Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
File: aXRbBMvmNgtewTo67LMvuIXUhvs.mft (raw, json)
Hash identifier: 9XpopVOt06SArP9jJ1jjPIHqr0LLmGEKQFBaqXx81Bc=
Subject key identifier: EB:C0:5F:69:4E:F5:69:53:D7:0A:92:E3:4F:14:FC:9F:C9:3A:24:FA
Authority key identifier: 69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
Certificate issuer: /CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Certificate serial: 01967679E53DA6B530497664033E23F06298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
Manifest number: 133C
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: aXRbBMvmNgtewTo67LMvuIXUhvs.crl (hash: fUjETayo8Gm92e9cZkFoOHrhXUcUJ64aZ+JUj5eOXto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e5:3d:a6:b5:30:49:76:64:03:3e:23:f0:62:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69745b04cbe6360b5ec13a3aecb32fb885d486fb
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=ebc05f694ef56953d70a92e34f14fc9fc93a24fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:cd:2c:5d:67:35:c6:23:c7:1a:fb:8c:76:
b3:46:f0:69:d1:b2:da:4f:e9:2b:65:c7:48:3d:2f:
78:35:91:15:be:c7:77:24:e1:4d:58:7e:1e:05:76:
84:cf:c5:91:4a:dd:2f:b9:84:2a:06:6f:36:9f:a7:
88:27:14:c1:23:ee:02:51:80:61:b7:d7:a8:6a:79:
52:0e:28:ab:ad:e2:44:20:c8:04:d0:0a:64:4d:5d:
70:2b:b8:d4:86:ac:17:9f:43:ac:39:af:b2:bf:13:
6a:0f:07:5a:0e:0b:4e:08:13:37:60:ad:fa:93:89:
5a:97:2b:a0:d8:e1:e7:46:cd:fd:a3:5d:b9:60:f2:
bf:7f:78:c1:e8:bb:ae:6f:dd:8c:71:8d:3f:02:5f:
f2:01:d6:13:fd:b9:c6:f3:4e:ba:84:40:d6:b6:67:
fc:e2:65:66:92:74:73:bf:91:55:03:e6:18:c9:20:
44:c9:e0:7a:68:ad:35:73:50:e9:bc:95:30:f5:d3:
fa:17:18:51:a0:87:f8:95:7f:8c:5d:a2:b2:64:f6:
9e:8f:85:21:71:ad:b9:17:ed:04:25:3a:ba:d8:6f:
fd:6c:7a:e7:12:71:d2:65:ac:64:f7:3a:27:2e:29:
2f:12:bb:f2:aa:9d:21:a7:af:c7:0b:58:73:3d:0e:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:5F:69:4E:F5:69:53:D7:0A:92:E3:4F:14:FC:9F:C9:3A:24:FA
X509v3 Authority Key Identifier:
keyid:69:74:5B:04:CB:E6:36:0B:5E:C1:3A:3A:EC:B3:2F:B8:85:D4:86:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXRbBMvmNgtewTo67LMvuIXUhvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f8af11-88ea-4462-b198-1b2cea22b82e/1/aXRbBMvmNgtewTo67LMvuIXUhvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:6a:47:3b:52:db:12:2e:85:bc:c1:81:e2:a3:6a:66:d3:30:
f1:65:d8:e1:aa:6b:31:72:6b:15:22:b9:ea:8d:55:ea:8d:ef:
1b:4e:22:49:0b:73:70:65:3e:98:ea:0c:b1:7d:0e:a4:58:0a:
8e:68:b5:c4:b6:bc:e6:2c:94:0d:2d:1d:f4:77:15:e7:03:d4:
65:bc:82:2a:38:9f:02:bd:c9:bf:0c:97:46:93:cd:30:75:cc:
a8:3a:c7:b2:45:b0:9c:b0:17:b7:1b:58:01:87:75:d2:b9:9c:
da:c6:4d:71:28:92:b8:f3:40:35:cf:5e:52:8c:44:e4:6f:95:
24:78:65:18:97:61:20:de:0f:8f:13:1e:a9:4f:26:11:24:b8:
06:30:47:bf:a6:a1:b7:b0:9d:7e:31:1a:9a:2f:0c:37:1c:95:
b1:9b:1c:b4:98:c0:2d:71:65:5b:5a:10:f0:4c:10:8e:00:1f:
83:18:60:4b:9f:25:c9:aa:58:4a:25:d4:87:2a:bc:b0:87:01:
73:b9:2f:c8:96:53:2c:9a:90:8d:9b:2f:17:10:05:b3:3a:b2:
d8:fb:7b:0b:d5:8c:e6:f8:e6:a0:92:0d:b2:d8:60:c5:9d:59:
61:c1:2e:28:58:48:76:85:09:40:0a:dd:f2:50:44:9f:43:a0:
76:2e:32:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eeU9prUwSXZkAz4j8GKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzQ1YjA0Y2JlNjM2MGI1ZWMxM2EzYWVjYjMyZmI4ODVk
NDg2ZmIwHhcNMjUwNDI3MDkwMDIxWhcNMjUwNDI4MDkwMDIxWjAzMTEwLwYDVQQD
EyhlYmMwNWY2OTRlZjU2OTUzZDcwYTkyZTM0ZjE0ZmM5ZmM5M2EyNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj/NLF1nNcYjxxr7jHazRvBp0bLa
T+krZcdIPS94NZEVvsd3JOFNWH4eBXaEz8WRSt0vuYQqBm82n6eIJxTBI+4CUYBh
t9eoanlSDiirreJEIMgE0ApkTV1wK7jUhqwXn0OsOa+yvxNqDwdaDgtOCBM3YK36
k4lalyug2OHnRs39o125YPK/f3jB6Luub92McY0/Al/yAdYT/bnG8066hEDWtmf8
4mVmknRzv5FVA+YYySBEyeB6aK01c1DpvJUw9dP6FxhRoIf4lX+MXaKyZPaej4Uh
ca25F+0EJTq62G/9bHrnEnHSZaxk9zonLikvErvyqp0hp6/HC1hzPQ5SIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOvAX2lO9WlT1wqS408U/J/JOiT6MB8GA1UdIwQY
MBaAFGl0WwTL5jYLXsE6OuyzL7iF1Ib7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mOGFmMTEtODhlYS00NDYyLWIxOTgt
MWIyY2VhMjJiODJlLzEvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mOGFmMTEtODhlYS00NDYyLWIxOTgtMWIyY2VhMjJiODJl
LzEvYVhSYkJNdm1OZ3Rld1RvNjdMTXZ1SVhVaHZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmpHO1Lb
Ei6FvMGB4qNqZtMw8WXY4aprMXJrFSK56o1V6o3vG04iSQtzcGU+mOoMsX0OpFgK
jmi1xLa85iyUDS0d9HcV5wPUZbyCKjifAr3JvwyXRpPNMHXMqDrHskWwnLAXtxtY
AYd10rmc2sZNcSiSuPNANc9eUoxE5G+VJHhlGJdhIN4PjxMeqU8mESS4BjBHv6ah
t7CdfjEami8MNxyVsZsctJjALXFlW1oQ8EwQjgAfgxhgS58lyapYSiXUhyq8sIcB
c7kvyJZTLJqQjZsvFxAFszqy2Pt7C9WM5vjmoJINsthgxZ1ZYcEuKFhIdoUJQArd
8lBEn0Ogdi4ygg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:44:08 2025 by rpki-client