Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
File: RBme-tyIgD3BoGVhD2R8_c4w9UE.mft (raw, json)
Hash identifier: Uu1Bfe2+8DGxjXyoihi//y17RFiFsIJEcMOQKruYmLI=
Subject key identifier: EF:FF:06:72:CA:F8:6A:B3:07:42:44:BF:95:66:04:F0:9E:27:B1:5E
Authority key identifier: 44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
Certificate issuer: /CN=44199efadc88803dc1a065610f647cfdce30f541
Certificate serial: 019655A5FB83CA15EEFC404FA4AB22390F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 00:01:03 +0000
Manifest this update: Mon 21 Apr 2025 00:01:03 +0000
Manifest next update: Tue 22 Apr 2025 00:01:03 +0000
Files and hashes: 1: RBme-tyIgD3BoGVhD2R8_c4w9UE.crl (hash: 7J5Ls6KDqDcM1O4xdkm1wBncHTgszrkKK2zfwtNQqPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:fb:83:ca:15:ee:fc:40:4f:a4:ab:22:39:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44199efadc88803dc1a065610f647cfdce30f541
Validity
Not Before: Apr 21 00:01:03 2025 GMT
Not After : Apr 22 00:01:03 2025 GMT
Subject: CN=efff0672caf86ab3074244bf956604f09e27b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:bf:24:7e:96:56:b2:8b:3f:a1:b4:70:8b:
78:32:cd:cf:30:70:3c:21:db:39:38:c2:f7:a9:dd:
1b:e3:60:c9:0c:09:9d:71:76:b5:3c:f5:f7:66:e4:
01:59:3a:b1:ed:59:f4:b4:40:99:b0:86:cf:4f:7f:
40:8b:c2:56:08:33:dd:d8:ec:60:26:58:84:6d:1a:
32:fe:07:ea:74:18:c5:3e:d6:2a:97:88:55:42:aa:
6c:c4:97:1b:00:a4:c4:51:52:7b:30:70:3a:a3:f5:
0a:81:5a:37:84:44:6f:7c:00:a5:9a:aa:2f:ff:a8:
1a:a2:32:fb:b7:6f:9e:b1:c7:e4:d9:da:1b:a2:52:
b5:ef:2b:b5:d0:c5:86:82:04:81:6d:98:98:19:f8:
56:ea:1e:41:8f:94:9b:d9:e9:e5:92:67:bc:5f:b3:
10:f1:a5:16:f9:2f:d6:a2:dd:39:a1:fb:62:a7:34:
d7:ec:c3:e3:4c:70:14:1b:df:55:1e:10:81:57:74:
9b:99:8f:4e:df:da:76:59:c8:d6:e7:87:17:cf:24:
49:b9:4e:ec:ea:74:17:73:ce:69:cf:8c:bc:26:82:
20:17:e7:9e:de:0c:9c:c9:cb:d1:79:32:72:49:80:
11:d0:71:24:a1:53:9e:5c:21:4e:6b:6d:08:b9:38:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:06:72:CA:F8:6A:B3:07:42:44:BF:95:66:04:F0:9E:27:B1:5E
X509v3 Authority Key Identifier:
keyid:44:19:9E:FA:DC:88:80:3D:C1:A0:65:61:0F:64:7C:FD:CE:30:F5:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBme-tyIgD3BoGVhD2R8_c4w9UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21f016-8fc3-443a-b3eb-228d2fe6ca7f/1/RBme-tyIgD3BoGVhD2R8_c4w9UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:25:ff:b7:dd:50:10:7b:8e:bd:e8:08:25:07:f9:4e:db:82:
