Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
File: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft (raw, json)
Hash identifier: WLFWaHo+6YXt/Kp2Mm9EYToCsHB5BH2xBXlfmE7nJDI=
Subject key identifier: 65:A2:7F:36:CE:CD:D6:87:BF:E0:7F:E4:EC:5F:4B:69:D7:BF:F7:28
Authority key identifier: F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
Certificate issuer: /CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Certificate serial: 019680902F51D27539DCAF753A95F61EFA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
Manifest number: 0826
Signing time: Tue 29 Apr 2025 08:00:55 +0000
Manifest this update: Tue 29 Apr 2025 08:00:55 +0000
Manifest next update: Wed 30 Apr 2025 08:00:55 +0000
Files and hashes: 1: 1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl (hash: JY2M+NPTD3oM35MVCIoKkN9TYY5sem/tMpcjQlU0O8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:2f:51:d2:75:39:dc:af:75:3a:95:f6:1e:fa:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfa47dc08252e854865dd8e528cff84ee6369c
Validity
Not Before: Apr 29 08:00:55 2025 GMT
Not After : Apr 30 08:00:55 2025 GMT
Subject: CN=65a27f36cecdd687bfe07fe4ec5f4b69d7bff728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:51:5e:01:11:43:d4:77:6c:68:a6:38:43:
94:62:7e:ca:60:e8:1a:a5:60:37:45:85:3a:db:2c:
15:74:e5:58:94:37:31:a1:a7:e3:15:13:bb:1c:da:
c4:15:fe:bb:c4:39:79:83:94:36:e9:88:a5:fb:48:
94:ac:5b:ea:dd:cc:13:a1:5e:f0:cc:b2:46:17:08:
73:9e:96:bd:ab:3b:0d:02:16:89:fd:fe:0a:ec:96:
6b:e4:04:64:9c:8c:a7:fe:50:69:b2:44:fc:14:a9:
5f:55:f4:62:25:0d:ef:c5:c8:82:5e:a9:3c:7d:ba:
62:44:58:4a:aa:0f:1b:70:5d:45:de:db:bc:c4:55:
5a:b1:65:c8:af:79:f4:eb:46:0b:2d:95:85:f5:ce:
ec:5b:f6:c6:fd:f1:af:d1:3a:88:fd:16:89:c3:d8:
be:d7:fa:fa:20:6c:a0:67:0a:f4:22:cb:3f:f4:14:
3e:b6:e2:7c:3b:a8:e9:51:65:0e:f5:cc:8f:23:81:
33:93:31:4b:6e:68:ec:80:cb:53:57:9d:b9:45:99:
9a:75:b3:8a:f6:0c:41:21:12:e4:84:5b:36:ad:3a:
25:f4:5a:3b:d1:f5:37:cb:4e:72:63:cd:82:b8:00:
cd:3c:3f:22:c9:db:bd:73:e3:cb:d8:4b:17:fe:3e:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A2:7F:36:CE:CD:D6:87:BF:E0:7F:E4:EC:5F:4B:69:D7:BF:F7:28
X509v3 Authority Key Identifier:
keyid:F8:CF:A4:7D:C0:82:52:E8:54:86:5D:D8:E5:28:CF:F8:4E:E6:36:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4d400a-f779-4704-b111-ca8d7d8fb9c1/1/1-M-kfcCCUuhUhl3Y5SjP-E7mNpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:35:f7:36:17:c0:7a:e2:f1:56:80:76:bb:3d:ce:29:36:c1:
