Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: USqhIINz4KNR5wS6UM3unDa1aoDwrnoYnybSja8s4Hs=
Subject key identifier: 36:AC:66:08:62:64:16:85:C1:7E:37:0D:7D:0A:2D:BA:51:C7:8C:61
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 01958EF39EEBA798F73671D995B65EAA88C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1494
Signing time: Thu 13 Mar 2025 10:01:25 +0000
Manifest this update: Thu 13 Mar 2025 10:01:25 +0000
Manifest next update: Fri 14 Mar 2025 10:01:25 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: hO5RglcMLb/QNsqXWLVUTclq4cf9i8n8MAgElzzLgQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:9e:eb:a7:98:f7:36:71:d9:95:b6:5e:aa:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Mar 13 10:01:25 2025 GMT
Not After : Mar 14 10:01:25 2025 GMT
Subject: CN=36ac660862641685c17e370d7d0a2dba51c78c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:09:90:01:6f:63:e4:25:70:40:76:e6:af:21:
b3:51:90:e3:fb:04:ab:b4:9c:de:09:5f:20:8e:6a:
30:de:d1:77:67:a5:69:12:00:c2:e1:17:80:ec:e2:
97:35:88:bb:ad:c6:e2:9b:60:8e:e4:83:52:b4:a2:
d3:a2:01:f3:7b:5b:a9:21:a3:49:2d:89:20:32:74:
3a:97:48:4f:99:d6:bb:b0:9c:a7:fc:9c:d3:0c:29:
e6:fe:ae:a8:51:56:18:ef:d7:d0:f3:91:d7:bf:b4:
ba:d3:9d:8a:e4:d8:0b:86:e8:77:c4:90:d8:e5:18:
cd:0e:93:5b:ee:33:af:46:a8:40:fd:f7:86:0e:79:
a5:68:d8:bd:0a:c4:4e:a9:fb:c0:3e:de:11:13:af:
05:43:aa:e9:c7:32:07:54:b5:6c:ea:c5:b0:f9:a5:
c9:20:6d:fb:cd:18:5c:3f:84:d6:2c:8b:5c:d3:1c:
9b:da:54:01:a0:06:38:af:09:9a:cf:cd:32:cc:ec:
55:e8:61:49:ee:5b:f4:89:f3:69:80:5d:a8:35:e1:
3a:c5:80:ae:d0:e0:d8:18:a7:7c:07:eb:27:70:fa:
87:44:90:2c:6b:8e:6f:77:6a:5b:54:b8:87:ad:be:
16:be:6d:e0:70:28:a8:92:4f:5d:d7:89:ec:21:e7:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:66:08:62:64:16:85:C1:7E:37:0D:7D:0A:2D:BA:51:C7:8C:61
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:98:bd:8c:50:63:ae:d0:ec:cd:73:2c:23:71:b3:1e:ad:0e:
21:28:cf:e5:6a:de:39:7e:2a:be:06:2e:6d:76:bd:56:79:7d:
46:3c:d4:e8:b3:0c:a7:46:f6:bf:a5:a5:d0:09:be:93:ec:15:
c8:4a:79:62:4a:ff:3a:e8:66:7d:de:ea:85:b0:5a:e9:53:2f:
e2:7b:9c:9c:47:bd:d7:9b:20:24:9a:86:0e:fb:7a:6f:86:79:
74:d9:1a:a0:6b:03:5b:30:14:db:f0:0c:b9:7a:47:28:dd:c8:
55:4b:1e:8f:bd:e4:ba:b0:a2:0a:9d:c7:5b:41:97:04:82:b5:
d3:3f:66:f6:c8:d1:75:cd:d2:2b:70:bd:95:fd:a2:17:d7:bf:
f4:d0:77:78:27:0a:51:f2:58:6e:7f:e2:aa:2a:3f:7a:4f:e3:
77:34:b6:ea:95:2f:bf:d7:e4:a9:0f:9b:5a:bd:7d:50:f6:77:
85:d7:c4:61:35:07:56:91:8c:73:a6:ac:03:db:92:6e:1a:cd:
61:4a:68:f1:de:a3:15:0e:4f:66:71:68:0e:43:33:d0:ae:94:
f2:a5:c0:91:bc:e3:75:20:c6:26:ae:85:fd:04:c5:77:48:d7:
54:66:02:2a:1d:20:ac:f7:f1:cb:5b:c7:7d:92:28:d4:29:e9:
df:14:7a:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWO857rp5j3NnHZlbZeqojCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2
MWU0ZWMwHhcNMjUwMzEzMTAwMTI1WhcNMjUwMzE0MTAwMTI1WjAzMTEwLwYDVQQD
EygzNmFjNjYwODYyNjQxNjg1YzE3ZTM3MGQ3ZDBhMmRiYTUxYzc4YzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gmQAW9j5CVwQHbmryGzUZDj+wSr
tJzeCV8gjmow3tF3Z6VpEgDC4ReA7OKXNYi7rcbim2CO5INStKLTogHze1upIaNJ
LYkgMnQ6l0hPmda7sJyn/JzTDCnm/q6oUVYY79fQ85HXv7S6052K5NgLhuh3xJDY
5RjNDpNb7jOvRqhA/feGDnmlaNi9CsROqfvAPt4RE68FQ6rpxzIHVLVs6sWw+aXJ
IG37zRhcP4TWLItc0xyb2lQBoAY4rwmaz80yzOxV6GFJ7lv0ifNpgF2oNeE6xYCu
0ODYGKd8B+sncPqHRJAsa45vd2pbVLiHrb4Wvm3gcCiokk9d14nsIed10wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDasZghiZBaFwX43DX0KLbpRx4xhMB8GA1UdIwQY
MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt
NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3
LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJi9jFBj
rtDszXMsI3GzHq0OISjP5WreOX4qvgYubXa9Vnl9RjzU6LMMp0b2v6Wl0Am+k+wV
yEp5Ykr/Ouhmfd7qhbBa6VMv4nucnEe915sgJJqGDvt6b4Z5dNkaoGsDWzAU2/AM
uXpHKN3IVUsej73kurCiCp3HW0GXBIK10z9m9sjRdc3SK3C9lf2iF9e/9NB3eCcK
UfJYbn/iqio/ek/jdzS26pUvv9fkqQ+bWr19UPZ3hdfEYTUHVpGMc6asA9uSbhrN
YUpo8d6jFQ5PZnFoDkMz0K6U8qXAkbzjdSDGJq6F/QTFd0jXVGYCKh0grPfxy1vH
fZIo1Cnp3xR66g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:23 2025 by rpki-client