Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
File: CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft (raw, json)
Hash identifier: N2OXheufAK2XScLByk7v1Aqv3JQB7j2SZYm+t73EAdc=
Subject key identifier: 50:63:64:C6:63:73:13:73:9D:52:93:9B:50:8A:11:E6:69:34:F1:D7
Authority key identifier: 08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
Certificate issuer: /CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Certificate serial: 01967CB3459FE007894039EC03A2CA0A8CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
Manifest number: 0153
Signing time: Mon 28 Apr 2025 14:00:45 +0000
Manifest this update: Mon 28 Apr 2025 14:00:45 +0000
Manifest next update: Tue 29 Apr 2025 14:00:45 +0000
Files and hashes: 1: CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl (hash: sRak5QMhlSNPV007dqWlgowYEyocY4Zzjhh3+oM7RQU=)
2: Dx843zJfB2RQ1tXw_6blL8VsbDw.roa (hash: Wk3Kg6R2i9DDoDfgR64ME8g+dDPZ0Euba0eJlCA1nOk=)
3: baeYMpQTf1prfSgvYpiSJyiA86o.roa (hash: K1aC88mjEbBLbQ7U4e/CSJaIjpQ51Z65KxdLka02ark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:b3:45:9f:e0:07:89:40:39:ec:03:a2:ca:0a:8c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b3eb5fb3ba7656e11357834829eecaf441212e
Validity
Not Before: Apr 28 14:00:45 2025 GMT
Not After : Apr 29 14:00:45 2025 GMT
Subject: CN=506364c6637313739d52939b508a11e66934f1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:29:be:22:eb:28:3e:4c:4b:f3:67:18:b3:
e4:78:1e:d8:37:ee:47:90:84:de:a6:eb:fa:19:ea:
ba:8c:21:12:2b:29:fe:21:fb:f7:7f:7d:ce:fb:19:
ca:7f:d1:bd:5c:9b:3d:a9:a6:4e:d4:31:f3:a3:c5:
51:1d:e6:13:3a:2e:ce:12:56:b0:89:79:3d:6d:36:
db:ff:88:82:3f:ba:bb:48:84:e9:14:de:0b:ed:1e:
ac:8e:65:5e:91:77:b9:83:d3:31:1f:7b:9c:fc:92:
a4:de:1f:64:0a:7f:19:64:70:f1:93:4a:5a:6c:fd:
13:a0:bc:55:7e:59:88:ee:57:73:ee:71:70:4a:6f:
5a:40:e8:e7:2b:71:4d:6c:c6:b0:06:52:ab:f9:92:
be:1d:d1:d1:01:e4:dd:95:de:88:48:06:88:34:44:
3a:a8:46:07:b6:a1:02:c9:79:5b:96:40:83:94:94:
e7:a3:74:23:e8:95:60:54:ff:f2:d2:d4:d5:68:3b:
9f:4d:cf:0e:ac:13:e9:d0:d9:85:ee:d9:a0:a5:a6:
1b:86:da:75:2b:ef:c3:6e:28:0b:b7:1f:4c:89:bc:
71:d5:a6:bd:7d:d1:ff:96:da:4a:4d:dd:d9:a3:6e:
d9:90:ac:ab:0b:eb:bc:a9:38:44:a3:f6:a4:d0:9b:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:63:64:C6:63:73:13:73:9D:52:93:9B:50:8A:11:E6:69:34:F1:D7
X509v3 Authority Key Identifier:
keyid:08:B3:EB:5F:B3:BA:76:56:E1:13:57:83:48:29:EE:CA:F4:41:21:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLPrX7O6dlbhE1eDSCnuyvRBIS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/16c890-17e7-4a51-a387-3e8df3310232/1/CLPrX7O6dlbhE1eDSCnuyvRBIS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:be:66:02:f4:c1:c4:87:3f:98:39:1c:48:df:9f:d0:e2:
4a:8a:be:41:19:8a:d9:5b:4f:03:3b:8e:81:4f:ae:2e:7d:32:
5b:f1:6f:fd:4a:b0:01:0b:7f:a7:ca:d9:f3:0b:86:d8:3e:fc:
b0:f7:db:65:d1:5e:85:08:c3:0a:0a:9d:2c:97:7a:83:ab:64:
46:39:80:6d:33:80:8b:06:14:8d:ea:ca:66:1c:e0:86:d1:d5:
5f:c4:1f:84:84:b1:9a:33:55:94:22:99:47:96:bb:7e:70:fd:
74:ca:44:ef:a0:ef:28:df:b1:c6:cd:ef:fa:c5:ae:1c:65:a5:
22:0a:6d:68:a2:59:22:ff:8b:b2:fd:9d:b4:bb:4b:db:b8:f5:
4b:9f:cd:10:b9:ce:bc:d1:72:1e:14:0d:58:6c:7b:d8:35:ef:
5a:07:b5:99:28:df:8b:a6:45:ff:16:fd:1b:0e:03:cd:b8:1f:
15:39:3c:39:fe:7f:78:81:08:06:ee:a6:fa:cb:6c:7d:95:2c:
c8:87:d1:ca:cf:10:a6:5c:e4:e7:ef:37:db:82:ff:0b:54:48:
71:3d:f9:be:d4:e3:a9:70:1b:a5:b3:90:5c:e7:f4:ab:f6:b4:
db:c3:ae:70:b1:85:83:da:c4:df:b3:1d:0a:3c:6f:aa:e0:43:
05:fc:7b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8s0Wf4AeJQDnsA6LKCoziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4YjNlYjVmYjNiYTc2NTZlMTEzNTc4MzQ4MjllZWNhZjQ0
MTIxMmUwHhcNMjUwNDI4MTQwMDQ1WhcNMjUwNDI5MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg1MDYzNjRjNjYzNzMxMzczOWQ1MjkzOWI1MDhhMTFlNjY5MzRmMWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqgpviLrKD5MS/NnGLPkeB7YN+5H
kITepuv6Geq6jCESKyn+Ifv3f33O+xnKf9G9XJs9qaZO1DHzo8VRHeYTOi7OElaw
iXk9bTbb/4iCP7q7SITpFN4L7R6sjmVekXe5g9MxH3uc/JKk3h9kCn8ZZHDxk0pa
bP0ToLxVflmI7ldz7nFwSm9aQOjnK3FNbMawBlKr+ZK+HdHRAeTdld6ISAaINEQ6
qEYHtqECyXlblkCDlJTno3Qj6JVgVP/y0tTVaDufTc8OrBPp0NmF7tmgpaYbhtp1
K+/DbigLtx9Mibxx1aa9fdH/ltpKTd3Zo27ZkKyrC+u8qThEo/ak0JutNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBjZMZjcxNznVKTm1CKEeZpNPHXMB8GA1UdIwQY
MBaAFAiz61+zunZW4RNXg0gp7sr0QSEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODct
M2U4ZGYzMzEwMjMyLzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8xNmM4OTAtMTdlNy00YTUxLWEzODctM2U4ZGYzMzEwMjMy
LzEvQ0xQclg3TzZkbGJoRTFlRFNDbnV5dlJCSVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0W+ZgL0
wcSHP5g5HEjfn9DiSoq+QRmK2VtPAzuOgU+uLn0yW/Fv/UqwAQt/p8rZ8wuG2D78
sPfbZdFehQjDCgqdLJd6g6tkRjmAbTOAiwYUjerKZhzghtHVX8QfhISxmjNVlCKZ
R5a7fnD9dMpE76DvKN+xxs3v+sWuHGWlIgptaKJZIv+Lsv2dtLtL27j1S5/NELnO
vNFyHhQNWGx72DXvWge1mSjfi6ZF/xb9Gw4DzbgfFTk8Of5/eIEIBu6m+stsfZUs
yIfRys8Qplzk5+8324L/C1RIcT35vtTjqXAbpbOQXOf0q/a028OucLGFg9rE37Md
CjxvquBDBfx7Yg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:41:13 2025 by rpki-client