Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: NiWhOWD4d6xhDdB83jXPh2cFg+FhZSonLSO/Bvst/88=
Subject key identifier: 46:DF:2E:CF:22:28:8A:A3:00:69:8D:5E:64:FF:F2:4D:9B:4E:C1:4E
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 019652A4A16B79AFBC2BC14ABF5F9C569171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: 2E
Signing time: Sun 20 Apr 2025 10:00:42 +0000
Manifest this update: Sun 20 Apr 2025 10:00:42 +0000
Manifest next update: Mon 21 Apr 2025 10:00:42 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: Li3hQ/+dkjawM2nz95MxdsrhECcWSVzPlo/CEzKvxgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a1:6b:79:af:bc:2b:c1:4a:bf:5f:9c:56:91:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Apr 20 10:00:42 2025 GMT
Not After : Apr 21 10:00:42 2025 GMT
Subject: CN=46df2ecf22288aa300698d5e64fff24d9b4ec14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:e0:4b:2a:ff:0e:2b:16:da:3e:26:56:e8:
53:45:15:e0:69:60:cb:d5:a9:eb:46:d4:7e:83:bc:
8c:a7:76:03:2f:b5:6e:13:a4:07:a3:86:05:52:8e:
f4:3b:c7:3c:30:98:2e:3e:ec:45:8d:ae:21:2a:9d:
2e:99:53:b9:4f:d6:1d:f0:6a:5d:08:97:ca:2b:87:
96:b5:9b:b6:c1:00:e2:85:90:c4:98:d0:87:f3:a3:
fa:43:6d:fd:f4:4e:d4:e6:53:10:db:91:20:04:a6:
69:fd:b4:59:93:bb:dc:e6:92:87:5f:dc:ee:d6:8f:
65:3a:02:6e:0c:94:55:2d:32:58:c5:18:98:fa:76:
72:22:a2:44:d7:52:1c:e6:87:e7:9f:20:04:f8:3f:
a0:64:8a:56:ea:54:c3:a2:20:a7:dd:65:d9:2f:71:
0d:97:c8:36:94:57:d4:d5:1e:f2:64:e4:f7:01:fb:
14:8d:8b:06:8b:70:62:1d:1e:58:15:e4:7c:c3:98:
75:30:70:03:dd:8e:11:f1:db:35:46:ee:b7:f7:f4:
eb:91:55:d8:4e:50:95:d5:34:2b:a4:44:cb:fd:83:
56:14:34:37:26:1c:31:0c:82:fb:ac:c6:98:1c:ed:
ee:30:8d:85:58:3e:49:14:da:ac:65:a5:4f:12:3a:
d1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:2E:CF:22:28:8A:A3:00:69:8D:5E:64:FF:F2:4D:9B:4E:C1:4E
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c3:7c:80:b5:1b:77:fa:0a:8a:44:46:84:53:d4:fd:b8:58:
7c:bb:be:f6:83:57:32:1b:c2:87:20:a0:86:63:02:c6:bb:18:
a5:07:7b:16:60:69:14:c0:21:75:d4:e7:f9:7a:30:d9:9b:bb:
5c:5c:a0:a9:9e:fc:ce:14:c0:52:18:97:78:b7:f5:8d:42:52:
11:3f:fe:ea:bc:1f:ef:44:ca:3b:09:7b:60:58:f8:69:f5:bb:
7c:c3:19:ec:6c:6f:eb:e1:81:78:2d:bb:42:1c:86:32:f3:45:
c7:91:87:c9:ee:42:bb:48:04:a1:50:db:92:21:f1:6a:c2:a7:
1b:87:66:b4:cf:2c:45:ce:14:ef:09:d6:48:41:a7:7f:6d:4a:
d7:3d:5c:90:cf:25:e8:f5:5c:62:93:22:b4:db:99:26:95:35:
b0:10:ec:15:1b:57:b1:16:3f:22:13:f6:08:dc:3b:13:41:25:
a7:bf:87:1a:25:36:42:70:04:eb:b6:c1:e5:0f:88:f4:fd:8c:
d8:48:2f:d8:62:46:79:85:1c:76:9e:cb:83:34:7c:ca:2c:d8:
36:98:0e:63:eb:ac:fc:f0:7f:c3:93:1f:9f:eb:ba:f1:3f:a6:
4a:96:86:f2:3e:dd:e8:55:2f:83:c9:69:85:92:c2:b7:e9:61:
13:87:17:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpKFrea+8K8FKv1+cVpFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm
MTA5NGUwHhcNMjUwNDIwMTAwMDQyWhcNMjUwNDIxMTAwMDQyWjAzMTEwLwYDVQQD
Eyg0NmRmMmVjZjIyMjg4YWEzMDA2OThkNWU2NGZmZjI0ZDliNGVjMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/LgSyr/DisW2j4mVuhTRRXgaWDL
1anrRtR+g7yMp3YDL7VuE6QHo4YFUo70O8c8MJguPuxFja4hKp0umVO5T9Yd8Gpd
CJfKK4eWtZu2wQDihZDEmNCH86P6Q2399E7U5lMQ25EgBKZp/bRZk7vc5pKHX9zu
1o9lOgJuDJRVLTJYxRiY+nZyIqJE11Ic5ofnnyAE+D+gZIpW6lTDoiCn3WXZL3EN
l8g2lFfU1R7yZOT3AfsUjYsGi3BiHR5YFeR8w5h1MHAD3Y4R8ds1Ru639/TrkVXY
TlCV1TQrpETL/YNWFDQ3JhwxDIL7rMaYHO3uMI2FWD5JFNqsZaVPEjrRfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbfLs8iKIqjAGmNXmT/8k2bTsFOMB8GA1UdIwQY
MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt
NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx
LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcN8gLUb
d/oKikRGhFPU/bhYfLu+9oNXMhvChyCghmMCxrsYpQd7FmBpFMAhddTn+Xow2Zu7
XFygqZ78zhTAUhiXeLf1jUJSET/+6rwf70TKOwl7YFj4afW7fMMZ7Gxv6+GBeC27
QhyGMvNFx5GHye5Cu0gEoVDbkiHxasKnG4dmtM8sRc4U7wnWSEGnf21K1z1ckM8l
6PVcYpMitNuZJpU1sBDsFRtXsRY/IhP2CNw7E0Elp7+HGiU2QnAE67bB5Q+I9P2M
2Egv2GJGeYUcdp7LgzR8yizYNpgOY+us/PB/w5Mfn+u68T+mSpaG8j7d6FUvg8lp
hZLCt+lhE4cX3Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:10 2025 by rpki-client