Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
File: 9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft (raw, json)
Hash identifier: ++mAown6erH2kkJo+utjPpC20yZbKqS20tbROU5bgB4=
Subject key identifier: 3F:33:DE:B2:2A:35:5E:6D:6E:71:E2:A9:4B:73:8D:A3:19:AD:00:1D
Authority key identifier: F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
Certificate issuer: /CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
Certificate serial: 01965349E7F0C4461AA6B0AF7074FE5513C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
Manifest number: 111A
Signing time: Sun 20 Apr 2025 13:01:14 +0000
Manifest this update: Sun 20 Apr 2025 13:01:14 +0000
Manifest next update: Mon 21 Apr 2025 13:01:14 +0000
Files and hashes: 1: 9Mc6eveuE8OM0fhZ-3-TnRRXSIc.crl (hash: gvnSdgLyhLrYkQSw9am1+VsBanubKlLNvACC5lg5cMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:e7:f0:c4:46:1a:a6:b0:af:70:74:fe:55:13:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c73a7af7ae13c38cd1f859fb7f939d14574887
Validity
Not Before: Apr 20 13:01:14 2025 GMT
Not After : Apr 21 13:01:14 2025 GMT
Subject: CN=3f33deb22a355e6d6e71e2a94b738da319ad001d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:4a:0d:3f:93:82:d4:56:ed:a0:57:c3:d1:
6e:2d:83:e8:f2:d2:58:66:23:0f:41:43:02:6f:a1:
8f:ce:4f:8f:a4:3f:7c:87:0b:50:9d:ac:06:d3:38:
bf:67:05:4b:83:81:3d:59:52:9a:b2:f7:e1:66:55:
db:dd:96:a3:16:be:c6:49:6b:46:69:46:f4:61:97:
c9:bb:1b:10:2b:84:f8:09:da:9f:86:3c:73:88:4f:
ef:71:42:59:92:7e:05:0c:ca:5f:4c:ef:b8:54:25:
e5:10:3e:93:25:2d:8c:b5:00:55:19:b9:6f:da:8f:
6f:49:14:cc:49:31:3d:41:d3:21:1c:cb:88:8d:eb:
bd:f0:e4:c9:2e:81:c3:8a:f9:79:70:78:4e:7e:9e:
9c:f1:68:99:3d:47:41:4b:d7:90:6b:cf:44:17:a5:
25:d6:22:dc:6b:39:55:77:bf:47:f9:da:95:55:dc:
5c:43:e4:9e:72:e7:f1:3d:a5:d8:21:07:f1:a2:31:
91:3d:25:a2:3b:0a:bc:07:ae:2d:f6:43:44:61:b7:
45:72:27:10:58:43:54:b4:85:51:ad:c6:71:f8:f5:
7d:97:bd:66:ad:93:1d:3a:35:e9:a7:90:35:08:83:
fa:a0:a8:95:e7:de:ea:26:52:d8:bf:2a:9c:0e:e7:
38:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:DE:B2:2A:35:5E:6D:6E:71:E2:A9:4B:73:8D:A3:19:AD:00:1D
X509v3 Authority Key Identifier:
keyid:F4:C7:3A:7A:F7:AE:13:C3:8C:D1:F8:59:FB:7F:93:9D:14:57:48:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/2010de-1ee4-43ae-86ad-8c8523330ff5/1/9Mc6eveuE8OM0fhZ-3-TnRRXSIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2e:77:03:7e:33:3d:56:ae:78:28:f7:c3:0b:82:c5:93:e2:
