Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: awnZEW+F5HznlPXnlNQlS9zehuo4sHrFtx0obSh6iXw=
Subject key identifier: C9:E0:B6:5B:2E:04:22:31:53:7C:6F:2C:E9:D8:8D:8C:25:1D:C5:E3
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 0196519184542CA5A7777C7EB4A5FBD88F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 14F7
Signing time: Sun 20 Apr 2025 05:00:13 +0000
Manifest this update: Sun 20 Apr 2025 05:00:13 +0000
Manifest next update: Mon 21 Apr 2025 05:00:13 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: SWUYCJ8rSvtTIFQdB5lMP8cyeQ5RSNVcOYenksSbWYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:84:54:2c:a5:a7:77:7c:7e:b4:a5:fb:d8:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Apr 20 05:00:13 2025 GMT
Not After : Apr 21 05:00:13 2025 GMT
Subject: CN=c9e0b65b2e042231537c6f2ce9d88d8c251dc5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:f7:7b:dd:54:f5:8d:74:a0:f6:23:3e:65:
7a:88:65:06:1e:30:f0:f1:f2:32:04:e5:90:84:b4:
51:94:26:79:f3:24:27:82:0f:ac:f9:8d:57:64:1f:
9d:38:68:5f:ca:4c:68:98:3d:f1:8b:81:b9:d0:3a:
6d:bb:08:d0:b9:42:45:86:71:ca:33:cd:dc:cd:37:
6a:e8:d1:ea:2e:d3:cb:f1:b3:8f:e6:3e:71:23:34:
c6:95:3b:ef:2a:4c:0d:2a:9e:32:76:0f:5b:8f:a7:
0c:32:b3:be:8c:0b:89:34:56:89:37:ef:0b:fb:88:
2a:bf:60:e6:25:45:d8:70:9f:ba:f8:fa:a0:48:43:
d3:53:49:7f:4d:ef:ea:5c:49:41:9d:42:74:89:7a:
ab:e1:83:98:75:2a:2e:af:b6:27:fe:d2:ba:60:ea:
87:93:3f:f7:98:a5:8f:2e:16:3e:f7:72:97:df:7c:
49:37:fc:ca:a2:34:da:9e:2e:bb:50:cd:16:33:dd:
6f:5b:bb:a2:cf:af:90:fe:97:c0:e5:53:44:04:a3:
e3:9f:d8:12:a8:ef:f8:12:b4:91:7c:dd:0b:eb:04:
bf:43:9c:a1:9a:14:65:46:74:e0:cf:85:f5:6b:4b:
93:bc:f7:55:2e:39:2b:e5:38:4f:57:82:8f:84:2e:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E0:B6:5B:2E:04:22:31:53:7C:6F:2C:E9:D8:8D:8C:25:1D:C5:E3
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:69:5d:65:e5:3b:ed:68:3d:64:86:fc:e7:8f:b6:65:d1:34:
e2:b7:e2:3d:79:04:5d:1e:f6:b3:e1:d6:a4:ea:6d:a7:d2:1b:
75:73:08:f5:4e:23:22:3a:be:7b:05:12:c8:25:c2:71:ff:fc:
fd:8b:8b:f8:00:26:49:1b:84:74:30:6d:72:10:06:6e:4e:b8:
38:3e:a3:ae:d5:bc:12:83:f9:8c:53:1f:ae:92:ee:5e:0d:ed:
d9:73:00:c5:b4:e6:3d:43:4e:bc:97:13:ad:94:d0:00:ee:77:
c5:05:5d:e7:59:85:64:d6:3d:6c:ae:cc:35:a0:02:8b:12:0e:
ac:49:6f:a6:22:ce:d5:16:b9:98:3b:a3:c1:c8:18:3a:eb:76:
52:94:be:f4:3e:a0:68:5e:9c:f6:0f:18:6b:b5:a7:0a:44:dc:
f8:e6:aa:13:ec:4f:52:33:b1:ee:81:61:f9:c0:17:02:1b:f6:
e4:ad:73:39:8e:46:fa:aa:7a:2d:57:4d:f8:d1:05:c7:2e:c5:
d8:fc:8e:39:06:1a:5a:d9:df:40:4a:52:b2:ae:53:1d:6a:ca:
8b:ba:07:b4:86:6f:31:2d:b7:fc:de:ab:0f:34:8c:c7:95:3f:
70:e6:d4:b5:17:4c:75:b3:30:49:e9:4e:04:8d:c9:10:7f:9d:
31:64:60:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkYRULKWnd3x+tKX72I8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi
OGQzZmUwHhcNMjUwNDIwMDUwMDEzWhcNMjUwNDIxMDUwMDEzWjAzMTEwLwYDVQQD
EyhjOWUwYjY1YjJlMDQyMjMxNTM3YzZmMmNlOWQ4OGQ4YzI1MWRjNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zn3e91U9Y10oPYjPmV6iGUGHjDw
8fIyBOWQhLRRlCZ58yQngg+s+Y1XZB+dOGhfykxomD3xi4G50DptuwjQuUJFhnHK
M83czTdq6NHqLtPL8bOP5j5xIzTGlTvvKkwNKp4ydg9bj6cMMrO+jAuJNFaJN+8L
+4gqv2DmJUXYcJ+6+PqgSEPTU0l/Te/qXElBnUJ0iXqr4YOYdSour7Yn/tK6YOqH
kz/3mKWPLhY+93KX33xJN/zKojTani67UM0WM91vW7uiz6+Q/pfA5VNEBKPjn9gS
qO/4ErSRfN0L6wS/Q5yhmhRlRnTgz4X1a0uTvPdVLjkr5ThPV4KPhC5WyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMngtlsuBCIxU3xvLOnYjYwlHcXjMB8GA1UdIwQY
MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt
MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm
LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxmldZeU7
7Wg9ZIb854+2ZdE04rfiPXkEXR72s+HWpOptp9IbdXMI9U4jIjq+ewUSyCXCcf/8
/YuL+AAmSRuEdDBtchAGbk64OD6jrtW8EoP5jFMfrpLuXg3t2XMAxbTmPUNOvJcT
rZTQAO53xQVd51mFZNY9bK7MNaACixIOrElvpiLO1Ra5mDujwcgYOut2UpS+9D6g
aF6c9g8Ya7WnCkTc+OaqE+xPUjOx7oFh+cAXAhv25K1zOY5G+qp6LVdN+NEFxy7F
2PyOOQYaWtnfQEpSsq5THWrKi7oHtIZvMS23/N6rDzSMx5U/cObUtRdMdbMwSelO
BI3JEH+dMWRgNg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:14 2025 by rpki-client