Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json)
Hash identifier: ZuMknLURpSlXeMpT8ZWWCMCMVVt6hq7KqJJEpTfLXd4=
Subject key identifier: 27:A7:EB:4F:61:77:FC:C8:48:B0:E7:8D:90:43:2A:41:CC:75:5E:A7
Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212
Certificate serial: 0196A1D2A1CA0B8A1E94ED5ABB493EEA6B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 19:00:57 +0000
Manifest this update: Mon 05 May 2025 19:00:57 +0000
Manifest next update: Tue 06 May 2025 19:00:57 +0000
Files and hashes: 1: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: KZg/nM+5R7SIbK42QNY/oQoYfUHI7crK354Vdnlu4Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:a1:ca:0b:8a:1e:94:ed:5a:bb:49:3e:ea:6b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212
Validity
Not Before: May 5 19:00:57 2025 GMT
Not After : May 6 19:00:57 2025 GMT
Subject: CN=27a7eb4f6177fcc848b0e78d90432a41cc755ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:d4:68:cf:1c:2d:ff:d8:3c:af:bc:66:d7:
d5:a2:12:d5:78:49:e9:d1:8f:24:1d:48:27:f7:6f:
d4:d9:0e:e5:8f:9b:2f:d2:75:66:b5:f7:7e:73:dc:
24:0b:c7:25:4a:2a:90:fa:14:66:e6:94:3d:c8:7f:
56:ea:70:2c:de:16:5f:4f:4f:f8:d4:3c:be:2a:00:
13:23:69:a1:00:44:cd:1d:c5:ac:ee:2b:8b:42:0a:
d0:e1:81:be:fc:a0:a8:84:f8:a9:ae:3c:5c:26:f2:
00:e8:78:20:01:cb:d2:57:b7:9e:be:0e:f6:7c:5d:
42:f2:74:c2:09:d0:0c:2f:ee:47:09:4d:0b:ec:85:
4e:b0:ed:14:23:d5:8d:d1:d6:6a:98:b3:82:f1:89:
26:a0:87:fb:d4:2e:22:ae:ef:17:26:e0:de:2b:91:
6e:74:93:ba:cd:94:b0:e0:98:c5:86:38:18:88:24:
71:e1:7a:73:25:cf:8a:17:b9:b1:b8:e7:d8:db:78:
2d:7c:07:c5:d5:f3:b6:63:ac:58:3e:35:97:6d:fd:
fe:3e:23:8d:d5:81:a5:73:b9:f5:95:cd:20:5d:ff:
a9:e9:c4:92:2d:fa:e5:95:72:6e:e0:a3:b5:b8:a2:
b2:63:5b:b1:ef:a6:6d:d1:59:54:83:51:14:32:a8:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A7:EB:4F:61:77:FC:C8:48:B0:E7:8D:90:43:2A:41:CC:75:5E:A7
X509v3 Authority Key Identifier:
keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2b:1c:c3:09:40:4a:72:1a:80:91:ef:31:13:49:22:c3:01:
47:fc:3e:fc:19:bc:84:8e:c4:2d:79:79:14:63:d4:18:96:e4:
89:a3:09:99:36:20:18:ab:57:fa:70:f1:ed:80:27:2b:7b:fd:
09:e2:79:ff:70:07:c7:ad:f9:6e:9d:0b:1f:d0:0b:e3:eb:7d:
8a:4b:d2:dd:d5:d2:b0:22:5d:2d:29:f1:9a:0b:c8:53:98:c2:
cb:f2:79:8f:31:29:54:5c:6f:d8:6d:33:cc:d3:87:64:9f:3c:
42:5a:d3:19:4d:7d:1e:0b:77:8a:0d:d5:62:03:6b:f0:ee:e0:
72:4e:ac:00:9a:46:a3:6c:2f:ba:16:8d:e6:b3:36:88:f3:74:
06:7f:11:d8:68:3f:52:83:3b:56:d4:16:5b:69:45:9d:cc:f4:
b4:0c:70:00:8e:21:96:e5:55:8c:64:61:e1:74:77:0d:fe:90:
54:29:f4:8a:9b:ad:04:d0:cf:51:20:18:2e:c6:4b:88:49:22:
0f:ac:13:34:40:ac:31:6b:24:45:8a:e9:a7:da:b3:12:0e:c9:
e5:e8:de:13:6c:ac:20:5c:e7:78:24:db:89:c9:ef:2a:17:74:
0c:51:2e:71:71:f2:6c:35:86:77:82:13:bf:a4:b1:22:88:c8:
c2:bc:2b:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0qHKC4oelO1au0k+6msqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODg5YmRhNTRmODg1N2RhNDI5MGM2Nzc5YmMwMDYxMWU3
M2UyMTIwHhcNMjUwNTA1MTkwMDU3WhcNMjUwNTA2MTkwMDU3WjAzMTEwLwYDVQQD
EygyN2E3ZWI0ZjYxNzdmY2M4NDhiMGU3OGQ5MDQzMmE0MWNjNzU1ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vLUaM8cLf/YPK+8ZtfVohLVeEnp
0Y8kHUgn92/U2Q7lj5sv0nVmtfd+c9wkC8clSiqQ+hRm5pQ9yH9W6nAs3hZfT0/4
1Dy+KgATI2mhAETNHcWs7iuLQgrQ4YG+/KCohPiprjxcJvIA6HggAcvSV7eevg72
fF1C8nTCCdAML+5HCU0L7IVOsO0UI9WN0dZqmLOC8YkmoIf71C4iru8XJuDeK5Fu
dJO6zZSw4JjFhjgYiCRx4XpzJc+KF7mxuOfY23gtfAfF1fO2Y6xYPjWXbf3+PiON
1YGlc7n1lc0gXf+p6cSSLfrllXJu4KO1uKKyY1ux76Zt0VlUg1EUMqhzXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCen609hd/zISLDnjZBDKkHMdV6nMB8GA1UdIwQY
MBaAFHWIm9pU+IV9pCkMZ3m8AGEec+ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzct
ZTc4NTUzYTAzN2JkLzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzctZTc4NTUzYTAzN2Jk
LzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCscwwlA
SnIagJHvMRNJIsMBR/w+/Bm8hI7ELXl5FGPUGJbkiaMJmTYgGKtX+nDx7YAnK3v9
CeJ5/3AHx635bp0LH9AL4+t9ikvS3dXSsCJdLSnxmgvIU5jCy/J5jzEpVFxv2G0z
zNOHZJ88QlrTGU19Hgt3ig3VYgNr8O7gck6sAJpGo2wvuhaN5rM2iPN0Bn8R2Gg/
UoM7VtQWW2lFncz0tAxwAI4hluVVjGRh4XR3Df6QVCn0iputBNDPUSAYLsZLiEki
D6wTNECsMWskRYrpp9qzEg7J5ejeE2ysIFzneCTbicnvKhd0DFEucXHybDWGd4IT
v6SxIojIwrwrXg==
-----END CERTIFICATE-----
Generated at Tue May 6 00:36:01 2025 by rpki-client