9b:4b:36:6b:28:6a:7f:6a:1a:6f:d6:d0:45:6c:98:01:42:fa:
97:34:08:16:69:75:db:cb:25:29:d0:f7:0c:3e:d9:96:d7:80:
90:b6:5a:95:5e:8e:0d:26:7b:d8:14:54:de:a4:4a:d0:6b:93:
31:f9:42:12:38:41:6e:f7:73:e2:8b:56:c4:fa:b1:82:78:db:
f2:0d:a1:d8:6e:16:37:c8:3d:0d:fa:65:ab:ce:d1:41:d6:57:
1b:17:38:8c:ab:da:76:09:69:3a:96:14:e8:d6:bb:57:07:51:
b3:60:73:5d:2b:70:7f:09:5c:f4:96:a9:09:b2:70:ab:df:a0:
eb:87:9b:60:4b:5a:76:a3:42:5f:22:e1:b8:f3:3f:46:5a:e1:
88:6e:15:92:4c:3f:49:88:b9:4d:7a:f5:76:7d:5e:29:dc:63:
c7:56:62:3b:f9:2e:c0:2c:db:db:93:e9:99:c2:89:ac:6a:e1:
79:9c:a3:02:d6:c6:e1:20:2f:72:a8:f3:62:f2:8d:33:a8:05:
f0:a6:40:31:79:ab:2d:8e:a8:d9:c3:4d:5c:0c:a6:78:70:87:
8c:04:1a:64:67:e0:e0:bb:7e:59:ff:a2:b5:a1:b1:94:84:0d:
e7:2c:06:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpfuDyhXu/EBPpKsiOQ9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTk5ZWZhZGM4ODgwM2RjMWEwNjU2MTBmNjQ3Y2ZkY2Uz
MGY1NDEwHhcNMjUwNDIxMDAwMTAzWhcNMjUwNDIyMDAwMTAzWjAzMTEwLwYDVQQD
EyhlZmZmMDY3MmNhZjg2YWIzMDc0MjQ0YmY5NTY2MDRmMDllMjdiMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQK/JH6WVrKLP6G0cIt4Ms3PMHA8
Ids5OML3qd0b42DJDAmdcXa1PPX3ZuQBWTqx7Vn0tECZsIbPT39Ai8JWCDPd2Oxg
JliEbRoy/gfqdBjFPtYql4hVQqpsxJcbAKTEUVJ7MHA6o/UKgVo3hERvfAClmqov
/6gaojL7t2+escfk2dobolK17yu10MWGggSBbZiYGfhW6h5Bj5Sb2enlkme8X7MQ
8aUW+S/Wot05oftipzTX7MPjTHAUG99VHhCBV3SbmY9O39p2WcjW54cXzyRJuU7s
6nQXc85pz4y8JoIgF+ee3gycycvReTJySYAR0HEkoVOeXCFOa20IuThXqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO//BnLK+GqzB0JEv5VmBPCeJ7FeMB8GA1UdIwQY
MBaAFEQZnvrciIA9waBlYQ9kfP3OMPVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWIt
MjI4ZDJmZTZjYTdmLzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yMWYwMTYtOGZjMy00NDNhLWIzZWItMjI4ZDJmZTZjYTdm
LzEvUkJtZS10eUlnRDNCb0dWaEQyUjhfYzR3OVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyX/t91Q
EHuOvegIJQf5TtuCm0s2ayhqf2oab9bQRWyYAUL6lzQIFml128slKdD3DD7ZlteA
kLZalV6ODSZ72BRU3qRK0GuTMflCEjhBbvdz4otWxPqxgnjb8g2h2G4WN8g9Dfpl
q87RQdZXGxc4jKvadglpOpYU6Na7VwdRs2BzXStwfwlc9JapCbJwq9+g64ebYEta
dqNCXyLhuPM/RlrhiG4Vkkw/SYi5TXr1dn1eKdxjx1ZiO/kuwCzb25PpmcKJrGrh
eZyjAtbG4SAvcqjzYvKNM6gF8KZAMXmrLY6o2cNNXAymeHCHjAQaZGfg4Lt+Wf+i
taGxlIQN5ywGjA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:40:53 2025 by rpki-client