f5:55:4e:53:4d:e1:b6:7c:14:1e:3c:04:06:f6:2d:88:3b:ef:
4b:29:a2:1a:f4:c9:2c:81:9d:76:de:1e:6a:20:27:4f:1e:fc:
49:cb:7e:16:fc:f7:e6:7e:9a:71:bb:68:52:b4:c2:3b:6c:d7:
c4:64:ea:bc:7b:f3:10:68:a5:0e:0f:44:3e:82:f4:b9:d9:a9:
ce:70:93:7a:83:15:a6:09:34:0b:7e:37:39:48:61:cf:e9:f7:
62:ac:63:a0:cf:de:bb:6f:d9:22:e4:71:05:ab:8e:d8:02:de:
af:ec:16:d3:38:94:ec:44:0e:a7:6d:19:cf:22:fb:db:20:c6:
12:ad:c9:53:52:a7:fe:d3:e4:36:9b:ea:27:74:fc:32:c4:e6:
67:cc:cb:76:40:9a:cb:bb:d6:f8:39:8a:ef:56:af:5b:21:90:
a6:50:ab:64:65:3c:7f:38:87:1b:fe:65:0e:94:3b:21:b0:90:
7c:e9:d8:1c:fb:33:18:8f:c7:61:c1:15:cd:88:8b:9f:75:05:
2c:b7:55:4a:71:44:c2:4d:2d:05:5c:7c:01:70:4c:8e:ca:b8:
16:f9:4c:c5:0c:58:17:89:02:d1:5e:03:d6:6b:6a:0e:0a:eb:
59:54:3c:83
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaAkC9R0nU53K91OpX2HvqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4Y2ZhNDdkYzA4MjUyZTg1NDg2NWRkOGU1MjhjZmY4NGVl
NjM2OWMwHhcNMjUwNDI5MDgwMDU1WhcNMjUwNDMwMDgwMDU1WjAzMTEwLwYDVQQD
Eyg2NWEyN2YzNmNlY2RkNjg3YmZlMDdmZTRlYzVmNGI2OWQ3YmZmNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NRXgERQ9R3bGimOEOUYn7KYOga
pWA3RYU62ywVdOVYlDcxoafjFRO7HNrEFf67xDl5g5Q26Yil+0iUrFvq3cwToV7w
zLJGFwhznpa9qzsNAhaJ/f4K7JZr5ARknIyn/lBpskT8FKlfVfRiJQ3vxciCXqk8
fbpiRFhKqg8bcF1F3tu8xFVasWXIr3n060YLLZWF9c7sW/bG/fGv0TqI/RaJw9i+
1/r6IGygZwr0Iss/9BQ+tuJ8O6jpUWUO9cyPI4EzkzFLbmjsgMtTV525RZmadbOK
9gxBIRLkhFs2rTol9Fo70fU3y05yY82CuADNPD8iydu9c+PL2EsX/j7ZOwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGWifzbOzdaHv+B/5OxfS2nXv/coMB8GA1UdIwQY
MBaAFPjPpH3AglLoVIZd2OUoz/hO5jacMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1NLWtmY0NDVXVoVWhsM1k1U2pQLUU3bU5wdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2EvNGQ0MDBhLWY3NzktNDcwNC1iMTEx
LWNhOGQ3ZDhmYjljMS8xLzEtTS1rZmNDQ1V1aFVobDNZNVNqUC1FN21OcHcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNhLzRkNDAwYS1mNzc5LTQ3MDQtYjExMS1jYThkN2Q4ZmI5
YzEvMS8xLU0ta2ZjQ0NVdWhVaGwzWTVTalAtRTdtTnB3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfzX3
NhfAeuLxVoB2uz3OKTbB9VVOU03htnwUHjwEBvYtiDvvSymiGvTJLIGddt4eaiAn
Tx78Sct+Fvz35n6acbtoUrTCO2zXxGTqvHvzEGilDg9EPoL0udmpznCTeoMVpgk0
C343OUhhz+n3YqxjoM/eu2/ZIuRxBauO2ALer+wW0ziU7EQOp20ZzyL72yDGEq3J
U1Kn/tPkNpvqJ3T8MsTmZ8zLdkCay7vW+DmK71avWyGQplCrZGU8fziHG/5lDpQ7
IbCQfOnYHPszGI/HYcEVzYiLn3UFLLdVSnFEwk0tBVx8AXBMjsq4FvlMxQxYF4kC
0V4D1mtqDgrrWVQ8gw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:13:13 2025 by rpki-client