Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: xli5/GWCs1pExsBA9lWOS0bBB2lH8rYA5XigeVjYRGk=
Subject key identifier: D4:4F:03:31:08:79:90:4F:B9:E9:5E:FC:BA:7E:5B:C3:7E:37:C7:44
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0196575D03646150674FD3E77152559B830F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 0423
Signing time: Mon 21 Apr 2025 08:00:35 +0000
Manifest this update: Mon 21 Apr 2025 08:00:35 +0000
Manifest next update: Tue 22 Apr 2025 08:00:35 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: UD6K45aHqeAeoUa0U3NbPJ/jmG3n6v6Vvn/GdXyxKtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:03:64:61:50:67:4f:d3:e7:71:52:55:9b:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Apr 21 08:00:35 2025 GMT
Not After : Apr 22 08:00:35 2025 GMT
Subject: CN=d44f03310879904fb9e95efcba7e5bc37e37c744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6b:8d:b5:f1:58:44:79:e2:ec:d6:4d:ce:56:
a6:5d:e5:46:2d:e5:06:cc:f9:58:2c:6f:d7:ef:65:
bf:3e:de:86:3b:6b:b4:95:eb:c7:87:38:ab:9e:81:
c9:dc:78:0f:ae:76:b1:7e:b3:fe:48:05:c1:4a:a7:
d9:cd:79:63:d7:cf:95:d8:bd:58:e8:11:4e:df:bb:
8a:23:19:6e:16:c9:b2:06:e0:b1:55:47:b0:46:8c:
0c:f3:8b:21:cb:bc:0e:ed:d7:3b:42:18:e7:9d:a9:
48:57:0d:88:b9:df:87:c8:c3:3b:f7:ae:e6:9a:36:
e2:69:d3:89:41:16:9a:d1:89:82:98:e5:46:7d:a3:
28:13:20:b9:be:2a:96:a9:2d:05:a2:fa:01:01:6e:
56:88:65:20:c3:29:58:fa:46:c5:95:6c:50:72:07:
a0:6a:0e:dc:8f:f7:f2:37:88:4b:8a:b0:b8:a0:95:
9f:d8:ba:1c:fc:c1:39:d7:b6:cd:09:ec:58:32:99:
b6:8e:67:d9:59:4d:b1:04:c6:f5:2d:b4:e4:e7:2b:
89:ed:27:d3:45:e6:e7:67:15:ff:87:48:19:f2:c9:
4d:c3:7c:10:51:c1:f3:05:ab:44:4f:b7:4f:02:be:
ac:08:84:0b:3d:7e:9b:46:22:c8:0c:e7:18:25:76:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:03:31:08:79:90:4F:B9:E9:5E:FC:BA:7E:5B:C3:7E:37:C7:44
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:a8:a6:0c:e3:9b:48:8f:c4:a7:b9:3c:56:67:3b:3d:4c:
4f:b0:76:97:0b:21:c9:82:d3:d8:e9:4a:84:58:8b:7a:c5:0b:
b0:aa:e8:df:29:00:4b:01:7a:ad:56:6f:c1:3f:d5:a8:9a:29:
e2:bf:33:ae:21:26:38:65:b0:c8:d4:c6:b6:2d:55:6b:93:13:
52:fd:09:04:6a:9a:0b:31:97:1c:c1:e8:b0:02:d2:30:ee:ab:
5c:92:3a:a8:57:6c:d7:ff:12:84:20:55:ec:3a:ef:68:9b:43:
53:d9:72:44:45:d5:1d:9b:2c:10:96:6a:19:2c:21:91:fc:25:
04:6d:20:2a:53:47:45:09:08:17:6c:86:cc:7c:9a:9e:a1:fb:
16:03:fc:8b:c5:4f:4a:3c:07:45:91:31:ca:a9:f5:59:64:6f:
78:9b:8a:58:4a:ce:f3:ed:a7:d7:04:3c:18:1a:0a:c0:ba:5e:
5d:49:c7:e0:e4:c9:75:aa:46:bf:87:0d:1d:ca:6c:98:a4:ef:
4d:0f:99:b1:76:7d:12:b7:74:5c:0a:80:43:c2:a3:00:c5:09:
ef:bb:f7:97:1e:ce:b5:5c:9d:56:ff:fe:4a:08:cc:64:82:e6:
e3:5f:9b:6d:81:29:47:34:d1:3e:06:2a:4e:39:e6:da:be:2d:
9e:6b:9a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXXQNkYVBnT9PncVJVm4MPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw
ZmEyNGIwHhcNMjUwNDIxMDgwMDM1WhcNMjUwNDIyMDgwMDM1WjAzMTEwLwYDVQQD
EyhkNDRmMDMzMTA4Nzk5MDRmYjllOTVlZmNiYTdlNWJjMzdlMzdjNzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2uNtfFYRHni7NZNzlamXeVGLeUG
zPlYLG/X72W/Pt6GO2u0levHhzirnoHJ3HgPrnaxfrP+SAXBSqfZzXlj18+V2L1Y
6BFO37uKIxluFsmyBuCxVUewRowM84shy7wO7dc7QhjnnalIVw2Iud+HyMM7967m
mjbiadOJQRaa0YmCmOVGfaMoEyC5viqWqS0FovoBAW5WiGUgwylY+kbFlWxQcgeg
ag7cj/fyN4hLirC4oJWf2Loc/ME517bNCexYMpm2jmfZWU2xBMb1LbTk5yuJ7SfT
RebnZxX/h0gZ8slNw3wQUcHzBatET7dPAr6sCIQLPX6bRiLIDOcYJXbnaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRPAzEIeZBPuele/Lp+W8N+N8dEMB8GA1UdIwQY
MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt
OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2
LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAir+opgzj
m0iPxKe5PFZnOz1MT7B2lwshyYLT2OlKhFiLesULsKro3ykASwF6rVZvwT/VqJop
4r8zriEmOGWwyNTGti1Va5MTUv0JBGqaCzGXHMHosALSMO6rXJI6qFds1/8ShCBV
7DrvaJtDU9lyREXVHZssEJZqGSwhkfwlBG0gKlNHRQkIF2yGzHyanqH7FgP8i8VP
SjwHRZExyqn1WWRveJuKWErO8+2n1wQ8GBoKwLpeXUnH4OTJdapGv4cNHcpsmKTv
TQ+ZsXZ9Erd0XAqAQ8KjAMUJ77v3lx7OtVydVv/+SgjMZILm41+bbYEpRzTRPgYq
Tjnm2r4tnmuaqw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:06 2025 by rpki-client