Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
File: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft (raw, json)
Hash identifier: OBbXpITL4/FwyaIAUCPKx28V9D7sjfsK0fRqdKNdu30=
Subject key identifier: B4:E0:8C:70:D5:C8:2A:AF:F3:69:BC:3D:15:16:41:AC:35:89:AC:1A
Authority key identifier: D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
Certificate issuer: /CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Certificate serial: 019659F07544D4FBB74EAE137DB3A2DB86CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 20:00:52 +0000
Manifest this update: Mon 21 Apr 2025 20:00:52 +0000
Manifest next update: Tue 22 Apr 2025 20:00:52 +0000
Files and hashes: 1: 0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl (hash: AtEh4bW0V24DzIR36cpcfXN8+1R3HBLZ12cyx98lrVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:75:44:d4:fb:b7:4e:ae:13:7d:b3:a2:db:86:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b57f59782f941b5d2eb3d4286d5911b179e006
Validity
Not Before: Apr 21 20:00:52 2025 GMT
Not After : Apr 22 20:00:52 2025 GMT
Subject: CN=b4e08c70d5c82aaff369bc3d151641ac3589ac1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:dd:96:04:2d:c9:78:6a:e8:06:8e:54:4c:2a:
54:ce:ee:ab:68:84:42:49:ae:a8:5f:3f:0e:8f:bc:
37:bb:e2:9b:d6:51:bc:99:d4:53:bf:cf:fd:8e:11:
ab:00:d0:d4:53:d5:c7:86:3f:98:b3:df:62:3c:58:
22:27:0c:46:9b:a1:0f:a0:d1:f0:9b:41:03:26:66:
e4:86:2a:fb:39:bd:32:13:34:da:8f:8e:ce:6f:08:
3c:e6:a1:e0:85:44:64:8c:cc:73:c4:e6:57:44:4a:
20:fe:00:b0:a5:80:88:be:11:dd:41:7e:9c:bf:87:
15:ca:dd:62:81:d3:49:40:68:9a:f8:57:0a:0f:1c:
1e:0c:41:f8:3f:ef:7f:9e:a1:ca:1c:30:e2:35:4c:
7d:2b:6c:67:e9:24:65:ee:eb:d7:43:c4:d8:67:94:
1d:fa:5c:27:69:85:23:23:ea:e2:3f:df:33:20:72:
02:b7:15:df:72:57:b3:ef:75:e5:68:6a:e7:d6:ef:
89:95:9a:e9:7f:6f:3a:df:01:e1:75:2d:38:53:0c:
88:36:99:d1:7b:1a:1a:8a:8c:2d:e0:76:a9:84:67:
fe:8a:b6:29:77:c7:1e:d7:f6:e7:a2:97:6c:f5:dc:
6b:ab:60:3a:29:7e:04:12:30:aa:2e:51:2a:b0:ae:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E0:8C:70:D5:C8:2A:AF:F3:69:BC:3D:15:16:41:AC:35:89:AC:1A
X509v3 Authority Key Identifier:
keyid:D2:B5:7F:59:78:2F:94:1B:5D:2E:B3:D4:28:6D:59:11:B1:79:E0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rV_WXgvlBtdLrPUKG1ZEbF54AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/855e35-87cc-448e-b7b7-07cb22bf424d/1/0rV_WXgvlBtdLrPUKG1ZEbF54AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:da:1e:3f:79:6e:5a:70:ed:65:20:d5:5f:91:b3:93:b9:00:
fc:15:cc:37:6f:ab:22:ce:82:d6:e8:d6:b1:1c:71:d4:cb:ec:
32:da:5c:83:64:66:7f:4e:9e:29:b1:a7:26:03:3d:46:1c:70:
a7:f8:65:69:1c:c7:00:3e:cd:fb:e4:2a:12:e7:a3:ee:81:06:
c9:68:25:93:c5:c9:e7:4b:75:c8:fc:71:b0:83:06:c1:39:ad:
2a:4f:f3:ef:7b:a6:32:b6:23:d0:ce:16:e7:73:75:85:14:ed:
9d:c0:22:f4:35:8a:c0:9b:ed:01:a5:5e:97:43:39:63:b1:16:
60:91:c7:71:51:37:c0:5b:19:0c:25:6f:98:80:20:40:b5:a6:
05:8e:01:92:84:25:30:8f:93:7c:3b:88:0e:f1:28:44:37:a0:
98:58:bf:3d:2a:f2:50:29:a8:b9:7e:af:d7:80:80:f4:e4:9b:
62:d9:24:46:50:a3:c3:7d:81:30:b1:5a:63:b0:19:5e:ac:08:
71:b9:28:8c:12:7c:fc:a9:d6:e8:a1:73:73:38:89:43:e0:fc:
d5:fb:ff:82:47:72:57:d3:4d:4c:a8:95:9c:68:8d:19:5e:e5:
a3:8a:34:96:9b:80:2f:c2:63:99:da:61:f7:cb:f5:bd:4a:ed:
ef:8d:7c:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZ8HVE1Pu3Tq4TfbOi24bLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYjU3ZjU5NzgyZjk0MWI1ZDJlYjNkNDI4NmQ1OTExYjE3
OWUwMDYwHhcNMjUwNDIxMjAwMDUyWhcNMjUwNDIyMjAwMDUyWjAzMTEwLwYDVQQD
EyhiNGUwOGM3MGQ1YzgyYWFmZjM2OWJjM2QxNTE2NDFhYzM1ODlhYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt2WBC3JeGroBo5UTCpUzu6raIRC
Sa6oXz8Oj7w3u+Kb1lG8mdRTv8/9jhGrANDUU9XHhj+Ys99iPFgiJwxGm6EPoNHw
m0EDJmbkhir7Ob0yEzTaj47Obwg85qHghURkjMxzxOZXREog/gCwpYCIvhHdQX6c
v4cVyt1igdNJQGia+FcKDxweDEH4P+9/nqHKHDDiNUx9K2xn6SRl7uvXQ8TYZ5Qd
+lwnaYUjI+riP98zIHICtxXfclez73XlaGrn1u+JlZrpf2863wHhdS04UwyINpnR
exoaiowt4HaphGf+irYpd8ce1/bnopds9dxrq2A6KX4EEjCqLlEqsK7fvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTgjHDVyCqv82m8PRUWQaw1iawaMB8GA1UdIwQY
MBaAFNK1f1l4L5QbXS6z1ChtWRGxeeAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3Yjct
MDdjYjIyYmY0MjRkLzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NTVlMzUtODdjYy00NDhlLWI3YjctMDdjYjIyYmY0MjRk
LzEvMHJWX1dYZ3ZsQnRkTHJQVUtHMVpFYkY1NEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtoeP3lu
WnDtZSDVX5Gzk7kA/BXMN2+rIs6C1ujWsRxx1MvsMtpcg2Rmf06eKbGnJgM9Rhxw
p/hlaRzHAD7N++QqEuej7oEGyWglk8XJ50t1yPxxsIMGwTmtKk/z73umMrYj0M4W
53N1hRTtncAi9DWKwJvtAaVel0M5Y7EWYJHHcVE3wFsZDCVvmIAgQLWmBY4BkoQl
MI+TfDuIDvEoRDegmFi/PSryUCmouX6v14CA9OSbYtkkRlCjw32BMLFaY7AZXqwI
cbkojBJ8/KnW6KFzcziJQ+D81fv/gkdyV9NNTKiVnGiNGV7lo4o0lpuAL8Jjmdph
98v1vUrt74189Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:35 2025 by rpki-client