Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File: imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier: +yS3aeVRQtVGuf88+1CnUR+ZsHRCJHHtp3ICiScZRx4=
Subject key identifier: 3E:82:74:47:43:66:0A:0D:55:C4:4C:0B:F7:8C:67:9C:F0:F7:1D:90
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer: /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial: 01967F0F3C8E1A647F26B23D924CE112D385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number: 1511
Signing time: Tue 29 Apr 2025 01:00:26 +0000
Manifest this update: Tue 29 Apr 2025 01:00:26 +0000
Manifest next update: Wed 30 Apr 2025 01:00:26 +0000
Files and hashes: 1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: xAJDl8WXhKFsTqsGVWPDc4314JZacGTbouL/1npumuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:3c:8e:1a:64:7f:26:b2:3d:92:4c:e1:12:d3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Validity
Not Before: Apr 29 01:00:26 2025 GMT
Not After : Apr 30 01:00:26 2025 GMT
Subject: CN=3e82744743660a0d55c44c0bf78c679cf0f71d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:69:cd:10:9a:7b:5b:ab:55:51:4e:90:ea:
14:ae:f1:9b:a1:30:a7:60:1e:0f:fa:36:cc:e4:15:
9b:15:d1:6f:26:df:ce:9d:6d:fa:6f:1e:e4:c9:1e:
8a:7f:70:72:de:39:61:57:17:55:0e:28:e2:e0:d4:
0b:d3:84:15:99:17:00:f8:a2:5d:2f:e2:c0:0f:3b:
af:e3:f1:f7:cb:69:6d:41:38:2f:c8:9a:86:43:82:
0b:8f:6e:7e:d5:b1:61:37:e0:85:e0:2d:a5:ab:d5:
ed:b1:67:c9:ef:b5:fd:a2:f4:86:45:95:2e:08:fd:
6e:c7:84:7e:80:57:f5:75:8b:7a:c4:d7:0f:98:f2:
48:16:b9:f3:a3:17:2d:ff:ae:64:38:a5:fc:16:63:
74:58:0e:e5:80:46:c1:10:fd:55:7d:10:b5:f9:e2:
8d:e0:e0:75:9e:e8:77:3a:62:01:6c:eb:1b:cf:d6:
be:bb:56:8b:14:1a:ec:4d:ad:8d:2e:a7:23:2d:26:
e0:71:4b:19:3b:68:93:83:4e:9c:27:a6:78:e7:85:
0a:46:f8:5f:f5:61:e7:b9:f9:0c:76:f4:1a:d5:89:
8e:5b:11:c7:9e:45:e0:bd:cf:a9:87:18:f4:37:25:
b0:89:7e:f7:b3:d1:86:57:90:a2:53:c1:1f:c2:74:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:82:74:47:43:66:0A:0D:55:C4:4C:0B:F7:8C:67:9C:F0:F7:1D:90
X509v3 Authority Key Identifier:
keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:83:d9:8d:da:94:fb:f0:83:c2:6f:d8:48:2b:ac:3b:ca:8c:
45:99:fb:a7:f8:e8:f8:18:3d:05:fc:45:98:b3:cb:a4:4d:a3:
b2:99:98:b7:0c:7c:39:62:94:2b:8a:0d:01:43:ba:ac:d0:f4:
a3:45:bc:82:f4:d6:f6:8c:eb:e0:23:08:bf:a2:c2:75:4d:65:
1e:07:15:e9:ab:87:14:3a:e1:90:d5:e6:73:14:e2:8d:49:b3:
cf:07:32:fe:da:eb:41:82:0e:52:de:37:ae:8c:e1:af:f0:e0:
e7:be:7f:b4:29:91:05:f7:3f:14:96:68:10:a8:da:7a:4a:55:
d5:97:b8:fa:08:f9:f0:51:48:02:93:ff:31:c8:a9:57:ef:1d:
b4:a3:bb:47:9b:89:6c:27:df:af:bc:2b:56:5c:29:4f:31:fb:
8e:95:ce:29:4e:5b:14:50:db:90:c0:2e:ea:20:ee:8c:c2:aa:
93:3a:ff:bb:af:bb:1b:55:2f:06:c0:85:ed:9e:c3:ed:8f:e5:
b4:e2:2c:8b:c2:a8:f1:36:88:94:9d:a8:b9:2c:af:24:56:af:
52:b6:b2:0a:0f:42:61:fc:3a:8c:ab:60:a6:cd:67:65:a9:4f:
3e:26:0a:84:82:bb:62:b4:58:ea:d1:37:ae:aa:9c:86:a7:da:
f1:64:07:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/DzyOGmR/JrI9kkzhEtOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNmEzNDExNTgzZTI2MTQzMzQ5MmU1MDQ3Y2YzMWM0NmMz
ZDJjMWQwHhcNMjUwNDI5MDEwMDI2WhcNMjUwNDMwMDEwMDI2WjAzMTEwLwYDVQQD
EygzZTgyNzQ0NzQzNjYwYTBkNTVjNDRjMGJmNzhjNjc5Y2YwZjcxZDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2tpzRCae1urVVFOkOoUrvGboTCn
YB4P+jbM5BWbFdFvJt/OnW36bx7kyR6Kf3By3jlhVxdVDiji4NQL04QVmRcA+KJd
L+LADzuv4/H3y2ltQTgvyJqGQ4ILj25+1bFhN+CF4C2lq9XtsWfJ77X9ovSGRZUu
CP1ux4R+gFf1dYt6xNcPmPJIFrnzoxct/65kOKX8FmN0WA7lgEbBEP1VfRC1+eKN
4OB1nuh3OmIBbOsbz9a+u1aLFBrsTa2NLqcjLSbgcUsZO2iTg06cJ6Z454UKRvhf
9WHnufkMdvQa1YmOWxHHnkXgvc+phxj0NyWwiX73s9GGV5CiU8EfwnQwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6CdEdDZgoNVcRMC/eMZ5zw9x2QMB8GA1UdIwQY
MBaAFIpqNBFYPiYUM0kuUEfPMcRsPSwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYt
NzA5OGE3YTUyYzdlLzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yODI5NzQtMzdmYi00ZDg1LTkyYmYtNzA5OGE3YTUyYzdl
LzEvaW1vMEVWZy1KaFF6U1M1UVI4OHh4R3c5TEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4PZjdqU
+/CDwm/YSCusO8qMRZn7p/jo+Bg9BfxFmLPLpE2jspmYtwx8OWKUK4oNAUO6rND0
o0W8gvTW9ozr4CMIv6LCdU1lHgcV6auHFDrhkNXmcxTijUmzzwcy/trrQYIOUt43
rozhr/Dg575/tCmRBfc/FJZoEKjaekpV1Ze4+gj58FFIApP/McipV+8dtKO7R5uJ
bCffr7wrVlwpTzH7jpXOKU5bFFDbkMAu6iDujMKqkzr/u6+7G1UvBsCF7Z7D7Y/l
tOIsi8Ko8TaIlJ2ouSyvJFavUrayCg9CYfw6jKtgps1nZalPPiYKhIK7YrRY6tE3
rqqchqfa8WQHWQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:14 2025 by rpki-client