Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json)
Hash identifier: ToIIB4PAPJR+pa5FYqPsc8wHhMZ0WWgyxDBIVcO5ezI=
Subject key identifier: F2:C7:43:66:3B:5B:3E:08:85:1D:6F:CC:6D:89:AE:04:AC:93:6F:14
Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Certificate serial: 0196748BDB02021E96E460B61090A3ED3E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
Manifest number: 08A1
Signing time: Sun 27 Apr 2025 00:00:44 +0000
Manifest this update: Sun 27 Apr 2025 00:00:44 +0000
Manifest next update: Mon 28 Apr 2025 00:00:44 +0000
Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: h9A5SodtJ44jSQ+SQoK9w56f7X/LIUFtSVUuzxhd2d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:db:02:02:1e:96:e4:60:b6:10:90:a3:ed:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13
Validity
Not Before: Apr 27 00:00:44 2025 GMT
Not After : Apr 28 00:00:44 2025 GMT
Subject: CN=f2c743663b5b3e08851d6fcc6d89ae04ac936f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:b4:d8:63:40:15:68:33:24:13:70:d7:25:
d8:20:1e:61:6c:4e:20:6b:44:ae:66:37:80:7a:cd:
82:ff:ca:42:f1:e1:e4:84:4c:33:45:54:e1:a4:28:
a3:bc:bf:c7:d8:43:c3:dd:94:4c:f4:ee:5e:0a:f2:
da:2d:3f:93:3c:b0:77:3a:a9:62:35:dc:da:53:57:
1e:7e:4c:7e:07:70:a8:76:97:aa:5e:59:4f:4e:31:
0f:8d:93:df:89:bd:60:74:0f:ea:db:bc:8f:48:c7:
03:8a:46:d9:4b:45:6f:84:c3:14:b0:e4:b0:66:02:
c1:c5:90:0e:c3:99:7c:36:c3:c0:1e:e0:c0:30:1f:
eb:16:11:64:d1:45:4a:64:1d:f2:6c:08:53:79:7b:
60:71:5d:26:d7:7c:e0:73:f6:8d:2f:66:f3:1d:5f:
3c:cd:a6:b9:79:51:54:b8:85:50:eb:e0:ab:2a:d7:
d2:2b:c9:e7:73:c9:e8:1a:88:7b:1d:28:8e:ec:64:
53:9d:e9:b8:c5:a1:21:a2:69:76:4e:50:19:79:1a:
8b:8d:8f:16:22:f7:3a:e2:6e:81:66:55:44:f7:b6:
33:5f:40:41:a8:ad:c5:d8:db:1c:7a:df:68:74:e1:
e6:eb:1b:6a:e2:13:3e:5a:74:d1:86:a5:cf:2d:b0:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C7:43:66:3B:5B:3E:08:85:1D:6F:CC:6D:89:AE:04:AC:93:6F:14
X509v3 Authority Key Identifier:
keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f1:fb:29:fb:85:fd:57:22:28:52:de:6b:87:5f:0a:e8:60:
ad:e5:84:1f:fe:05:de:9e:01:7c:2f:02:82:b7:24:be:35:0e:
76:5a:f1:f5:77:df:a6:8e:3f:b8:99:84:96:c2:83:da:28:47:
31:28:a7:4f:5f:d0:b8:ef:e1:f7:c8:85:64:fc:58:08:6b:64:
d8:3c:f3:64:aa:a6:03:95:c8:07:6f:36:71:6b:b5:a6:46:9e:
e5:e0:d6:9e:5e:63:85:4f:13:da:26:12:b5:b8:61:85:db:12:
c5:94:85:83:91:f0:8e:59:e4:13:32:d9:33:c1:20:9b:93:7b:
9a:01:43:d2:79:38:cb:07:6a:4c:fe:52:5c:e7:54:72:82:0d:
fe:ae:91:e8:97:2b:50:41:7e:d3:1d:27:0f:d4:51:e0:fd:03:
1d:12:17:76:c8:93:7c:e3:00:d8:2e:4e:af:35:1a:d0:28:6a:
32:f1:a6:b4:ce:57:55:31:6a:cf:c0:6f:4b:1a:41:20:44:75:
53:7d:38:5a:ee:ba:7e:c1:c4:de:ea:05:c2:dc:83:e4:bf:c9:
e2:a1:fd:89:f9:2f:1a:2f:b2:a1:66:c3:e7:4b:cf:f8:ca:4a:
4c:37:31:dc:d2:b7:f9:1a:65:5a:96:b0:22:75:8a:70:25:52:
37:43:a6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i9sCAh6W5GC2EJCj7T6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj
OTRlMTMwHhcNMjUwNDI3MDAwMDQ0WhcNMjUwNDI4MDAwMDQ0WjAzMTEwLwYDVQQD
EyhmMmM3NDM2NjNiNWIzZTA4ODUxZDZmY2M2ZDg5YWUwNGFjOTM2ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpK02GNAFWgzJBNw1yXYIB5hbE4g
a0SuZjeAes2C/8pC8eHkhEwzRVThpCijvL/H2EPD3ZRM9O5eCvLaLT+TPLB3Oqli
NdzaU1cefkx+B3CodpeqXllPTjEPjZPfib1gdA/q27yPSMcDikbZS0VvhMMUsOSw
ZgLBxZAOw5l8NsPAHuDAMB/rFhFk0UVKZB3ybAhTeXtgcV0m13zgc/aNL2bzHV88
zaa5eVFUuIVQ6+CrKtfSK8nnc8noGoh7HSiO7GRTnem4xaEhoml2TlAZeRqLjY8W
Ivc64m6BZlVE97YzX0BBqK3F2Nscet9odOHm6xtq4hM+WnTRhqXPLbAdfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLHQ2Y7Wz4IhR1vzG2JrgSsk28UMB8GA1UdIwQY
MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt
Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz
LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvH7KfuF
/VciKFLea4dfCuhgreWEH/4F3p4BfC8CgrckvjUOdlrx9Xffpo4/uJmElsKD2ihH
MSinT1/QuO/h98iFZPxYCGtk2DzzZKqmA5XIB282cWu1pkae5eDWnl5jhU8T2iYS
tbhhhdsSxZSFg5HwjlnkEzLZM8Egm5N7mgFD0nk4ywdqTP5SXOdUcoIN/q6R6Jcr
UEF+0x0nD9RR4P0DHRIXdsiTfOMA2C5OrzUa0ChqMvGmtM5XVTFqz8BvSxpBIER1
U304Wu66fsHE3uoFwtyD5L/J4qH9ifkvGi+yoWbD50vP+MpKTDcx3NK3+RplWpaw
InWKcCVSN0OmBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 06:43:59 2025 by rpki-client