Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
File: R8VBw62lOmIHxADI-fOkhurrubA.mft (raw, json)
Hash identifier: 0j33Xi6wqHrDiixo37VopMQUnGkXzR8e//TeiWuZzV4=
Subject key identifier: 5D:90:DC:92:8D:CC:A1:91:89:76:5C:40:89:85:BF:04:21:0B:E1:27
Authority key identifier: 47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
Certificate issuer: /CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Certificate serial: 01963A9C13D5886CEC0AF5919AB7CD8A37E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
Manifest number: 018A
Signing time: Tue 15 Apr 2025 18:00:29 +0000
Manifest this update: Tue 15 Apr 2025 18:00:29 +0000
Manifest next update: Wed 16 Apr 2025 18:00:29 +0000
Files and hashes: 1: R8VBw62lOmIHxADI-fOkhurrubA.crl (hash: yedNVIPGdVQXxUanme14nLMuVr9sDZTdgyghl9DeQuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:9c:13:d5:88:6c:ec:0a:f5:91:9a:b7:cd:8a:37:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c541c3ada53a6207c400c8f9f3a486eaebb9b0
Validity
Not Before: Apr 15 18:00:29 2025 GMT
Not After : Apr 16 18:00:29 2025 GMT
Subject: CN=5d90dc928dcca19189765c408985bf04210be127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:e4:c4:21:8b:dc:da:74:f4:e3:27:8c:a0:
9b:a9:67:29:ac:a6:34:1a:82:1f:bd:5c:95:51:26:
22:18:9c:82:88:74:45:a8:66:13:cf:70:66:6a:bf:
2c:e1:18:86:fa:ae:8c:11:41:3d:12:d3:31:9d:51:
df:f3:5a:57:f4:b5:9b:b0:9c:71:89:71:6d:cb:f9:
1f:03:a9:d5:46:f7:b1:51:04:e3:c3:12:96:c1:aa:
18:49:b9:7a:bc:85:e8:35:1f:09:e9:ed:ae:f9:c5:
63:3c:ac:8a:7b:2d:1c:2b:62:45:7c:04:19:15:2a:
11:52:99:65:01:fc:65:72:0a:12:5f:d6:0e:7e:8c:
5f:e1:ba:10:46:ca:8f:9a:f0:5a:f2:d9:9a:ba:87:
de:59:dd:75:0b:23:2a:86:79:9e:b8:04:37:40:df:
a6:ef:88:f0:ef:00:4f:5d:e2:b6:52:12:18:9f:b8:
a0:13:26:11:e1:96:e3:89:53:40:de:2a:d0:85:62:
ee:79:e0:69:1e:89:3b:b1:d3:57:72:34:96:a0:85:
36:4c:34:be:e1:bd:3b:e0:6f:cf:12:6d:01:7a:c1:
54:10:c1:79:e5:70:76:25:c3:5b:fb:4c:7f:75:0e:
a5:65:0e:51:e0:e0:f3:10:c5:a1:4b:a7:d8:e8:66:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:90:DC:92:8D:CC:A1:91:89:76:5C:40:89:85:BF:04:21:0B:E1:27
X509v3 Authority Key Identifier:
keyid:47:C5:41:C3:AD:A5:3A:62:07:C4:00:C8:F9:F3:A4:86:EA:EB:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8VBw62lOmIHxADI-fOkhurrubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/262738-965b-4189-8474-d844f623a8b2/1/R8VBw62lOmIHxADI-fOkhurrubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a3:33:f2:f5:a6:a6:84:ac:88:d7:f8:9c:2c:e9:a4:db:1b:
