
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: NEivDVBbjmTx7iDLhGAHBvOl2DG4bZArK3rFsZdeDxo=
Subject key identifier: 24:DD:CF:1A:43:14:FE:09:C3:1E:49:9F:06:0B:16:6D:8D:3F:A5:20
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 019611D7753E3228BD21913D2088D84BB3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 0497
Signing time: Mon 07 Apr 2025 20:00:54 +0000
Manifest this update: Mon 07 Apr 2025 20:00:54 +0000
Manifest next update: Tue 08 Apr 2025 20:00:54 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: lDi07KZbM18bvyTjdv5HwpXeCAgZqQHeeuySVOxf3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:d7:75:3e:32:28:bd:21:91:3d:20:88:d8:4b:b3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Apr 7 20:00:54 2025 GMT
Not After : Apr 8 20:00:54 2025 GMT
Subject: CN=24ddcf1a4314fe09c31e499f060b166d8d3fa520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:da:b0:b8:6a:6f:3c:ff:cb:ba:6b:4f:45:b6:
8a:16:c3:d4:86:a8:08:d2:a7:c8:24:17:4e:48:2f:
47:3d:fd:7e:e3:e8:b3:59:ac:04:f4:7e:43:3c:c9:
1b:0e:29:ec:4d:b5:1d:29:89:80:86:66:84:82:d0:
38:5e:77:9e:f1:ce:6f:93:8e:c0:e7:9d:e8:7b:d7:
07:9d:ca:7f:aa:33:0b:48:e6:74:f0:f4:c0:c7:eb:
aa:3d:db:0b:4f:a3:e8:5c:24:2d:f7:31:5c:43:00:
c8:b5:bf:ad:33:79:7e:13:14:48:59:20:b4:90:59:
00:08:20:2c:cc:33:f2:41:36:b8:83:8e:ff:5d:6f:
a8:a7:8f:ac:c5:19:ab:0e:df:d6:ca:9d:6e:f8:59:
97:cc:19:e7:75:72:af:06:72:37:ee:03:99:4e:d6:
23:b7:ad:67:37:7e:96:9a:89:96:41:aa:e5:05:1c:
bd:bb:b0:34:21:fa:d7:70:48:93:45:86:ec:4b:bd:
20:6b:57:ab:5d:e9:2e:5b:f4:ee:01:dd:ff:0a:48:
a8:d9:15:4d:6b:02:71:18:8b:54:cc:ef:5d:b4:2a:
93:83:ee:c6:b2:92:17:55:56:a5:ef:f9:79:be:ef:
66:c5:93:4e:24:f9:42:af:4a:a7:ff:10:26:57:56:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DD:CF:1A:43:14:FE:09:C3:1E:49:9F:06:0B:16:6D:8D:3F:A5:20
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:19:76:ab:03:7a:f3:b1:39:da:4e:89:d9:84:14:2c:8a:
fc:13:3f:d7:f0:25:ef:a6:45:e2:75:0a:f1:46:01:c2:d7:5b:
fe:d1:92:d8:77:af:f0:35:ea:09:86:c2:f9:cd:5c:98:22:26:
1b:06:a1:76:69:f3:3e:d3:94:69:ab:9d:aa:a6:e0:b7:37:fd:
79:c1:fa:d0:c6:f0:0a:22:32:13:57:7a:54:db:31:54:26:7a:
7c:9a:11:9e:a9:09:d9:fc:55:47:fd:9a:a2:60:37:ec:30:bc:
6b:00:35:cc:7e:18:07:09:ae:55:6f:52:1f:e8:28:97:5d:bf:
2e:5d:c5:b7:5a:b9:38:61:41:cb:bb:12:9b:63:16:e7:11:3c:
77:fd:b8:d3:93:7e:f5:f1:5b:70:6d:49:c0:43:3d:02:0d:bc:
42:a0:e3:6d:92:5d:78:48:ea:45:ec:8e:99:83:05:a2:e6:ac:
66:98:be:99:63:76:5e:39:46:bf:77:6e:e4:ea:05:db:53:ad:
25:c8:10:fe:61:77:9a:97:1b:c7:43:b8:68:73:7c:d2:3f:a0:
48:f9:2b:ca:c7:37:1e:54:6c:29:58:3e:93:d9:11:8b:9b:18:
5b:25:b7:8d:5b:57:27:5e:56:e7:30:04:37:37:8d:cd:2a:72:
98:09:d9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYR13U+Mii9IZE9IIjYS7OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmNkNWI2YjZmZjg0NjFiYjk3OTc4NjFjOWI4MTY3NmEw
NzUzYWEwHhcNMjUwNDA3MjAwMDU0WhcNMjUwNDA4MjAwMDU0WjAzMTEwLwYDVQQD
EygyNGRkY2YxYTQzMTRmZTA5YzMxZTQ5OWYwNjBiMTY2ZDhkM2ZhNTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNqwuGpvPP/LumtPRbaKFsPUhqgI
0qfIJBdOSC9HPf1+4+izWawE9H5DPMkbDinsTbUdKYmAhmaEgtA4Xnee8c5vk47A
553oe9cHncp/qjMLSOZ08PTAx+uqPdsLT6PoXCQt9zFcQwDItb+tM3l+ExRIWSC0
kFkACCAszDPyQTa4g47/XW+op4+sxRmrDt/Wyp1u+FmXzBnndXKvBnI37gOZTtYj
t61nN36WmomWQarlBRy9u7A0IfrXcEiTRYbsS70ga1erXekuW/TuAd3/Ckio2RVN
awJxGItUzO9dtCqTg+7GspIXVVal7/l5vu9mxZNOJPlCr0qn/xAmV1ZtxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTdzxpDFP4Jwx5JnwYLFm2NP6UgMB8GA1UdIwQY
MBaAFP4s1ba2/4Rhu5eXhhybgWdqB1OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMWYxNmMtNWQxNS00ZjdiLWJhNWUt
NmJlMGJmZTFjYmRiLzEvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMWYxNmMtNWQxNS00ZjdiLWJhNWUtNmJlMGJmZTFjYmRi
LzEvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9wZdqsD
evOxOdpOidmEFCyK/BM/1/Al76ZF4nUK8UYBwtdb/tGS2Hev8DXqCYbC+c1cmCIm
GwahdmnzPtOUaaudqqbgtzf9ecH60MbwCiIyE1d6VNsxVCZ6fJoRnqkJ2fxVR/2a
omA37DC8awA1zH4YBwmuVW9SH+gol12/Ll3Ft1q5OGFBy7sSm2MW5xE8d/2405N+
9fFbcG1JwEM9Ag28QqDjbZJdeEjqReyOmYMFouasZpi+mWN2XjlGv3du5OoF21Ot
JcgQ/mF3mpcbx0O4aHN80j+gSPkrysc3HlRsKVg+k9kRi5sYWyW3jVtXJ15W5zAE
NzeNzSpymAnZ8w==
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:11 2025 by rpki-client