Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
File: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft (raw, json)
Hash identifier: LpvIu8IceSVKXCv4slOG5fLJV+/WexSIfDdMztOuqao=
Subject key identifier: A3:54:49:2C:07:5D:01:8E:BE:37:B4:D0:D5:AC:F1:E8:43:D8:25:DA
Authority key identifier: D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
Certificate issuer: /CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Certificate serial: 019633BF71F18703F8196D515E20ADAD8186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
Manifest number: 0E11
Signing time: Mon 14 Apr 2025 10:01:46 +0000
Manifest this update: Mon 14 Apr 2025 10:01:46 +0000
Manifest next update: Tue 15 Apr 2025 10:01:46 +0000
Files and hashes: 1: 1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl (hash: e5Iqbs1v+XLxnOhx11KaE08+estDmFUY0OIlAat7sVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:bf:71:f1:87:03:f8:19:6d:51:5e:20:ad:ad:81:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42a53da038252f64b6c29359cfac4104c35b7e9
Validity
Not Before: Apr 14 10:01:46 2025 GMT
Not After : Apr 15 10:01:46 2025 GMT
Subject: CN=a354492c075d018ebe37b4d0d5acf1e843d825da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:f6:63:ca:bb:1e:58:3d:3e:f6:39:50:5a:
25:84:c1:1f:ae:d2:f9:31:85:72:6c:c1:3c:b2:96:
85:7b:8e:2d:3b:f1:0e:df:23:12:a7:c5:9f:59:9c:
6a:9b:3f:4b:31:93:c2:55:ad:8b:0b:88:ad:ad:23:
11:9f:c1:48:c1:50:fc:bd:9d:11:a2:4a:a4:8d:77:
14:87:bd:be:da:77:4c:fb:06:42:22:4d:87:19:f3:
18:cc:b6:f2:ba:6d:3b:fe:ba:5b:b3:19:d3:16:4c:
18:7d:4b:ee:10:69:bf:ab:91:51:63:02:c0:dc:fc:
6a:7d:00:31:f5:ed:6a:51:f6:21:d6:a8:f5:ca:62:
80:88:fc:5e:64:d9:69:36:66:fd:7e:5b:2c:24:8e:
bf:26:ca:10:56:b4:c8:f4:89:af:35:1b:2e:ab:a6:
ea:a4:00:46:d4:ca:a9:57:f7:99:70:8c:b6:13:12:
27:14:24:df:33:59:1e:57:81:8c:f9:f6:0b:a9:a9:
d8:cb:4d:0b:a4:53:96:e7:49:4b:a5:04:c2:90:49:
de:d0:fc:df:e3:a4:6e:f5:4c:c6:3b:24:4b:f8:cf:
ce:28:30:17:13:37:85:1f:77:62:88:b1:bc:ff:5f:
60:51:0c:5e:a3:2b:07:7e:96:4d:37:4e:c5:84:2b:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:49:2C:07:5D:01:8E:BE:37:B4:D0:D5:AC:F1:E8:43:D8:25:DA
X509v3 Authority Key Identifier:
keyid:D4:2A:53:DA:03:82:52:F6:4B:6C:29:35:9C:FA:C4:10:4C:35:B7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CpT2gOCUvZLbCk1nPrEEEw1t-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/160585-69ed-4bb4-a3da-c8699dc73100/1/1CpT2gOCUvZLbCk1nPrEEEw1t-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:02:c3:59:e2:6b:01:fa:ae:91:ce:bb:18:d1:19:cf:05:
2f:e0:58:f5:b8:84:ed:92:ca:be:24:33:d9:ea:01:d8:09:25:
e5:72:a8:a7:c5:e5:db:e1:38:4a:4e:a5:8a:16:64:58:98:36:
eb:53:d2:ff:93:15:ce:38:ed:0c:d8:89:38:07:0e:6e:64:bc:
84:55:7c:bc:a3:60:50:eb:ec:ce:e5:a4:7d:90:dd:1a:bd:93:
22:07:41:7a:c6:d6:4f:75:f2:7e:ed:b0:5f:55:90:4a:e6:f9:
58:89:22:a6:3a:7c:83:61:8b:96:22:f5:5b:4e:bf:bd:77:be:
46:ce:c9:e1:c4:ef:97:3b:3b:89:b3:7f:61:74:90:0b:ed:a0:
f1:91:43:08:00:a0:03:30:70:f1:4b:e0:2a:e4:59:c5:54:17:
11:0e:df:65:ab:37:0c:44:73:88:ee:76:98:e3:75:ec:9e:ee:
d0:6f:e0:ec:50:c0:3e:6f:1b:8d:ab:7a:c3:7e:96:ae:af:a3:
29:a4:ce:96:62:74:74:d7:23:55:9b:8e:09:6a:20:53:11:d2:
02:a3:cc:f3:55:6e:b7:60:64:e0:9b:94:c0:16:6c:86:5e:a6:
03:a3:71:7b:dd:ce:8f:f7:33:be:bb:a2:25:0f:c9:1c:b7:66:
94:d3:17:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYzv3HxhwP4GW1RXiCtrYGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmE1M2RhMDM4MjUyZjY0YjZjMjkzNTljZmFjNDEwNGMz
NWI3ZTkwHhcNMjUwNDE0MTAwMTQ2WhcNMjUwNDE1MTAwMTQ2WjAzMTEwLwYDVQQD
EyhhMzU0NDkyYzA3NWQwMThlYmUzN2I0ZDBkNWFjZjFlODQzZDgyNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQr2Y8q7Hlg9PvY5UFolhMEfrtL5
MYVybME8spaFe44tO/EO3yMSp8WfWZxqmz9LMZPCVa2LC4itrSMRn8FIwVD8vZ0R
okqkjXcUh72+2ndM+wZCIk2HGfMYzLbyum07/rpbsxnTFkwYfUvuEGm/q5FRYwLA
3PxqfQAx9e1qUfYh1qj1ymKAiPxeZNlpNmb9flssJI6/JsoQVrTI9ImvNRsuq6bq
pABG1MqpV/eZcIy2ExInFCTfM1keV4GM+fYLqanYy00LpFOW50lLpQTCkEne0Pzf
46Ru9UzGOyRL+M/OKDAXEzeFH3diiLG8/19gUQxeoysHfpZNN07FhCvLdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNUSSwHXQGOvje00NWs8ehD2CXaMB8GA1UdIwQY
MBaAFNQqU9oDglL2S2wpNZz6xBBMNbfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEt
Yzg2OTlkYzczMTAwLzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xNjA1ODUtNjllZC00YmI0LWEzZGEtYzg2OTlkYzczMTAw
LzEvMUNwVDJnT0NVdlpMYkNrMW5QckVFRXcxdC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANekCw1ni
awH6rpHOuxjRGc8FL+BY9biE7ZLKviQz2eoB2Akl5XKop8Xl2+E4Sk6lihZkWJg2
61PS/5MVzjjtDNiJOAcObmS8hFV8vKNgUOvszuWkfZDdGr2TIgdBesbWT3Xyfu2w
X1WQSub5WIkipjp8g2GLliL1W06/vXe+Rs7J4cTvlzs7ibN/YXSQC+2g8ZFDCACg
AzBw8UvgKuRZxVQXEQ7fZas3DERziO52mON17J7u0G/g7FDAPm8bjat6w36Wrq+j
KaTOlmJ0dNcjVZuOCWogUxHSAqPM81Vut2Bk4JuUwBZshl6mA6Nxe93Oj/czvrui
JQ/JHLdmlNMX+g==
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:57:38 2025 by rpki-client