Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: 2ZDmEEE5Fsh/6MaNrnhrsQa7gJLYrtpNHNeIGHvnJNg=
Subject key identifier: 8E:D4:56:7A:4B:FE:76:47:9D:BF:5C:3F:AA:01:BD:A9:D9:57:91:55
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 0196515AA181754D368363FFFEFDF360B9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 08E5
Signing time: Sun 20 Apr 2025 04:00:16 +0000
Manifest this update: Sun 20 Apr 2025 04:00:16 +0000
Manifest next update: Mon 21 Apr 2025 04:00:16 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: 93mJBdEKgZAYugKCB2NjWhWASWLV894SU+1GviMj24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:a1:81:75:4d:36:83:63:ff:fe:fd:f3:60:b9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Apr 20 04:00:16 2025 GMT
Not After : Apr 21 04:00:16 2025 GMT
Subject: CN=8ed4567a4bfe76479dbf5c3faa01bda9d9579155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:88:7b:75:51:a8:60:8e:a4:bd:1c:a0:e1:
6d:f7:7d:b3:71:8d:a2:df:8e:38:b1:be:76:83:fc:
8b:e2:ad:7b:b2:47:c2:b6:4e:aa:db:f8:b7:a2:14:
63:05:f3:a6:ec:c3:19:4a:04:32:ff:bc:06:48:64:
f0:26:cf:03:ac:25:c8:40:85:31:04:02:19:ee:d8:
d0:5f:6f:1d:d1:e1:4e:75:43:2e:fe:2e:d2:55:1c:
f4:8f:6c:96:f4:44:f8:b6:69:80:22:b5:91:5d:34:
d9:14:f5:5b:e2:3c:95:c8:bc:df:7f:c5:01:eb:fc:
15:41:df:92:76:3a:97:db:e9:aa:4d:fc:13:cc:fc:
38:d2:e7:3c:d7:25:78:76:9d:df:07:68:a9:32:c8:
0f:6e:52:94:9e:09:7e:b4:9b:60:de:30:4b:56:f0:
c7:05:a0:50:c8:95:51:a0:af:6d:6c:47:62:ee:6b:
0a:0d:26:35:44:71:3d:d9:0e:3a:eb:5d:da:58:8c:
57:f3:0c:c6:1c:25:89:c4:ea:b7:6c:6a:0b:11:6d:
09:e0:76:f6:66:21:ea:b0:15:c0:ff:d0:67:a1:b7:
53:93:a8:e3:1d:d9:db:56:d0:39:31:88:90:7a:69:
04:ef:cc:3c:07:33:2d:ac:e8:33:8e:5c:d6:73:7c:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D4:56:7A:4B:FE:76:47:9D:BF:5C:3F:AA:01:BD:A9:D9:57:91:55
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:09:fa:7e:af:a6:cd:93:5f:c2:37:99:fd:bc:14:9b:30:e1:
8f:08:12:70:fd:f9:50:be:6b:84:93:62:56:24:af:a2:96:bc:
73:0e:df:5f:a4:15:99:bb:75:1d:7a:0c:57:fd:5b:b3:52:c1:
07:64:af:c9:f0:e1:d1:6f:22:70:2f:f2:3f:5a:67:d4:6c:fb:
b1:6d:9c:6e:ff:0f:37:d7:ba:dd:a1:fb:30:97:ab:b5:78:ea:
33:33:97:c0:71:b9:e0:91:1a:f6:09:3c:05:18:81:06:9e:c1:
aa:3c:8f:d5:6c:28:6a:fd:d8:6d:07:ef:d9:03:b6:0c:bf:1f:
43:43:63:48:48:68:2e:04:57:11:af:b1:61:9c:3c:61:b4:9c:
84:a0:65:13:7a:8d:c6:ed:d0:6e:69:81:be:0f:b7:bd:23:8c:
7f:10:cb:d1:30:c8:a4:be:85:34:5a:2a:85:ad:73:fa:65:ad:
c9:7c:eb:84:37:38:8b:d8:96:ea:aa:85:d4:90:76:19:96:76:
2b:53:74:fa:7c:20:b6:0b:dd:22:c9:4d:9f:4b:58:69:82:d4:
75:92:ca:72:8b:7b:21:3b:30:e8:ea:5f:e6:2b:3f:71:ac:f7:
83:f7:06:06:2a:90:0f:b1:fe:09:44:46:44:86:59:fc:d7:5e:
8f:f4:52:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRWqGBdU02g2P//v3zYLn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTYxMWY0ZGFhMWQ0OWFjZmIyZGIyMmE3ODBjY2U3YjA5
YmRmZTkwHhcNMjUwNDIwMDQwMDE2WhcNMjUwNDIxMDQwMDE2WjAzMTEwLwYDVQQD
Eyg4ZWQ0NTY3YTRiZmU3NjQ3OWRiZjVjM2ZhYTAxYmRhOWQ5NTc5MTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6yIe3VRqGCOpL0coOFt932zcY2i
3444sb52g/yL4q17skfCtk6q2/i3ohRjBfOm7MMZSgQy/7wGSGTwJs8DrCXIQIUx
BAIZ7tjQX28d0eFOdUMu/i7SVRz0j2yW9ET4tmmAIrWRXTTZFPVb4jyVyLzff8UB
6/wVQd+SdjqX2+mqTfwTzPw40uc81yV4dp3fB2ipMsgPblKUngl+tJtg3jBLVvDH
BaBQyJVRoK9tbEdi7msKDSY1RHE92Q46613aWIxX8wzGHCWJxOq3bGoLEW0J4Hb2
ZiHqsBXA/9BnobdTk6jjHdnbVtA5MYiQemkE78w8BzMtrOgzjlzWc3ztdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7UVnpL/nZHnb9cP6oBvanZV5FVMB8GA1UdIwQY
MBaAFCOmEfTaodSaz7LbIqeAzOewm9/pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMt
NDc3NmM3MDkzYTI5LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny85MTIxNTItN2RmOC00ZWJmLWIxZDMtNDc3NmM3MDkzYTI5
LzEvSTZZUjlOcWgxSnJQc3RzaXA0RE01N0NiMy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgn6fq+m
zZNfwjeZ/bwUmzDhjwgScP35UL5rhJNiViSvopa8cw7fX6QVmbt1HXoMV/1bs1LB
B2SvyfDh0W8icC/yP1pn1Gz7sW2cbv8PN9e63aH7MJertXjqMzOXwHG54JEa9gk8
BRiBBp7BqjyP1Wwoav3YbQfv2QO2DL8fQ0NjSEhoLgRXEa+xYZw8YbSchKBlE3qN
xu3QbmmBvg+3vSOMfxDL0TDIpL6FNFoqha1z+mWtyXzrhDc4i9iW6qqF1JB2GZZ2
K1N0+nwgtgvdIslNn0tYaYLUdZLKcot7ITsw6Opf5is/caz3g/cGBiqQD7H+CURG
RIZZ/Ndej/RSfw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:52:14 2025 by rpki-client