Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File: p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier: 6hv4oJ9oikL3Mp9AzYya1hWxn0LQtNfuPoH9gCbf524=
Subject key identifier: B1:63:1A:D1:E7:81:CB:9D:7A:BE:91:FA:81:FB:B7:F8:9E:F7:C1:43
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer: /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial: 019677FAFEA499777C6E95B7EEFC8B2E2261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 16:00:59 +0000
Manifest this update: Sun 27 Apr 2025 16:00:59 +0000
Manifest next update: Mon 28 Apr 2025 16:00:59 +0000
Files and hashes: 1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: 9mGVruExCSB0IhUjTJnXJ7fNyxC/XVXgrDgV8SW5FrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:fe:a4:99:77:7c:6e:95:b7:ee:fc:8b:2e:22:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
Validity
Not Before: Apr 27 16:00:59 2025 GMT
Not After : Apr 28 16:00:59 2025 GMT
Subject: CN=b1631ad1e781cb9d7abe91fa81fbb7f89ef7c143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:aa:a4:94:7a:0c:91:0f:1f:e7:7e:0d:f3:
2a:85:f8:69:b2:d3:05:5f:f3:c8:83:fc:ba:34:a8:
3f:0b:e3:c0:38:47:94:e4:42:13:59:df:f1:14:08:
54:a1:20:d7:30:7f:74:77:f0:2f:10:c4:1b:ac:5a:
cb:7c:42:38:d5:5c:c2:52:d7:2e:39:be:34:03:a8:
e4:80:87:17:eb:e3:0c:51:e0:6f:4a:d8:7e:3f:bf:
96:1b:04:ce:27:a6:40:85:96:47:ab:8f:77:ae:b4:
a4:83:fd:18:e0:96:b7:ac:f6:05:da:b4:dd:5a:3d:
4f:94:a0:88:fc:c3:cf:18:2a:36:00:34:11:bf:e9:
fc:52:82:ec:35:43:86:97:75:ed:91:ea:57:2a:42:
e0:9c:9f:29:82:61:77:53:ac:6f:86:cf:5c:70:7c:
38:b4:f9:e2:d0:8c:16:4a:65:df:df:c7:c6:44:e2:
64:dc:97:38:7f:68:cd:f4:ca:ba:b8:89:90:32:37:
32:ec:39:ab:c1:1a:fb:59:b1:e1:cd:94:aa:f7:d6:
00:12:3b:33:02:1d:83:03:7a:33:65:9b:7f:a4:9c:
0f:b7:cd:e0:79:11:2a:93:a1:b3:14:e9:ff:b8:ef:
90:14:c9:bc:be:13:a9:d0:09:03:3c:dd:2a:96:4b:
43:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:1A:D1:E7:81:CB:9D:7A:BE:91:FA:81:FB:B7:F8:9E:F7:C1:43
X509v3 Authority Key Identifier:
keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:02:32:bc:17:2a:c0:7b:07:39:aa:78:7c:fa:4b:6d:83:ff:
2b:af:81:c5:6f:80:e5:0f:64:82:20:59:cd:09:1f:f0:58:91:
45:97:89:9f:56:53:02:90:43:2b:07:90:c6:fc:32:58:81:72:
3f:34:e4:6f:5e:db:e1:7b:7c:62:9d:5d:1c:dd:d9:fc:7d:35:
6e:b2:38:8a:69:36:d1:ff:0e:7c:96:22:fe:2e:bc:a9:3a:1e:
7d:46:b6:bb:73:fa:bf:1a:61:90:7c:e3:6d:da:cb:6d:a4:3e:
ff:3b:d3:36:eb:40:5c:58:73:64:1a:de:bd:18:76:c2:f1:f1:
f0:fb:e1:5f:11:55:77:b5:73:0f:5c:d9:8d:e6:eb:7b:e0:e8:
a7:21:d4:11:2b:c1:6d:dd:f1:b4:8e:60:f8:9b:85:57:d7:0e:
a4:09:8c:8a:5f:76:10:f8:7f:42:02:08:6c:85:a7:04:3f:e1:
e1:10:16:24:11:e8:68:8b:34:6d:a9:be:32:6d:a1:73:40:d7:
74:78:65:2a:02:7e:dc:f3:bd:16:30:94:f3:f7:ab:df:62:f6:
d2:86:77:1c:41:8d:aa:0e:b9:99:7e:3d:07:63:a5:25:0a:1b:
c7:6e:24:f5:27:ea:10:20:f5:b0:56:d6:1a:26:2f:2e:7c:4c:
27:86:4b:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+v6kmXd8bpW37vyLLiJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDE3MjU3Y2I2MzY2ZmYzNTcyMzNiMjZkMjVkZDU4ODdk
YTg5ZmIwHhcNMjUwNDI3MTYwMDU5WhcNMjUwNDI4MTYwMDU5WjAzMTEwLwYDVQQD
EyhiMTYzMWFkMWU3ODFjYjlkN2FiZTkxZmE4MWZiYjdmODllZjdjMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s+qpJR6DJEPH+d+DfMqhfhpstMF
X/PIg/y6NKg/C+PAOEeU5EITWd/xFAhUoSDXMH90d/AvEMQbrFrLfEI41VzCUtcu
Ob40A6jkgIcX6+MMUeBvSth+P7+WGwTOJ6ZAhZZHq493rrSkg/0Y4Ja3rPYF2rTd
Wj1PlKCI/MPPGCo2ADQRv+n8UoLsNUOGl3XtkepXKkLgnJ8pgmF3U6xvhs9ccHw4
tPni0IwWSmXf38fGROJk3Jc4f2jN9Mq6uImQMjcy7DmrwRr7WbHhzZSq99YAEjsz
Ah2DA3ozZZt/pJwPt83geREqk6GzFOn/uO+QFMm8vhOp0AkDPN0qlktD6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFjGtHngcuder6R+oH7t/ie98FDMB8GA1UdIwQY
MBaAFKdBclfLY2b/NXIzsm0l3ViH2on7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQt
ZmY4ZmUyNTUyNmM2LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lMmFkZmYtZDEwNi00YWI4LWE5OTQtZmY4ZmUyNTUyNmM2
LzEvcDBGeVY4dGpadjgxY2pPeWJTWGRXSWZhaWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgIyvBcq
wHsHOap4fPpLbYP/K6+BxW+A5Q9kgiBZzQkf8FiRRZeJn1ZTApBDKweQxvwyWIFy
PzTkb17b4Xt8Yp1dHN3Z/H01brI4imk20f8OfJYi/i68qToefUa2u3P6vxphkHzj
bdrLbaQ+/zvTNutAXFhzZBrevRh2wvHx8PvhXxFVd7VzD1zZjebre+DopyHUESvB
bd3xtI5g+JuFV9cOpAmMil92EPh/QgIIbIWnBD/h4RAWJBHoaIs0bam+Mm2hc0DX
dHhlKgJ+3PO9FjCU8/er32L20oZ3HEGNqg65mX49B2OlJQobx24k9SfqECD1sFbW
GiYvLnxMJ4ZLYw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:18 2025 by rpki-client