Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: wicU5H/Lc50mh5DRdNciJ7iYmQob1qqn47bu7YjR+8A=
Subject key identifier: 2D:54:42:72:14:80:1C:AE:F2:2C:4F:6F:EE:58:61:AD:9F:4C:1D:91
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 01964D473BE99AD65A0EB3457A86863A28C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 03B4
Signing time: Sat 19 Apr 2025 09:00:36 +0000
Manifest this update: Sat 19 Apr 2025 09:00:36 +0000
Manifest next update: Sun 20 Apr 2025 09:00:36 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: AvH54BspO+xW8xvMDLIhYahZV2ombxt9EVeTu/OVAWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:3b:e9:9a:d6:5a:0e:b3:45:7a:86:86:3a:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Apr 19 09:00:36 2025 GMT
Not After : Apr 20 09:00:36 2025 GMT
Subject: CN=2d54427214801caef22c4f6fee5861ad9f4c1d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:4c:1f:ac:87:86:fa:20:96:07:12:25:4c:
57:e5:29:9d:de:bc:37:4c:56:ac:5c:d0:cc:76:38:
12:f8:8b:8f:38:4c:2a:5b:29:84:97:3d:99:01:3f:
74:f6:6f:68:bb:09:cc:53:03:16:85:4e:87:07:26:
3e:6a:b7:75:78:38:c9:82:78:4c:c3:d3:e7:de:cc:
f3:b5:81:cd:7c:ba:08:d8:51:18:c0:18:55:9a:76:
c6:54:23:11:fc:d0:df:2c:17:8b:1a:51:46:bc:68:
9d:f2:25:1d:56:f9:82:7e:0f:95:42:c4:17:99:6d:
f2:92:c3:d2:75:19:79:09:65:7a:5d:44:0b:6c:ac:
78:d8:26:85:92:5f:d0:bd:2c:98:3c:96:b4:63:86:
aa:de:3d:8f:40:b0:73:92:bc:71:5d:75:51:b6:5a:
7c:1a:a8:93:f9:cd:89:5a:33:e3:e5:ef:a9:e0:75:
50:fb:71:d3:91:28:cd:3a:a5:5a:ec:e9:65:6c:d3:
6a:ef:39:ba:e8:9a:c0:6e:3a:f8:3a:5b:10:ca:b8:
76:58:76:a3:8e:90:35:4d:5a:c7:72:36:73:35:9d:
ca:3c:58:56:26:e4:44:d5:21:c8:e8:aa:19:ff:e2:
a9:77:31:22:eb:d2:2b:23:74:67:74:19:f0:30:a7:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:54:42:72:14:80:1C:AE:F2:2C:4F:6F:EE:58:61:AD:9F:4C:1D:91
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:46:ee:54:e0:1c:24:ac:4b:05:4a:67:c7:1e:9e:c9:19:12:
f5:0c:93:01:ee:4b:d7:aa:b2:5f:dc:e1:00:ce:22:0c:f2:2e:
be:23:d3:48:f7:3e:c5:61:04:cb:ab:a5:5c:71:1a:5e:81:89:
4a:2e:aa:ed:d9:14:6f:b6:b9:b8:13:87:1a:7d:b5:55:88:e6:
bb:16:97:c6:bb:78:1c:90:6e:8b:c2:d7:7a:31:08:bf:60:95:
44:17:ec:2e:7a:59:c5:58:8b:e8:1d:e8:97:63:e1:50:d5:98:
f4:ef:c7:81:1c:ff:52:fa:73:b3:41:4b:54:d2:2d:28:a6:42:
25:54:f0:15:98:2d:41:09:ce:34:b8:f3:bd:6c:99:11:e9:83:
9f:de:bc:c5:c2:d0:b1:8c:e3:bb:8f:5a:f1:56:6b:2d:40:ae:
fb:32:f5:a7:b1:68:3f:0e:59:0c:41:9a:0a:3e:03:11:45:84:
c2:44:80:0e:d1:4f:aa:04:ed:9e:4a:2e:39:a3:f0:26:91:9e:
64:1f:8b:6c:cf:2e:1c:88:b0:34:c6:13:7b:75:2f:75:27:51:
8a:ce:6a:1e:d1:4a:a8:0c:52:4c:96:5b:2a:22:0c:b1:6d:47:
34:32:fa:7d:17:67:d1:2e:50:52:42:b6:79:ab:72:fd:24:8f:
27:4a:3b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNRzvpmtZaDrNFeoaGOijDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTk1MGEzOGI3Mzc0M2IyYjYyZmU1MzFiN2IxMTM1ZmRk
NmM2NWQwHhcNMjUwNDE5MDkwMDM2WhcNMjUwNDIwMDkwMDM2WjAzMTEwLwYDVQQD
EygyZDU0NDI3MjE0ODAxY2FlZjIyYzRmNmZlZTU4NjFhZDlmNGMxZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4clMH6yHhvoglgcSJUxX5Smd3rw3
TFasXNDMdjgS+IuPOEwqWymElz2ZAT909m9ouwnMUwMWhU6HByY+ard1eDjJgnhM
w9Pn3szztYHNfLoI2FEYwBhVmnbGVCMR/NDfLBeLGlFGvGid8iUdVvmCfg+VQsQX
mW3yksPSdRl5CWV6XUQLbKx42CaFkl/QvSyYPJa0Y4aq3j2PQLBzkrxxXXVRtlp8
GqiT+c2JWjPj5e+p4HVQ+3HTkSjNOqVa7OllbNNq7zm66JrAbjr4OlsQyrh2WHaj
jpA1TVrHcjZzNZ3KPFhWJuRE1SHI6KoZ/+KpdzEi69IrI3RndBnwMKeVhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1UQnIUgByu8ixPb+5YYa2fTB2RMB8GA1UdIwQY
MBaAFAupUKOLc3Q7K2L+Uxt7ETX91sZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjIt
ZDVhZDZhNDVhZDc1LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjItZDVhZDZhNDVhZDc1
LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUbuVOAc
JKxLBUpnxx6eyRkS9QyTAe5L16qyX9zhAM4iDPIuviPTSPc+xWEEy6ulXHEaXoGJ
Si6q7dkUb7a5uBOHGn21VYjmuxaXxrt4HJBui8LXejEIv2CVRBfsLnpZxViL6B3o
l2PhUNWY9O/HgRz/Uvpzs0FLVNItKKZCJVTwFZgtQQnONLjzvWyZEemDn968xcLQ
sYzju49a8VZrLUCu+zL1p7FoPw5ZDEGaCj4DEUWEwkSADtFPqgTtnkouOaPwJpGe
ZB+LbM8uHIiwNMYTe3UvdSdRis5qHtFKqAxSTJZbKiIMsW1HNDL6fRdn0S5QUkK2
eaty/SSPJ0o7lQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:30:00 2025 by rpki-client