Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: +dX8Fy/p3QoOnUkRr5dGtT8oN6SR2GXVSPI5AdaUjFA=
Subject key identifier: B7:36:34:2C:58:F9:23:F0:1F:BD:FC:62:5F:24:88:72:46:DF:7D:EF
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 0196515AF7D8C55EAA36234AC9A49DF0073E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 0CF9
Signing time: Sun 20 Apr 2025 04:00:38 +0000
Manifest this update: Sun 20 Apr 2025 04:00:38 +0000
Manifest next update: Mon 21 Apr 2025 04:00:38 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: t6JO+3ExVCVdZr9Dcu3TfrbWFuJsihGzkiQRtwGkXqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:f7:d8:c5:5e:aa:36:23:4a:c9:a4:9d:f0:07:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Apr 20 04:00:38 2025 GMT
Not After : Apr 21 04:00:38 2025 GMT
Subject: CN=b736342c58f923f01fbdfc625f24887246df7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:47:d7:bd:95:cf:12:4d:2a:60:87:ab:5e:
fa:6d:09:a1:18:f1:9e:2a:e0:b4:52:e8:4e:1a:32:
94:2d:b2:99:04:e0:c6:29:9e:a4:50:31:1e:d3:80:
b5:67:39:ad:3f:cf:bf:47:e9:5f:eb:80:72:02:1d:
5e:f5:e0:32:bc:97:8f:91:66:1e:fe:0d:41:b6:54:
6c:73:50:48:82:32:0a:4c:c2:a6:95:99:6a:5e:ac:
2d:12:3c:58:76:be:5a:00:55:59:12:a3:80:45:dc:
95:90:10:10:79:e1:b9:d5:f8:a8:ee:8c:e4:8a:29:
79:57:e4:9d:69:d5:6e:ee:24:58:c9:49:1c:6f:3d:
92:e6:b1:5b:bf:a7:df:e4:f5:66:34:58:57:9f:39:
61:23:5a:32:50:c0:69:79:8e:86:8a:38:a4:71:33:
5b:f5:10:d6:27:9e:ba:25:f6:c9:30:cf:7f:5f:c3:
e6:04:e6:c8:f8:03:5b:30:f5:76:3e:90:91:95:e3:
f4:e8:a5:c3:02:57:1d:23:df:58:d3:82:38:57:44:
77:6a:df:38:0b:ad:e9:7e:d2:ef:08:ae:16:00:47:
8a:a4:9b:d8:f8:4f:e2:a8:7f:cd:6b:18:85:0f:69:
47:2b:d1:33:f1:0d:5d:b5:57:d7:02:14:bf:8e:dc:
f7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:36:34:2C:58:F9:23:F0:1F:BD:FC:62:5F:24:88:72:46:DF:7D:EF
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7b:88:d7:aa:44:40:03:20:a0:29:ef:59:10:05:e8:ca:37:
96:d9:12:4d:89:ed:d6:69:ec:f8:0c:83:6a:a3:b7:ae:e3:8b:
d3:ce:ec:63:7d:8f:d6:10:9e:5e:ae:e8:13:1a:c9:97:67:5c:
72:db:cf:37:3d:a9:11:5a:ec:26:55:2b:dc:70:36:f0:4e:f4:
4b:b9:60:35:34:0b:96:89:1c:c6:81:22:13:f4:cf:b0:54:6f:
72:39:f0:02:9f:a1:3a:08:db:31:52:c6:7e:9c:6b:20:14:58:
80:c5:c6:ba:94:fa:16:a8:6b:12:d5:79:24:ee:98:11:83:21:
37:5f:57:c8:9c:35:74:9b:9c:85:dd:a5:d1:77:e9:da:42:d7:
b0:85:c9:60:55:6a:5f:25:be:95:88:49:83:e6:b9:57:78:ec:
73:69:fe:10:cd:f4:3e:12:d7:76:32:4e:24:68:e5:95:0b:72:
28:28:6d:0f:5b:f0:a3:32:74:0e:c4:0a:68:84:72:1d:57:41:
6f:61:36:8f:0c:3a:eb:e1:74:3b:c2:cb:04:20:3c:59:0a:4a:
26:06:f5:48:ba:b9:5e:72:4b:8a:0b:b0:ea:68:b4:6d:ca:98:
1d:86:9b:e7:e2:a1:f1:da:95:e3:d0:ec:a5:69:0f:66:00:4d:
43:bc:ca:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWvfYxV6qNiNKyaSd8Ac+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyY2ZmYjFmYTU1NWZjMzVhMTRhZmNhNjEwYjM4MTA1ZmQ1
YzY0NWMwHhcNMjUwNDIwMDQwMDM4WhcNMjUwNDIxMDQwMDM4WjAzMTEwLwYDVQQD
EyhiNzM2MzQyYzU4ZjkyM2YwMWZiZGZjNjI1ZjI0ODg3MjQ2ZGY3ZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRtH172VzxJNKmCHq176bQmhGPGe
KuC0UuhOGjKULbKZBODGKZ6kUDEe04C1ZzmtP8+/R+lf64ByAh1e9eAyvJePkWYe
/g1BtlRsc1BIgjIKTMKmlZlqXqwtEjxYdr5aAFVZEqOARdyVkBAQeeG51fio7ozk
iil5V+SdadVu7iRYyUkcbz2S5rFbv6ff5PVmNFhXnzlhI1oyUMBpeY6GijikcTNb
9RDWJ566JfbJMM9/X8PmBObI+ANbMPV2PpCRleP06KXDAlcdI99Y04I4V0R3at84
C63pftLvCK4WAEeKpJvY+E/iqH/NaxiFD2lHK9Ez8Q1dtVfXAhS/jtz3AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc2NCxY+SPwH738Yl8kiHJG333vMB8GA1UdIwQY
MBaAFJLP+x+lVfw1oUr8phCzgQX9XGRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgt
NmJiNWQ0ZDJlNTM5LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9mZjUxYTAtYTFiMS00MTliLTg1MTgtNmJiNWQ0ZDJlNTM5
LzEva3NfN0g2VlZfRFdoU3Z5bUVMT0JCZjFjWkZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHuI16pE
QAMgoCnvWRAF6Mo3ltkSTYnt1mns+AyDaqO3ruOL087sY32P1hCeXq7oExrJl2dc
ctvPNz2pEVrsJlUr3HA28E70S7lgNTQLlokcxoEiE/TPsFRvcjnwAp+hOgjbMVLG
fpxrIBRYgMXGupT6FqhrEtV5JO6YEYMhN19XyJw1dJuchd2l0Xfp2kLXsIXJYFVq
XyW+lYhJg+a5V3jsc2n+EM30PhLXdjJOJGjllQtyKChtD1vwozJ0DsQKaIRyHVdB
b2E2jww66+F0O8LLBCA8WQpKJgb1SLq5XnJLiguw6mi0bcqYHYab5+Kh8dqV49Ds
pWkPZgBNQ7zKOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:06 2025 by rpki-client