Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: 1GfKVfzIgfHoY3i4D6NHGCFjJ/ZT0r6xPAXOrFmL0LE=
Subject key identifier: 17:62:F5:01:87:49:4B:9B:36:79:85:B5:82:4D:9A:7B:D6:4B:8F:91
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0196553789E0898E6F28F0DB19C26072E85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0E8D
Signing time: Sun 20 Apr 2025 22:00:25 +0000
Manifest this update: Sun 20 Apr 2025 22:00:25 +0000
Manifest next update: Mon 21 Apr 2025 22:00:25 +0000
Files and hashes: 1: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: RAOPjUHLMg9FnKhrA04zVkfWlMdFc422lzES5zdmB0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:89:e0:89:8e:6f:28:f0:db:19:c2:60:72:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Apr 20 22:00:25 2025 GMT
Not After : Apr 21 22:00:25 2025 GMT
Subject: CN=1762f50187494b9b367985b5824d9a7bd64b8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:14:c3:f0:26:6d:81:8f:02:12:89:c6:77:
7c:07:5f:d5:64:1d:91:7e:bc:d5:77:dd:dd:4a:8d:
63:fe:6b:55:63:0a:ea:31:a1:63:91:97:25:fc:22:
52:ec:20:ec:b4:42:b6:4b:93:76:4b:7f:6d:87:92:
07:92:9d:82:52:2f:20:91:66:b7:42:08:a2:6a:b3:
a6:ae:99:ca:64:a1:94:8a:bb:b9:38:ad:68:0f:d4:
60:2a:18:fa:17:98:7f:50:2b:5d:61:0c:72:47:28:
a3:b4:0e:3f:9a:fe:44:c7:04:be:e5:1e:24:e5:76:
b6:9e:de:d1:fe:2b:c0:0f:c3:cc:5c:25:be:30:22:
26:f8:84:56:07:cb:28:19:df:98:2a:6d:e4:33:05:
35:26:d6:c8:33:a7:b9:94:fc:84:2e:63:2f:47:bc:
f9:31:d8:bc:a5:08:6e:7a:0e:46:0f:36:56:93:e4:
1e:d2:90:2d:4d:a5:d8:ed:2e:b8:1f:ae:0d:a2:51:
f3:6a:9c:5b:83:a0:6a:44:b5:8b:bf:d4:b0:69:73:
cf:3f:c0:34:52:ce:b2:44:04:28:68:b1:b0:7d:b7:
88:db:10:b1:78:74:17:c0:2a:b3:70:98:47:a9:00:
c2:c8:95:85:9d:ae:cc:3b:d9:6c:40:00:a0:0a:9e:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:F5:01:87:49:4B:9B:36:79:85:B5:82:4D:9A:7B:D6:4B:8F:91
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0f:ff:6d:4a:62:4f:ef:9b:49:9f:64:4e:7d:59:42:15:3e:
02:b3:9f:22:e6:a2:8c:09:03:fa:c6:0d:bb:98:64:da:e0:24:
eb:fe:36:fa:ba:ba:40:6c:45:57:bb:62:60:58:5d:a3:e1:25:
bf:5f:41:48:78:c3:df:db:de:8d:c1:d6:b7:75:a3:90:e0:e2:
e3:23:ba:e4:23:b4:1a:2e:f0:30:49:30:cc:98:1a:5b:9d:34:
cf:b0:f0:f0:84:35:7d:15:77:5b:77:a1:10:7f:e6:d8:3d:ed:
ef:18:0c:71:a0:6e:89:07:7c:85:e0:82:68:d5:8b:dd:8b:3c:
7d:31:a0:ca:95:c8:fd:90:a3:17:b9:f1:1e:4e:bb:3e:6e:57:
1f:ac:27:da:e8:94:3c:83:88:da:46:16:0c:86:cc:4f:e1:31:
e7:57:d3:4c:24:f5:85:5c:69:97:3a:27:f7:46:2b:a5:55:4c:
22:17:1c:9c:e9:9d:de:96:d4:d7:be:90:95:e6:d7:4e:6b:00:
fe:fb:1a:71:7b:e9:d6:1d:16:19:49:0d:ce:44:1f:40:ba:55:
4a:96:09:da:2b:09:c0:89:ba:63:ee:a7:a7:96:15:0a:fc:25:
8b:4b:15:45:fd:5f:aa:95:b9:d9:a5:1f:6f:db:52:36:6b:70:
e9:87:4b:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN4ngiY5vKPDbGcJgcuhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjUwNDIwMjIwMDI1WhcNMjUwNDIxMjIwMDI1WjAzMTEwLwYDVQQD
EygxNzYyZjUwMTg3NDk0YjliMzY3OTg1YjU4MjRkOWE3YmQ2NGI4ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8kUw/AmbYGPAhKJxnd8B1/VZB2R
frzVd93dSo1j/mtVYwrqMaFjkZcl/CJS7CDstEK2S5N2S39th5IHkp2CUi8gkWa3
QgiiarOmrpnKZKGUiru5OK1oD9RgKhj6F5h/UCtdYQxyRyijtA4/mv5ExwS+5R4k
5Xa2nt7R/ivAD8PMXCW+MCIm+IRWB8soGd+YKm3kMwU1JtbIM6e5lPyELmMvR7z5
Mdi8pQhueg5GDzZWk+Qe0pAtTaXY7S64H64NolHzapxbg6BqRLWLv9SwaXPPP8A0
Us6yRAQoaLGwfbeI2xCxeHQXwCqzcJhHqQDCyJWFna7MO9lsQACgCp6ruQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdi9QGHSUubNnmFtYJNmnvWS4+RMB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg//bUpi
T++bSZ9kTn1ZQhU+ArOfIuaijAkD+sYNu5hk2uAk6/42+rq6QGxFV7tiYFhdo+El
v19BSHjD39vejcHWt3WjkODi4yO65CO0Gi7wMEkwzJgaW500z7Dw8IQ1fRV3W3eh
EH/m2D3t7xgMcaBuiQd8heCCaNWL3Ys8fTGgypXI/ZCjF7nxHk67Pm5XH6wn2uiU
PIOI2kYWDIbMT+Ex51fTTCT1hVxplzon90YrpVVMIhccnOmd3pbU176QlebXTmsA
/vsacXvp1h0WGUkNzkQfQLpVSpYJ2isJwIm6Y+6np5YVCvwli0sVRf1fqpW52aUf
b9tSNmtw6YdLXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:49 2025 by rpki-client