Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json)
Hash identifier: TC3dYdNCLpR1wOpRi73WaEHLdV2VeXz4cF1MyRM9Yhs=
Subject key identifier: E8:F7:3E:76:FA:84:B6:57:24:5E:30:FC:F8:CC:48:25:FB:EC:F5:B2
Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1
Certificate serial: 01965D5EF334113A5104A3DCC291A8F0BF91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
Manifest number: 0D2C
Signing time: Tue 22 Apr 2025 12:00:25 +0000
Manifest this update: Tue 22 Apr 2025 12:00:25 +0000
Manifest next update: Wed 23 Apr 2025 12:00:25 +0000
Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: GmqsTpG0P+deJZSKSu6wdY2oGza34LZrrhnjyGMv9VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5e:f3:34:11:3a:51:04:a3:dc:c2:91:a8:f0:bf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1
Validity
Not Before: Apr 22 12:00:25 2025 GMT
Not After : Apr 23 12:00:25 2025 GMT
Subject: CN=e8f73e76fa84b657245e30fcf8cc4825fbecf5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:73:ee:7b:19:8d:11:9d:f7:ce:6e:f3:a2:
0d:e9:ee:39:1c:f5:e0:bf:4d:c1:32:a1:b4:c1:fb:
47:e6:7e:cb:d4:d4:dd:6d:30:a3:6e:4c:2c:f8:ca:
19:23:2d:cf:e1:54:2d:9a:18:0e:e1:b6:84:89:37:
5f:e4:51:1c:1a:dc:07:fd:11:c5:db:6a:88:d4:b6:
8f:67:1c:6d:23:ec:2e:af:b2:98:b8:c9:66:c9:1f:
16:72:71:6a:fa:a9:60:93:91:8e:2e:fc:00:2a:55:
19:c4:89:cc:63:25:e3:b5:40:5d:be:8f:d1:75:09:
eb:10:87:7b:b9:c0:e5:f3:4e:90:ae:75:f6:6c:19:
e5:44:17:1d:af:7c:89:72:53:0b:9a:e8:54:1f:e9:
46:2c:b3:04:fd:ee:38:ab:ce:dd:55:b5:36:b0:4d:
10:cd:29:ac:93:00:9f:de:e9:07:2e:0f:2b:2b:be:
97:ba:53:0d:6a:4e:e8:45:2a:ff:d6:85:72:15:ca:
3c:80:96:ea:b1:b8:ef:67:0a:ac:66:d5:81:df:ad:
a2:b7:5d:6d:94:36:79:fa:99:08:85:a0:bf:0f:95:
84:51:87:c3:70:8b:88:1a:95:64:51:ac:bf:74:70:
2a:96:45:cb:42:7e:f9:a5:44:98:17:4d:a9:6d:c8:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:3E:76:FA:84:B6:57:24:5E:30:FC:F8:CC:48:25:FB:EC:F5:B2
X509v3 Authority Key Identifier:
keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0c:f1:c5:15:ca:d7:c4:e3:38:d9:fd:e7:20:30:80:8c:5a:
19:4f:98:5f:6d:c0:d5:8d:ce:1b:56:4f:b8:33:c7:55:d8:f6:
55:1d:8d:b5:c7:39:99:25:7f:d5:f6:4f:89:97:c1:63:11:63:
79:9f:99:e7:46:a8:b7:af:c6:ed:17:b3:5b:2d:bb:ea:30:21:
7e:17:3b:e4:16:0f:de:ce:98:27:e1:d9:c6:c7:f1:bd:f8:e5:
2b:98:d7:3b:60:3f:f5:38:e9:91:6c:31:82:94:52:df:03:40:
27:6f:a4:8d:1a:7c:25:5f:d5:fb:8c:e9:fe:98:44:c6:21:f5:
e3:d7:48:86:63:07:12:a8:0f:fe:00:b2:37:fc:99:41:cd:ea:
4a:77:a7:9b:b2:fc:ae:6e:8f:db:9b:20:1d:84:08:4e:59:49:
34:45:81:07:3f:e8:26:b1:88:1d:4c:df:d3:6d:63:d8:7e:7b:
dc:10:26:43:7f:48:4d:0f:5d:95:bd:53:b1:09:33:df:7a:49:
99:bd:24:04:e7:30:c8:6f:88:46:8a:d2:46:5b:8d:15:93:c7:
49:eb:61:be:d7:65:22:ce:6c:59:4e:5f:d2:fd:6e:fc:b1:3c:
e7:2b:74:49:4e:62:86:ef:46:de:fb:9f:fa:45:ee:d1:09:5b:
c0:66:a9:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdXvM0ETpRBKPcwpGo8L+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0NmI0NGQ3MDczMzI0YWIyODQxNjM2N2RlMDQwZjBlNDYz
MzQ4ZDEwHhcNMjUwNDIyMTIwMDI1WhcNMjUwNDIzMTIwMDI1WjAzMTEwLwYDVQQD
EyhlOGY3M2U3NmZhODRiNjU3MjQ1ZTMwZmNmOGNjNDgyNWZiZWNmNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtxz7nsZjRGd985u86IN6e45HPXg
v03BMqG0wftH5n7L1NTdbTCjbkws+MoZIy3P4VQtmhgO4baEiTdf5FEcGtwH/RHF
22qI1LaPZxxtI+wur7KYuMlmyR8WcnFq+qlgk5GOLvwAKlUZxInMYyXjtUBdvo/R
dQnrEId7ucDl806QrnX2bBnlRBcdr3yJclMLmuhUH+lGLLME/e44q87dVbU2sE0Q
zSmskwCf3ukHLg8rK76XulMNak7oRSr/1oVyFco8gJbqsbjvZwqsZtWB362it11t
lDZ5+pkIhaC/D5WEUYfDcIuIGpVkUay/dHAqlkXLQn75pUSYF02pbcgy7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj3Pnb6hLZXJF4w/PjMSCX77PWyMB8GA1UdIwQY
MBaAFMRrRNcHMySrKEFjZ94EDw5GM0jRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEt
MWYwYWFjMTQ5NWFjLzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEtMWYwYWFjMTQ5NWFj
LzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAzxxRXK
18TjONn95yAwgIxaGU+YX23A1Y3OG1ZPuDPHVdj2VR2Ntcc5mSV/1fZPiZfBYxFj
eZ+Z50aot6/G7RezWy276jAhfhc75BYP3s6YJ+HZxsfxvfjlK5jXO2A/9TjpkWwx
gpRS3wNAJ2+kjRp8JV/V+4zp/phExiH149dIhmMHEqgP/gCyN/yZQc3qSnenm7L8
rm6P25sgHYQITllJNEWBBz/oJrGIHUzf021j2H573BAmQ39ITQ9dlb1TsQkz33pJ
mb0kBOcwyG+IRorSRluNFZPHSethvtdlIs5sWU5f0v1u/LE85yt0SU5ihu9G3vuf
+kXu0QlbwGapYA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:31 2025 by rpki-client