Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
File: u5O3SkaFwcFKueGSF6qxQWNBEdY.mft (raw, json)
Hash identifier: XkCHeoCaR5Ho4i3jBwo63PIMLB/ZMmutLnjLcw9h+MM=
Subject key identifier: EC:24:1C:65:A9:66:98:F3:EA:E1:54:F1:89:77:8D:20:38:EE:1D:4A
Authority key identifier: BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
Certificate issuer: /CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Certificate serial: 019652A46AC6A8ADFAFF5FF2B56F3FDD3AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
Manifest number: 0EA4
Signing time: Sun 20 Apr 2025 10:00:29 +0000
Manifest this update: Sun 20 Apr 2025 10:00:29 +0000
Manifest next update: Mon 21 Apr 2025 10:00:29 +0000
Files and hashes: 1: u5O3SkaFwcFKueGSF6qxQWNBEdY.crl (hash: ZgUS5eodEmdcwganEUzA5arLkz8uEN8Pp2PvBFXUaIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:6a:c6:a8:ad:fa:ff:5f:f2:b5:6f:3f:dd:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb93b74a4685c1c14ab9e19217aab141634111d6
Validity
Not Before: Apr 20 10:00:29 2025 GMT
Not After : Apr 21 10:00:29 2025 GMT
Subject: CN=ec241c65a96698f3eae154f189778d2038ee1d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:bf:5f:68:0e:41:c7:fb:fc:02:a3:e9:00:
70:dc:03:e2:1e:4f:22:58:36:96:8c:3e:e9:4f:9b:
e8:36:30:96:5e:93:f7:0c:ee:2b:26:9c:0a:5d:bb:
9a:17:49:6b:34:fe:7c:5a:e8:99:f7:1b:31:84:33:
44:99:ca:b8:f1:a2:cd:8d:d2:73:ec:55:57:aa:de:
18:da:a7:53:be:3b:87:31:5f:a8:a8:fa:22:8a:e7:
b2:96:e7:45:ce:68:a8:a4:97:0a:46:89:fd:61:b4:
e8:6f:38:fe:01:37:4b:9d:a5:d7:fc:b4:21:cb:1a:
19:03:80:22:f4:1c:dd:b0:28:62:7e:4f:af:ce:3c:
02:f0:cb:4e:04:58:aa:bd:82:a1:1a:91:fc:7f:0e:
a6:78:49:6a:1f:c2:8d:a7:d0:ab:b2:77:7a:66:71:
4e:59:0f:0a:6a:92:88:ec:cb:7a:e6:cd:bd:ca:1e:
52:78:32:f6:68:61:3a:6d:f6:25:55:c5:d8:e9:93:
1d:be:33:b9:1b:6f:fc:11:1c:dc:c9:77:d0:9c:0d:
ce:10:b6:49:68:78:48:b4:27:e0:57:24:12:11:7b:
5d:9b:b4:26:bc:31:22:09:5a:3c:67:97:d0:dc:9a:
53:6b:6a:c2:0a:a2:2c:e7:2c:b0:9b:85:81:6d:b7:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:24:1C:65:A9:66:98:F3:EA:E1:54:F1:89:77:8D:20:38:EE:1D:4A
X509v3 Authority Key Identifier:
keyid:BB:93:B7:4A:46:85:C1:C1:4A:B9:E1:92:17:AA:B1:41:63:41:11:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5O3SkaFwcFKueGSF6qxQWNBEdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ae9081-f651-41f5-b3a2-3706b1fcd6cb/1/u5O3SkaFwcFKueGSF6qxQWNBEdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:17:89:a7:1d:ea:34:c5:a7:b9:5a:08:67:87:cb:b0:17:1d:
