Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: 5Uqz9Eew/xvyJtc4cCDF2ZV7/ubfJcIMJsU6HOZlzXU=
Subject key identifier: 98:E1:68:31:3D:30:10:8D:2F:45:81:5D:AA:33:AA:F2:AF:3B:ED:E4
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 01964C6B88E7B1515AC9A37CEBDF99B0E700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 1114
Signing time: Sat 19 Apr 2025 05:00:37 +0000
Manifest this update: Sat 19 Apr 2025 05:00:37 +0000
Manifest next update: Sun 20 Apr 2025 05:00:37 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: eIrLVZ83+FanMKaPJ3sUqwVMlDwKiaFUyKp+fwWEfTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:88:e7:b1:51:5a:c9:a3:7c:eb:df:99:b0:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: Apr 19 05:00:37 2025 GMT
Not After : Apr 20 05:00:37 2025 GMT
Subject: CN=98e168313d30108d2f45815daa33aaf2af3bede4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:70:7f:2f:b2:64:a8:52:31:1b:01:41:87:
49:c6:31:9d:2d:fa:27:b8:71:18:bf:a9:56:e9:13:
76:62:cf:90:66:ff:63:2e:09:ee:e1:d7:48:34:d1:
a6:71:28:75:f6:93:df:3a:13:0c:e2:67:10:43:ed:
45:7f:1d:8d:a0:a1:e2:50:e8:1c:ee:93:f5:7a:f9:
9a:d8:a8:79:c1:ff:91:a3:b8:0f:bf:16:c3:a0:7b:
c8:8c:ff:08:d5:aa:69:58:76:6d:ce:60:d0:ba:90:
cd:e2:c5:44:d2:ee:30:a4:0f:8b:c9:7d:c0:32:2b:
d5:b4:35:94:b0:c2:a7:af:fa:99:fa:58:0e:66:08:
95:da:fa:15:ea:26:43:65:a1:88:8d:23:88:f3:62:
ec:46:db:02:68:8c:6a:7f:65:54:b4:8c:92:ea:ad:
a3:de:cb:eb:8c:7a:34:f1:45:7b:06:05:7e:5e:08:
0e:61:ad:0f:c7:61:95:1c:26:c5:91:bf:80:5c:15:
db:08:61:d8:6c:49:fb:9c:42:a3:8f:05:08:6a:95:
3f:21:aa:a4:3a:83:ff:6f:c4:c4:a5:a1:86:8b:0d:
97:03:b8:a3:32:90:21:61:77:16:5a:c6:bb:e5:e4:
92:16:43:63:f1:ff:9b:ac:9c:3a:cd:b6:40:31:c1:
17:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:68:31:3D:30:10:8D:2F:45:81:5D:AA:33:AA:F2:AF:3B:ED:E4
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:16:56:9a:e1:2e:0e:0a:51:2a:70:d4:23:52:22:a0:2c:
c1:cb:df:a9:74:48:13:17:2c:46:d3:cd:f7:07:cc:f9:f8:c6:
3f:52:5a:18:7b:14:dc:32:ce:1e:80:1c:6a:7e:ae:3f:69:6b:
9c:97:1f:f7:48:95:19:dd:3d:2b:ec:9d:5a:16:cc:33:f5:31:
44:5c:66:83:49:ab:a5:55:d7:eb:76:bf:42:21:b5:fe:b6:bb:
3c:1a:0e:df:95:26:04:36:d9:19:e5:8c:75:bd:22:16:fb:ef:
c4:7c:4a:2f:3d:68:b4:de:28:b9:8f:b5:1d:03:c9:dc:e6:74:
2f:af:6a:9e:ae:98:52:41:e0:53:e5:f3:4c:ef:ab:d8:12:04:
4c:71:d9:4d:83:a9:e4:c5:8c:34:a5:85:4d:aa:59:78:dc:f9:
cc:15:e3:0e:a5:0e:70:0f:94:37:66:b6:b5:fd:85:ea:78:ce:
a5:ed:aa:08:a9:ed:19:e1:ab:9b:e4:1d:d5:b2:c6:1a:8d:bd:
31:c0:da:d1:70:11:f5:16:de:56:b4:fc:7a:24:9f:32:e6:ae:
b7:f6:57:ed:9f:a9:86:7f:8e:f9:41:51:30:71:dd:b6:18:a8:
c7:18:31:a2:e6:f6:28:8b:42:bc:dc:28:63:d1:03:28:ad:08:
ff:c6:c8:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa4jnsVFayaN869+ZsOcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWJjMzI5NWFjMzA1Zjg1OTYwZTA0MDFiMDBmNDg3YTk0
YWIzOTQwHhcNMjUwNDE5MDUwMDM3WhcNMjUwNDIwMDUwMDM3WjAzMTEwLwYDVQQD
Eyg5OGUxNjgzMTNkMzAxMDhkMmY0NTgxNWRhYTMzYWFmMmFmM2JlZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoVwfy+yZKhSMRsBQYdJxjGdLfon
uHEYv6lW6RN2Ys+QZv9jLgnu4ddINNGmcSh19pPfOhMM4mcQQ+1Ffx2NoKHiUOgc
7pP1evma2Kh5wf+Ro7gPvxbDoHvIjP8I1appWHZtzmDQupDN4sVE0u4wpA+LyX3A
MivVtDWUsMKnr/qZ+lgOZgiV2voV6iZDZaGIjSOI82LsRtsCaIxqf2VUtIyS6q2j
3svrjHo08UV7BgV+XggOYa0Px2GVHCbFkb+AXBXbCGHYbEn7nEKjjwUIapU/Iaqk
OoP/b8TEpaGGiw2XA7ijMpAhYXcWWsa75eSSFkNj8f+brJw6zbZAMcEXUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjhaDE9MBCNL0WBXaozqvKvO+3kMB8GA1UdIwQY
MBaAFK8bwylawwX4WWDgQBsA9IepSrOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kYTI1MGItNDUyZC00ZjNmLWEzZTct
OGU1ZTY5NWU5NzhlLzEvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kYTI1MGItNDUyZC00ZjNmLWEzZTctOGU1ZTY5NWU5Nzhl
LzEvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRkWVprh
Lg4KUSpw1CNSIqAswcvfqXRIExcsRtPN9wfM+fjGP1JaGHsU3DLOHoAcan6uP2lr
nJcf90iVGd09K+ydWhbMM/UxRFxmg0mrpVXX63a/QiG1/ra7PBoO35UmBDbZGeWM
db0iFvvvxHxKLz1otN4ouY+1HQPJ3OZ0L69qnq6YUkHgU+XzTO+r2BIETHHZTYOp
5MWMNKWFTapZeNz5zBXjDqUOcA+UN2a2tf2F6njOpe2qCKntGeGrm+Qd1bLGGo29
McDa0XAR9RbeVrT8eiSfMuaut/ZX7Z+phn+O+UFRMHHdthioxxgxoub2KItCvNwo
Y9EDKK0I/8bITQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:42:48 2025 by rpki-client