Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: ZbcwRDpAUP1AZBi7j3uku7XI3/8xH1BsTgy6aYAuDPU=
Subject key identifier: 3F:2F:14:32:D2:4A:A5:AF:DB:33:EF:E5:8F:DD:32:7B:E2:C7:CA:74
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 0195900647D808B276951B912FB344C5CCF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 07CA
Signing time: Thu 13 Mar 2025 15:01:25 +0000
Manifest this update: Thu 13 Mar 2025 15:01:25 +0000
Manifest next update: Fri 14 Mar 2025 15:01:25 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: GPClU5tBU+wTEfnZ1lcnVD7um9HaAl54w8U5LUkT30U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:47:d8:08:b2:76:95:1b:91:2f:b3:44:c5:cc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Mar 13 15:01:25 2025 GMT
Not After : Mar 14 15:01:25 2025 GMT
Subject: CN=3f2f1432d24aa5afdb33efe58fdd327be2c7ca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:2c:cc:5c:ec:0f:30:9e:90:ef:8e:ea:39:
41:91:42:0f:d2:48:72:b3:5b:56:47:b4:be:3b:90:
67:4d:31:48:05:33:01:58:1f:64:ce:4a:05:34:f9:
01:af:8f:b9:c7:f5:11:ba:87:d1:c5:6f:26:e3:21:
c6:f8:31:b0:6a:a2:c0:3f:a5:75:94:b0:86:e9:d0:
78:d9:cc:2b:91:aa:40:e8:8f:98:b4:94:a6:c2:4a:
db:15:6c:28:67:cc:d2:62:df:83:b9:68:b4:bc:25:
2b:0c:8a:34:42:7e:e4:03:e8:93:5e:56:68:9b:57:
79:aa:b9:8b:62:2f:1b:17:a7:a1:17:b3:22:55:0f:
70:f4:e5:15:3a:25:0a:eb:4c:a8:d9:a0:05:1c:0d:
67:d0:0b:aa:94:f8:49:01:7b:82:58:f2:6d:2a:9b:
12:9e:b6:3c:e1:f8:07:34:48:7e:d5:3c:9a:b4:9d:
c0:ad:ff:35:e0:a4:0a:06:72:08:17:00:75:d7:3b:
3a:9f:4e:e6:a4:62:c0:77:8f:8b:74:5e:30:56:92:
75:a9:32:7b:47:7b:c6:bc:99:54:39:de:b5:3f:27:
9b:f8:43:d0:ce:59:b5:4d:41:1d:2b:8c:26:d6:4a:
c9:32:a6:56:dc:fa:fd:e2:ea:b5:1e:96:7d:7c:19:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2F:14:32:D2:4A:A5:AF:DB:33:EF:E5:8F:DD:32:7B:E2:C7:CA:74
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0f:f3:97:b4:48:e0:ee:7c:61:c2:52:58:37:ae:da:d9:13:
e4:60:11:dd:11:85:83:7b:22:91:8d:d9:b3:0c:03:e6:2d:1a:
94:e5:8e:b8:f1:99:59:ac:70:bd:70:1c:88:9e:b5:8a:47:67:
18:d8:10:a2:bf:ff:a7:75:e1:56:9b:eb:e1:42:f9:3d:a3:dc:
2c:8b:50:54:f4:6a:58:9f:80:5a:77:9d:27:44:95:66:3c:af:
5b:d4:9e:b6:c4:b2:e0:de:ee:29:cf:d2:df:a4:4b:72:05:17:
b1:93:cd:f2:2b:91:5c:2d:b7:29:5e:5d:fa:0b:0c:dc:a0:4c:
df:48:4a:cb:18:bd:15:73:20:36:cd:66:37:ec:e7:85:8e:cc:
5b:b9:97:d8:2e:6d:85:8e:a1:69:04:c4:d4:0e:c6:a0:21:3a:
c7:3f:14:5e:67:80:82:0a:91:c5:cb:2d:e6:4d:e6:82:12:4e:
8e:f3:3d:bc:0a:54:db:32:85:5e:7d:36:16:68:82:f5:50:77:
62:92:05:49:ce:e0:bd:a2:75:97:50:34:37:73:43:cf:13:7a:
58:85:94:02:bb:e9:e9:00:81:05:91:a7:45:1d:55:0a:1d:25:
96:9f:df:e1:61:7e:00:c4:e3:12:61:94:4a:c2:1f:c0:1d:86:
a1:b7:0b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBkfYCLJ2lRuRL7NExcz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5
MGI1YWMwHhcNMjUwMzEzMTUwMTI1WhcNMjUwMzE0MTUwMTI1WjAzMTEwLwYDVQQD
EygzZjJmMTQzMmQyNGFhNWFmZGIzM2VmZTU4ZmRkMzI3YmUyYzdjYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCsszFzsDzCekO+O6jlBkUIP0khy
s1tWR7S+O5BnTTFIBTMBWB9kzkoFNPkBr4+5x/URuofRxW8m4yHG+DGwaqLAP6V1
lLCG6dB42cwrkapA6I+YtJSmwkrbFWwoZ8zSYt+DuWi0vCUrDIo0Qn7kA+iTXlZo
m1d5qrmLYi8bF6ehF7MiVQ9w9OUVOiUK60yo2aAFHA1n0AuqlPhJAXuCWPJtKpsS
nrY84fgHNEh+1TyatJ3Arf814KQKBnIIFwB11zs6n07mpGLAd4+LdF4wVpJ1qTJ7
R3vGvJlUOd61Pyeb+EPQzlm1TUEdK4wm1krJMqZW3Pr94uq1HpZ9fBm8qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8vFDLSSqWv2zPv5Y/dMnvix8p0MB8GA1UdIwQY
MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It
NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw
LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA/zl7RI
4O58YcJSWDeu2tkT5GAR3RGFg3sikY3ZswwD5i0alOWOuPGZWaxwvXAciJ61ikdn
GNgQor//p3XhVpvr4UL5PaPcLItQVPRqWJ+AWnedJ0SVZjyvW9SetsSy4N7uKc/S
36RLcgUXsZPN8iuRXC23KV5d+gsM3KBM30hKyxi9FXMgNs1mN+znhY7MW7mX2C5t
hY6haQTE1A7GoCE6xz8UXmeAggqRxcst5k3mghJOjvM9vApU2zKFXn02FmiC9VB3
YpIFSc7gvaJ1l1A0N3NDzxN6WIWUArvp6QCBBZGnRR1VCh0llp/f4WF+AMTjEmGU
SsIfwB2GobcLmg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:12 2025 by rpki-client