Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: YhYFUjvD3viim5AZY/VCMxXed1GzTjwnEZwAc6UbUo8=
Subject key identifier: FF:82:F1:32:0B:7E:94:58:9F:83:AC:47:A9:31:31:59:BE:11:BA:DB
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 019643D70F19C6E2284ECBDCBBB2B8FF3961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 0484
Signing time: Thu 17 Apr 2025 13:01:29 +0000
Manifest this update: Thu 17 Apr 2025 13:01:29 +0000
Manifest next update: Fri 18 Apr 2025 13:01:29 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: acEPeX5cNThEmYPa5+xa41iJU31oWoO2EbTmWFKXfCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:0f:19:c6:e2:28:4e:cb:dc:bb:b2:b8:ff:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: Apr 17 13:01:29 2025 GMT
Not After : Apr 18 13:01:29 2025 GMT
Subject: CN=ff82f1320b7e94589f83ac47a9313159be11badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:0b:c8:30:87:99:d5:80:7f:e6:00:99:45:
5f:f5:31:86:60:11:93:e9:48:1c:78:21:1b:81:2f:
8c:20:64:bc:bf:f0:7f:79:15:6d:6a:f4:c3:d7:01:
ae:5e:b2:44:49:1c:aa:d3:8b:8f:e6:f8:9a:ca:de:
c8:04:7b:6d:57:b7:29:49:d3:e7:d9:b8:3a:c7:2b:
eb:8c:b0:95:eb:df:05:3f:fa:0a:f6:d6:75:ba:ed:
ec:7c:c8:21:41:86:25:3c:a3:09:2b:6a:a5:7f:c5:
c0:ff:32:80:c8:0f:d9:a2:f4:78:d4:6e:3f:ae:2b:
68:8c:71:2a:7b:84:9d:d5:ca:91:12:1b:2d:4e:06:
f9:0c:cf:66:eb:37:6a:cb:65:a6:93:e9:e2:e7:e4:
e2:4d:53:c5:0e:15:e5:2b:aa:88:ef:0a:c2:8a:fb:
47:8a:19:88:26:6c:3b:80:27:5a:91:28:91:f3:0a:
5d:31:d4:32:ca:9d:a2:b8:30:4a:62:9d:3e:a4:ad:
f1:b2:c3:9e:fb:72:f9:69:63:fc:6e:45:7d:c9:35:
a8:72:78:fc:b9:4e:67:cc:74:d4:20:38:01:06:01:
9d:02:f5:64:2e:db:61:dc:c1:14:57:68:7b:1d:ec:
09:69:33:60:d1:a7:df:50:c5:06:a8:5e:dd:be:fa:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:82:F1:32:0B:7E:94:58:9F:83:AC:47:A9:31:31:59:BE:11:BA:DB
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:35:1d:79:75:98:3e:72:43:cb:14:cb:88:73:db:4d:24:
d8:4c:7f:9f:a8:a6:2c:84:77:99:9c:f1:6c:86:b5:63:c6:e3:
8c:19:1c:c5:48:e8:6d:bc:ae:e1:c8:95:28:bf:0b:08:7e:72:
49:e2:65:67:f4:84:0d:51:93:91:8c:7b:3d:80:c7:23:8c:1f:
60:c6:e8:5b:8c:49:a9:4b:55:e3:cc:14:2a:94:ff:5a:5d:86:
67:0f:1c:29:73:49:e9:a0:34:bb:f0:4b:28:24:37:71:9a:23:
9f:e0:24:b2:9c:87:0b:47:39:bb:06:d3:d5:97:7f:be:81:56:
f3:8a:58:90:5c:8e:ed:89:72:e5:5e:25:2d:b3:db:be:2e:cf:
67:28:41:82:0a:19:d8:cb:fc:6b:cd:6a:0b:f3:1a:c0:21:de:
ec:30:43:c3:1c:5c:6f:97:4d:8f:5e:97:70:09:d8:e0:9f:7a:
4c:da:92:7e:5b:44:40:b3:71:61:c8:9e:d2:39:6f:7e:d1:e1:
d0:68:15:a7:a1:01:71:03:09:07:b9:e8:d8:5e:16:fd:42:22:
85:56:59:b0:51:17:42:42:d5:c3:12:20:41:46:ae:55:81:3c:
41:07:29:70:4f:b3:2a:c8:39:80:5e:32:df:7e:8b:31:5b:c4:
fb:b6:68:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1w8ZxuIoTsvcu7K4/zlhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODIzMDI4YWVmZmM1OTlhZWZmYTVkZTViOTBjY2FkMzM0
OTdkYjkwHhcNMjUwNDE3MTMwMTI5WhcNMjUwNDE4MTMwMTI5WjAzMTEwLwYDVQQD
EyhmZjgyZjEzMjBiN2U5NDU4OWY4M2FjNDdhOTMxMzE1OWJlMTFiYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PELyDCHmdWAf+YAmUVf9TGGYBGT
6UgceCEbgS+MIGS8v/B/eRVtavTD1wGuXrJESRyq04uP5viayt7IBHttV7cpSdPn
2bg6xyvrjLCV698FP/oK9tZ1uu3sfMghQYYlPKMJK2qlf8XA/zKAyA/ZovR41G4/
ritojHEqe4Sd1cqREhstTgb5DM9m6zdqy2Wmk+ni5+TiTVPFDhXlK6qI7wrCivtH
ihmIJmw7gCdakSiR8wpdMdQyyp2iuDBKYp0+pK3xssOe+3L5aWP8bkV9yTWocnj8
uU5nzHTUIDgBBgGdAvVkLtth3MEUV2h7HewJaTNg0affUMUGqF7dvvpgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+C8TILfpRYn4OsR6kxMVm+EbrbMB8GA1UdIwQY
MBaAFHyCMCiu/8WZrv+l3luQzK0zSX25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMt
Njg2OTFkYWJiZGYzLzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMtNjg2OTFkYWJiZGYz
LzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaLw1HXl1
mD5yQ8sUy4hz200k2Ex/n6imLIR3mZzxbIa1Y8bjjBkcxUjobbyu4ciVKL8LCH5y
SeJlZ/SEDVGTkYx7PYDHI4wfYMboW4xJqUtV48wUKpT/Wl2GZw8cKXNJ6aA0u/BL
KCQ3cZojn+AkspyHC0c5uwbT1Zd/voFW84pYkFyO7Yly5V4lLbPbvi7PZyhBggoZ
2Mv8a81qC/MawCHe7DBDwxxcb5dNj16XcAnY4J96TNqSfltEQLNxYcie0jlvftHh
0GgVp6EBcQMJB7no2F4W/UIihVZZsFEXQkLVwxIgQUauVYE8QQcpcE+zKsg5gF4y
336LMVvE+7Zo6w==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:23 2025 by rpki-client