Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
File: mrlC3a28mskLTs---tsjEyOmcFU.mft (raw, json)
Hash identifier: XNdtwjzhnx+J2BlX6LDVYMmXePC8LWj0N6O+RGLg5vY=
Subject key identifier: B6:27:2D:73:98:4B:27:D5:F8:A5:DD:51:5E:EC:E6:BC:83:17:19:97
Authority key identifier: 9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
Certificate issuer: /CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Certificate serial: 01965982E19CF415EFCBAE64DD25E46ED272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
Manifest number: 0BE5
Signing time: Mon 21 Apr 2025 18:01:11 +0000
Manifest this update: Mon 21 Apr 2025 18:01:11 +0000
Manifest next update: Tue 22 Apr 2025 18:01:11 +0000
Files and hashes: 1: mrlC3a28mskLTs---tsjEyOmcFU.crl (hash: 5IjLVIhy9jYjlCXS1owDbt90lyOu5kYVF0BvrZlM9OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:e1:9c:f4:15:ef:cb:ae:64:dd:25:e4:6e:d2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab942ddadbc9ac90b4ecfbefadb231323a67055
Validity
Not Before: Apr 21 18:01:11 2025 GMT
Not After : Apr 22 18:01:11 2025 GMT
Subject: CN=b6272d73984b27d5f8a5dd515eece6bc83171997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:a2:49:d3:fd:28:58:90:09:0c:15:4d:8a:
17:cd:3f:60:f3:1b:29:37:fd:e4:8d:0b:ca:ea:bf:
98:4f:ab:f1:8e:c2:a7:1f:9b:9f:f2:38:74:f8:0e:
39:f8:81:3a:b9:eb:89:47:77:7c:b8:5b:1d:96:79:
7e:6b:93:73:37:77:ef:ac:9a:ef:e0:86:43:b6:5e:
ea:48:b0:6c:c2:87:63:75:ae:d2:87:29:4a:bb:4a:
c4:10:19:76:ee:7c:d8:a7:65:78:7f:a7:5a:da:fa:
2b:14:64:ca:cb:f8:80:05:c0:04:d8:51:9f:6d:2b:
94:f7:88:26:eb:41:4e:9b:56:54:ef:79:ed:81:82:
a6:fe:aa:49:13:48:d4:87:11:32:36:bd:9b:87:84:
69:de:93:fe:b4:e9:09:68:a1:7f:ea:8b:a6:9b:ee:
a5:84:1b:93:60:94:71:bf:ea:0a:9c:24:2c:11:db:
65:3a:cf:5a:27:4a:05:19:51:75:a7:02:0f:6a:39:
92:6c:7c:f0:64:29:9c:e4:71:6c:db:90:69:7f:e1:
e9:b2:d7:1b:19:d7:b7:b0:99:15:2a:74:cd:13:25:
af:48:80:92:1f:ca:1f:5a:f3:e6:db:b5:8e:e9:57:
d3:00:1b:b5:18:17:b2:e7:b7:aa:e0:c1:bc:d9:fc:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:2D:73:98:4B:27:D5:F8:A5:DD:51:5E:EC:E6:BC:83:17:19:97
X509v3 Authority Key Identifier:
keyid:9A:B9:42:DD:AD:BC:9A:C9:0B:4E:CF:BE:FA:DB:23:13:23:A6:70:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrlC3a28mskLTs---tsjEyOmcFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/82cd57-efd9-4669-8a49-c61ab56d3597/1/mrlC3a28mskLTs---tsjEyOmcFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:0c:d6:37:72:05:90:ac:db:2a:36:59:fa:e0:36:bd:7f:
5c:ad:96:3b:f2:24:71:3f:75:0e:e2:de:ab:4b:6e:26:40:25:
8e:c6:0d:2d:bd:45:1a:6e:e8:81:2f:d9:3d:9f:e2:ee:a1:bb:
fa:e3:fb:f6:99:3f:9c:ce:7a:bb:38:55:c0:47:41:69:08:ab:
d6:ed:17:ca:f5:d4:c8:82:25:77:c9:9e:1d:4f:f6:58:6c:66:
1d:be:1b:d2:d0:96:3b:f8:23:3c:63:95:e3:44:64:5d:9e:c6:
18:3a:68:ed:31:c1:d5:8d:73:5e:04:c4:43:9d:59:6b:58:06:
62:32:f9:0e:e4:9f:9b:2a:86:c0:26:8d:da:7f:aa:cd:c8:3e:
7e:9d:d0:ac:9a:0a:34:ba:39:cd:c7:df:c8:e6:87:06:c3:56:
e7:98:24:84:52:a0:ec:74:af:2c:46:ec:78:2c:3a:16:0d:77:
05:d0:64:77:b4:f2:49:7a:5c:36:05:54:af:17:4f:03:18:48:
6e:db:35:2b:3c:2c:b9:4b:b0:45:de:ea:09:45:a7:89:65:96:
56:19:7d:7d:30:3c:98:69:8f:2d:07:75:f7:b3:b6:c1:80:a3:
b3:90:78:20:ff:d5:f7:4e:c3:ed:f7:ac:8b:b7:f7:16:2f:c7:
fb:9b:35:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZguGc9BXvy65k3SXkbtJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjk0MmRkYWRiYzlhYzkwYjRlY2ZiZWZhZGIyMzEzMjNh
NjcwNTUwHhcNMjUwNDIxMTgwMTExWhcNMjUwNDIyMTgwMTExWjAzMTEwLwYDVQQD
EyhiNjI3MmQ3Mzk4NGIyN2Q1ZjhhNWRkNTE1ZWVjZTZiYzgzMTcxOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmmiSdP9KFiQCQwVTYoXzT9g8xsp
N/3kjQvK6r+YT6vxjsKnH5uf8jh0+A45+IE6ueuJR3d8uFsdlnl+a5NzN3fvrJrv
4IZDtl7qSLBswodjda7ShylKu0rEEBl27nzYp2V4f6da2vorFGTKy/iABcAE2FGf
bSuU94gm60FOm1ZU73ntgYKm/qpJE0jUhxEyNr2bh4Rp3pP+tOkJaKF/6oumm+6l
hBuTYJRxv+oKnCQsEdtlOs9aJ0oFGVF1pwIPajmSbHzwZCmc5HFs25Bpf+Hpstcb
Gde3sJkVKnTNEyWvSICSH8ofWvPm27WO6VfTABu1GBey57eq4MG82fyJzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYnLXOYSyfV+KXdUV7s5ryDFxmXMB8GA1UdIwQY
MBaAFJq5Qt2tvJrJC07PvvrbIxMjpnBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDkt
YzYxYWI1NmQzNTk3LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84MmNkNTctZWZkOS00NjY5LThhNDktYzYxYWI1NmQzNTk3
LzEvbXJsQzNhMjhtc2tMVHMtLS10c2pFeU9tY0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo4M1jdy
BZCs2yo2WfrgNr1/XK2WO/IkcT91DuLeq0tuJkAljsYNLb1FGm7ogS/ZPZ/i7qG7
+uP79pk/nM56uzhVwEdBaQir1u0XyvXUyIIld8meHU/2WGxmHb4b0tCWO/gjPGOV
40RkXZ7GGDpo7THB1Y1zXgTEQ51Za1gGYjL5DuSfmyqGwCaN2n+qzcg+fp3QrJoK
NLo5zcffyOaHBsNW55gkhFKg7HSvLEbseCw6Fg13BdBkd7TySXpcNgVUrxdPAxhI
bts1KzwsuUuwRd7qCUWniWWWVhl9fTA8mGmPLQd197O2wYCjs5B4IP/V907D7fes
i7f3Fi/H+5s1bA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:32:21 2025 by rpki-client