Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File: rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier: wzr1EuPOqkRXSMfiMXmluCEGo6/zqYZFZvtrMP3rh+g=
Subject key identifier: A5:F9:96:CF:B6:0F:A6:40:1D:A0:75:F0:E1:37:AF:E3:C6:90:DF:35
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer: /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial: 01967FB4CA88C5343F213033CBD270727637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number: 1510
Signing time: Tue 29 Apr 2025 04:01:16 +0000
Manifest this update: Tue 29 Apr 2025 04:01:16 +0000
Manifest next update: Wed 30 Apr 2025 04:01:16 +0000
Files and hashes: 1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: gqNoL1+dBUHuCb2ystSsQKkP+WkaYbvqM4VmsUH1Pn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:ca:88:c5:34:3f:21:30:33:cb:d2:70:72:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Validity
Not Before: Apr 29 04:01:16 2025 GMT
Not After : Apr 30 04:01:16 2025 GMT
Subject: CN=a5f996cfb60fa6401da075f0e137afe3c690df35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:95:76:93:a0:aa:30:89:6a:29:cd:e5:6e:
4e:d8:23:54:ee:17:d6:8c:db:d8:45:4d:9c:b3:13:
cc:2c:82:c6:e6:e2:5d:b7:3f:18:46:c6:6f:df:85:
47:42:94:84:eb:1f:8b:26:ff:77:2a:5c:86:db:f2:
24:4d:47:2c:07:75:5d:c2:8e:a3:2e:9d:00:b7:d3:
fe:bb:84:88:3f:5a:0d:f2:77:04:59:f9:4d:a2:33:
85:4b:5e:64:20:a3:e0:df:b2:c7:9b:6a:50:ea:e9:
62:cf:71:c9:0e:91:1c:e5:50:77:d1:f0:0f:fb:34:
5b:fc:e8:ae:54:41:6b:f3:30:38:49:b4:d7:a9:45:
58:0c:1a:c3:8b:88:88:02:86:96:cd:42:0d:9c:18:
a1:0b:9b:1b:a3:0d:f3:61:df:68:d9:2b:4a:8b:ad:
88:30:a8:76:d4:47:8a:ae:a4:8b:a2:2c:5d:db:7c:
cc:c4:e4:68:55:07:ae:71:a6:bc:b3:c6:ef:5e:4c:
fd:bb:31:67:1d:ca:24:b8:43:18:ea:a7:6c:46:90:
08:7f:9f:60:bd:43:f1:f1:ae:f6:e5:ff:3f:df:87:
75:97:a0:19:b8:8d:3d:63:02:cd:db:20:80:24:a7:
a4:a4:c2:cb:f4:f8:73:d8:bf:9f:94:de:44:08:3f:
a8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F9:96:CF:B6:0F:A6:40:1D:A0:75:F0:E1:37:AF:E3:C6:90:DF:35
X509v3 Authority Key Identifier:
keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e5:f3:cb:e5:a8:cf:4e:5b:60:98:21:41:16:40:4e:d7:dc:
16:22:50:b7:ca:51:c4:8f:c3:d7:79:eb:10:9a:09:1c:e3:bb:
d9:ce:0f:65:6a:4a:eb:78:45:36:b9:4c:29:cc:ee:85:cc:d8:
32:d8:c6:44:93:b7:92:ee:00:4d:a3:b6:1a:41:23:66:52:ff:
05:8a:37:11:93:45:ff:23:b7:54:ad:fb:5a:22:38:44:7a:d6:
db:8f:b9:f8:20:1b:ab:b8:d0:3d:75:3b:33:d9:15:5c:ad:de:
35:d2:cf:65:1f:d2:0c:a7:5c:aa:e0:71:c2:d8:c8:5b:d5:04:
96:e6:49:11:a6:bf:4c:2d:99:d9:be:d0:40:e6:fd:8c:6d:1e:
04:55:a8:45:64:02:e9:ea:c2:b6:b0:e6:8b:99:4b:2e:81:3b:
17:3d:4b:65:fe:d2:db:62:6f:8e:00:da:6e:fe:93:94:aa:f1:
75:0a:df:49:e7:a0:48:d5:ed:9e:d9:ae:68:0b:53:aa:0f:68:
ff:78:5e:0b:0e:e3:7f:79:7c:11:e4:eb:11:3b:6b:f6:23:4d:
cf:bb:ea:85:bf:9a:f0:97:72:da:7b:49:f1:07:f3:5a:db:6f:
b9:50:ac:95:bb:7d:ae:cc:e7:f2:37:02:60:3b:8b:fe:1c:36:
39:77:a9:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tMqIxTQ/ITAzy9JwcnY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzBmYjQzODhlZTY3MTQ0YWUwNGRkYzg2ODEyZDYzZTAy
OGY0NzgwHhcNMjUwNDI5MDQwMTE2WhcNMjUwNDMwMDQwMTE2WjAzMTEwLwYDVQQD
EyhhNWY5OTZjZmI2MGZhNjQwMWRhMDc1ZjBlMTM3YWZlM2M2OTBkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTSVdpOgqjCJainN5W5O2CNU7hfW
jNvYRU2csxPMLILG5uJdtz8YRsZv34VHQpSE6x+LJv93KlyG2/IkTUcsB3Vdwo6j
Lp0At9P+u4SIP1oN8ncEWflNojOFS15kIKPg37LHm2pQ6uliz3HJDpEc5VB30fAP
+zRb/OiuVEFr8zA4SbTXqUVYDBrDi4iIAoaWzUINnBihC5sbow3zYd9o2StKi62I
MKh21EeKrqSLoixd23zMxORoVQeucaa8s8bvXkz9uzFnHcokuEMY6qdsRpAIf59g
vUPx8a725f8/34d1l6AZuI09YwLN2yCAJKekpMLL9Phz2L+flN5ECD+oZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKX5ls+2D6ZAHaB18OE3r+PGkN81MB8GA1UdIwQY
MBaAFK0w+0OI7mcUSuBN3IaBLWPgKPR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMzQxYTYtOThhMi00YjFlLTliYTQt
YjY2MDQ0YWRiY2IxLzEvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMzQxYTYtOThhMi00YjFlLTliYTQtYjY2MDQ0YWRiY2Ix
LzEvclREN1E0anVaeFJLNEUzY2hvRXRZLUFvOUhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+Xzy+Wo
z05bYJghQRZATtfcFiJQt8pRxI/D13nrEJoJHOO72c4PZWpK63hFNrlMKczuhczY
MtjGRJO3ku4ATaO2GkEjZlL/BYo3EZNF/yO3VK37WiI4RHrW24+5+CAbq7jQPXU7
M9kVXK3eNdLPZR/SDKdcquBxwtjIW9UEluZJEaa/TC2Z2b7QQOb9jG0eBFWoRWQC
6erCtrDmi5lLLoE7Fz1LZf7S22JvjgDabv6TlKrxdQrfSeegSNXtntmuaAtTqg9o
/3heCw7jf3l8EeTrETtr9iNNz7vqhb+a8Jdy2ntJ8QfzWttvuVCslbt9rszn8jcC
YDuL/hw2OXepjQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:20 2025 by rpki-client