Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
File: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft (raw, json)
Hash identifier: javkgH15zrzncfNaO8LB8KfJqdQALTQTkglat9p9QtY=
Subject key identifier: 71:04:42:CC:62:96:2D:C1:A2:6E:CB:64:6E:7D:93:BF:3F:1D:65:15
Authority key identifier: D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
Certificate issuer: /CN=d217978586bff3a6777d55a9a9635841516d43b4
Certificate serial: 01963D2F24AABD17DECFDDB36A3D17DBD1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
Manifest number: 0A85
Signing time: Wed 16 Apr 2025 06:00:21 +0000
Manifest this update: Wed 16 Apr 2025 06:00:21 +0000
Manifest next update: Thu 17 Apr 2025 06:00:21 +0000
Files and hashes: 1: 0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl (hash: xElZMuFdlPN2cEQE/itLCyLQjPuxWVtA6Z6cmj5sv4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:2f:24:aa:bd:17:de:cf:dd:b3:6a:3d:17:db:d1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217978586bff3a6777d55a9a9635841516d43b4
Validity
Not Before: Apr 16 06:00:21 2025 GMT
Not After : Apr 17 06:00:21 2025 GMT
Subject: CN=710442cc62962dc1a26ecb646e7d93bf3f1d6515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4a:1d:11:95:48:78:44:8e:f2:db:da:88:8e:
01:b3:2f:c6:c8:1b:d2:64:32:76:5f:db:df:61:90:
46:d1:5c:cf:0f:ae:a0:e1:32:92:0d:b0:21:1d:9d:
53:c6:4b:5b:23:66:50:60:e5:12:e8:47:7a:df:af:
4f:13:47:79:12:6e:e2:80:32:5c:50:81:79:fc:0c:
ee:38:22:01:63:7c:d5:f2:0f:36:fa:49:56:ec:dd:
29:ef:6d:ef:ff:d6:30:02:96:e7:51:a1:e6:80:4a:
4c:aa:dc:1e:f4:57:80:c6:1b:35:6c:ad:0f:a2:ec:
75:f4:5a:d6:a3:e8:6d:c5:56:91:6b:da:cd:54:a5:
3e:4e:33:bb:97:62:e0:5c:86:67:6d:6f:10:af:d0:
0b:31:69:28:86:64:5b:ee:d5:7b:1f:6d:2a:0f:77:
a1:04:b8:7d:d4:ac:d1:6b:d7:aa:7d:be:88:76:6c:
bd:af:6d:d4:d3:48:a9:dd:95:08:da:67:f1:f0:f2:
29:24:7f:a6:5b:d4:d9:c7:1d:a4:46:36:64:cf:68:
ea:90:dc:8c:ca:98:ca:e7:a2:a8:18:a3:bd:cc:70:
4e:b0:d8:8b:c6:4a:06:04:87:cd:85:89:07:a6:ae:
f8:fc:05:83:67:c2:03:af:06:f0:b5:0f:38:2d:4b:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:04:42:CC:62:96:2D:C1:A2:6E:CB:64:6E:7D:93:BF:3F:1D:65:15
X509v3 Authority Key Identifier:
keyid:D2:17:97:85:86:BF:F3:A6:77:7D:55:A9:A9:63:58:41:51:6D:43:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/790a78-4a2d-4f16-880a-4ce4d3b197d8/1/0heXhYa_86Z3fVWpqWNYQVFtQ7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:a4:ca:2e:60:79:cc:7c:28:47:a4:9b:57:1e:03:7f:50:
