Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: l9wBxirIkofDG4uJXO7443m+mj0/xeTGRPv8CqfUSXA=
Subject key identifier: 85:AE:C2:F9:99:85:35:A1:34:59:DE:BD:49:69:6F:61:4D:FD:28:3F
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 01958B164F2A2235DB1F2D26366A717677AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 04B1
Signing time: Wed 12 Mar 2025 16:00:49 +0000
Manifest this update: Wed 12 Mar 2025 16:00:49 +0000
Manifest next update: Thu 13 Mar 2025 16:00:49 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: V4tnhfvQLAb2qMWHzACQg27Sz3e/e44S4pKbH0JZiDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:16:4f:2a:22:35:db:1f:2d:26:36:6a:71:76:77:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Mar 12 16:00:49 2025 GMT
Not After : Mar 13 16:00:49 2025 GMT
Subject: CN=85aec2f9998535a13459debd49696f614dfd283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:d1:67:95:94:ca:11:34:b3:dc:11:44:98:
0d:90:05:a7:df:50:d9:53:b0:23:9e:5f:91:5f:fb:
71:9f:48:2f:73:59:03:02:64:83:de:61:11:54:c0:
9b:61:dc:00:3f:55:50:1e:9f:d5:79:3a:d4:3f:b6:
41:8d:8e:35:96:41:45:3b:88:ca:9d:23:62:bb:60:
88:8d:c6:83:31:08:63:a9:22:28:a5:82:53:0e:eb:
84:36:1d:ac:aa:95:fe:23:b2:29:dc:cc:e5:e1:eb:
40:89:09:00:43:62:0d:3c:9b:78:e7:64:4b:8f:bc:
18:3d:71:ff:31:d7:fd:fa:40:b1:84:14:64:2c:85:
f7:5c:48:0b:32:d9:c1:55:a3:5e:c4:b2:8b:16:2b:
f0:e9:ff:dd:62:c2:46:b4:2e:b4:5e:3b:5f:ca:f5:
91:71:43:2e:3e:e5:5f:b5:9c:fb:00:8b:7e:d3:0e:
92:62:70:22:71:be:01:39:51:3e:7e:62:a5:83:5c:
b6:b0:c4:7f:1d:16:31:2e:49:68:ca:76:8c:57:87:
95:82:f8:23:0a:8f:dc:72:bb:f5:dc:51:35:ad:ea:
d8:a4:49:96:f6:03:b2:a7:72:f3:47:d1:1e:07:cb:
1c:4e:f1:36:a0:1c:1b:f6:be:be:3e:5d:c7:d9:60:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AE:C2:F9:99:85:35:A1:34:59:DE:BD:49:69:6F:61:4D:FD:28:3F
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:77:11:9d:65:b1:06:db:a0:17:fe:81:c9:a7:e6:2f:4a:ff:
36:a3:b0:f1:e0:ec:79:2d:19:bc:c9:0a:2b:e0:45:2e:c3:98:
15:03:5a:66:cc:70:4a:17:0c:66:63:ac:c0:8d:7d:53:95:fe:
87:12:3b:74:55:84:81:5d:5b:3f:10:3a:d3:ea:03:7d:a9:b7:
cb:ce:96:b3:20:6b:b5:2a:94:47:49:54:78:cd:75:3a:b3:af:
7f:57:c5:d2:17:df:e4:10:88:27:e4:9c:be:a3:af:c3:be:34:
15:16:ec:ee:75:1d:50:c7:f7:47:43:28:27:80:55:ae:30:c0:
d4:2d:29:ac:99:68:e6:b8:41:7a:9f:e7:2e:33:1c:89:8b:05:
39:64:6e:07:42:6f:7d:5d:a7:da:c9:b7:55:99:f8:a8:7d:96:
9c:38:41:8e:d4:4a:f4:36:be:57:a1:af:95:75:e1:52:f4:08:
16:95:84:f1:92:e4:e2:06:2e:34:f7:17:4b:da:31:66:eb:41:
38:63:72:ac:3e:ec:83:6c:24:61:6a:b6:10:0e:77:f9:23:be:
c3:49:36:54:a2:76:40:27:f8:fb:34:f1:6b:65:6a:bb:7f:5b:
c8:03:2d:f2:6c:52:4c:9a:6d:58:7f:c2:50:69:f5:7a:a5:1e:
70:34:b4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFk8qIjXbHy0mNmpxdneqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNGQ2MWY3MGZiYzk4OTgzM2IyZjM4MGY1MmNlZTk0MTFl
NGRiYTkwHhcNMjUwMzEyMTYwMDQ5WhcNMjUwMzEzMTYwMDQ5WjAzMTEwLwYDVQQD
Eyg4NWFlYzJmOTk5ODUzNWExMzQ1OWRlYmQ0OTY5NmY2MTRkZmQyODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGvRZ5WUyhE0s9wRRJgNkAWn31DZ
U7Ajnl+RX/txn0gvc1kDAmSD3mERVMCbYdwAP1VQHp/VeTrUP7ZBjY41lkFFO4jK
nSNiu2CIjcaDMQhjqSIopYJTDuuENh2sqpX+I7Ip3Mzl4etAiQkAQ2INPJt452RL
j7wYPXH/Mdf9+kCxhBRkLIX3XEgLMtnBVaNexLKLFivw6f/dYsJGtC60XjtfyvWR
cUMuPuVftZz7AIt+0w6SYnAicb4BOVE+fmKlg1y2sMR/HRYxLkloynaMV4eVgvgj
Co/ccrv13FE1rerYpEmW9gOyp3LzR9EeB8scTvE2oBwb9r6+Pl3H2WDg2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWuwvmZhTWhNFnevUlpb2FN/Sg/MB8GA1UdIwQY
MBaAFD5NYfcPvJiYM7LzgPUs7pQR5NupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMzRkMmQtM2YyOS00YTZlLTk5Yjkt
ZDUwOTA3MDAwNjA5LzEvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jMzRkMmQtM2YyOS00YTZlLTk5YjktZDUwOTA3MDAwNjA5
LzEvUGsxaDl3LThtSmd6c3ZPQTlTenVsQkhrMjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXcRnWWx
BtugF/6ByafmL0r/NqOw8eDseS0ZvMkKK+BFLsOYFQNaZsxwShcMZmOswI19U5X+
hxI7dFWEgV1bPxA60+oDfam3y86WsyBrtSqUR0lUeM11OrOvf1fF0hff5BCIJ+Sc
vqOvw740FRbs7nUdUMf3R0MoJ4BVrjDA1C0prJlo5rhBep/nLjMciYsFOWRuB0Jv
fV2n2sm3VZn4qH2WnDhBjtRK9Da+V6GvlXXhUvQIFpWE8ZLk4gYuNPcXS9oxZutB
OGNyrD7sg2wkYWq2EA53+SO+w0k2VKJ2QCf4+zTxa2Vqu39byAMt8mxSTJptWH/C
UGn1eqUecDS0DA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:45 2025 by rpki-client