Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
File: SXoXzvuUeLbK6PZdWfsepdB2LWg.mft (raw, json)
Hash identifier: 0Md5bQKnXZ6sZCfpkx1kJOJqTRC1VEuZNsPVrzkTQIQ=
Subject key identifier: 52:F5:0D:C7:97:FB:F7:51:DB:86:A2:2C:B5:74:BC:84:82:DC:8B:AD
Authority key identifier: 49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
Certificate issuer: /CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Certificate serial: 019691156C1576DDC9A3944F0AD0528A7BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
Manifest number: 0958
Signing time: Fri 02 May 2025 13:00:22 +0000
Manifest this update: Fri 02 May 2025 13:00:22 +0000
Manifest next update: Sat 03 May 2025 13:00:22 +0000
Files and hashes: 1: SXoXzvuUeLbK6PZdWfsepdB2LWg.crl (hash: AwpAh/Td7Xbc3LwnZlEPOBUD6LiViUhfXxpK3R/x7KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:6c:15:76:dd:c9:a3:94:4f:0a:d0:52:8a:7b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=497a17cefb9478b6cae8f65d59fb1ea5d0762d68
Validity
Not Before: May 2 13:00:22 2025 GMT
Not After : May 3 13:00:22 2025 GMT
Subject: CN=52f50dc797fbf751db86a22cb574bc8482dc8bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:11:02:fd:bc:c4:a4:23:8e:20:4f:a8:ae:5b:
64:2b:a3:45:62:f9:73:65:ae:d4:42:95:f9:59:9a:
3e:c2:3f:b0:d0:ee:9c:47:6f:6c:ab:b9:9a:76:9d:
c3:37:1d:d1:1c:a4:cf:52:f9:2e:17:7e:66:8a:c9:
b9:4d:0a:44:31:39:08:dd:f4:71:35:60:9d:d2:fd:
1b:10:d7:47:43:e4:8b:bc:d7:ed:7f:b4:2b:f5:24:
c0:10:94:9e:53:66:9e:df:ac:a9:0e:78:10:11:7d:
98:d5:d3:33:58:df:0c:c6:b2:b6:a6:63:d1:d1:55:
55:98:5c:49:f2:f1:8f:b8:55:2b:4e:a3:25:ce:87:
c0:fd:16:4a:f6:54:94:57:fa:79:12:c6:6b:44:03:
51:2a:e1:c1:52:35:cd:99:a0:f7:f1:db:6d:cd:4b:
e0:dc:91:de:c5:99:c9:5f:94:87:6d:44:7a:2d:4b:
f0:ba:ab:0f:c0:2a:cd:72:ea:a3:2f:64:29:d6:ea:
5d:3c:de:cf:e8:9c:81:f6:dc:5e:66:6f:cc:28:c3:
7d:03:23:55:6b:aa:11:f5:12:8a:83:1b:81:04:4f:
f0:ed:fa:0b:1d:d8:f6:33:c6:17:1c:aa:d2:32:5d:
73:02:74:7d:9f:a9:e5:ae:36:f0:c5:c1:bd:a0:48:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:0D:C7:97:FB:F7:51:DB:86:A2:2C:B5:74:BC:84:82:DC:8B:AD
X509v3 Authority Key Identifier:
keyid:49:7A:17:CE:FB:94:78:B6:CA:E8:F6:5D:59:FB:1E:A5:D0:76:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXoXzvuUeLbK6PZdWfsepdB2LWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fef21c-0340-4a17-8011-ed1d77d35df5/1/SXoXzvuUeLbK6PZdWfsepdB2LWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a9:d8:0f:ea:7b:96:3e:20:13:b6:0d:d9:5a:1c:ed:43:87:
