Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: 3F+83s3GCp/dUk6KwhI3wy5jh0gwtkhBGDG4rYmWRsQ=
Subject key identifier: 91:D1:EF:6E:44:0E:7A:A7:EE:EA:D0:6F:7E:A5:8B:FC:9F:85:1C:75
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 01958F983A2E4417C19870C481F8334FEB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 13:01:13 +0000
Manifest this update: Thu 13 Mar 2025 13:01:13 +0000
Manifest next update: Fri 14 Mar 2025 13:01:13 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: T0ADVUmAiSYgdZOTHooEYEMrKcj3p8aeAA39DbU4dnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:3a:2e:44:17:c1:98:70:c4:81:f8:33:4f:eb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Mar 13 13:01:13 2025 GMT
Not After : Mar 14 13:01:13 2025 GMT
Subject: CN=91d1ef6e440e7aa7eeead06f7ea58bfc9f851c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:94:a0:9d:61:c5:27:eb:70:2d:74:fb:cb:
60:e5:53:e7:05:93:2b:d1:08:cf:49:a6:76:d9:0e:
21:a6:ce:48:95:cd:5f:f9:97:7a:db:8c:03:93:64:
04:0e:21:cf:09:13:40:21:59:6b:00:63:0a:a3:7c:
c7:d8:8f:00:bc:96:46:90:8d:78:9a:08:86:2a:09:
7e:78:00:68:98:89:0d:5b:8b:d8:50:6c:c6:0e:7a:
7d:70:71:f7:ec:63:d3:36:63:73:cd:09:21:e4:a9:
97:d7:7a:ac:4c:40:1f:27:00:83:60:df:a0:8b:e7:
bb:95:56:92:5e:0b:bd:2c:e2:a1:7b:bb:38:a9:df:
76:a0:d4:b6:78:d1:09:d7:53:9d:8f:72:f8:e8:72:
87:9d:93:c5:c5:5f:7e:d7:64:7a:04:ef:ed:2a:4f:
be:56:e6:2d:b3:ef:1e:c3:02:c6:31:d4:ac:80:65:
0e:b3:38:24:68:63:2e:72:45:3f:cf:04:a4:82:41:
6c:e7:bb:3d:9e:86:26:3c:b6:25:4c:24:a0:6c:76:
2d:05:e7:9b:18:4d:2c:1d:c4:30:9d:fd:05:a0:6f:
50:e3:56:12:66:f7:86:5e:20:64:b5:8a:a3:ec:fd:
f2:e0:50:61:59:67:f0:72:a9:be:23:e1:a4:c8:f8:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:EF:6E:44:0E:7A:A7:EE:EA:D0:6F:7E:A5:8B:FC:9F:85:1C:75
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a5:47:e9:81:db:d2:0e:ef:bd:f5:d9:a9:b1:ad:fe:f0:16:
4f:39:55:2e:57:8e:b6:a1:82:7f:d9:f7:d0:10:0e:3a:23:eb:
03:35:2d:4c:d7:2c:64:b6:49:17:f0:25:a8:ba:e2:22:11:96:
60:01:d0:e9:f4:df:17:35:38:f0:0b:af:d6:8b:13:03:b8:3f:
db:d2:f8:f5:01:aa:29:e0:11:3d:d8:a5:1a:fc:94:9e:41:76:
0c:eb:d4:4a:1c:27:a2:06:2d:c4:bc:55:68:18:95:bf:fc:f9:
27:36:f7:18:cf:e0:f0:ab:10:e2:8e:f2:1b:e5:9c:2a:5d:bb:
e7:1d:ad:a0:46:ca:18:2f:7c:48:e4:bb:a6:c9:dd:7f:4d:f6:
09:8e:46:9d:1c:d0:ce:22:26:32:13:c0:f4:4e:88:d2:ac:f9:
5e:19:5b:c5:6a:c5:bd:73:f9:c9:04:e2:ed:b1:a1:7b:0b:b9:
a3:95:d4:2e:a9:ba:5a:89:17:75:65:d5:18:ab:2d:92:27:28:
2f:12:3c:40:c7:8d:f7:78:37:ec:51:70:1d:91:b3:0a:44:c0:
59:16:11:61:db:19:58:b6:d6:ca:2e:07:63:b9:5e:a9:5f:5e:
50:9f:6a:53:7d:a6:10:60:7f:b5:98:d6:90:2e:cc:10:11:ec:
45:ba:d6:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmDouRBfBmHDEgfgzT+uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx
YTJjNDkwHhcNMjUwMzEzMTMwMTEzWhcNMjUwMzE0MTMwMTEzWjAzMTEwLwYDVQQD
Eyg5MWQxZWY2ZTQ0MGU3YWE3ZWVlYWQwNmY3ZWE1OGJmYzlmODUxYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2mUoJ1hxSfrcC10+8tg5VPnBZMr
0QjPSaZ22Q4hps5Ilc1f+Zd624wDk2QEDiHPCRNAIVlrAGMKo3zH2I8AvJZGkI14
mgiGKgl+eABomIkNW4vYUGzGDnp9cHH37GPTNmNzzQkh5KmX13qsTEAfJwCDYN+g
i+e7lVaSXgu9LOKhe7s4qd92oNS2eNEJ11Odj3L46HKHnZPFxV9+12R6BO/tKk++
VuYts+8ewwLGMdSsgGUOszgkaGMuckU/zwSkgkFs57s9noYmPLYlTCSgbHYtBeeb
GE0sHcQwnf0FoG9Q41YSZveGXiBktYqj7P3y4FBhWWfwcqm+I+GkyPjLGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHR725EDnqn7urQb36li/yfhRx1MB8GA1UdIwQY
MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt
YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj
LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqVH6YHb
0g7vvfXZqbGt/vAWTzlVLleOtqGCf9n30BAOOiPrAzUtTNcsZLZJF/AlqLriIhGW
YAHQ6fTfFzU48Auv1osTA7g/29L49QGqKeARPdilGvyUnkF2DOvUShwnogYtxLxV
aBiVv/z5Jzb3GM/g8KsQ4o7yG+WcKl275x2toEbKGC98SOS7psndf032CY5GnRzQ
ziImMhPA9E6I0qz5XhlbxWrFvXP5yQTi7bGhewu5o5XULqm6WokXdWXVGKstkico
LxI8QMeN93g37FFwHZGzCkTAWRYRYdsZWLbWyi4HY7leqV9eUJ9qU32mEGB/tZjW
kC7MEBHsRbrWow==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:42:04 2025 by rpki-client