Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: kAIKjqpeIuX0PFQCfQj7aC5G9Zp0Twk1yQE7ruU5JyA=
Subject key identifier: 3D:3A:C3:A3:4E:30:B2:F5:8C:1D:6E:A3:30:A1:C1:CB:9C:2C:FE:4D
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0196534A076279B5A504696ECAE097B510A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0DF6
Signing time: Sun 20 Apr 2025 13:01:22 +0000
Manifest this update: Sun 20 Apr 2025 13:01:22 +0000
Manifest next update: Mon 21 Apr 2025 13:01:22 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: ndtXp6PXeQAP5r7HrmvgR0GKjfO+DmIGdVLjHzKcIT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:07:62:79:b5:a5:04:69:6e:ca:e0:97:b5:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Apr 20 13:01:22 2025 GMT
Not After : Apr 21 13:01:22 2025 GMT
Subject: CN=3d3ac3a34e30b2f58c1d6ea330a1c1cb9c2cfe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:10:e3:e4:80:3c:a2:6b:0b:37:c4:bb:41:
53:9a:bb:60:39:59:69:7f:e7:1a:3e:84:71:46:11:
2e:44:36:10:a7:fa:6a:51:f2:40:b8:8f:0e:e7:b6:
47:f8:07:73:55:9a:de:85:42:ec:57:ba:79:7d:29:
82:b8:55:ac:a9:26:95:2f:a6:43:eb:e7:bd:4c:12:
a6:a5:14:68:da:5b:74:f1:99:6d:e2:f0:2f:a7:16:
76:62:d2:8c:9b:bd:aa:9f:b8:2e:21:2b:05:c8:10:
3f:96:10:52:6b:fb:a7:f4:c7:6e:c2:97:17:17:28:
0f:b3:67:ba:a3:d7:0b:75:c0:62:bc:81:3b:fd:19:
01:ec:ee:fa:67:8c:0f:6f:16:c2:89:c4:b1:c7:3c:
53:08:d1:ff:54:c6:f1:54:12:6f:ea:b2:9c:72:3b:
4a:94:c9:de:26:c4:18:f6:40:de:06:68:55:d1:f4:
46:4a:c5:a9:20:47:76:3c:60:c2:e0:84:49:06:5b:
f2:35:2c:71:52:90:a3:3e:cf:e5:9b:9f:ec:e5:69:
ed:2d:40:af:46:d7:bc:ce:65:5c:ed:3f:c5:e3:28:
b2:14:2f:cb:c8:96:d1:95:49:f1:75:06:68:e0:8a:
27:02:9c:27:f2:b7:57:bf:af:53:62:01:9f:51:10:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:C3:A3:4E:30:B2:F5:8C:1D:6E:A3:30:A1:C1:CB:9C:2C:FE:4D
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:64:b3:12:22:8e:8d:d3:61:d1:d9:52:73:04:a3:d4:cd:0d:
29:23:9f:f3:0a:97:87:c7:bd:98:8a:be:77:77:a4:a3:a0:6f:
10:77:86:ae:fd:bf:fe:88:53:ff:f4:6c:c2:28:b2:9f:c8:0b:
55:07:b3:94:26:8d:c6:0a:f3:c8:7a:2f:fd:0f:51:b9:4b:0e:
6c:be:7d:bf:83:a7:4a:cc:bc:70:35:17:32:9a:81:30:82:32:
c4:f4:d0:8f:9e:5b:3a:48:4e:41:56:82:92:d7:4c:52:f9:db:
cf:40:d7:66:6f:d0:a6:0c:11:f9:6f:97:f8:f3:15:6b:b5:0b:
18:62:04:01:db:5d:77:7f:a8:d8:36:63:79:68:2d:e4:7a:63:
f9:ad:de:43:85:d4:2f:3b:09:f3:4b:66:a3:5c:1b:e4:f2:c5:
1d:db:18:f5:08:78:09:74:f5:36:38:e5:de:e0:3e:8f:8d:ec:
f4:27:83:6e:7f:78:1d:d6:f4:ec:96:87:c0:ae:14:c6:55:11:
96:d8:e4:9b:1e:2d:a6:2b:4f:36:dd:c8:a6:91:87:9c:de:69:
b7:d4:b1:50:3f:a5:01:b4:40:2b:d9:5f:3c:b3:65:09:75:b5:
de:5f:67:80:3e:6a:a7:98:42:21:e0:f3:cb:5e:73:ad:bd:5a:
ec:28:6c:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSgdiebWlBGluyuCXtRCnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTY2MTY5N2RhOTBiNTgwMGJjNDJhZGY5YjQ1OTUzMjE5
NzU1ZDAwHhcNMjUwNDIwMTMwMTIyWhcNMjUwNDIxMTMwMTIyWjAzMTEwLwYDVQQD
EygzZDNhYzNhMzRlMzBiMmY1OGMxZDZlYTMzMGExYzFjYjljMmNmZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLwQ4+SAPKJrCzfEu0FTmrtgOVlp
f+caPoRxRhEuRDYQp/pqUfJAuI8O57ZH+AdzVZrehULsV7p5fSmCuFWsqSaVL6ZD
6+e9TBKmpRRo2lt08Zlt4vAvpxZ2YtKMm72qn7guISsFyBA/lhBSa/un9MduwpcX
FygPs2e6o9cLdcBivIE7/RkB7O76Z4wPbxbCicSxxzxTCNH/VMbxVBJv6rKccjtK
lMneJsQY9kDeBmhV0fRGSsWpIEd2PGDC4IRJBlvyNSxxUpCjPs/lm5/s5WntLUCv
Rte8zmVc7T/F4yiyFC/LyJbRlUnxdQZo4IonApwn8rdXv69TYgGfURAEhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD06w6NOMLL1jB1uozChwcucLP5NMB8GA1UdIwQY
MBaAFI5WYWl9qQtYALxCrfm0WVMhl1XQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDIt
YTFjOWQzZTVmYmJhLzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDItYTFjOWQzZTVmYmJh
LzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGSzEiKO
jdNh0dlScwSj1M0NKSOf8wqXh8e9mIq+d3eko6BvEHeGrv2//ohT//Rswiiyn8gL
VQezlCaNxgrzyHov/Q9RuUsObL59v4OnSsy8cDUXMpqBMIIyxPTQj55bOkhOQVaC
ktdMUvnbz0DXZm/QpgwR+W+X+PMVa7ULGGIEAdtdd3+o2DZjeWgt5Hpj+a3eQ4XU
LzsJ80tmo1wb5PLFHdsY9Qh4CXT1Njjl3uA+j43s9CeDbn94Hdb07JaHwK4UxlUR
ltjkmx4tpitPNt3IppGHnN5pt9SxUD+lAbRAK9lfPLNlCXW13l9ngD5qp5hCIeDz
y15zrb1a7ChsgA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:54:16 2025 by rpki-client