Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier: RsNWiJRT87P9SdCamyMkc36ISSp82rWmVJ6iDwkpsN0=
Subject key identifier: AF:15:51:E2:48:AA:97:C8:F1:5D:A7:93:F6:06:96:94:4D:FC:9C:19
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer: /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial: 01964D7DF5EAA8FA59A976DA99C0E84A3729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number: 14F6
Signing time: Sat 19 Apr 2025 10:00:22 +0000
Manifest this update: Sat 19 Apr 2025 10:00:22 +0000
Manifest next update: Sun 20 Apr 2025 10:00:22 +0000
Files and hashes: 1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: Kl4I668vyGqLXi8YdNHUVbUPoGjHQJuqcjF/M3kHA3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:f5:ea:a8:fa:59:a9:76:da:99:c0:e8:4a:37:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
Validity
Not Before: Apr 19 10:00:22 2025 GMT
Not After : Apr 20 10:00:22 2025 GMT
Subject: CN=af1551e248aa97c8f15da793f60696944dfc9c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d5:58:c6:17:0b:2f:3c:a5:f0:9f:f0:89:a6:
21:8f:45:45:06:45:a6:27:d0:b9:9b:ea:eb:c1:72:
72:c5:ac:62:d9:86:0e:6d:c8:bb:25:f1:50:ae:64:
65:c8:92:13:1b:7d:bf:20:cd:a4:c2:6c:e5:1e:23:
45:e3:49:12:13:dd:7d:02:84:a6:8a:27:03:b0:08:
40:0c:7f:ad:91:15:8c:e2:6e:d5:b6:b4:5e:35:84:
1f:a7:ce:b1:b8:a9:ef:83:ba:c5:4c:73:1a:32:9f:
26:1b:50:d2:77:89:a9:42:f1:bb:ca:11:8a:b9:32:
72:27:93:0a:86:d9:2f:94:d9:49:ad:2d:11:93:6b:
44:c9:9c:84:ef:ed:d6:c0:f1:35:00:5a:0f:1a:a9:
7c:f0:68:92:c9:f7:dd:ff:4b:12:07:d6:8b:12:ce:
0b:8d:22:d4:ff:5f:6d:22:9a:0d:7f:81:7f:7d:30:
34:25:35:0d:45:f8:32:d0:6d:02:53:01:d9:96:74:
6c:40:91:8d:a8:26:e7:a4:ba:42:9c:e0:e9:50:07:
a2:01:b0:e8:dd:a8:5d:47:c4:3b:cf:d6:a6:9b:2f:
04:9f:53:f1:24:22:2e:3c:43:89:a2:05:63:46:5a:
37:4b:b9:af:ee:fe:1d:a6:6d:da:db:4f:44:08:da:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:51:E2:48:AA:97:C8:F1:5D:A7:93:F6:06:96:94:4D:FC:9C:19
X509v3 Authority Key Identifier:
keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:49:83:86:9a:45:ad:75:cb:46:b9:e6:9d:1f:0d:ab:17:
58:51:d8:59:18:bb:f3:03:5c:3f:1f:cd:d7:56:29:ac:3a:91:
25:72:e9:8f:08:6b:3c:5d:20:f4:51:90:d8:77:9b:31:7a:49:
85:52:0e:c4:cd:45:e1:c1:a3:15:06:37:01:c5:1b:a2:f4:ba:
cf:e5:43:e3:43:7e:82:cb:ed:f2:7f:72:83:1d:2c:6a:ef:91:
c8:86:67:61:1e:da:2d:4f:e5:21:f7:73:e6:75:d8:ab:06:6f:
a2:22:ef:61:48:a4:cc:88:92:d9:ab:c0:01:a8:69:df:0d:ab:
38:82:37:db:e9:cf:6e:37:08:b0:4c:18:57:f9:8c:f1:d6:a9:
8f:74:f9:8b:51:bd:43:d8:ec:4a:cf:09:cd:29:e3:cc:ba:ce:
8d:c8:48:ca:84:6b:f2:5f:07:8e:16:b5:d1:95:ad:7a:39:42:
45:ba:ee:1f:54:01:f7:d3:9d:af:e1:7a:59:9e:ab:c2:65:27:
d7:6b:d4:0a:84:2e:bb:80:e2:db:56:74:0a:12:a6:d8:68:39:
bb:74:22:10:46:ed:ed:2d:96:a1:f7:47:97:83:42:e8:4b:71:
9f:ec:94:03:cb:15:2b:2a:48:9d:7d:ac:be:a8:22:e7:89:a3:
3b:bf:1a:03
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZNffXqqPpZqXbamcDoSjcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Nzc4NzZmZDQ1Y2FmNDhkN2QxNTBkYTRiNDAwOTgxYTE2
N2ZlOTkwHhcNMjUwNDE5MTAwMDIyWhcNMjUwNDIwMTAwMDIyWjAzMTEwLwYDVQQD
EyhhZjE1NTFlMjQ4YWE5N2M4ZjE1ZGE3OTNmNjA2OTY5NDRkZmM5YzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NVYxhcLLzyl8J/wiaYhj0VFBkWm
J9C5m+rrwXJyxaxi2YYObci7JfFQrmRlyJITG32/IM2kwmzlHiNF40kSE919AoSm
iicDsAhADH+tkRWM4m7VtrReNYQfp86xuKnvg7rFTHMaMp8mG1DSd4mpQvG7yhGK
uTJyJ5MKhtkvlNlJrS0Rk2tEyZyE7+3WwPE1AFoPGql88GiSyffd/0sSB9aLEs4L
jSLU/19tIpoNf4F/fTA0JTUNRfgy0G0CUwHZlnRsQJGNqCbnpLpCnODpUAeiAbDo
3ahdR8Q7z9ammy8En1PxJCIuPEOJogVjRlo3S7mv7v4dpm3a209ECNp+eQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK8VUeJIqpfI8V2nk/YGlpRN/JwZMB8GA1UdIwQY
MBaAFPh3h2/UXK9I19FQ2ktACYGhZ/6ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1IZUhiOVJjcjBqWDBWRGFTMEFKZ2FGbl9way5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvZjFjNjJmLTM0NTQtNGUyNi04Y2Vi
LWYwM2UzODYzMTNiNS8xLzEtSGVIYjlSY3IwalgwVkRhUzBBSmdhRm5fcGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2YxYzYyZi0zNDU0LTRlMjYtOGNlYi1mMDNlMzg2MzEz
YjUvMS8xLUhlSGI5UmNyMGpYMFZEYVMwQUpnYUZuX3BrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZ9J
g4aaRa11y0a55p0fDasXWFHYWRi78wNcPx/N11YprDqRJXLpjwhrPF0g9FGQ2Heb
MXpJhVIOxM1F4cGjFQY3AcUbovS6z+VD40N+gsvt8n9ygx0sau+RyIZnYR7aLU/l
Ifdz5nXYqwZvoiLvYUikzIiS2avAAahp3w2rOII32+nPbjcIsEwYV/mM8dapj3T5
i1G9Q9jsSs8JzSnjzLrOjchIyoRr8l8Hjha10ZWtejlCRbruH1QB99Odr+F6WZ6r
wmUn12vUCoQuu4Di21Z0ChKm2Gg5u3QiEEbt7S2WofdHl4NC6Etxn+yUA8sVKypI
nX2svqgi54mjO78aAw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:08:13 2025 by rpki-client