Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: tZkj3DFr/WfIIoRCvktPN8qUDyXqIjOOQLaiW1gXaKE=
Subject key identifier: 22:4F:4A:8F:03:1B:26:8E:29:35:AE:C2:3C:CB:88:88:23:F9:66:92
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 019579104ECEACFA6A9AE7DBC6846AD01E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 1489
Signing time: Sun 09 Mar 2025 04:01:06 +0000
Manifest this update: Sun 09 Mar 2025 04:01:06 +0000
Manifest next update: Mon 10 Mar 2025 04:01:06 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: RD7lF0z/XyiGUOQvs2tJdiJCmhpKnQc3nrcWOdYiqsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:4e:ce:ac:fa:6a:9a:e7:db:c6:84:6a:d0:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Mar 9 04:01:06 2025 GMT
Not After : Mar 10 04:01:06 2025 GMT
Subject: CN=224f4a8f031b268e2935aec23ccb888823f96692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:35:4e:f7:a4:d1:21:1d:0d:04:b9:c0:a8:
f8:06:5f:8b:72:17:42:5d:c8:d1:6b:a3:67:27:69:
a9:8e:fd:10:83:8d:e1:aa:7c:12:e4:94:a9:69:11:
db:01:af:66:83:0b:15:0f:4d:8a:a3:d5:0f:fc:53:
bb:9e:64:1a:87:0c:8d:13:4f:03:44:37:4d:01:67:
db:c1:fb:59:ae:84:be:5a:be:f4:a8:15:9e:88:ea:
93:8e:b8:ae:df:45:3d:b5:2e:8c:9e:ae:3a:e1:c5:
73:03:ed:92:9c:f0:43:22:fd:b2:7f:e7:cb:de:11:
8d:03:1e:57:b5:b7:be:db:65:21:1f:97:21:ca:f0:
c5:ba:c8:0a:4e:b7:e3:46:64:fa:f5:af:6c:d4:bc:
d6:5b:1e:06:9e:bc:42:7c:ec:e3:37:27:c7:4c:b2:
94:60:5b:e3:ee:76:5c:f0:b4:6b:4c:38:2a:b4:df:
b4:cf:d3:49:ec:31:a8:23:83:60:fb:e0:fa:6a:eb:
ac:6c:eb:49:96:6d:58:82:dc:13:e8:d2:e3:6f:89:
91:12:04:9c:68:4c:c3:27:3d:3a:9d:83:df:1c:63:
26:07:34:8f:78:55:f8:c7:b3:4d:12:ad:03:35:a5:
cf:25:1c:d7:93:39:28:ed:9a:58:ea:0c:60:ac:90:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4F:4A:8F:03:1B:26:8E:29:35:AE:C2:3C:CB:88:88:23:F9:66:92
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4b:bd:bb:b2:c0:12:83:11:cc:b4:f9:21:cd:22:07:8b:28:
e4:c1:f3:7c:6a:d2:98:c7:62:15:98:27:6c:72:45:24:f0:2b:
df:d1:83:5c:cd:89:08:95:93:2c:6e:f1:36:9d:c5:28:00:89:
85:52:db:d7:9f:c8:6a:57:d4:8e:e8:76:25:4e:35:d4:2d:39:
df:0a:a4:b2:a0:8a:c6:f0:ec:b6:3b:ea:aa:9b:7e:fc:4a:98:
24:6f:39:d6:88:8f:64:e7:ac:1c:e5:26:86:bd:27:60:93:db:
a5:7c:ef:b1:30:06:67:96:d6:e1:4b:4f:38:70:1e:47:d4:8f:
7e:9d:2d:38:3e:f1:d6:59:75:60:a7:35:9c:2a:d6:fe:39:c5:
24:84:93:de:c7:67:95:0f:d3:c1:1a:3d:45:89:1d:71:a6:1c:
53:58:8c:57:42:e4:8f:22:83:22:d2:45:29:e8:c3:df:4a:f5:
f1:eb:87:1d:2b:c0:3c:e8:dc:57:f9:cd:44:ac:b6:2a:34:29:
f8:b8:a5:04:b8:99:64:ca:95:31:9d:83:00:e5:f1:2d:e6:7e:
25:e4:e2:8a:ab:c3:0e:14:9b:ea:f3:79:23:9c:f3:02:9a:06:
6e:3c:02:9c:e9:81:92:ad:e7:11:aa:5b:c0:53:0a:0a:17:6a:
8e:d1:04:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5EE7OrPpqmufbxoRq0B5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzQyMzNkMGJhOGU3ODYxOGEwOWE3MjU2MWRjY2QwNjQ5
OGM4NGUwHhcNMjUwMzA5MDQwMTA2WhcNMjUwMzEwMDQwMTA2WjAzMTEwLwYDVQQD
EygyMjRmNGE4ZjAzMWIyNjhlMjkzNWFlYzIzY2NiODg4ODIzZjk2NjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ks1Tvek0SEdDQS5wKj4Bl+LchdC
XcjRa6NnJ2mpjv0Qg43hqnwS5JSpaRHbAa9mgwsVD02Ko9UP/FO7nmQahwyNE08D
RDdNAWfbwftZroS+Wr70qBWeiOqTjriu30U9tS6Mnq464cVzA+2SnPBDIv2yf+fL
3hGNAx5Xtbe+22UhH5chyvDFusgKTrfjRmT69a9s1LzWWx4GnrxCfOzjNyfHTLKU
YFvj7nZc8LRrTDgqtN+0z9NJ7DGoI4Ng++D6auusbOtJlm1YgtwT6NLjb4mREgSc
aEzDJz06nYPfHGMmBzSPeFX4x7NNEq0DNaXPJRzXkzko7ZpY6gxgrJA+0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJPSo8DGyaOKTWuwjzLiIgj+WaSMB8GA1UdIwQY
MBaAFJPEIz0LqOeGGKCaclYdzNBkmMhOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTkt
MjQ5NjExNmU0MTVkLzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81Zjc1N2ItNGYyMi00M2RiLTlkYTktMjQ5NjExNmU0MTVk
LzEvazhRalBRdW81NFlZb0pweVZoM00wR1NZeUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEu9u7LA
EoMRzLT5Ic0iB4so5MHzfGrSmMdiFZgnbHJFJPAr39GDXM2JCJWTLG7xNp3FKACJ
hVLb15/IalfUjuh2JU411C053wqksqCKxvDstjvqqpt+/EqYJG851oiPZOesHOUm
hr0nYJPbpXzvsTAGZ5bW4UtPOHAeR9SPfp0tOD7x1ll1YKc1nCrW/jnFJIST3sdn
lQ/TwRo9RYkdcaYcU1iMV0LkjyKDItJFKejD30r18euHHSvAPOjcV/nNRKy2KjQp
+LilBLiZZMqVMZ2DAOXxLeZ+JeTiiqvDDhSb6vN5I5zzApoGbjwCnOmBkq3nEapb
wFMKChdqjtEEAg==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:34:43 2025 by rpki-client