Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
File: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft (raw, json)
Hash identifier: ivfuYLGSFe/VQYs2i+GloXDhoM1PMTxdx4cp7Wt+CMI=
Subject key identifier: 37:28:15:6B:B7:AC:4A:7D:BE:B9:15:6B:C9:2E:D1:37:5B:BA:1C:13
Authority key identifier: 75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
Certificate issuer: /CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Certificate serial: 01967DC6C441D76872DECC59DF63E6AA90F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
Manifest number: 0FC8
Signing time: Mon 28 Apr 2025 19:01:40 +0000
Manifest this update: Mon 28 Apr 2025 19:01:40 +0000
Manifest next update: Tue 29 Apr 2025 19:01:40 +0000
Files and hashes: 1: dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl (hash: 936N4S9N5QENbTPF2RV2HegLWMkOe1MI4GOxf2OFCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:c4:41:d7:68:72:de:cc:59:df:63:e6:aa:90:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7572c9a108ce3de52d16e211e80c95e5c5b54c84
Validity
Not Before: Apr 28 19:01:40 2025 GMT
Not After : Apr 29 19:01:40 2025 GMT
Subject: CN=3728156bb7ac4a7dbeb9156bc92ed1375bba1c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:1e:0d:eb:fe:aa:d6:c6:f5:d3:a9:ff:3e:
8d:82:66:0a:75:f5:cb:3b:90:c5:0c:1f:db:75:53:
ca:c6:7d:47:55:ae:06:9f:c1:17:83:2f:07:39:42:
46:a7:7f:57:aa:7c:11:2d:cd:b1:2c:25:24:71:ae:
d3:2e:ce:69:e9:cf:cc:72:62:12:4f:d8:84:d3:d2:
1d:9d:8a:46:f2:db:7e:ba:c3:90:db:86:13:97:3c:
70:90:41:ad:3e:af:54:f8:a5:e9:34:0d:e9:11:62:
39:40:3b:13:f9:4d:88:ab:95:bb:4e:44:38:17:0f:
c8:a5:5d:f5:2d:b3:72:c5:b6:e1:3b:5d:70:cd:5d:
2f:ce:de:9c:23:2c:fa:b7:64:12:34:b9:7d:e0:05:
3e:ef:89:6b:d1:ac:66:5c:1f:d0:46:5e:2b:d7:65:
5e:10:fc:98:3a:64:53:52:4b:91:31:36:36:53:74:
10:ae:b6:e4:00:37:d7:5b:b2:a3:11:bc:a5:8b:0d:
e2:ec:d0:d8:05:ff:47:a5:f2:f3:e8:ce:27:75:0d:
4f:bd:d3:b2:73:c1:64:98:6c:1f:1e:39:3a:63:09:
e2:8e:a9:e1:67:1b:13:de:c7:c1:e8:38:f1:82:e8:
ec:92:e5:cc:d8:ba:29:6b:d1:3a:99:76:6c:3d:30:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:28:15:6B:B7:AC:4A:7D:BE:B9:15:6B:C9:2E:D1:37:5B:BA:1C:13
X509v3 Authority Key Identifier:
keyid:75:72:C9:A1:08:CE:3D:E5:2D:16:E2:11:E8:0C:95:E5:C5:B5:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6fd7e5-c2c9-490b-95e9-5faec5abaf1b/1/dXLJoQjOPeUtFuIR6AyV5cW1TIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:b3:2d:c8:05:ae:01:b4:e8:b1:4d:f9:d3:4f:92:a3:c8:
ff:d3:16:17:0e:aa:ba:f1:56:c9:87:8a:e7:02:e4:87:34:31:
73:b1:94:01:e5:36:49:76:28:6d:41:f4:eb:87:06:b3:47:ab:
a5:84:e6:95:39:ad:80:f0:28:11:6f:48:f7:fd:8b:aa:09:c6:
d7:b7:f2:68:55:2b:1b:b6:d6:ef:7a:0d:e5:6a:56:6b:84:94:
f4:67:7f:dc:14:23:42:96:2e:de:d3:de:42:1e:4c:7e:49:f7:
16:19:42:2f:57:4d:1a:9f:d6:93:15:5f:39:12:c1:f4:f9:b4:
86:8d:43:62:8e:1d:eb:34:e7:03:2f:ab:43:9e:74:b3:7c:49:
9a:68:b1:a8:38:01:ac:a0:4c:d4:bc:d0:cf:5c:d8:55:7e:27:
77:74:3e:32:ea:0b:65:b9:06:78:fe:01:e5:9f:df:33:94:84:
d0:01:7d:55:11:8e:1d:9b:dd:ae:9f:48:ad:1a:6f:35:08:ef:
e2:03:24:3b:a8:e8:66:94:dc:5b:e1:9e:82:1a:2a:cf:f5:3d:
77:ad:39:68:ea:c7:bf:52:4f:29:5d:43:4a:2c:4a:db:f4:9e:
23:88:79:02:92:e5:03:a5:92:fb:0c:07:41:6b:2b:cd:96:8c:
0c:a7:d4:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xsRB12hy3sxZ32PmqpD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzJjOWExMDhjZTNkZTUyZDE2ZTIxMWU4MGM5NWU1YzVi
NTRjODQwHhcNMjUwNDI4MTkwMTQwWhcNMjUwNDI5MTkwMTQwWjAzMTEwLwYDVQQD
EygzNzI4MTU2YmI3YWM0YTdkYmViOTE1NmJjOTJlZDEzNzViYmExYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQMeDev+qtbG9dOp/z6NgmYKdfXL
O5DFDB/bdVPKxn1HVa4Gn8EXgy8HOUJGp39XqnwRLc2xLCUkca7TLs5p6c/McmIS
T9iE09IdnYpG8tt+usOQ24YTlzxwkEGtPq9U+KXpNA3pEWI5QDsT+U2Iq5W7TkQ4
Fw/IpV31LbNyxbbhO11wzV0vzt6cIyz6t2QSNLl94AU+74lr0axmXB/QRl4r12Ve
EPyYOmRTUkuRMTY2U3QQrrbkADfXW7KjEbyliw3i7NDYBf9HpfLz6M4ndQ1PvdOy
c8FkmGwfHjk6YwnijqnhZxsT3sfB6DjxgujskuXM2Lopa9E6mXZsPTC2oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcoFWu3rEp9vrkVa8ku0TdbuhwTMB8GA1UdIwQY
MBaAFHVyyaEIzj3lLRbiEegMleXFtUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82ZmQ3ZTUtYzJjOS00OTBiLTk1ZTkt
NWZhZWM1YWJhZjFiLzEvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82ZmQ3ZTUtYzJjOS00OTBiLTk1ZTktNWZhZWM1YWJhZjFi
LzEvZFhMSm9Rak9QZVV0RnVJUjZBeVY1Y1cxVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKO+zLcgF
rgG06LFN+dNPkqPI/9MWFw6quvFWyYeK5wLkhzQxc7GUAeU2SXYobUH064cGs0er
pYTmlTmtgPAoEW9I9/2LqgnG17fyaFUrG7bW73oN5WpWa4SU9Gd/3BQjQpYu3tPe
Qh5Mfkn3FhlCL1dNGp/WkxVfORLB9Pm0ho1DYo4d6zTnAy+rQ550s3xJmmixqDgB
rKBM1LzQz1zYVX4nd3Q+MuoLZbkGeP4B5Z/fM5SE0AF9VRGOHZvdrp9IrRpvNQjv
4gMkO6joZpTcW+Geghoqz/U9d605aOrHv1JPKV1DSixK2/SeI4h5ApLlA6WS+wwH
QWsrzZaMDKfUmA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:27:51 2025 by rpki-client