dc:dc:86:9a:bc:64:c2:25:cb:53:52:57:96:a0:28:fe:c1:d9:
52:2c:22:15:f7:e4:31:34:63:fd:17:3f:6e:11:c0:82:11:57:
1c:7b:39:d9:09:91:0b:dc:c4:27:b9:50:57:50:40:ec:d1:2e:
d0:e1:75:90:45:a1:fa:c0:8e:52:2e:07:3a:0d:33:f5:69:db:
69:9a:b0:db:01:fa:f5:cf:38:de:08:ac:ab:ea:57:24:41:c1:
00:8b:a0:3b:16:1e:52:fc:5b:22:ef:98:f8:c3:4e:0d:27:22:
b4:f4:8a:e2:a7:cd:ac:59:18:d9:42:6a:19:c2:84:b6:02:0d:
9e:41:27:75:18:b0:51:a0:b7:01:68:71:3b:f8:95:a0:dc:74:
9a:f4:e5:df:aa:e2:29:1f:49:8d:07:38:32:a8:d3:cd:71:ba:
ba:da:f4:65:b6:13:55:3f:70:d8:50:50:44:cd:3b:a5:b1:7a:
06:ee:10:a7:60:c4:62:73:50:da:e6:1c:34:0d:c0:35:70:ff:
3a:ef:3b:9b:aa:8b:84:2e:22:f6:fe:35:16:f0:2e:a2:c3:3d:
a8:2c:10:0a:f7:4a:7c:fb:bc:4d:83:1f:d0:e3:f8:ac:9a:70:
ec:79:f9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY6nBPViGzsCvWRmrfNijfhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzU0MWMzYWRhNTNhNjIwN2M0MDBjOGY5ZjNhNDg2ZWFl
YmI5YjAwHhcNMjUwNDE1MTgwMDI5WhcNMjUwNDE2MTgwMDI5WjAzMTEwLwYDVQQD
Eyg1ZDkwZGM5MjhkY2NhMTkxODk3NjVjNDA4OTg1YmYwNDIxMGJlMTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy93kxCGL3Np09OMnjKCbqWcprKY0
GoIfvVyVUSYiGJyCiHRFqGYTz3Bmar8s4RiG+q6MEUE9EtMxnVHf81pX9LWbsJxx
iXFty/kfA6nVRvexUQTjwxKWwaoYSbl6vIXoNR8J6e2u+cVjPKyKey0cK2JFfAQZ
FSoRUpllAfxlcgoSX9YOfoxf4boQRsqPmvBa8tmauofeWd11CyMqhnmeuAQ3QN+m
74jw7wBPXeK2UhIYn7igEyYR4ZbjiVNA3irQhWLueeBpHok7sdNXcjSWoIU2TDS+
4b074G/PEm0BesFUEMF55XB2JcNb+0x/dQ6lZQ5R4ODzEMWhS6fY6GbatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2Q3JKNzKGRiXZcQImFvwQhC+EnMB8GA1UdIwQY
MBaAFEfFQcOtpTpiB8QAyPnzpIbq67mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQt
ZDg0NGY2MjNhOGIyLzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yNjI3MzgtOTY1Yi00MTg5LTg0NzQtZDg0NGY2MjNhOGIy
LzEvUjhWQnc2MmxPbUlIeEFESS1mT2todXJydWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6Mz8vWm
poSsiNf4nCzppNsb3NyGmrxkwiXLU1JXlqAo/sHZUiwiFffkMTRj/Rc/bhHAghFX
HHs52QmRC9zEJ7lQV1BA7NEu0OF1kEWh+sCOUi4HOg0z9WnbaZqw2wH69c843gis
q+pXJEHBAIugOxYeUvxbIu+Y+MNODScitPSK4qfNrFkY2UJqGcKEtgINnkEndRiw
UaC3AWhxO/iVoNx0mvTl36riKR9JjQc4MqjTzXG6utr0ZbYTVT9w2FBQRM07pbF6
Bu4Qp2DEYnNQ2uYcNA3ANXD/Ou87m6qLhC4i9v41FvAuosM9qCwQCvdKfPu8TYMf
0OP4rJpw7Hn5cg==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:55:48 2025 by rpki-client