Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
File: k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft (raw, json)
Hash identifier: lYNmLRiYY4U5Wbb5blp9jWTUyjsPNK41Y2vH7Ldk4+w=
Subject key identifier: 5C:51:EB:E7:E6:94:78:E0:79:30:6D:4A:1C:DD:01:8C:DC:96:53:03
Authority key identifier: 93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
Certificate issuer: /CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Certificate serial: 01965F4D435CCCD84556FE87E126724ABB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
Manifest number: 0CCD
Signing time: Tue 22 Apr 2025 21:00:21 +0000
Manifest this update: Tue 22 Apr 2025 21:00:21 +0000
Manifest next update: Wed 23 Apr 2025 21:00:21 +0000
Files and hashes: 1: k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl (hash: 9iLU6voBaZwj0z4jE6KmsBvYMxFw4PTBV0a5U9AaLr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:43:5c:cc:d8:45:56:fe:87:e1:26:72:4a:bb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e18ba8ce1721224508c1d273cc61cc8fcd8de4
Validity
Not Before: Apr 22 21:00:21 2025 GMT
Not After : Apr 23 21:00:21 2025 GMT
Subject: CN=5c51ebe7e69478e079306d4a1cdd018cdc965303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:7e:5f:61:40:1c:b0:7f:8a:13:89:59:8d:
40:88:da:bd:c5:eb:fd:85:e5:f6:fa:01:da:cd:c8:
59:54:b2:2e:6d:60:4d:a9:7f:a2:2b:ce:41:5b:6a:
c5:07:f9:c0:8b:b6:4d:39:9f:80:b0:88:af:e8:59:
6b:7b:66:7d:de:71:0b:ba:91:b9:76:1a:8e:58:6b:
91:7d:e7:fd:53:f1:27:03:65:d2:93:28:f4:c0:01:
02:16:46:7e:90:d4:82:3d:fb:bf:f4:e0:ec:4c:12:
97:d3:03:a7:0d:52:f1:da:d6:51:b2:f2:fd:98:69:
2c:96:bc:7d:d6:82:58:45:6f:95:0c:c3:92:37:27:
60:1c:ba:d0:10:16:d6:fc:52:94:db:64:42:b9:71:
40:a0:d3:11:95:30:29:c2:27:1f:96:0e:82:ed:9f:
58:88:70:92:c4:18:23:70:26:e5:cf:8d:02:45:f8:
5f:33:88:20:84:e0:4c:96:65:20:74:9f:49:c4:c7:
5d:ea:fe:53:e6:ac:3c:37:14:74:df:b8:08:a9:fd:
1a:c2:ea:d9:91:ca:6b:c3:1d:5c:94:85:cf:39:cf:
05:37:18:de:df:ed:d8:80:0a:d8:04:b0:3b:76:66:
c0:84:bc:ff:06:7c:8d:ce:0e:35:db:50:f9:ae:8d:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:EB:E7:E6:94:78:E0:79:30:6D:4A:1C:DD:01:8C:DC:96:53:03
X509v3 Authority Key Identifier:
keyid:93:E1:8B:A8:CE:17:21:22:45:08:C1:D2:73:CC:61:CC:8F:CD:8D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-GLqM4XISJFCMHSc8xhzI_NjeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79715e-5003-4156-9eaa-7fb3de39452d/1/k-GLqM4XISJFCMHSc8xhzI_NjeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:61:7c:23:f6:4f:ca:da:85:60:f4:99:55:57:2f:e2:44:12:
