Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
File: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft (raw, json)
Hash identifier: Ya1xLkIRUW/K1gj4NlBk5hTQiePQZ9YWySjaGhjWbug=
Subject key identifier: 43:D5:40:5D:B2:B2:CF:CD:B4:97:A1:D6:EA:D1:E8:6B:6B:8C:B7:75
Authority key identifier: 98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
Certificate issuer: /CN=98ae843e7bc8748d015bc47f635b17561be72850
Certificate serial: 01965B02833CD0B82D014B00AFE93BAC1936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
Manifest number: 14FC
Signing time: Tue 22 Apr 2025 01:00:13 +0000
Manifest this update: Tue 22 Apr 2025 01:00:13 +0000
Manifest next update: Wed 23 Apr 2025 01:00:13 +0000
Files and hashes: 1: mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl (hash: eiAIN8eYBYw0dDQnC88jM+cdtO9f5Fyd4ABv05j5nFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:02:83:3c:d0:b8:2d:01:4b:00:af:e9:3b:ac:19:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ae843e7bc8748d015bc47f635b17561be72850
Validity
Not Before: Apr 22 01:00:13 2025 GMT
Not After : Apr 23 01:00:13 2025 GMT
Subject: CN=43d5405db2b2cfcdb497a1d6ead1e86b6b8cb775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:47:06:a1:58:2f:7f:91:5a:9e:73:ab:50:1f:
21:c0:4e:15:77:1a:35:e8:15:47:33:06:1e:ec:82:
0d:62:e4:70:0b:69:fd:da:ef:b5:5a:8a:4d:b0:06:
b2:f8:c3:f1:fe:b4:0c:45:dd:cc:26:65:78:66:40:
5a:15:d3:04:5d:78:4c:81:6d:ba:00:84:fa:ee:c0:
b7:52:07:48:f4:46:75:ef:d6:9c:77:a5:4e:7b:2a:
e6:ca:2f:3a:7f:a1:14:af:a2:6f:dc:66:0f:e2:8a:
0a:81:f1:36:50:99:2b:90:93:7c:74:1f:d5:54:16:
f5:d2:2f:de:62:b9:74:92:62:5a:66:8a:7e:30:b9:
a9:1c:7f:69:29:41:f6:fe:df:14:19:3d:cc:4e:1c:
fd:50:2c:3d:32:1d:34:d3:a5:d2:1a:12:c7:58:27:
f0:df:64:9b:15:e2:99:27:87:22:fa:1e:6d:84:d8:
fc:9f:93:f2:1b:4c:21:cd:cc:e4:f1:02:d3:09:2d:
bf:be:54:46:2a:a9:40:2f:5a:d8:63:0d:34:48:10:
1e:58:ca:1b:02:b8:22:e4:35:74:e7:d5:33:13:57:
94:c3:0f:5c:94:86:da:52:2a:a5:a8:32:7c:c1:62:
65:36:2e:66:da:ef:5e:9b:60:be:93:aa:06:23:9b:
25:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D5:40:5D:B2:B2:CF:CD:B4:97:A1:D6:EA:D1:E8:6B:6B:8C:B7:75
X509v3 Authority Key Identifier:
keyid:98:AE:84:3E:7B:C8:74:8D:01:5B:C4:7F:63:5B:17:56:1B:E7:28:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/04e5d3-b921-4274-8cd1-ed07676718ba/1/mK6EPnvIdI0BW8R_Y1sXVhvnKFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f2:95:94:66:4f:4b:48:47:e4:08:52:17:df:02:d4:fa:4c:
3d:0d:51:33:a8:a3:47:72:96:62:53:de:0d:0d:bc:76:b1:b3:
5a:29:0a:b4:ad:76:00:60:80:3b:a8:09:4e:c7:4c:f4:d9:8d:
2b:ae:e3:2b:20:83:c6:50:50:a1:97:bd:f3:cd:38:cc:da:f6:
03:1a:42:86:e5:77:84:73:39:af:ac:fe:2a:ad:ae:10:9c:5f:
35:c8:a9:94:4e:8e:ad:46:07:27:ea:b1:55:89:65:41:35:71:
a5:8d:92:67:4b:30:9e:7a:3c:b5:8b:d2:4e:b0:e8:e1:9e:b7:
2e:91:39:ec:04:05:d1:d2:60:80:1b:b4:53:6e:d2:96:0c:c7:
9f:45:23:75:b7:80:51:5a:32:83:2a:3b:30:78:e9:3a:8e:da:
98:bf:72:dc:54:4a:1d:9e:98:02:1d:02:3b:23:ea:df:bd:f5:
59:c1:7f:85:86:11:b4:b2:5f:48:0f:19:1f:24:93:8d:7d:a8:
cd:15:17:1c:f0:58:41:4c:33:6b:89:65:f7:f7:b5:f0:8f:42:
26:38:89:6e:60:93:3b:18:1a:b6:c8:8b:31:3d:ea:09:e1:d5:
0c:42:40:e4:dc:c8:86:44:10:07:ed:20:03:cb:d1:6b:3a:7f:
ba:1c:c0:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbAoM80LgtAUsAr+k7rBk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWU4NDNlN2JjODc0OGQwMTViYzQ3ZjYzNWIxNzU2MWJl
NzI4NTAwHhcNMjUwNDIyMDEwMDEzWhcNMjUwNDIzMDEwMDEzWjAzMTEwLwYDVQQD
Eyg0M2Q1NDA1ZGIyYjJjZmNkYjQ5N2ExZDZlYWQxZTg2YjZiOGNiNzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0cGoVgvf5FannOrUB8hwE4Vdxo1
6BVHMwYe7IINYuRwC2n92u+1WopNsAay+MPx/rQMRd3MJmV4ZkBaFdMEXXhMgW26
AIT67sC3UgdI9EZ179acd6VOeyrmyi86f6EUr6Jv3GYP4ooKgfE2UJkrkJN8dB/V
VBb10i/eYrl0kmJaZop+MLmpHH9pKUH2/t8UGT3MThz9UCw9Mh0006XSGhLHWCfw
32SbFeKZJ4ci+h5thNj8n5PyG0whzczk8QLTCS2/vlRGKqlAL1rYYw00SBAeWMob
Argi5DV059UzE1eUww9clIbaUiqlqDJ8wWJlNi5m2u9em2C+k6oGI5slwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPVQF2yss/NtJeh1urR6GtrjLd1MB8GA1UdIwQY
MBaAFJiuhD57yHSNAVvEf2NbF1Yb5yhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEt
ZWQwNzY3NjcxOGJhLzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wNGU1ZDMtYjkyMS00Mjc0LThjZDEtZWQwNzY3NjcxOGJh
LzEvbUs2RVBudklkSTBCVzhSX1kxc1hWaHZuS0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfKVlGZP
S0hH5AhSF98C1PpMPQ1RM6ijR3KWYlPeDQ28drGzWikKtK12AGCAO6gJTsdM9NmN
K67jKyCDxlBQoZe98804zNr2AxpChuV3hHM5r6z+Kq2uEJxfNciplE6OrUYHJ+qx
VYllQTVxpY2SZ0swnno8tYvSTrDo4Z63LpE57AQF0dJggBu0U27SlgzHn0UjdbeA
UVoygyo7MHjpOo7amL9y3FRKHZ6YAh0COyPq3731WcF/hYYRtLJfSA8ZHySTjX2o
zRUXHPBYQUwza4ll9/e18I9CJjiJbmCTOxgatsiLMT3qCeHVDEJA5NzIhkQQB+0g
A8vRazp/uhzA5A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:53:29 2025 by rpki-client