Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: ryJX8Vz1q6Vk6Qd8mTa0Last7gJnNK2SxbRg200A/Pg=
Subject key identifier: 2B:71:55:AE:24:21:1B:C1:1F:2E:47:84:F0:2E:DB:09:09:FC:AF:F8
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 01963087F5DA390C9B5586279E71DEFA7EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 0DBE
Signing time: Sun 13 Apr 2025 19:02:18 +0000
Manifest this update: Sun 13 Apr 2025 19:02:18 +0000
Manifest next update: Mon 14 Apr 2025 19:02:18 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: wRBNpfg4ox6rkCSqOjHzXsk4whrDnl4CDvwH4UknVSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:87:f5:da:39:0c:9b:55:86:27:9e:71:de:fa:7e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Apr 13 19:02:18 2025 GMT
Not After : Apr 14 19:02:18 2025 GMT
Subject: CN=2b7155ae24211bc11f2e4784f02edb0909fcaff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f6:5f:72:64:0d:43:59:46:a9:a0:71:fd:18:
98:fa:7c:36:41:fe:f9:3d:1a:7e:ba:00:d1:5a:b6:
06:90:aa:08:b7:58:1b:0f:23:16:7d:be:a3:e9:66:
41:fb:07:d8:2b:10:6d:d7:08:e4:ce:6c:82:4f:03:
c1:78:e9:1a:44:f2:43:bd:3f:99:e3:f5:16:ea:09:
f5:0a:fd:af:38:f4:c4:a4:72:f8:7f:1c:3d:88:53:
0d:e6:01:eb:83:39:56:d0:8e:0f:32:ad:65:c3:aa:
3f:72:24:00:f1:4a:6e:4f:3e:28:04:f1:b8:f2:0d:
af:31:2a:99:79:64:4d:06:78:ad:d2:78:1b:03:9f:
63:01:fd:a6:88:36:9f:18:8b:37:4d:a6:45:78:10:
69:a3:86:79:fd:3e:6a:8e:c6:c4:26:32:0d:e2:6f:
4b:28:52:62:1b:b8:92:71:35:7d:5e:c9:d7:52:8a:
73:4b:e4:67:71:25:c6:4f:98:16:11:b3:06:ed:4b:
1e:5e:ec:75:08:f0:d5:9b:42:9e:e7:43:6b:5e:0a:
80:e8:a8:04:16:b7:13:a7:8d:0a:a3:c2:ba:94:6b:
96:63:4b:b9:f3:a7:72:d3:ef:10:1b:02:4f:b0:f3:
94:58:47:60:b6:48:7b:52:b4:f4:cc:77:84:72:4f:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:55:AE:24:21:1B:C1:1F:2E:47:84:F0:2E:DB:09:09:FC:AF:F8
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:87:a9:54:5a:a4:5c:f1:07:df:98:3a:6c:86:96:a3:59:
3f:7d:b3:2a:b7:11:ac:49:3c:d6:0c:5c:2a:64:9c:9d:72:a2:
a5:29:97:e4:9f:60:67:7f:20:90:d8:83:86:60:f4:47:b5:37:
c9:c9:8f:42:5c:57:57:57:1a:14:e0:29:d4:d0:41:d4:aa:b7:
31:83:cf:94:63:e5:2e:c8:97:8d:4a:4e:39:8c:90:49:26:d7:
b9:b6:2c:8a:7d:b8:f6:9c:26:75:c9:fb:17:9e:f8:d0:1d:69:
d9:27:b5:fa:0a:f2:07:f6:24:61:bd:62:87:6d:74:58:89:e3:
ce:3f:d5:d4:87:2b:35:c7:32:4c:e8:59:f4:c1:48:51:2b:03:
68:86:e2:e5:b6:42:9b:a6:ca:66:0b:96:73:c1:85:fb:d3:77:
53:86:e7:af:e5:39:da:0b:13:d1:12:ab:01:f3:25:b7:e7:f4:
a4:c8:30:e5:6e:a6:05:97:2c:72:f7:b8:79:5c:d6:6d:95:c1:
bf:36:37:ab:6b:44:f8:a8:ca:6d:50:d1:85:b6:94:6d:a7:3b:
33:27:b4:9b:b8:f1:9c:a8:88:4a:98:89:e1:4a:a5:3e:5f:c1:
b5:1e:93:e9:c8:1b:c0:22:82:38:ec:34:93:d7:45:a1:30:5b:
2d:f2:1e:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYwh/XaOQybVYYnnnHe+n6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNDI4MzBlZWVkMjhiMDRiY2RkMDNmYTNmZGE0OGM1NDg1
YWZjZmUwHhcNMjUwNDEzMTkwMjE4WhcNMjUwNDE0MTkwMjE4WjAzMTEwLwYDVQQD
EygyYjcxNTVhZTI0MjExYmMxMWYyZTQ3ODRmMDJlZGIwOTA5ZmNhZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvZfcmQNQ1lGqaBx/RiY+nw2Qf75
PRp+ugDRWrYGkKoIt1gbDyMWfb6j6WZB+wfYKxBt1wjkzmyCTwPBeOkaRPJDvT+Z
4/UW6gn1Cv2vOPTEpHL4fxw9iFMN5gHrgzlW0I4PMq1lw6o/ciQA8UpuTz4oBPG4
8g2vMSqZeWRNBnit0ngbA59jAf2miDafGIs3TaZFeBBpo4Z5/T5qjsbEJjIN4m9L
KFJiG7iScTV9XsnXUopzS+RncSXGT5gWEbMG7UseXux1CPDVm0Ke50NrXgqA6KgE
FrcTp40Ko8K6lGuWY0u586dy0+8QGwJPsPOUWEdgtkh7UrT0zHeEck+HdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtxVa4kIRvBHy5HhPAu2wkJ/K/4MB8GA1UdIwQY
MBaAFHFCgw7u0osEvN0D+j/aSMVIWvz+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUt
ZWIxMzNhMGFmNWZjLzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hZmQxMTgtZThhNS00ZWE0LTk4OTUtZWIxMzNhMGFmNWZj
LzEvY1VLRER1N1Npd1M4M1FQNlA5cEl4VWhhX1A0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPAeHqVRa
pFzxB9+YOmyGlqNZP32zKrcRrEk81gxcKmScnXKipSmX5J9gZ38gkNiDhmD0R7U3
ycmPQlxXV1caFOAp1NBB1Kq3MYPPlGPlLsiXjUpOOYyQSSbXubYsin249pwmdcn7
F5740B1p2Se1+gryB/YkYb1ih210WInjzj/V1IcrNccyTOhZ9MFIUSsDaIbi5bZC
m6bKZguWc8GF+9N3U4bnr+U52gsT0RKrAfMlt+f0pMgw5W6mBZcscve4eVzWbZXB
vzY3q2tE+KjKbVDRhbaUbac7Mye0m7jxnKiISpiJ4UqlPl/BtR6T6cgbwCKCOOw0
k9dFoTBbLfIesA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 20:52:42 2025 by rpki-client