Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: b4SF1c33iyq7N4AGnYLMJOFKNQDJ2k1yKGDnBvJIbXM=
Subject key identifier: A7:48:FA:4E:20:43:AC:F5:7D:8D:90:D9:77:2C:4B:18:33:D0:6B:F0
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0196876EA35E7E8F160D6BE90AE7E64921B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 1515
Signing time: Wed 30 Apr 2025 16:01:37 +0000
Manifest this update: Wed 30 Apr 2025 16:01:37 +0000
Manifest next update: Thu 01 May 2025 16:01:37 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: RniabMDKghL0Kddxb0q8dZIuSw7yvzEW5i+w3Agi1ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6e:a3:5e:7e:8f:16:0d:6b:e9:0a:e7:e6:49:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Apr 30 16:01:37 2025 GMT
Not After : May 1 16:01:37 2025 GMT
Subject: CN=a748fa4e2043acf57d8d90d9772c4b1833d06bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:d5:73:f3:18:02:03:46:48:57:3d:f5:55:
be:df:b6:3e:9f:45:dd:47:5f:a8:0d:5c:ff:ac:4a:
c6:41:d6:8f:41:1d:55:a5:de:57:d5:c1:54:38:11:
53:8e:b8:e3:7f:70:c1:63:39:a6:6d:7d:0d:b1:21:
30:20:27:40:d2:30:e4:4c:d3:7c:83:e3:79:a8:00:
36:f0:57:22:c7:c7:43:b2:eb:f2:0f:78:00:09:8f:
01:ac:77:52:dd:ac:db:3d:ad:15:23:fd:59:d2:9a:
55:bb:57:98:04:56:c6:57:55:ba:71:f7:b4:53:43:
4d:fa:14:89:40:ce:23:78:ab:d8:bf:d5:6b:69:5f:
69:f1:1f:54:0f:6d:8c:0f:9f:23:b4:6d:eb:b3:d3:
86:f4:e2:a6:c6:d5:9f:65:49:69:67:42:05:66:78:
64:a0:5b:80:89:de:ed:2d:c4:fa:4c:73:ca:83:e8:
a4:51:2f:ec:33:c1:37:de:99:37:5c:1c:35:f5:82:
11:58:03:2a:47:e5:77:0e:9a:c1:86:6c:d1:76:54:
e9:32:d9:e0:4a:43:a5:e0:8c:9a:5f:c1:c3:0d:0f:
f6:00:a6:98:5b:1e:67:4c:4d:10:db:34:b5:08:93:
b8:99:41:88:a8:19:1d:b3:82:37:dd:b9:a9:2b:bd:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:48:FA:4E:20:43:AC:F5:7D:8D:90:D9:77:2C:4B:18:33:D0:6B:F0
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c6:af:fb:22:b1:14:02:4e:60:60:8a:ca:99:ff:8a:8c:20:
be:aa:49:d7:25:af:a1:06:3c:31:6e:21:6c:28:2b:45:56:2f:
1a:ff:06:d8:fc:3d:c4:bb:0a:1e:cd:d8:98:00:33:83:cc:3e:
e5:06:d7:8b:8f:bd:2b:7c:ba:78:b3:48:3e:bc:06:53:fe:45:
16:93:c4:a8:2a:39:0c:0d:60:14:f6:52:84:a6:38:9a:7d:db:
ea:9f:d8:a3:5a:2e:4e:f3:33:1e:da:dc:95:7d:2f:a9:01:83:
f2:32:c2:ea:5c:27:09:53:3f:f3:a9:86:9c:e2:38:9d:22:6e:
cc:77:2c:80:08:08:2e:77:39:e9:fe:7b:11:69:75:28:1b:7b:
62:11:ad:03:7c:54:9b:1f:4e:84:18:ec:e7:05:80:b4:be:d3:
a4:c7:c0:2e:0e:01:d8:97:7f:90:2f:51:6d:e4:88:53:f0:c1:
54:be:14:b3:63:84:82:62:d8:3c:ec:da:4c:55:30:25:8f:ec:
83:08:8d:6c:6c:4a:ee:36:a8:47:0c:4e:aa:f6:09:5d:bf:90:
b5:42:80:38:a6:da:dd:95:06:e3:8e:20:d6:2a:18:59:aa:b7:
ca:3a:f5:0e:5f:24:c2:91:77:9e:4f:01:c5:bb:39:a7:54:b9:
c0:70:d1:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbqNefo8WDWvpCufmSSG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj
NTljZjIwHhcNMjUwNDMwMTYwMTM3WhcNMjUwNTAxMTYwMTM3WjAzMTEwLwYDVQQD
EyhhNzQ4ZmE0ZTIwNDNhY2Y1N2Q4ZDkwZDk3NzJjNGIxODMzZDA2YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldnVc/MYAgNGSFc99VW+37Y+n0Xd
R1+oDVz/rErGQdaPQR1Vpd5X1cFUOBFTjrjjf3DBYzmmbX0NsSEwICdA0jDkTNN8
g+N5qAA28Fcix8dDsuvyD3gACY8BrHdS3azbPa0VI/1Z0ppVu1eYBFbGV1W6cfe0
U0NN+hSJQM4jeKvYv9VraV9p8R9UD22MD58jtG3rs9OG9OKmxtWfZUlpZ0IFZnhk
oFuAid7tLcT6THPKg+ikUS/sM8E33pk3XBw19YIRWAMqR+V3DprBhmzRdlTpMtng
SkOl4IyaX8HDDQ/2AKaYWx5nTE0Q2zS1CJO4mUGIqBkds4I33bmpK70npwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdI+k4gQ6z1fY2Q2XcsSxgz0GvwMB8GA1UdIwQY
MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt
ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi
LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMav+yKx
FAJOYGCKypn/iowgvqpJ1yWvoQY8MW4hbCgrRVYvGv8G2Pw9xLsKHs3YmAAzg8w+
5QbXi4+9K3y6eLNIPrwGU/5FFpPEqCo5DA1gFPZShKY4mn3b6p/Yo1ouTvMzHtrc
lX0vqQGD8jLC6lwnCVM/86mGnOI4nSJuzHcsgAgILnc56f57EWl1KBt7YhGtA3xU
mx9OhBjs5wWAtL7TpMfALg4B2Jd/kC9RbeSIU/DBVL4Us2OEgmLYPOzaTFUwJY/s
gwiNbGxK7jaoRwxOqvYJXb+QtUKAOKba3ZUG444g1ioYWaq3yjr1Dl8kwpF3nk8B
xbs5p1S5wHDR5g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:11 2025 by rpki-client