Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: 57lxb7G+Acrk/E+ZbiK/vyIWTo9cCrCqX+XMk0x7V7g=
Subject key identifier: AD:74:E2:6A:CC:9B:C8:99:67:3F:CC:11:57:75:AF:06:14:58:1D:C2
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 0196120E776A8CD51799E6271740BFC52561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 0255
Signing time: Mon 07 Apr 2025 21:01:00 +0000
Manifest this update: Mon 07 Apr 2025 21:01:00 +0000
Manifest next update: Tue 08 Apr 2025 21:01:00 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: Xl509AAYc9kyNUSo2EO7ItM2uLXZoT4r7BwdOyguSu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:77:6a:8c:d5:17:99:e6:27:17:40:bf:c5:25:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Apr 7 21:01:00 2025 GMT
Not After : Apr 8 21:01:00 2025 GMT
Subject: CN=ad74e26acc9bc899673fcc115775af0614581dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:b0:7b:3d:7c:9c:39:dd:f4:1d:e3:db:0a:
00:74:f8:6a:98:bd:b1:aa:dc:c5:2b:82:e9:9b:c7:
d6:f4:f0:61:ea:fa:c4:62:d0:d3:0c:31:10:53:fc:
31:d0:1d:b0:78:d0:72:60:33:76:1d:c6:07:27:b4:
93:fa:2a:85:08:ef:52:62:49:22:9e:ae:2f:08:3c:
71:0a:0d:26:d4:9d:54:8e:b2:2d:ef:55:f2:7f:28:
ea:9c:d5:d6:18:3b:7c:b2:49:e1:7d:51:89:ee:a7:
80:4c:eb:af:4b:da:cd:6b:6e:e6:ec:97:27:de:ef:
11:eb:a7:c2:79:76:95:cf:f3:79:3f:c3:dd:8f:f5:
4f:a6:de:d9:dc:ec:3d:0f:1d:48:d2:86:74:64:61:
46:32:44:a2:04:bf:39:40:13:72:fe:d5:84:08:b3:
3c:4f:20:ef:7e:54:1a:91:d5:3d:54:24:b6:91:bb:
7b:b2:d0:10:9f:12:3f:c1:88:8e:34:5e:e6:14:15:
6f:c7:95:a2:c5:49:a7:bf:2c:bc:90:a9:0b:df:74:
3d:04:d0:44:40:04:71:17:16:ab:dd:34:7b:4f:50:
a2:3a:01:4e:ae:fc:bc:43:11:a3:cf:16:3d:97:6a:
51:0e:88:19:f0:e5:fe:0f:42:66:42:97:a2:c4:f0:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:E2:6A:CC:9B:C8:99:67:3F:CC:11:57:75:AF:06:14:58:1D:C2
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1d:7f:85:43:d5:34:74:17:67:99:82:43:7f:d9:57:43:ea:
ba:48:bb:23:94:08:22:70:a6:a4:44:82:6b:71:d5:1d:b9:3b:
a4:30:0c:e2:35:dc:61:e1:b8:a2:57:d7:43:9d:d9:08:8e:f4:
63:69:a5:df:d7:56:ac:4b:50:17:60:45:98:9c:7a:c2:f4:71:
16:50:7f:b1:0f:d8:a4:a2:4a:50:13:ff:29:e4:fb:38:44:56:
6a:89:43:ce:78:78:55:df:69:61:52:1a:30:93:f7:ae:b0:e1:
41:f7:1b:ce:55:6f:d5:62:69:89:6f:00:67:ae:47:8d:1c:8d:
a7:74:8e:8b:44:90:cc:fc:c1:9a:d1:5b:ba:de:9e:89:45:89:
88:88:25:43:c1:79:dd:b5:1a:9c:42:f1:ed:28:bd:d2:7d:e5:
93:96:f7:e1:8f:9e:f0:43:c9:a5:95:18:21:b0:53:cc:18:33:
04:fb:7c:50:8b:96:04:35:0b:95:84:13:85:8d:63:0c:41:be:
3a:a7:ab:b8:42:5c:db:c8:4b:7e:25:72:c8:75:3b:e2:a8:29:
aa:5f:fb:86:19:ef:ad:51:3e:16:0e:97:f9:f8:7f:9e:84:99:
89:45:d9:e9:78:d3:76:4c:91:1a:59:8c:64:fe:f6:b4:fc:33:
33:fa:0e:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYSDndqjNUXmeYnF0C/xSVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDgzNjNlNWMxMDY3YWQxODhjMzgwMzkwYjA5ZDA5YTYy
YTE3MDkwHhcNMjUwNDA3MjEwMTAwWhcNMjUwNDA4MjEwMTAwWjAzMTEwLwYDVQQD
EyhhZDc0ZTI2YWNjOWJjODk5NjczZmNjMTE1Nzc1YWYwNjE0NTgxZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6uwez18nDnd9B3j2woAdPhqmL2x
qtzFK4Lpm8fW9PBh6vrEYtDTDDEQU/wx0B2weNByYDN2HcYHJ7ST+iqFCO9SYkki
nq4vCDxxCg0m1J1UjrIt71XyfyjqnNXWGDt8sknhfVGJ7qeATOuvS9rNa27m7Jcn
3u8R66fCeXaVz/N5P8Pdj/VPpt7Z3Ow9Dx1I0oZ0ZGFGMkSiBL85QBNy/tWECLM8
TyDvflQakdU9VCS2kbt7stAQnxI/wYiONF7mFBVvx5WixUmnvyy8kKkL33Q9BNBE
QARxFxar3TR7T1CiOgFOrvy8QxGjzxY9l2pRDogZ8OX+D0JmQpeixPDHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK104mrMm8iZZz/MEVd1rwYUWB3CMB8GA1UdIwQY
MBaAFIwINj5cEGetGIw4A5CwnQmmKhcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYt
Yjg3YWI2YjBhMDI5LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYtYjg3YWI2YjBhMDI5
LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPx1/hUPV
NHQXZ5mCQ3/ZV0Pquki7I5QIInCmpESCa3HVHbk7pDAM4jXcYeG4olfXQ53ZCI70
Y2ml39dWrEtQF2BFmJx6wvRxFlB/sQ/YpKJKUBP/KeT7OERWaolDznh4Vd9pYVIa
MJP3rrDhQfcbzlVv1WJpiW8AZ65HjRyNp3SOi0SQzPzBmtFbut6eiUWJiIglQ8F5
3bUanELx7Si90n3lk5b34Y+e8EPJpZUYIbBTzBgzBPt8UIuWBDULlYQThY1jDEG+
OqeruEJc28hLfiVyyHU74qgpql/7hhnvrVE+Fg6X+fh/noSZiUXZ6XjTdkyRGlmM
ZP72tPwzM/oOCA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:57 2025 by rpki-client