Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: 843KhW/RXD8rqjQz0QXPFwzwX9HkdwOVxQH6uYS90qc=
Subject key identifier: 7A:B7:2C:30:25:B6:7F:59:5F:28:0E:70:94:57:11:FA:33:58:A2:C4
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 01965123BF465CA7A20A160E9B9956759520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 082E
Signing time: Sun 20 Apr 2025 03:00:19 +0000
Manifest this update: Sun 20 Apr 2025 03:00:19 +0000
Manifest next update: Mon 21 Apr 2025 03:00:19 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: sBb46AY12EbPKB/hgycfxc9TTcwXTs4lqXpBkPpuoZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:23:bf:46:5c:a7:a2:0a:16:0e:9b:99:56:75:95:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Apr 20 03:00:19 2025 GMT
Not After : Apr 21 03:00:19 2025 GMT
Subject: CN=7ab72c3025b67f595f280e70945711fa3358a2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:a7:ab:87:4a:ba:53:15:7b:18:a2:61:44:
32:a6:fc:20:7b:e8:a8:16:26:5b:6e:21:7c:a8:46:
11:29:1e:55:db:7d:86:9a:d3:33:47:86:47:5c:e9:
ab:52:bf:85:f6:a0:fa:c8:45:63:d0:3b:aa:a2:b9:
4e:ec:39:57:63:e5:e1:5a:2f:3c:f7:e8:cb:f2:46:
50:c3:26:3b:79:7a:23:5a:25:1f:ee:18:21:59:84:
f4:2f:e7:ed:e8:0f:9c:4e:b7:84:d6:0f:a9:d2:57:
d8:61:19:69:13:78:ef:30:ec:58:5f:85:f3:c2:ed:
48:c5:b3:d4:f2:26:c0:fd:33:1b:c1:5e:d5:8a:b7:
4f:0f:32:c7:35:86:d2:99:94:05:77:6a:ad:34:bf:
be:4a:67:c8:3e:25:d7:94:2b:cf:0b:76:ac:e0:8b:
4e:34:88:a0:cc:41:53:25:fe:68:1f:9c:84:b0:db:
47:fd:84:e5:09:76:94:aa:22:48:df:31:8c:d4:c0:
bd:00:ce:46:38:d0:67:03:5b:49:c1:a7:fa:fa:32:
78:2b:3f:3e:22:eb:91:03:ce:fa:0f:f8:64:9d:1c:
82:4c:55:c6:43:90:c6:5a:b7:71:af:45:ab:62:c5:
2d:c1:75:e0:19:9c:ea:37:f4:f3:d7:a1:76:02:4f:
af:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B7:2C:30:25:B6:7F:59:5F:28:0E:70:94:57:11:FA:33:58:A2:C4
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:35:69:3d:26:86:b7:9a:9d:ac:e1:b1:59:e2:fd:f7:5f:cc:
ff:58:e4:90:45:47:fd:3a:7c:ba:fc:3c:51:5b:7f:55:40:f0:
70:e9:3c:66:7a:dc:9b:e1:09:c0:0d:24:34:a8:c2:ab:13:2b:
51:7e:aa:13:35:1b:b5:72:35:ea:82:15:7a:c8:cc:69:09:61:
0c:65:ca:10:ca:83:af:ed:c4:c3:38:7f:2a:71:28:09:1e:1f:
d3:d9:3f:bb:68:5c:c5:8e:e2:9b:19:10:bb:cd:45:63:a7:c6:
c0:e2:0d:fd:f9:db:b5:e7:5d:d8:33:a2:0a:cd:36:a4:fb:a0:
f6:5e:c3:fc:51:16:59:c2:ba:2e:f2:f9:71:4a:a8:0b:aa:b7:
c5:a5:75:e9:fb:cd:dc:f3:ad:18:45:14:00:0e:86:e6:56:85:
16:24:9e:b8:a3:72:dd:f6:18:ae:fa:51:75:47:18:a4:f2:3d:
de:59:a4:6d:52:3e:dc:f4:da:cd:61:a8:42:09:70:80:8f:b7:
78:8a:c0:cf:7e:bb:af:d8:0f:e1:5e:f9:bc:4e:03:66:dc:a1:
02:83:40:a7:e5:29:31:4e:36:2d:26:2c:c0:06:f5:7a:ea:2f:
f3:80:69:6c:52:9f:85:e4:4c:0b:34:9c:64:df:01:ea:e1:ce:
33:a2:9b:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRI79GXKeiChYOm5lWdZUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5
MGI1YWMwHhcNMjUwNDIwMDMwMDE5WhcNMjUwNDIxMDMwMDE5WjAzMTEwLwYDVQQD
Eyg3YWI3MmMzMDI1YjY3ZjU5NWYyODBlNzA5NDU3MTFmYTMzNThhMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6anq4dKulMVexiiYUQypvwge+io
FiZbbiF8qEYRKR5V232GmtMzR4ZHXOmrUr+F9qD6yEVj0DuqorlO7DlXY+XhWi88
9+jL8kZQwyY7eXojWiUf7hghWYT0L+ft6A+cTreE1g+p0lfYYRlpE3jvMOxYX4Xz
wu1IxbPU8ibA/TMbwV7VirdPDzLHNYbSmZQFd2qtNL++SmfIPiXXlCvPC3as4ItO
NIigzEFTJf5oH5yEsNtH/YTlCXaUqiJI3zGM1MC9AM5GONBnA1tJwaf6+jJ4Kz8+
IuuRA876D/hknRyCTFXGQ5DGWrdxr0WrYsUtwXXgGZzqN/Tz16F2Ak+v4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq3LDAltn9ZXygOcJRXEfozWKLEMB8GA1UdIwQY
MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It
NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw
LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDVpPSaG
t5qdrOGxWeL991/M/1jkkEVH/Tp8uvw8UVt/VUDwcOk8Znrcm+EJwA0kNKjCqxMr
UX6qEzUbtXI16oIVesjMaQlhDGXKEMqDr+3Ewzh/KnEoCR4f09k/u2hcxY7imxkQ
u81FY6fGwOIN/fnbtedd2DOiCs02pPug9l7D/FEWWcK6LvL5cUqoC6q3xaV16fvN
3POtGEUUAA6G5laFFiSeuKNy3fYYrvpRdUcYpPI93lmkbVI+3PTazWGoQglwgI+3
eIrAz367r9gP4V75vE4DZtyhAoNAp+UpMU42LSYswAb1euov84BpbFKfheRMCzSc
ZN8B6uHOM6Kbog==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:11 2025 by rpki-client