Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: 0odP4sKEMuoESX6D1PHQVHsWmDOuKvfPyAbW2Pwqafw=
Subject key identifier: 71:9A:F6:CA:88:0C:95:08:3F:A8:60:B4:FE:4B:40:BB:B5:06:26:31
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 0196760BF7ADD592F9D8D7F4B6E70675DB60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 099D
Signing time: Sun 27 Apr 2025 07:00:17 +0000
Manifest this update: Sun 27 Apr 2025 07:00:17 +0000
Manifest next update: Mon 28 Apr 2025 07:00:17 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: ziWs24Bmb4HjdHBCVW3B6AfBs8MXgjk0i6bFDF5SSn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f7:ad:d5:92:f9:d8:d7:f4:b6:e7:06:75:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Apr 27 07:00:17 2025 GMT
Not After : Apr 28 07:00:17 2025 GMT
Subject: CN=719af6ca880c95083fa860b4fe4b40bbb5062631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:7f:91:ae:ec:07:16:bf:bb:4c:95:ed:10:
55:27:5f:2d:c4:fb:9c:a3:ad:62:8a:fb:a6:5f:14:
f6:3c:1e:c7:8f:3b:a7:e4:93:d5:63:46:f1:90:58:
e9:50:b7:70:e4:ff:fa:0a:36:e5:75:ac:88:52:bb:
fc:94:79:b1:82:60:41:8e:ee:f3:68:b8:3a:57:59:
10:14:3a:8a:5f:c9:e2:59:4d:8e:bc:e9:21:72:18:
04:e1:35:cb:2e:68:1b:02:45:fd:a0:15:b5:97:4d:
60:fd:06:57:fa:70:1a:21:60:c5:27:7b:8d:b1:90:
4b:82:82:96:c3:d7:4a:5b:f5:6e:99:05:82:a3:c2:
3c:6d:cf:2a:84:2a:4d:48:59:ba:25:d8:0e:bd:f9:
55:e9:58:7d:38:98:1e:a7:b9:86:82:32:5d:bf:51:
43:34:36:3f:49:31:b4:6d:5a:ea:61:e3:db:9a:65:
2f:f5:b3:a5:f6:73:ac:68:1d:b1:10:20:70:d1:fe:
c8:54:0b:42:5d:1f:95:e7:2b:26:4a:21:46:fb:cb:
89:53:dd:29:8e:19:ad:48:ba:b4:aa:f1:3d:52:20:
9b:92:7a:be:3e:23:90:0c:4a:e2:0b:73:38:6c:2d:
17:a2:1e:04:07:62:94:04:49:3b:f9:0c:8d:3b:ac:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:F6:CA:88:0C:95:08:3F:A8:60:B4:FE:4B:40:BB:B5:06:26:31
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:04:4b:bc:ba:5f:36:bb:f0:5e:9f:d2:87:ec:44:3c:eb:88:
ce:40:9d:2f:2a:66:b2:5d:c6:25:ad:7a:e2:5a:c1:77:02:21:
e6:40:dd:33:77:fe:93:58:c3:c8:95:26:7c:e6:0f:fe:4e:29:
2e:f6:c1:e4:cb:93:d8:0c:66:3f:0f:dc:a5:2f:06:c3:20:55:
a2:90:26:c6:2a:28:4d:07:38:f5:c1:78:c0:27:b4:3a:81:fa:
87:9c:b9:78:fd:44:bf:06:4d:b9:95:56:19:1e:94:e5:b5:b5:
a4:91:2a:75:46:21:41:50:04:42:b2:1c:32:9a:72:f1:0d:48:
c2:f5:d4:9e:75:d1:3a:a9:a4:de:29:69:25:0d:ef:43:bc:80:
5b:e6:2d:45:7f:40:9e:08:25:40:ec:ce:c5:34:c1:74:36:9e:
84:70:75:2f:a4:77:23:77:00:76:dd:fd:e6:e4:12:fa:f2:49:
45:b7:5c:55:80:39:90:b2:81:a0:73:7b:c1:a5:cd:5c:b2:88:
8c:e7:9b:ca:1f:e5:f1:01:45:ea:20:22:f7:6a:b1:34:a1:7c:
2a:d5:cb:49:d4:96:5e:b1:ac:55:d6:52:b7:0e:68:09:33:4d:
7a:ba:a0:a9:3d:f7:7f:3e:d9:9f:33:2a:f8:3d:a8:c0:0d:59:
5d:7a:07:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C/et1ZL52Nf0tucGddtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjUwNDI3MDcwMDE3WhcNMjUwNDI4MDcwMDE3WjAzMTEwLwYDVQQD
Eyg3MTlhZjZjYTg4MGM5NTA4M2ZhODYwYjRmZTRiNDBiYmI1MDYyNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNV/ka7sBxa/u0yV7RBVJ18txPuc
o61iivumXxT2PB7Hjzun5JPVY0bxkFjpULdw5P/6CjbldayIUrv8lHmxgmBBju7z
aLg6V1kQFDqKX8niWU2OvOkhchgE4TXLLmgbAkX9oBW1l01g/QZX+nAaIWDFJ3uN
sZBLgoKWw9dKW/VumQWCo8I8bc8qhCpNSFm6JdgOvflV6Vh9OJgep7mGgjJdv1FD
NDY/STG0bVrqYePbmmUv9bOl9nOsaB2xECBw0f7IVAtCXR+V5ysmSiFG+8uJU90p
jhmtSLq0qvE9UiCbknq+PiOQDEriC3M4bC0Xoh4EB2KUBEk7+QyNO6yvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGa9sqIDJUIP6hgtP5LQLu1BiYxMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwRLvLpf
NrvwXp/Sh+xEPOuIzkCdLypmsl3GJa164lrBdwIh5kDdM3f+k1jDyJUmfOYP/k4p
LvbB5MuT2AxmPw/cpS8GwyBVopAmxiooTQc49cF4wCe0OoH6h5y5eP1EvwZNuZVW
GR6U5bW1pJEqdUYhQVAEQrIcMppy8Q1IwvXUnnXROqmk3ilpJQ3vQ7yAW+YtRX9A
ngglQOzOxTTBdDaehHB1L6R3I3cAdt395uQS+vJJRbdcVYA5kLKBoHN7waXNXLKI
jOebyh/l8QFF6iAi92qxNKF8KtXLSdSWXrGsVdZStw5oCTNNerqgqT33fz7ZnzMq
+D2owA1ZXXoH/Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:54 2025 by rpki-client