Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: 8nQx3b9uLYZaW1E/r+FZJ6+QJwXB1qqEdljPGCamnX8=
Subject key identifier: BE:FD:71:14:07:7C:C6:9D:DB:81:8A:AB:8E:BE:FF:3C:B3:0A:93:B6
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 019675D55433592F178771A76277BCDE08A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 92
Signing time: Sun 27 Apr 2025 06:00:36 +0000
Manifest this update: Sun 27 Apr 2025 06:00:36 +0000
Manifest next update: Mon 28 Apr 2025 06:00:36 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: 9+Sm2y3qBW/n9qiyF2Xbcm49Jg7zVUoyjwo9q/Dt2ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:54:33:59:2f:17:87:71:a7:62:77:bc:de:08:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Apr 27 06:00:36 2025 GMT
Not After : Apr 28 06:00:36 2025 GMT
Subject: CN=befd7114077cc69ddb818aab8ebeff3cb30a93b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:fc:32:ec:44:9a:fb:f2:60:58:26:5c:29:
ca:04:96:7c:88:cb:44:19:c6:a9:65:e1:eb:bb:1f:
47:39:e8:70:2f:fc:cf:6e:a9:cc:33:a3:87:f5:99:
68:77:85:21:3a:ee:c4:9e:73:2e:f8:2a:35:45:b8:
86:a1:ff:8d:2d:27:4d:99:ca:c1:9c:9a:45:b9:0c:
fd:67:10:f8:4a:68:cc:d4:1c:27:7c:47:bc:b9:be:
2e:84:02:54:48:12:6e:c5:7b:16:c0:4c:4a:69:e1:
f9:ea:aa:46:a9:9d:78:f8:f8:54:f5:86:b0:2b:5b:
1b:d3:71:7a:d8:20:b5:01:b1:b9:4c:cb:08:08:b1:
1d:08:61:e5:36:0a:74:03:80:95:1a:36:73:5c:6e:
08:65:d8:8f:24:d1:d6:9f:8b:70:40:c3:a2:2e:b6:
08:0f:4d:db:72:51:11:a2:e7:b3:99:63:f6:eb:cb:
cf:43:f6:8d:d4:52:82:3e:e1:64:79:f9:db:29:14:
65:6b:4a:9e:6c:7c:b1:83:25:3e:1b:f4:2b:65:0d:
2f:08:37:31:bb:42:50:5a:86:6b:56:e6:a5:95:10:
5c:b6:71:1d:53:b2:91:76:e2:7a:20:00:8b:29:f5:
04:05:c7:02:d8:b0:d6:c0:f9:30:f9:7a:98:87:5f:
b8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FD:71:14:07:7C:C6:9D:DB:81:8A:AB:8E:BE:FF:3C:B3:0A:93:B6
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:7c:0a:55:fa:d8:0b:8b:80:39:76:c5:e5:8c:93:6e:bf:
f2:85:82:de:13:0a:95:8d:f8:8f:b8:2f:37:53:05:57:66:5a:
7d:33:a8:d3:f1:07:c6:14:2c:fd:44:87:15:bd:f0:45:b3:e7:
6d:00:b6:0b:56:35:c8:ac:8e:42:a7:db:25:29:9d:66:5e:9d:
3a:d8:7b:76:a5:f7:35:b9:7d:d2:e1:1d:8d:b2:00:70:a1:76:
e2:1e:4a:0e:c3:49:e7:68:a1:dd:39:0b:5e:dc:4c:a4:d5:6c:
67:e5:12:92:b8:7b:f4:f9:e9:da:80:69:70:e9:bd:0a:74:ae:
3a:d7:8d:4c:dd:45:98:7e:fe:f1:f3:0e:b6:3c:34:23:ea:62:
6d:11:7f:19:52:19:95:80:e7:df:f9:9d:54:9e:b6:4a:c1:31:
f7:42:f7:50:6f:28:d9:81:53:d0:4d:29:77:78:b5:a8:55:f2:
b2:e3:d5:38:69:26:6a:d3:a7:e5:22:41:64:91:1a:16:28:14:
b7:c5:3b:e2:5d:3c:2b:bf:d1:0b:73:4a:fa:fb:85:a1:6c:1d:
a4:b9:2c:4e:c3:43:c3:5f:b5:e4:13:1f:73:b8:68:1a:57:c4:
31:b5:3f:be:9f:1c:48:d7:26:9f:48:18:16:bb:4b:53:cb:65:
e3:10:6e:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11VQzWS8Xh3GnYne83gijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2
MTIxYzgwHhcNMjUwNDI3MDYwMDM2WhcNMjUwNDI4MDYwMDM2WjAzMTEwLwYDVQQD
EyhiZWZkNzExNDA3N2NjNjlkZGI4MThhYWI4ZWJlZmYzY2IzMGE5M2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TX8MuxEmvvyYFgmXCnKBJZ8iMtE
GcapZeHrux9HOehwL/zPbqnMM6OH9Zlod4UhOu7EnnMu+Co1RbiGof+NLSdNmcrB
nJpFuQz9ZxD4SmjM1BwnfEe8ub4uhAJUSBJuxXsWwExKaeH56qpGqZ14+PhU9Yaw
K1sb03F62CC1AbG5TMsICLEdCGHlNgp0A4CVGjZzXG4IZdiPJNHWn4twQMOiLrYI
D03bclERouezmWP268vPQ/aN1FKCPuFkefnbKRRla0qebHyxgyU+G/QrZQ0vCDcx
u0JQWoZrVuallRBctnEdU7KRduJ6IACLKfUEBccC2LDWwPkw+XqYh1+4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL79cRQHfMad24GKq46+/zyzCpO2MB8GA1UdIwQY
MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt
YTAwMWEyOWMyM2YwLzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw
LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGx8ClX6
2AuLgDl2xeWMk26/8oWC3hMKlY34j7gvN1MFV2ZafTOo0/EHxhQs/USHFb3wRbPn
bQC2C1Y1yKyOQqfbJSmdZl6dOth7dqX3Nbl90uEdjbIAcKF24h5KDsNJ52ih3TkL
XtxMpNVsZ+USkrh79Pnp2oBpcOm9CnSuOteNTN1FmH7+8fMOtjw0I+pibRF/GVIZ
lYDn3/mdVJ62SsEx90L3UG8o2YFT0E0pd3i1qFXysuPVOGkmatOn5SJBZJEaFigU
t8U74l08K7/RC3NK+vuFoWwdpLksTsNDw1+15BMfc7hoGlfEMbU/vp8cSNcmn0gY
FrtLU8tl4xBuoA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:39 2025 by rpki-client