d7:78:e7:45:0a:24:2f:97:90:d4:c8:f6:79:05:ff:08:d5:13:
af:07:e1:c4:1f:8d:17:a3:27:00:05:f5:e0:80:11:2e:36:af:
52:f8:a0:fc:35:23:0c:ee:42:0a:e5:d8:50:82:2a:5e:33:d4:
2a:58:8d:e8:c1:d4:fb:6c:18:8d:04:4c:d8:52:d2:d0:80:2a:
a6:01:ee:3c:21:11:a6:a3:78:ac:08:2e:08:78:08:b3:a5:59:
37:d3:8b:5d:2d:5e:ee:bb:9a:c8:e2:b3:d4:1f:d3:63:a8:c5:
96:0e:51:ba:d3:68:cb:bd:ab:16:f0:c8:70:a2:60:99:bd:3e:
fa:eb:61:7c:81:3d:1d:39:7b:12:80:74:c5:5f:61:34:18:27:
9c:3f:c8:a7:62:99:8c:a8:3f:fd:45:b9:13:da:54:87:c1:82:
c3:9d:ac:5c:09:3c:36:3a:d1:bb:de:9e:11:9f:21:6f:19:db:
da:88:8c:be:2d:01:7b:fc:2d:84:a8:be:af:0c:ed:c2:b7:ab:
01:e6:37:d1:c1:d1:ad:a0:d9:17:2e:5f:a6:ee:eb:ab:7d:bf:
e4:f1:2b:a2:9e:01:08:98:90:1e:2f:ee:ac:0a:96:82:23:a1:
f7:10:1a:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRFWwVdt3Jo5RPCtBSinu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5N2ExN2NlZmI5NDc4YjZjYWU4ZjY1ZDU5ZmIxZWE1ZDA3
NjJkNjgwHhcNMjUwNTAyMTMwMDIyWhcNMjUwNTAzMTMwMDIyWjAzMTEwLwYDVQQD
Eyg1MmY1MGRjNzk3ZmJmNzUxZGI4NmEyMmNiNTc0YmM4NDgyZGM4YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBEC/bzEpCOOIE+orltkK6NFYvlz
Za7UQpX5WZo+wj+w0O6cR29sq7madp3DNx3RHKTPUvkuF35mism5TQpEMTkI3fRx
NWCd0v0bENdHQ+SLvNftf7Qr9STAEJSeU2ae36ypDngQEX2Y1dMzWN8MxrK2pmPR
0VVVmFxJ8vGPuFUrTqMlzofA/RZK9lSUV/p5EsZrRANRKuHBUjXNmaD38dttzUvg
3JHexZnJX5SHbUR6LUvwuqsPwCrNcuqjL2Qp1updPN7P6JyB9txeZm/MKMN9AyNV
a6oR9RKKgxuBBE/w7foLHdj2M8YXHKrSMl1zAnR9n6nlrjbwxcG9oEg0kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL1DceX+/dR24aiLLV0vISC3IutMB8GA1UdIwQY
MBaAFEl6F877lHi2yuj2XVn7HqXQdi1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hvWHp2dVVlTGJLNlBaZFdmc2VwZEIyTFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mZWYyMWMtMDM0MC00YTE3LTgwMTEt
ZWQxZDc3ZDM1ZGY1LzEvU1hvWHp2dVVlTGJLNlBaZFdmc2VwZEIyTFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9mZWYyMWMtMDM0MC00YTE3LTgwMTEtZWQxZDc3ZDM1ZGY1
LzEvU1hvWHp2dVVlTGJLNlBaZFdmc2VwZEIyTFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKnYD+p7
lj4gE7YN2Voc7UOH13jnRQokL5eQ1Mj2eQX/CNUTrwfhxB+NF6MnAAX14IARLjav
Uvig/DUjDO5CCuXYUIIqXjPUKliN6MHU+2wYjQRM2FLS0IAqpgHuPCERpqN4rAgu
CHgIs6VZN9OLXS1e7ruayOKz1B/TY6jFlg5RutNoy72rFvDIcKJgmb0++uthfIE9
HTl7EoB0xV9hNBgnnD/Ip2KZjKg//UW5E9pUh8GCw52sXAk8NjrRu96eEZ8hbxnb
2oiMvi0Be/wthKi+rwztwrerAeY30cHRraDZFy5fpu7rq32/5PErop4BCJiQHi/u
rAqWgiOh9xAalw==
-----END CERTIFICATE-----
Generated at Fri May 2 19:17:48 2025 by rpki-client