Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json)
Hash identifier: c0wKI1tGfntEVVzxzdZit1k+qkSIyKVxr3S1CYbQ/98=
Subject key identifier: 5D:73:A2:87:75:28:44:3C:4D:1C:28:7D:AE:5F:DC:19:69:A9:9A:80
Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8
Certificate serial: 01964A0F0E8427F5C49F58862A0730284DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 18:00:22 +0000
Manifest this update: Fri 18 Apr 2025 18:00:22 +0000
Manifest next update: Sat 19 Apr 2025 18:00:22 +0000
Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: 8V1Y8YCw9y1ujqnWkP0UDN3mXibWAjLSbF54wYtZWFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:0e:84:27:f5:c4:9f:58:86:2a:07:30:28:4d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8
Validity
Not Before: Apr 18 18:00:22 2025 GMT
Not After : Apr 19 18:00:22 2025 GMT
Subject: CN=5d73a2877528443c4d1c287dae5fdc1969a99a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:5a:df:07:99:1d:af:38:c8:24:85:90:8e:
13:30:97:82:2e:d0:3a:5d:0a:58:cd:b0:51:40:a1:
3b:a2:e2:3c:8d:d6:6a:79:70:8d:3c:e6:27:9f:50:
58:4d:27:19:b8:94:9b:9f:86:05:92:25:76:eb:74:
95:ad:1d:b1:6b:9a:7f:61:83:3a:31:29:db:78:2b:
73:fa:63:6c:16:65:b4:87:e2:53:b6:8b:fe:dc:53:
b3:e8:cb:48:1b:d4:a1:38:c7:06:88:65:86:af:ef:
01:da:4a:50:cb:4c:d5:ce:f0:ef:0c:58:9b:d9:1a:
17:cb:32:8e:7f:33:c8:9b:d5:93:bd:b0:46:c0:c6:
d3:65:0a:b3:44:cc:ab:28:55:e3:94:8f:b1:e1:9c:
1d:da:10:60:11:82:84:f8:b8:26:87:55:5b:11:cd:
32:8c:7c:16:a7:19:15:bc:75:7d:a4:21:85:95:77:
4c:da:18:e8:ec:0d:70:66:9a:a2:dc:6e:d9:0b:20:
1e:83:8f:05:55:8f:bf:5f:eb:a0:90:4c:7c:2f:47:
30:dc:7f:51:52:fd:08:eb:04:f3:6d:f7:a8:a2:99:
f8:08:3a:62:3d:91:14:69:ba:b0:ed:35:f4:e0:a5:
bd:69:8f:eb:da:8e:9b:28:ac:6f:0c:ce:ea:30:83:
a6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:73:A2:87:75:28:44:3C:4D:1C:28:7D:AE:5F:DC:19:69:A9:9A:80
X509v3 Authority Key Identifier:
keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c0:d7:c8:30:dc:1a:1f:2b:c3:8e:cb:6d:fe:00:04:d1:1f:
78:70:7c:9c:0c:22:16:97:b4:db:12:78:e2:f0:8f:a5:be:95:
de:0f:55:3e:65:7b:16:15:62:5e:c0:86:63:47:43:df:a9:37:
63:1c:d2:8b:51:95:27:55:23:7c:e2:fa:43:db:7e:17:d0:5c:
de:f8:1a:4f:23:83:92:b0:2a:ed:3b:3e:91:54:e0:d4:61:88:
5a:e7:d9:85:a4:28:1c:2a:11:3b:2d:50:cf:f6:64:b2:64:0a:
57:37:a7:d0:1b:33:eb:a1:87:9d:af:e7:97:f4:2a:2a:8b:cd:
01:6e:36:af:94:38:1e:6b:2a:5c:e1:57:19:8e:44:90:c5:88:
3d:5c:84:40:91:13:85:f0:2d:97:b8:08:7d:ec:71:e6:f8:e8:
10:62:ca:b9:87:32:da:74:79:27:da:9d:4d:15:42:04:d1:cc:
b8:e8:25:0a:89:30:22:80:0f:fa:df:b8:ab:de:b3:32:cc:0e:
a3:be:8d:fa:92:01:cb:5f:dd:72:b8:51:d3:f0:b9:c0:5e:a1:
e1:38:88:fb:1a:d7:75:46:21:d5:df:d6:73:56:eb:0b:94:12:
ab:ad:cc:6d:9f:55:a7:18:85:db:aa:d6:00:38:4c:9d:6f:f0:
33:10:ed:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKDw6EJ/XEn1iGKgcwKE3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5
MTVkYjgwHhcNMjUwNDE4MTgwMDIyWhcNMjUwNDE5MTgwMDIyWjAzMTEwLwYDVQQD
Eyg1ZDczYTI4Nzc1Mjg0NDNjNGQxYzI4N2RhZTVmZGMxOTY5YTk5YTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+5a3weZHa84yCSFkI4TMJeCLtA6
XQpYzbBRQKE7ouI8jdZqeXCNPOYnn1BYTScZuJSbn4YFkiV263SVrR2xa5p/YYM6
MSnbeCtz+mNsFmW0h+JTtov+3FOz6MtIG9ShOMcGiGWGr+8B2kpQy0zVzvDvDFib
2RoXyzKOfzPIm9WTvbBGwMbTZQqzRMyrKFXjlI+x4Zwd2hBgEYKE+Lgmh1VbEc0y
jHwWpxkVvHV9pCGFlXdM2hjo7A1wZpqi3G7ZCyAeg48FVY+/X+ugkEx8L0cw3H9R
Uv0I6wTzbfeoopn4CDpiPZEUabqw7TX04KW9aY/r2o6bKKxvDM7qMIOmnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1zood1KEQ8TRwofa5f3BlpqZqAMB8GA1UdIwQY
MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt
MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh
LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcDXyDDc
Gh8rw47Lbf4ABNEfeHB8nAwiFpe02xJ44vCPpb6V3g9VPmV7FhViXsCGY0dD36k3
YxzSi1GVJ1UjfOL6Q9t+F9Bc3vgaTyODkrAq7Ts+kVTg1GGIWufZhaQoHCoROy1Q
z/ZksmQKVzen0Bsz66GHna/nl/QqKovNAW42r5Q4HmsqXOFXGY5EkMWIPVyEQJET
hfAtl7gIfexx5vjoEGLKuYcy2nR5J9qdTRVCBNHMuOglCokwIoAP+t+4q96zMswO
o76N+pIBy1/dcrhR0/C5wF6h4TiI+xrXdUYh1d/Wc1brC5QSq63MbZ9VpxiF26rW
ADhMnW/wMxDtAQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:04:35 2025 by rpki-client