Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: tJM/seYsdd8ERuCfljr3CkJvB8sH1Fk5XVj+uwQfE1w=
Subject key identifier: 8A:FF:44:0B:8A:01:AB:86:20:C7:2F:7B:3A:36:52:FF:F1:83:16:99
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0196914C4A9268D4C440F2746411FEC911E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 123C
Signing time: Fri 02 May 2025 14:00:18 +0000
Manifest this update: Fri 02 May 2025 14:00:18 +0000
Manifest next update: Sat 03 May 2025 14:00:18 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: +vMW91qq5aUnU6qBH+ISBpX/lC8i8gtARm7QRxz+naU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:4a:92:68:d4:c4:40:f2:74:64:11:fe:c9:11:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: May 2 14:00:18 2025 GMT
Not After : May 3 14:00:18 2025 GMT
Subject: CN=8aff440b8a01ab8620c72f7b3a3652fff1831699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:57:c3:87:95:86:cf:e4:e1:d2:86:73:b5:
eb:9a:0f:32:58:11:ba:1f:2d:7f:83:a2:05:e6:a7:
53:e9:45:3f:8b:d4:a7:94:2a:68:f5:e2:ec:1f:47:
86:15:ec:05:53:07:67:53:e1:73:83:21:09:78:04:
71:a8:cd:1a:06:88:e2:63:70:ce:1e:e6:fc:f7:6d:
85:69:41:14:6f:0b:e7:a0:11:26:91:32:a8:b4:73:
64:4d:8a:7c:84:c3:f9:97:5a:f6:b9:76:1f:1c:8b:
0f:78:fe:ec:0f:08:21:dc:7e:92:10:39:b0:9f:69:
d5:7c:3c:e6:04:6e:0e:a3:ff:fe:39:64:1f:d5:a2:
cf:b8:2c:7a:6a:3c:52:5d:6f:2a:41:3a:03:22:83:
ab:d2:b3:80:84:24:6c:3e:f1:d8:5e:64:31:44:d0:
54:94:41:42:45:fd:32:da:c4:51:d8:74:23:1f:00:
61:f8:83:16:63:19:55:1c:3a:4d:c2:a0:a8:f9:db:
bd:7a:b7:e6:44:15:76:0c:d6:df:04:21:87:87:a6:
a2:16:c4:a6:cb:8c:62:59:b0:54:3e:76:b8:f5:ec:
05:06:a8:d1:b4:4f:25:2c:12:25:21:94:69:6b:8c:
65:e4:ee:81:15:22:1a:e3:f4:8c:47:74:9f:6c:38:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:44:0B:8A:01:AB:86:20:C7:2F:7B:3A:36:52:FF:F1:83:16:99
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f8:f7:dd:96:b7:8a:ae:ee:4c:c0:53:88:c0:8c:7b:65:94:
88:41:87:c7:d0:b3:48:a8:78:ac:ec:c2:df:85:af:00:f4:20:
6a:8f:ac:0a:ec:d2:8b:a7:24:e8:76:8d:ba:00:4a:44:45:d2:
d3:76:6a:d1:bf:da:1e:0b:13:22:a5:f0:cc:50:7b:2e:df:16:
ae:48:42:b8:a7:85:b4:d6:85:b2:44:df:71:fb:46:0b:49:13:
99:75:47:66:94:b2:37:6d:f2:0c:c5:87:46:c2:e0:de:fa:76:
e5:93:09:b9:23:eb:75:b6:d7:32:d5:fd:1f:22:6e:82:45:eb:
9a:2a:fa:ba:f8:0b:e5:7d:6f:c7:9b:02:67:dc:e5:34:6a:c3:
dd:46:47:0b:f3:a9:dd:b4:b7:4c:e9:65:89:f6:ff:70:d8:61:
15:39:25:37:56:44:56:93:02:ae:51:9d:49:fc:1c:28:af:b6:
f3:41:ed:e3:ae:3e:12:af:66:fe:76:8f:f1:b0:1f:e5:9f:36:
e1:54:4d:d4:00:39:ff:81:ba:b5:75:ac:a8:42:38:b9:13:2e:
70:59:ed:25:9b:18:be:9b:f3:52:d2:f9:51:0d:2b:a1:ae:23:
42:e6:b1:dd:1d:5d:7c:f1:16:8a:e9:c1:99:6b:50:16:63:d2:
20:32:f6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTEqSaNTEQPJ0ZBH+yRHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTFjNTJkMjM3M2Y1YTViNzJkYzZkZDEyYTc1ZDEzYjI2
NWI5MDQwHhcNMjUwNTAyMTQwMDE4WhcNMjUwNTAzMTQwMDE4WjAzMTEwLwYDVQQD
Eyg4YWZmNDQwYjhhMDFhYjg2MjBjNzJmN2IzYTM2NTJmZmYxODMxNjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPFXw4eVhs/k4dKGc7Xrmg8yWBG6
Hy1/g6IF5qdT6UU/i9SnlCpo9eLsH0eGFewFUwdnU+FzgyEJeARxqM0aBojiY3DO
Hub8922FaUEUbwvnoBEmkTKotHNkTYp8hMP5l1r2uXYfHIsPeP7sDwgh3H6SEDmw
n2nVfDzmBG4Oo//+OWQf1aLPuCx6ajxSXW8qQToDIoOr0rOAhCRsPvHYXmQxRNBU
lEFCRf0y2sRR2HQjHwBh+IMWYxlVHDpNwqCo+du9erfmRBV2DNbfBCGHh6aiFsSm
y4xiWbBUPna49ewFBqjRtE8lLBIlIZRpa4xl5O6BFSIa4/SMR3SfbDgY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr/RAuKAauGIMcvezo2Uv/xgxaZMB8GA1UdIwQY
MBaAFCNRxS0jc/Wlty3G3RKnXROyZbkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgt
OTg3M2FmYTczZTdlLzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgtOTg3M2FmYTczZTdl
LzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPj33Za3
iq7uTMBTiMCMe2WUiEGHx9CzSKh4rOzC34WvAPQgao+sCuzSi6ck6HaNugBKREXS
03Zq0b/aHgsTIqXwzFB7Lt8WrkhCuKeFtNaFskTfcftGC0kTmXVHZpSyN23yDMWH
RsLg3vp25ZMJuSPrdbbXMtX9HyJugkXrmir6uvgL5X1vx5sCZ9zlNGrD3UZHC/Op
3bS3TOllifb/cNhhFTklN1ZEVpMCrlGdSfwcKK+280Ht464+Eq9m/naP8bAf5Z82
4VRN1AA5/4G6tXWsqEI4uRMucFntJZsYvpvzUtL5UQ0roa4jQuax3R1dfPEWiunB
mWtQFmPSIDL2ZQ==
-----END CERTIFICATE-----
Generated at Fri May 2 21:27:42 2025 by rpki-client