Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File: rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier: 0b9Iu/6q3b6+cMD10xlaGdsqUFe69kXJhZ/0Sge8fUk=
Subject key identifier: 72:3A:C5:CB:1B:A0:EE:06:A0:E7:58:5B:60:33:17:9F:60:1A:92:D4
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer: /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial: 01958BBBA7A8C7DC12DA15C5302CB937B4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number: 11D3
Signing time: Wed 12 Mar 2025 19:01:25 +0000
Manifest this update: Wed 12 Mar 2025 19:01:25 +0000
Manifest next update: Thu 13 Mar 2025 19:01:25 +0000
Files and hashes: 1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: +eNd6VBc9IDjkDi/0MiRGCiAnxH4StHXSc6l1n0+em4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:a7:a8:c7:dc:12:da:15:c5:30:2c:b9:37:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Validity
Not Before: Mar 12 19:01:25 2025 GMT
Not After : Mar 13 19:01:25 2025 GMT
Subject: CN=723ac5cb1ba0ee06a0e7585b6033179f601a92d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:f8:c2:ee:69:97:1f:4f:c8:44:6d:16:8b:
01:28:51:56:62:02:20:6d:95:65:ce:b4:ec:a4:b1:
ac:64:cb:2e:0a:7f:e1:4b:fe:dd:a7:75:83:c7:70:
8b:9a:73:c0:2d:3a:27:0c:21:11:96:c0:00:2f:eb:
d4:8a:ac:fc:90:e9:ed:d0:e5:df:e3:74:ff:eb:3e:
b1:dc:b7:bf:33:10:85:ad:11:72:e4:d1:83:9f:1d:
d1:7f:e9:18:2d:a2:25:96:bc:59:7f:14:49:87:2c:
09:56:f4:23:82:6a:44:80:5b:9c:1c:5d:1e:14:33:
84:21:e5:64:b5:db:d4:9c:48:85:ad:15:a0:ee:80:
23:3d:78:25:74:99:f2:e8:22:d8:e1:08:c2:cd:0c:
9a:bc:27:2b:4c:bd:5b:ad:c6:37:19:76:7b:22:cb:
2c:67:ed:55:1e:85:c2:46:f9:ed:05:10:ec:f8:ee:
47:3a:f1:9d:ee:ac:6d:34:12:c4:8b:1f:67:fa:46:
39:e5:dc:cd:52:c5:72:75:8d:63:59:1a:ca:29:4c:
2e:a0:a7:15:07:dd:17:42:8b:8b:f3:82:ee:d9:7e:
dc:d5:da:85:b5:ea:6e:51:73:8a:37:15:3d:5a:c6:
9a:cf:bc:d7:d1:1f:40:a3:11:c3:01:0d:98:11:9e:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:C5:CB:1B:A0:EE:06:A0:E7:58:5B:60:33:17:9F:60:1A:92:D4
X509v3 Authority Key Identifier:
keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:11:46:34:6d:c8:a8:0a:e8:1a:9e:74:55:f3:87:10:e1:
9f:e5:d3:cc:f3:a8:5f:9d:ac:fc:e4:0b:6f:1d:8e:dc:c3:e2:
46:30:44:54:51:9e:ad:cb:4f:b1:50:40:cd:5d:5f:4c:f8:08:
3e:f4:f0:d1:64:9e:90:67:06:cd:ae:33:b2:aa:4e:63:23:01:
a9:30:c8:8c:1b:1b:42:9e:5e:f9:dc:af:7a:1d:12:16:31:ab:
b2:a0:b8:3a:34:ce:28:a3:3c:eb:2d:ab:0d:b6:3e:c1:dc:96:
49:70:bc:09:d1:e4:60:d3:7c:cd:94:32:5e:68:bb:25:ca:20:
55:b7:8b:9d:9f:91:de:81:48:c9:c9:f1:21:20:1f:bf:e8:dd:
b1:51:47:99:ea:93:28:83:bd:f1:1d:c8:00:60:a1:de:4a:f3:
ae:18:0b:3f:23:5c:67:04:29:e9:cb:cd:06:44:43:1f:aa:d3:
ee:8a:e2:16:69:6c:bd:1a:ab:b0:32:df:66:f3:0b:04:77:e6:
3a:81:27:de:81:0b:f4:3f:a1:7d:49:47:0b:01:d0:34:7d:fe:
cb:b7:18:fc:5c:72:f4:47:0a:1f:fd:1e:2d:0f:fe:06:59:cc:
c0:da:c9:0c:92:a0:6b:79:2f:13:9b:51:3b:9a:a6:f8:f1:e4:
21:8c:69:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLu6eox9wS2hXFMCy5N7TlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjQ1NWIxYTg1OWJjNGQ2NjE4MTc1MDU1ZjBlYzg5NjA3
ZjA1MmQwHhcNMjUwMzEyMTkwMTI1WhcNMjUwMzEzMTkwMTI1WjAzMTEwLwYDVQQD
Eyg3MjNhYzVjYjFiYTBlZTA2YTBlNzU4NWI2MDMzMTc5ZjYwMWE5MmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmf4wu5plx9PyERtFosBKFFWYgIg
bZVlzrTspLGsZMsuCn/hS/7dp3WDx3CLmnPALTonDCERlsAAL+vUiqz8kOnt0OXf
43T/6z6x3Le/MxCFrRFy5NGDnx3Rf+kYLaIllrxZfxRJhywJVvQjgmpEgFucHF0e
FDOEIeVktdvUnEiFrRWg7oAjPXgldJny6CLY4QjCzQyavCcrTL1brcY3GXZ7Isss
Z+1VHoXCRvntBRDs+O5HOvGd7qxtNBLEix9n+kY55dzNUsVydY1jWRrKKUwuoKcV
B90XQouL84Lu2X7c1dqFtepuUXOKNxU9Wsaaz7zX0R9AoxHDAQ2YEZ4eDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI6xcsboO4GoOdYW2AzF59gGpLUMB8GA1UdIwQY
MBaAFKwkVbGoWbxNZhgXUFXw7IlgfwUtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjct
YzcxODM2MWQ0Mzc0LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81MWQ3ODEtYzE1NS00Mjk3LWIwYjctYzcxODM2MWQ0Mzc0
LzEvckNSVnNhaFp2RTFtR0JkUVZmRHNpV0JfQlMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7wRRjRt
yKgK6BqedFXzhxDhn+XTzPOoX52s/OQLbx2O3MPiRjBEVFGerctPsVBAzV1fTPgI
PvTw0WSekGcGza4zsqpOYyMBqTDIjBsbQp5e+dyveh0SFjGrsqC4OjTOKKM86y2r
DbY+wdyWSXC8CdHkYNN8zZQyXmi7JcogVbeLnZ+R3oFIycnxISAfv+jdsVFHmeqT
KIO98R3IAGCh3krzrhgLPyNcZwQp6cvNBkRDH6rT7oriFmlsvRqrsDLfZvMLBHfm
OoEn3oEL9D+hfUlHCwHQNH3+y7cY/Fxy9EcKH/0eLQ/+BlnMwNrJDJKga3kvE5tR
O5qm+PHkIYxpsg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:40:41 2025 by rpki-client