Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: euDgoi9oIQYcxhzLLof1sWH4C9Vmed+xnXB5/KcMU/E=
Subject key identifier: 0E:94:61:10:2B:89:A6:07:00:73:86:C7:2D:B9:1C:20:C5:43:CE:23
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019653493215CC1F37202D7F902053B10E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 09CB
Signing time: Sun 20 Apr 2025 13:00:27 +0000
Manifest this update: Sun 20 Apr 2025 13:00:27 +0000
Manifest next update: Mon 21 Apr 2025 13:00:27 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: v5HcRdSrhHW3Q3FuANgQ0sL5tHqLCsrj5uo3Ks9KzB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:32:15:cc:1f:37:20:2d:7f:90:20:53:b1:0e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Apr 20 13:00:27 2025 GMT
Not After : Apr 21 13:00:27 2025 GMT
Subject: CN=0e9461102b89a607007386c72db91c20c543ce23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:e4:b3:d7:7d:4c:9d:e8:75:7f:b0:e2:76:
74:78:62:3c:36:ea:fd:ad:f0:38:5e:52:13:2f:8c:
06:82:a6:4f:85:92:8c:b1:7e:cc:6b:e9:37:2f:70:
7b:65:d5:ec:f7:17:d4:fc:43:f6:ed:4c:de:3e:06:
6e:02:17:46:a5:8f:69:a0:8a:85:f9:4c:f1:99:c3:
4b:4e:1e:e8:37:e9:f2:e0:00:ec:2a:34:3f:31:2f:
59:55:da:a4:5b:1a:0d:d6:49:cc:87:40:02:18:f3:
d2:ed:6b:24:16:cf:7c:32:a8:89:f1:52:b4:1a:d0:
c0:2e:a9:11:8c:95:e7:17:9d:97:77:34:2f:69:d7:
21:89:40:48:e5:32:0b:c9:af:85:38:88:c8:df:91:
64:94:08:6c:bd:24:1b:ed:b9:02:20:7b:fb:32:4b:
7d:ea:7f:e8:9a:d9:6d:5e:0e:e7:0f:1f:01:26:dc:
81:03:36:94:68:a0:13:15:9d:d3:bb:d3:20:14:5a:
37:d6:51:e4:4f:48:33:a4:3e:4f:8c:6b:35:d0:63:
34:ed:2c:a5:ce:8f:ba:e8:d5:0c:64:22:52:f6:7b:
53:63:8c:94:5c:a2:b5:6e:a8:e3:2f:e1:40:90:5c:
93:8a:78:32:4b:9b:c0:c9:79:70:2d:81:54:a0:94:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:94:61:10:2B:89:A6:07:00:73:86:C7:2D:B9:1C:20:C5:43:CE:23
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f0:2a:2c:a1:c0:58:74:ed:0a:17:40:4a:2e:6e:69:d7:99:
7e:32:23:04:f8:ef:d7:7f:92:8d:37:ed:48:b9:c0:e4:93:58:
44:47:69:0d:4c:82:05:c4:bc:e9:c2:b5:71:df:33:ac:e5:46:
ec:d7:30:23:cb:74:47:70:ef:65:83:90:d8:14:9c:e9:f6:b3:
39:c1:89:e4:3a:ce:c4:04:d3:3a:39:d8:d9:30:65:92:81:58:
50:09:10:a4:1c:dd:f4:fd:78:5e:27:57:5c:fc:dd:73:3b:a9:
56:da:f0:9b:b0:c0:7e:00:7b:56:1a:67:09:aa:5f:9d:8e:b0:
33:4c:32:6d:19:71:61:aa:c3:ce:12:dd:73:45:75:49:e0:01:
6f:05:da:5f:29:8d:e3:bd:fb:33:5d:2f:0e:b7:90:48:48:4f:
a2:00:8f:a1:eb:0c:7a:6a:46:45:d5:85:c7:42:66:e5:c1:82:
f5:a0:c8:33:8a:c3:8b:42:ba:d8:c7:de:62:0c:95:3c:b5:f7:
24:3e:67:d9:48:31:42:b5:f3:0c:1f:1c:f9:8d:a7:cd:6a:46:
cc:06:68:29:25:f2:71:8f:77:aa:fb:22:6c:51:a4:95:dc:b2:
72:08:c5:51:d3:c9:b9:df:2f:b2:7a:a1:33:7a:15:4b:53:8c:
9c:8a:2a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSTIVzB83IC1/kCBTsQ6UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj
M2I5N2MwHhcNMjUwNDIwMTMwMDI3WhcNMjUwNDIxMTMwMDI3WjAzMTEwLwYDVQQD
EygwZTk0NjExMDJiODlhNjA3MDA3Mzg2YzcyZGI5MWMyMGM1NDNjZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgDks9d9TJ3odX+w4nZ0eGI8Nur9
rfA4XlITL4wGgqZPhZKMsX7Ma+k3L3B7ZdXs9xfU/EP27UzePgZuAhdGpY9poIqF
+UzxmcNLTh7oN+ny4ADsKjQ/MS9ZVdqkWxoN1knMh0ACGPPS7WskFs98MqiJ8VK0
GtDALqkRjJXnF52XdzQvadchiUBI5TILya+FOIjI35FklAhsvSQb7bkCIHv7Mkt9
6n/omtltXg7nDx8BJtyBAzaUaKATFZ3Tu9MgFFo31lHkT0gzpD5PjGs10GM07Syl
zo+66NUMZCJS9ntTY4yUXKK1bqjjL+FAkFyTingyS5vAyXlwLYFUoJQCvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6UYRAriaYHAHOGxy25HCDFQ84jMB8GA1UdIwQY
MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt
Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0
LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/AqLKHA
WHTtChdASi5uadeZfjIjBPjv13+SjTftSLnA5JNYREdpDUyCBcS86cK1cd8zrOVG
7NcwI8t0R3DvZYOQ2BSc6fazOcGJ5DrOxATTOjnY2TBlkoFYUAkQpBzd9P14XidX
XPzdczupVtrwm7DAfgB7VhpnCapfnY6wM0wybRlxYarDzhLdc0V1SeABbwXaXymN
4737M10vDreQSEhPogCPoesMempGRdWFx0Jm5cGC9aDIM4rDi0K62MfeYgyVPLX3
JD5n2UgxQrXzDB8c+Y2nzWpGzAZoKSXycY93qvsibFGkldyycgjFUdPJud8vsnqh
M3oVS1OMnIoqbQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:56 2025 by rpki-client