Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: jYdB3YYHIVQUW8gDNiuX5ZcckA8SsBaYzeI80pBIvXg=
Subject key identifier: 6C:63:4C:1A:B2:20:75:49:C4:EC:89:CD:77:B7:22:D0:7B:25:D2:2E
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 01964DB509972BEDB1FAE4853C819B943A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 02C2
Signing time: Sat 19 Apr 2025 11:00:32 +0000
Manifest this update: Sat 19 Apr 2025 11:00:32 +0000
Manifest next update: Sun 20 Apr 2025 11:00:32 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: XSb8r1BiTlHDVpO7AslhCh6BsovzKywrrLod26YmE1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:09:97:2b:ed:b1:fa:e4:85:3c:81:9b:94:3a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Apr 19 11:00:32 2025 GMT
Not After : Apr 20 11:00:32 2025 GMT
Subject: CN=6c634c1ab2207549c4ec89cd77b722d07b25d22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:07:a2:ec:fb:52:7e:59:c0:b9:17:4b:63:
15:7a:8f:ac:fa:e9:e6:ee:a5:ea:75:7c:a4:16:9f:
fc:c5:3d:9d:38:ed:80:a5:01:cf:d1:f9:c6:eb:4e:
8a:a3:d2:f3:0e:dd:f9:2c:2b:1d:8a:7d:bb:a7:be:
15:5f:06:5e:bd:f4:18:89:13:d7:2b:af:72:61:54:
e8:43:9b:8b:c6:b7:1b:cc:1b:41:34:25:d0:c5:9f:
5e:78:f5:a0:fd:ec:85:34:5b:e5:4a:ba:3f:34:45:
63:3e:c9:71:31:fc:1d:29:b8:87:be:5b:8c:32:34:
10:3d:d3:39:4a:a3:2b:2f:50:da:5a:c4:28:9c:14:
30:7d:8d:10:05:e2:45:4c:bf:50:41:0e:9b:9a:6d:
a7:6d:59:24:4e:aa:b6:05:b7:8b:63:07:44:dd:ae:
d4:55:31:71:31:5f:4d:c1:55:bd:7c:47:fb:77:06:
61:f4:2b:78:9e:6d:e6:9b:7c:7b:1b:3b:85:98:51:
80:10:e8:5f:c2:ab:9d:31:72:e3:fd:85:36:11:4a:
6b:e8:27:ba:96:85:14:a4:c2:8b:e6:1e:61:86:4c:
78:5b:32:ff:1c:24:af:2c:52:62:9c:34:90:43:eb:
a4:5e:e6:2d:5f:f3:e4:97:68:a9:78:81:b6:13:86:
07:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:4C:1A:B2:20:75:49:C4:EC:89:CD:77:B7:22:D0:7B:25:D2:2E
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e9:b7:d3:fc:ee:97:0c:08:c4:ef:51:0b:f0:96:a3:b1:3e:
65:23:70:1c:b6:10:af:03:f7:bb:63:da:ba:e2:12:09:0f:38:
13:6c:e3:95:60:d9:29:cf:dd:08:0a:8b:8b:72:e1:8e:6d:fc:
9e:eb:1e:97:1a:da:3a:17:ec:f5:dd:8f:50:92:c7:8e:c5:70:
30:20:29:6f:f4:8a:c0:7d:b0:5b:da:13:f4:09:e4:1d:3f:fd:
d0:7e:e5:c5:b2:4f:10:12:c4:e5:66:68:01:35:b0:63:80:7f:
2b:16:a9:42:0c:79:ac:dd:d3:e9:2d:e2:ed:03:07:fe:f4:7d:
8b:69:73:3a:96:49:90:bd:7e:df:17:b3:a7:8c:32:58:65:30:
a8:4d:37:b2:d7:88:cc:d9:7f:0b:d6:13:71:e8:b3:31:b1:04:
1f:4c:ec:e2:62:a1:16:64:af:e6:cb:cc:99:13:9a:fd:c7:bf:
ae:97:5b:47:8b:1d:87:1b:99:03:2a:b0:9e:37:4e:b2:36:75:
2d:9c:54:d4:8b:b2:82:9f:27:b3:ac:37:c3:5e:3a:c1:65:11:
56:62:89:8e:b3:62:ce:e4:b6:15:67:73:a2:2d:da:8c:c0:7c:
2c:ba:eb:21:79:20:97:30:5b:d8:8b:39:98:2d:00:88:7b:8f:
7e:d8:e7:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNtQmXK+2x+uSFPIGblDo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNzNhYTg0MzdiYzY3MjM1MTlkMGYzMjBiZjFmMTcwNDE0
MWE1M2QwHhcNMjUwNDE5MTEwMDMyWhcNMjUwNDIwMTEwMDMyWjAzMTEwLwYDVQQD
Eyg2YzYzNGMxYWIyMjA3NTQ5YzRlYzg5Y2Q3N2I3MjJkMDdiMjVkMjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fUHouz7Un5ZwLkXS2MVeo+s+unm
7qXqdXykFp/8xT2dOO2ApQHP0fnG606Ko9LzDt35LCsdin27p74VXwZevfQYiRPX
K69yYVToQ5uLxrcbzBtBNCXQxZ9eePWg/eyFNFvlSro/NEVjPslxMfwdKbiHvluM
MjQQPdM5SqMrL1DaWsQonBQwfY0QBeJFTL9QQQ6bmm2nbVkkTqq2BbeLYwdE3a7U
VTFxMV9NwVW9fEf7dwZh9Ct4nm3mm3x7GzuFmFGAEOhfwqudMXLj/YU2EUpr6Ce6
loUUpMKL5h5hhkx4WzL/HCSvLFJinDSQQ+ukXuYtX/Pkl2ipeIG2E4YHzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxjTBqyIHVJxOyJzXe3ItB7JdIuMB8GA1UdIwQY
MBaAFCtzqoQ3vGcjUZ0PMgvx8XBBQaU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMt
NTIxZmNlNmI2NGQ5LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9iMGNhOTQtMGYxYi00ODhmLTk3MjMtNTIxZmNlNmI2NGQ5
LzEvSzNPcWhEZThaeU5SblE4eUNfSHhjRUZCcFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdem30/zu
lwwIxO9RC/CWo7E+ZSNwHLYQrwP3u2PauuISCQ84E2zjlWDZKc/dCAqLi3Lhjm38
nuselxraOhfs9d2PUJLHjsVwMCApb/SKwH2wW9oT9AnkHT/90H7lxbJPEBLE5WZo
ATWwY4B/KxapQgx5rN3T6S3i7QMH/vR9i2lzOpZJkL1+3xezp4wyWGUwqE03steI
zNl/C9YTceizMbEEH0zs4mKhFmSv5svMmROa/ce/rpdbR4sdhxuZAyqwnjdOsjZ1
LZxU1Iuygp8ns6w3w146wWURVmKJjrNizuS2FWdzoi3ajMB8LLrrIXkglzBb2Is5
mC0AiHuPftjnzA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:31:50 2025 by rpki-client