ba:9d:8a:a4:90:16:0f:d9:a5:ac:8e:e9:84:82:68:ef:8e:01:
a0:b3:86:4d:b4:79:e2:1a:03:f8:85:bb:b2:fd:08:98:37:f6:
7b:be:85:c9:41:95:47:23:8f:9b:0b:82:c3:bf:0f:b6:50:1b:
ce:f8:1a:0e:ed:02:6a:36:cc:a4:8f:36:96:c9:ec:f2:3e:64:
e3:d4:2e:e0:e4:9a:7a:6a:a7:64:12:4f:d2:c8:73:50:5f:cd:
e2:59:a6:ba:73:c1:2b:67:7b:43:89:05:c1:39:41:e1:b9:3c:
0b:ba:23:76:62:ce:83:c5:1b:68:34:69:b2:2d:2c:ff:4f:df:
62:22:42:61:2c:08:55:03:2f:0f:3d:6d:8b:56:8b:05:e2:66:
56:f6:28:53:df:9f:df:c6:60:8e:7b:77:c4:e3:29:03:48:cb:
4f:84:7a:cb:98:f1:93:b4:5b:a5:75:be:40:9a:53:aa:80:c5:
c6:d2:b9:8b:c3:a6:ba:c4:99:f4:44:18:8c:d8:4a:25:14:8e:
84:a6:99:db:d3:a2:5e:52:85:e5:34:10:e8:9b:5f:1c:fa:31:
8c:0c:8e:20:1a:c5:90:d5:d8:8e:9d:55:4a:fd:db:db:92:8c:
bd:6c:55:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY9LySqvRfez92zaj0X29HrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMTc5Nzg1ODZiZmYzYTY3NzdkNTVhOWE5NjM1ODQxNTE2
ZDQzYjQwHhcNMjUwNDE2MDYwMDIxWhcNMjUwNDE3MDYwMDIxWjAzMTEwLwYDVQQD
Eyg3MTA0NDJjYzYyOTYyZGMxYTI2ZWNiNjQ2ZTdkOTNiZjNmMWQ2NTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EodEZVIeESO8tvaiI4Bsy/GyBvS
ZDJ2X9vfYZBG0VzPD66g4TKSDbAhHZ1TxktbI2ZQYOUS6Ed6369PE0d5Em7igDJc
UIF5/AzuOCIBY3zV8g82+klW7N0p723v/9YwApbnUaHmgEpMqtwe9FeAxhs1bK0P
oux19FrWo+htxVaRa9rNVKU+TjO7l2LgXIZnbW8Qr9ALMWkohmRb7tV7H20qD3eh
BLh91KzRa9eqfb6Idmy9r23U00ip3ZUI2mfx8PIpJH+mW9TZxx2kRjZkz2jqkNyM
ypjK56KoGKO9zHBOsNiLxkoGBIfNhYkHpq74/AWDZ8IDrwbwtQ84LUuLbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEEQsxili3Bom7LZG59k78/HWUVMB8GA1UdIwQY
MBaAFNIXl4WGv/Omd31VqaljWEFRbUO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEt
NGNlNGQzYjE5N2Q4LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy83OTBhNzgtNGEyZC00ZjE2LTg4MGEtNGNlNGQzYjE5N2Q4
LzEvMGhlWGhZYV84NlozZlZXcHFXTllRVkZ0UTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7Wkyi5g
ecx8KEekm1ceA39Qup2KpJAWD9mlrI7phIJo744BoLOGTbR54hoD+IW7sv0ImDf2
e76FyUGVRyOPmwuCw78PtlAbzvgaDu0CajbMpI82lsns8j5k49Qu4OSaemqnZBJP
0shzUF/N4lmmunPBK2d7Q4kFwTlB4bk8C7ojdmLOg8UbaDRpsi0s/0/fYiJCYSwI
VQMvDz1ti1aLBeJmVvYoU9+f38Zgjnt3xOMpA0jLT4R6y5jxk7RbpXW+QJpTqoDF
xtK5i8OmusSZ9EQYjNhKJRSOhKaZ29OiXlKF5TQQ6JtfHPoxjAyOIBrFkNXYjp1V
Sv3b25KMvWxVyw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:27:16 2025 by rpki-client