Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: OpxZuuzSzwHHyKv0Vd38t/433FQzljPeu6GtgTQFA8Q=
Subject key identifier: E0:CD:8F:C6:71:AA:7A:44:72:0D:CB:C6:62:9B:94:D3:35:6D:62:DA
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 0196760C93A46A6677465F75436F587C5451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0A99
Signing time: Sun 27 Apr 2025 07:00:57 +0000
Manifest this update: Sun 27 Apr 2025 07:00:57 +0000
Manifest next update: Mon 28 Apr 2025 07:00:57 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: AR36ggQxqjb5QIZJjeXFL1UzjeLoTaOn3SBIyk+dHJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:93:a4:6a:66:77:46:5f:75:43:6f:58:7c:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Apr 27 07:00:57 2025 GMT
Not After : Apr 28 07:00:57 2025 GMT
Subject: CN=e0cd8fc671aa7a44720dcbc6629b94d3356d62da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:45:df:3a:e1:01:10:56:23:7e:16:06:3e:
d5:a1:be:b8:b5:55:67:56:fc:a7:42:ca:8a:2b:72:
06:b9:a8:73:f1:3a:c5:64:10:69:b3:13:10:16:f1:
37:fb:6b:9c:50:52:8f:92:9d:e4:13:3d:b4:9a:b6:
9b:de:2d:e5:6a:5b:ca:8e:f6:c1:df:e1:2c:3e:b5:
94:b0:33:e4:2c:11:14:df:98:06:b3:0b:5b:b5:6b:
13:72:fa:92:be:bf:63:bf:32:d2:da:72:2a:f6:e8:
3e:4b:e1:4c:bf:d1:d1:e2:e1:84:58:54:ab:f1:00:
0d:9e:c4:05:1a:c0:9f:83:f8:0b:92:7c:78:f7:11:
fe:5b:92:ed:c1:b3:05:23:65:a0:6f:a5:e8:2a:47:
a6:13:35:f7:d0:15:bb:06:e3:e9:77:2e:07:90:de:
1c:c9:c0:08:8d:1f:f0:d5:a1:b4:0e:b6:72:95:37:
d8:8c:b7:b4:e7:68:63:c3:ef:7f:35:a6:cf:73:76:
17:55:ff:04:9b:6c:34:8e:01:f6:db:b5:7c:e4:0a:
cd:2a:d0:11:9e:e7:cb:24:f0:87:36:42:24:ae:26:
66:8b:a1:c6:bb:b4:a8:01:11:1a:62:cf:58:ce:61:
5a:5d:b1:de:8e:cc:4a:44:08:d3:65:ca:20:c3:40:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CD:8F:C6:71:AA:7A:44:72:0D:CB:C6:62:9B:94:D3:35:6D:62:DA
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:76:4a:e2:10:84:e9:9c:88:3b:9f:75:e8:27:51:73:49:40:
da:ce:37:67:3c:27:99:cd:cb:18:56:ad:8e:2a:ed:50:97:7a:
5a:de:15:da:6a:8e:3a:4e:27:c0:af:ae:2a:02:6b:24:83:fe:
a8:19:90:d5:f9:f2:98:5e:70:e4:0e:7c:13:33:38:c8:ac:89:
25:67:99:23:4e:8b:aa:c1:a9:eb:88:61:b7:e2:ac:75:d7:da:
f5:37:ff:c9:97:ff:5c:dd:f6:00:d6:a5:29:ce:3e:45:11:09:
43:17:3f:95:eb:be:ab:f3:b7:7b:02:cf:0c:ed:ff:73:17:e3:
4f:6c:06:c9:2a:54:d3:5a:b3:b9:5c:b0:0c:56:90:0e:5c:fc:
00:b6:17:4a:a5:2d:e0:cf:b2:e2:c2:36:02:11:ec:e0:7f:7b:
70:58:c9:e8:ea:25:a4:5a:30:a9:ec:6e:c7:8a:1d:86:06:83:
e3:94:34:07:c1:c3:ad:8c:73:8e:31:3a:5a:47:d1:a2:d5:a0:
80:63:b9:24:2e:71:0c:8a:45:ce:a7:f5:06:68:73:6f:96:43:
8e:05:bb:18:3f:98:b8:ff:76:47:c9:a0:ac:1b:7a:eb:79:5d:
b9:f0:bf:8d:c1:e9:33:52:9d:3c:90:c0:b8:84:10:b3:2a:ac:
87:6e:54:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DJOkamZ3Rl91Q29YfFRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYWQ1MjFmODM4ODc0ODNjOGM5YjBjNmYzZGU1ZmQ1ZWQ1
Njg1YzkwHhcNMjUwNDI3MDcwMDU3WhcNMjUwNDI4MDcwMDU3WjAzMTEwLwYDVQQD
EyhlMGNkOGZjNjcxYWE3YTQ0NzIwZGNiYzY2MjliOTRkMzM1NmQ2MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOZF3zrhARBWI34WBj7Vob64tVVn
VvynQsqKK3IGuahz8TrFZBBpsxMQFvE3+2ucUFKPkp3kEz20mrab3i3lalvKjvbB
3+EsPrWUsDPkLBEU35gGswtbtWsTcvqSvr9jvzLS2nIq9ug+S+FMv9HR4uGEWFSr
8QANnsQFGsCfg/gLknx49xH+W5LtwbMFI2Wgb6XoKkemEzX30BW7BuPpdy4HkN4c
ycAIjR/w1aG0DrZylTfYjLe052hjw+9/NabPc3YXVf8Em2w0jgH227V85ArNKtAR
nufLJPCHNkIkriZmi6HGu7SoAREaYs9YzmFaXbHejsxKRAjTZcogw0BiMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODNj8ZxqnpEcg3LxmKblNM1bWLaMB8GA1UdIwQY
MBaAFPOtUh+DiHSDyMmwxvPeX9XtVoXJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jZGQ5ODUtMzM0Yy00YTBkLWE3YTgt
NzVjMGNjZWRmOTc2LzEvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jZGQ5ODUtMzM0Yy00YTBkLWE3YTgtNzVjMGNjZWRmOTc2
LzEvODYxU0g0T0lkSVBJeWJERzg5NWYxZTFXaGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHZK4hCE
6ZyIO5916CdRc0lA2s43Zzwnmc3LGFatjirtUJd6Wt4V2mqOOk4nwK+uKgJrJIP+
qBmQ1fnymF5w5A58EzM4yKyJJWeZI06LqsGp64hht+Ksddfa9Tf/yZf/XN32ANal
Kc4+RREJQxc/leu+q/O3ewLPDO3/cxfjT2wGySpU01qzuVywDFaQDlz8ALYXSqUt
4M+y4sI2AhHs4H97cFjJ6OolpFowqexux4odhgaD45Q0B8HDrYxzjjE6WkfRotWg
gGO5JC5xDIpFzqf1Bmhzb5ZDjgW7GD+YuP92R8mgrBt663ldufC/jcHpM1KdPJDA
uIQQsyqsh25Ucg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:42 2025 by rpki-client