f7:7d:95:e9:dd:b9:50:a3:82:5a:31:5e:66:c6:33:33:a5:0d:
18:b3:bf:d9:e3:bb:09:c9:f2:a6:9f:8d:e1:10:fc:ef:03:5b:
78:0b:a4:7d:c9:48:33:a7:7a:c7:ff:a2:56:8f:39:94:e4:e6:
f6:d6:36:47:01:e1:0d:f2:3a:f9:e3:ad:fd:de:cc:07:07:eb:
08:e2:ba:6b:70:75:81:02:48:50:6f:a7:0d:ae:4b:02:51:fd:
3c:89:dd:2d:5b:77:60:b3:82:72:74:af:10:fd:8a:ba:f7:2d:
ca:17:99:b8:10:7e:ed:6f:b5:01:7c:53:e6:2d:1a:5e:b6:11:
64:b8:e5:87:1e:77:4b:b7:0a:2d:7d:54:c1:78:ce:16:77:be:
d8:24:7e:3e:94:fe:92:ec:f8:77:a1:99:90:c7:66:33:ac:94:
29:1f:3f:57:d9:fb:a1:2d:77:08:07:50:9a:d1:8a:de:45:c5:
f4:ea:e6:ec:70:49:05:b8:e9:4d:e9:cd:42:cd:8b:be:5e:31:
bd:37:4d:f6:1c:46:6c:04:db:a3:41:3b:fa:43:46:22:ff:0e:
3f:92:59:d4:a0:19:f2:eb:8d:a3:a9:ae:26:83:fb:d8:4a:eb:
a4:7f:89:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpGrGqK36/1/ytW8/3Tq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOTNiNzRhNDY4NWMxYzE0YWI5ZTE5MjE3YWFiMTQxNjM0
MTExZDYwHhcNMjUwNDIwMTAwMDI5WhcNMjUwNDIxMTAwMDI5WjAzMTEwLwYDVQQD
EyhlYzI0MWM2NWE5NjY5OGYzZWFlMTU0ZjE4OTc3OGQyMDM4ZWUxZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLG/X2gOQcf7/AKj6QBw3APiHk8i
WDaWjD7pT5voNjCWXpP3DO4rJpwKXbuaF0lrNP58WuiZ9xsxhDNEmcq48aLNjdJz
7FVXqt4Y2qdTvjuHMV+oqPoiiueyludFzmiopJcKRon9YbTobzj+ATdLnaXX/LQh
yxoZA4Ai9BzdsChifk+vzjwC8MtOBFiqvYKhGpH8fw6meElqH8KNp9Crsnd6ZnFO
WQ8KapKI7Mt65s29yh5SeDL2aGE6bfYlVcXY6ZMdvjO5G2/8ERzcyXfQnA3OELZJ
aHhItCfgVyQSEXtdm7QmvDEiCVo8Z5fQ3JpTa2rCCqIs5yywm4WBbbcrswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwkHGWpZpjz6uFU8Yl3jSA47h1KMB8GA1UdIwQY
MBaAFLuTt0pGhcHBSrnhkheqsUFjQRHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTIt
MzcwNmIxZmNkNmNiLzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9hZTkwODEtZjY1MS00MWY1LWIzYTItMzcwNmIxZmNkNmNi
LzEvdTVPM1NrYUZ3Y0ZLdWVHU0Y2cXhRV05CRWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkReJpx3q
NMWnuVoIZ4fLsBcd932V6d25UKOCWjFeZsYzM6UNGLO/2eO7Ccnypp+N4RD87wNb
eAukfclIM6d6x/+iVo85lOTm9tY2RwHhDfI6+eOt/d7MBwfrCOK6a3B1gQJIUG+n
Da5LAlH9PIndLVt3YLOCcnSvEP2KuvctyheZuBB+7W+1AXxT5i0aXrYRZLjlhx53
S7cKLX1UwXjOFne+2CR+PpT+kuz4d6GZkMdmM6yUKR8/V9n7oS13CAdQmtGK3kXF
9Orm7HBJBbjpTenNQs2Lvl4xvTdN9hxGbATbo0E7+kNGIv8OP5JZ1KAZ8uuNo6mu
JoP72ErrpH+J4Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:59 2025 by rpki-client