Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: bvLXDdThwVpCJcSeDES9fF94GRR3soDcZiN6UIz2xdw=
Subject key identifier: 65:3A:A9:A9:28:68:E4:F0:6B:94:3A:E5:5B:B7:8A:24:A8:51:91:CD
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 0196760BDB6D498F3E35B5D25F4261621AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 086B
Signing time: Sun 27 Apr 2025 07:00:10 +0000
Manifest this update: Sun 27 Apr 2025 07:00:10 +0000
Manifest next update: Mon 28 Apr 2025 07:00:10 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: aoQQ/pTYGozYImvAsnYwaCbUQSBmI4KleQXRz2aP9z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:db:6d:49:8f:3e:35:b5:d2:5f:42:61:62:1a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Apr 27 07:00:10 2025 GMT
Not After : Apr 28 07:00:10 2025 GMT
Subject: CN=653aa9a92868e4f06b943ae55bb78a24a85191cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:12:25:b8:73:62:73:7e:5d:ae:6c:a5:c3:
53:33:3b:f4:8c:5c:bd:83:d4:10:fb:27:cb:f7:20:
d1:56:52:41:4a:9d:40:57:e4:cf:b7:07:fa:47:f1:
b0:0f:13:33:90:ab:1a:24:03:d3:e3:84:3c:de:29:
83:8f:1e:33:34:47:8f:c1:50:87:cf:56:cc:4a:21:
83:e3:32:51:cf:65:5b:98:f2:70:67:46:85:6d:b4:
2b:08:4d:75:87:c1:db:f2:96:44:dc:72:f2:94:d5:
ed:41:d0:dc:c9:78:12:53:f7:bd:a1:81:ac:f1:71:
3d:5c:b7:5b:48:88:53:8b:a8:1e:1b:af:58:46:83:
04:46:47:97:d7:29:e6:8a:0f:ff:e3:0f:25:50:01:
bb:7d:05:a2:c1:da:e3:e9:54:4f:17:5c:b9:c2:38:
1a:99:65:15:0f:ec:40:20:ee:1b:50:75:17:d3:54:
53:df:6c:84:fd:03:2f:78:36:7d:2c:05:f2:1f:54:
87:e2:c0:9f:27:42:71:a6:06:51:67:5c:f1:08:bb:
fb:55:1b:25:42:59:84:24:74:22:0e:90:c6:f2:9f:
4a:a4:54:93:1a:59:39:88:4e:72:8f:a7:bb:58:d7:
e1:fc:52:50:43:50:90:82:d3:3f:0b:45:5d:0c:71:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:A9:A9:28:68:E4:F0:6B:94:3A:E5:5B:B7:8A:24:A8:51:91:CD
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:12:17:fe:ac:6c:3d:04:8e:56:61:85:58:5d:f6:3c:93:
dc:f5:73:7a:19:12:6a:c7:53:d4:c8:4f:23:e2:d8:9d:c6:fe:
aa:c7:42:7a:6b:ba:55:f7:1d:c3:55:1a:4e:4e:b2:11:32:3a:
3d:76:f2:a4:11:a9:88:c6:9f:22:57:0f:a6:6b:6a:42:0e:fd:
59:8e:f4:33:09:e3:12:23:fc:3d:5f:d5:a1:1e:c7:28:14:1e:
de:ae:d4:07:8a:87:29:85:dc:50:c7:29:08:aa:31:61:49:90:
c2:83:f9:14:f9:80:ab:fe:58:2e:67:eb:48:f8:96:9c:b1:4d:
d9:4c:ee:1d:33:c5:ed:c9:d7:a2:14:b9:1b:32:4c:75:9d:3e:
1d:6d:3b:10:17:65:13:e5:05:83:58:24:93:a6:2a:37:ef:3e:
3c:df:d2:e4:0a:55:4e:fe:67:a1:66:0a:22:3b:74:f7:d4:ff:
4c:d4:70:0e:cf:bb:95:4b:1d:ea:93:73:81:49:ac:db:d9:7c:
aa:14:25:55:3f:41:7e:d8:cb:d9:00:2e:58:33:9a:32:47:77:
78:7b:0f:be:1d:d2:8d:a8:27:f8:ec:e3:9c:1f:35:de:12:ef:
35:e6:78:3a:e6:d5:6c:41:45:e4:e2:34:e2:8e:a8:45:3d:fa:
2a:0f:58:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C9ttSY8+NbXSX0JhYhrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx
NGJiMDcwHhcNMjUwNDI3MDcwMDEwWhcNMjUwNDI4MDcwMDEwWjAzMTEwLwYDVQQD
Eyg2NTNhYTlhOTI4NjhlNGYwNmI5NDNhZTU1YmI3OGEyNGE4NTE5MWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+4SJbhzYnN+Xa5spcNTMzv0jFy9
g9QQ+yfL9yDRVlJBSp1AV+TPtwf6R/GwDxMzkKsaJAPT44Q83imDjx4zNEePwVCH
z1bMSiGD4zJRz2VbmPJwZ0aFbbQrCE11h8Hb8pZE3HLylNXtQdDcyXgSU/e9oYGs
8XE9XLdbSIhTi6geG69YRoMERkeX1ynmig//4w8lUAG7fQWiwdrj6VRPF1y5wjga
mWUVD+xAIO4bUHUX01RT32yE/QMveDZ9LAXyH1SH4sCfJ0JxpgZRZ1zxCLv7VRsl
QlmEJHQiDpDG8p9KpFSTGlk5iE5yj6e7WNfh/FJQQ1CQgtM/C0VdDHH+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU6qakoaOTwa5Q65Vu3iiSoUZHNMB8GA1UdIwQY
MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt
Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1
LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayISF/6s
bD0EjlZhhVhd9jyT3PVzehkSasdT1MhPI+LYncb+qsdCemu6Vfcdw1UaTk6yETI6
PXbypBGpiMafIlcPpmtqQg79WY70MwnjEiP8PV/VoR7HKBQe3q7UB4qHKYXcUMcp
CKoxYUmQwoP5FPmAq/5YLmfrSPiWnLFN2UzuHTPF7cnXohS5GzJMdZ0+HW07EBdl
E+UFg1gkk6YqN+8+PN/S5ApVTv5noWYKIjt099T/TNRwDs+7lUsd6pNzgUms29l8
qhQlVT9BftjL2QAuWDOaMkd3eHsPvh3Sjagn+OzjnB813hLvNeZ4OubVbEFF5OI0
4o6oRT36Kg9YWg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:13 2025 by rpki-client