33:ea:1a:63:3d:a1:ac:e2:14:68:eb:2a:22:30:96:90:42:47:
5a:f8:c0:d4:0a:fc:e9:09:5c:ef:43:61:bc:80:23:d7:24:1f:
39:c2:3a:6c:b7:7c:66:5f:78:d7:40:1a:6e:7f:69:0e:f6:f7:
15:88:cb:14:47:ed:2d:34:36:af:6d:14:5e:d0:a8:07:36:2e:
b5:8a:1e:67:cd:ac:d3:32:a3:7f:3d:ea:d4:5c:66:3c:ce:45:
62:e3:fe:73:b2:fa:52:21:11:af:91:54:68:ab:5d:e6:18:f7:
67:4d:82:bd:03:3d:86:de:30:1f:6b:e6:d0:e8:8e:ab:cc:b7:
48:dc:18:7b:1a:5d:33:4c:11:7b:64:3f:d8:4b:3a:63:ca:34:
c0:ba:a2:39:a6:cc:20:ee:1e:01:ee:4f:6e:33:6d:ae:97:d9:
30:08:39:dd:cf:52:b0:ce:67:8c:6e:bd:60:22:1c:7f:d0:a5:
0e:79:cf:22:c7:f5:2b:65:6b:c5:63:85:a7:d2:11:65:ed:bb:
e3:13:f7:ff:ad:88:e1:74:62:6e:4b:9a:19:6a:10:3c:4a:73:
da:dd:e9:3c:26:36:7a:92:9c:d5:69:aa:1c:81:ea:3d:cb:be:
d0:3a:18:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfTUNczNhFVv6H4SZySrtqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZTE4YmE4Y2UxNzIxMjI0NTA4YzFkMjczY2M2MWNjOGZj
ZDhkZTQwHhcNMjUwNDIyMjEwMDIxWhcNMjUwNDIzMjEwMDIxWjAzMTEwLwYDVQQD
Eyg1YzUxZWJlN2U2OTQ3OGUwNzkzMDZkNGExY2RkMDE4Y2RjOTY1MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc5+X2FAHLB/ihOJWY1AiNq9xev9
heX2+gHazchZVLIubWBNqX+iK85BW2rFB/nAi7ZNOZ+AsIiv6Flre2Z93nELupG5
dhqOWGuRfef9U/EnA2XSkyj0wAECFkZ+kNSCPfu/9ODsTBKX0wOnDVLx2tZRsvL9
mGkslrx91oJYRW+VDMOSNydgHLrQEBbW/FKU22RCuXFAoNMRlTApwicflg6C7Z9Y
iHCSxBgjcCblz40CRfhfM4gghOBMlmUgdJ9JxMdd6v5T5qw8NxR037gIqf0awurZ
kcprwx1clIXPOc8FNxje3+3YgArYBLA7dmbAhLz/BnyNzg4121D5ro2m6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxR6+fmlHjgeTBtShzdAYzcllMDMB8GA1UdIwQY
MBaAFJPhi6jOFyEiRQjB0nPMYcyPzY3kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83OTcxNWUtNTAwMy00MTU2LTllYWEt
N2ZiM2RlMzk0NTJkLzEvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC83OTcxNWUtNTAwMy00MTU2LTllYWEtN2ZiM2RlMzk0NTJk
LzEvay1HTHFNNFhJU0pGQ01IU2M4eGh6SV9OamVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGWF8I/ZP
ytqFYPSZVVcv4kQSM+oaYz2hrOIUaOsqIjCWkEJHWvjA1Ar86Qlc70NhvIAj1yQf
OcI6bLd8Zl9410Aabn9pDvb3FYjLFEftLTQ2r20UXtCoBzYutYoeZ82s0zKjfz3q
1FxmPM5FYuP+c7L6UiERr5FUaKtd5hj3Z02CvQM9ht4wH2vm0OiOq8y3SNwYexpd
M0wRe2Q/2Es6Y8o0wLqiOabMIO4eAe5PbjNtrpfZMAg53c9SsM5njG69YCIcf9Cl
DnnPIsf1K2VrxWOFp9IRZe274xP3/62I4XRibkuaGWoQPEpz2t3pPCY2epKc1Wmq
HIHqPcu+0DoYvQ==
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:41 2025 by rpki-client