EI8A6i8M
DvdJJiuY8t8Cmr2LXleJHUjwQin/Do2a4ZIScFJ4byyDTy41d7aGPtAgyP5ePJJM
Dgtl54bKxiMomWTUYX2XR+7zDq0tXU2PaVhF1QH0TV1pf+2KaWtJWFgj2/6mWQy3
7td7pvF1v6MYryfdQsUW2uyCS8s4C3qJ5ofI8aXF29K88SRwOpIgkLjbG3L7a0ya
J2d8LUZ+NJNF2Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:51 2025 by rpki-client