bb:70:28:99:03:9d:ef:7c:9d:35:a1:a1:54:18:48:43:72:93:
3f:cf:e3:d4:47:c2:52:2f:48:42:59:93:d7:e0:f0:11:39:ca:
51:95:c3:5d:61:2a:b0:00:07:61:ea:e4:2b:66:28:4f:6f:de:
03:b3:58:fc:cd:1b:7e:b6:c3:00:cf:c5:be:48:f4:df:c6:48:
09:05:89:58:4a:47:37:f8:45:7d:58:bc:94:1b:34:aa:2d:12:
1e:69:55:ed:d4:ad:a1:95:a7:b0:b0:fe:ad:c6:36:d3:be:3c:
c1:e4:bf:3a:52:30:04:bd:09:12:4b:b9:25:b1:26:34:ba:fb:
00:f2:f1:07:54:e6:4c:d5:63:73:62:e9:50:86:13:5e:2c:e3:
6d:87:ba:a2:84:6f:e3:05:39:b2:69:4b:00:16:8f:de:7d:f3:
2d:89:cf:6a:35:b3:0b:a3:bb:46:36:11:2f:b6:96:71:0b:37:
6b:d6:f9:d4:68:d9:cf:c5:c6:87:0c:50:75:ca:e0:1c:fb:b9:
03:e7:6e:3d:8e:51:4c:fb:b9:5e:ed:c7:5b:06:0f:f4:b7:25:
c5:2f:d8:8a:af:30:65:5d:61:11:a1:39:3f:71:86:e9:af:be:
aa:78:e6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSefwxEYaprCvcHT+VRPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzczYTdhZjdhZTEzYzM4Y2QxZjg1OWZiN2Y5MzlkMTQ1
NzQ4ODcwHhcNMjUwNDIwMTMwMTE0WhcNMjUwNDIxMTMwMTE0WjAzMTEwLwYDVQQD
EygzZjMzZGViMjJhMzU1ZTZkNmU3MWUyYTk0YjczOGRhMzE5YWQwMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BRKDT+TgtRW7aBXw9FuLYPo8tJY
ZiMPQUMCb6GPzk+PpD98hwtQnawG0zi/ZwVLg4E9WVKasvfhZlXb3ZajFr7GSWtG
aUb0YZfJuxsQK4T4CdqfhjxziE/vcUJZkn4FDMpfTO+4VCXlED6TJS2MtQBVGblv
2o9vSRTMSTE9QdMhHMuIjeu98OTJLoHDivl5cHhOfp6c8WiZPUdBS9eQa89EF6Ul
1iLcazlVd79H+dqVVdxcQ+SecufxPaXYIQfxojGRPSWiOwq8B64t9kNEYbdFcicQ
WENUtIVRrcZx+PV9l71mrZMdOjXpp5A1CIP6oKiV597qJlLYvyqcDuc4iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8z3rIqNV5tbnHiqUtzjaMZrQAdMB8GA1UdIwQY
MBaAFPTHOnr3rhPDjNH4Wft/k50UV0iHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1jNmV2ZXVFOE9NMGZoWi0zLVRuUlJYU0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMDEwZGUtMWVlNC00M2FlLTg2YWQt
OGM4NTIzMzMwZmY1LzEvOU1jNmV2ZXVFOE9NMGZoWi0zLVRuUlJYU0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMDEwZGUtMWVlNC00M2FlLTg2YWQtOGM4NTIzMzMwZmY1
LzEvOU1jNmV2ZXVFOE9NMGZoWi0zLVRuUlJYU0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC53A34z
PVaueCj3wwuCxZPiu3AomQOd73ydNaGhVBhIQ3KTP8/j1EfCUi9IQlmT1+DwETnK
UZXDXWEqsAAHYerkK2YoT2/eA7NY/M0bfrbDAM/Fvkj038ZICQWJWEpHN/hFfVi8
lBs0qi0SHmlV7dStoZWnsLD+rcY20748weS/OlIwBL0JEku5JbEmNLr7APLxB1Tm
TNVjc2LpUIYTXizjbYe6ooRv4wU5smlLABaP3n3zLYnPajWzC6O7RjYRL7aWcQs3
a9b51GjZz8XGhwxQdcrgHPu5A+duPY5RTPu5Xu3HWwYP9LclxS/Yiq8wZV1hEaE5
P3GG6a++qnjmzA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:22:37 2025 by rpki-client