Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
File: IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft (raw, json)
Hash identifier: LkmqkgURT+DAznldKajZatH3jK2allPm9GMU7U7xFSQ=
Subject key identifier: 0A:5B:8A:F0:DB:A4:32:EF:68:5D:89:73:24:65:C5:2E:BE:25:0D:B2
Authority key identifier: 23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
Certificate issuer: /CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Certificate serial: 019685B6484E1DD1AF75E6E0A27C7AB6BF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
Manifest number: 044B
Signing time: Wed 30 Apr 2025 08:00:37 +0000
Manifest this update: Wed 30 Apr 2025 08:00:37 +0000
Manifest next update: Thu 01 May 2025 08:00:37 +0000
Files and hashes: 1: IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl (hash: vQdTUT9fSy1bSZJXWyA3gtoQXsZ/WBK/2StrLOlYVR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:48:4e:1d:d1:af:75:e6:e0:a2:7c:7a:b6:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23226d559fedc50d7a55c06ef48fd3a2d2d3fdf4
Validity
Not Before: Apr 30 08:00:37 2025 GMT
Not After : May 1 08:00:37 2025 GMT
Subject: CN=0a5b8af0dba432ef685d89732465c52ebe250db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:aa:54:3d:ed:d6:c6:9f:70:1e:a6:70:28:
84:8c:22:82:47:70:5d:c9:7d:54:34:d1:56:ba:f1:
bc:4c:fd:f9:5b:1f:2d:fe:2b:ee:c5:c9:d9:2c:2e:
79:b5:bc:71:86:9a:77:57:b8:fe:87:2c:6d:8c:a3:
0c:ec:dc:c8:10:ff:e9:6c:c6:f5:39:7c:96:22:cb:
31:71:4d:c0:c1:a5:c0:5f:70:d2:cd:ab:98:4a:cb:
8e:14:aa:15:a1:fd:6a:13:c0:a4:2e:46:03:13:6b:
39:fc:ec:74:cb:5c:9a:20:3a:a8:de:30:25:ac:c6:
d4:8b:5b:25:6a:54:27:97:49:af:60:d4:fb:1f:80:
6a:a1:25:a7:00:f7:5b:30:24:81:74:a0:8d:f6:eb:
b6:17:46:e6:57:e5:b7:66:54:85:d1:fe:cc:4b:cf:
27:c7:75:b4:7e:6d:79:ec:18:70:9f:0d:e2:21:04:
06:69:f8:a8:fc:0c:cb:5c:bb:13:ce:eb:c3:19:80:
a6:4c:16:01:ce:34:a2:13:e7:e6:49:b6:aa:7e:85:
29:73:3f:9c:1a:c9:0e:0d:a4:f8:c7:96:1a:71:91:
e2:a6:56:4e:59:f1:0a:58:1e:57:84:55:fc:79:7b:
3d:98:3a:4f:02:36:9d:47:2d:80:e4:b8:66:fa:48:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:5B:8A:F0:DB:A4:32:EF:68:5D:89:73:24:65:C5:2E:BE:25:0D:B2
X509v3 Authority Key Identifier:
keyid:23:22:6D:55:9F:ED:C5:0D:7A:55:C0:6E:F4:8F:D3:A2:D2:D3:FD:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyJtVZ_txQ16VcBu9I_TotLT_fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/8ed433-ba8d-4cfa-a8f0-d7a4e620733c/1/IyJtVZ_txQ16VcBu9I_TotLT_fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:56:94:62:c4:1a:2b:4c:7e:53:d6:07:3e:87:f6:2d:16:0f:
7d:90:a1:17:22:e3:dc:e8:c1:6f:dc:94:2c:70:df:47:87:13:
27:ba:55:72:2f:91:58:3c:e4:c9:2f:22:8d:a3:ae:02:d6:81:
31:6d:b0:22:9a:bd:3e:ad:01:33:e5:bc:93:3a:f7:cf:cc:ff:
56:83:9e:09:a3:b9:7f:6b:08:a6:d6:9b:95:ec:14:87:80:3c:
d5:20:5c:6d:ba:3c:bb:e3:9a:a1:eb:3a:de:ca:e6:c5:72:cb:
17:6e:bb:ca:ad:06:c7:3e:80:81:57:98:f2:93:2c:9e:f4:0b:
3c:b1:16:14:9d:e0:bb:83:78:40:f6:ac:77:5a:29:18:c2:ca:
16:0c:dd:fe:68:df:82:3c:82:5d:e2:73:53:f8:78:0a:42:cc:
e4:14:05:86:b6:22:4e:ab:71:a4:0f:09:dc:41:ad:80:62:13:
ef:e8:eb:19:8d:b8:ca:c9:b1:73:b3:c7:ff:a0:8b:b8:71:02:
56:93:4c:7c:30:e3:b2:fa:67:90:e7:d8:26:37:40:35:66:c3:
57:a8:8b:1e:f0:1a:01:f5:06:72:b3:de:fa:27:84:6a:c1:e7:
b2:cc:11:d2:ab:38:0b:fb:dd:de:5b:21:41:ee:f3:2d:01:96:
e2:a2:ea:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFtkhOHdGvdebgonx6tr8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMjI2ZDU1OWZlZGM1MGQ3YTU1YzA2ZWY0OGZkM2EyZDJk
M2ZkZjQwHhcNMjUwNDMwMDgwMDM3WhcNMjUwNTAxMDgwMDM3WjAzMTEwLwYDVQQD
EygwYTViOGFmMGRiYTQzMmVmNjg1ZDg5NzMyNDY1YzUyZWJlMjUwZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNSqVD3t1safcB6mcCiEjCKCR3Bd
yX1UNNFWuvG8TP35Wx8t/ivuxcnZLC55tbxxhpp3V7j+hyxtjKMM7NzIEP/pbMb1
OXyWIssxcU3AwaXAX3DSzauYSsuOFKoVof1qE8CkLkYDE2s5/Ox0y1yaIDqo3jAl
rMbUi1slalQnl0mvYNT7H4BqoSWnAPdbMCSBdKCN9uu2F0bmV+W3ZlSF0f7MS88n
x3W0fm157Bhwnw3iIQQGafio/AzLXLsTzuvDGYCmTBYBzjSiE+fmSbaqfoUpcz+c
GskODaT4x5YacZHiplZOWfEKWB5XhFX8eXs9mDpPAjadRy2A5Lhm+khiSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApbivDbpDLvaF2JcyRlxS6+JQ2yMB8GA1UdIwQY
MBaAFCMibVWf7cUNelXAbvSP06LS0/30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84ZWQ0MzMtYmE4ZC00Y2ZhLWE4ZjAt
ZDdhNGU2MjA3MzNjLzEvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS84ZWQ0MzMtYmE4ZC00Y2ZhLWE4ZjAtZDdhNGU2MjA3MzNj
LzEvSXlKdFZaX3R4UTE2VmNCdTlJX1RvdExUX2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1aUYsQa
K0x+U9YHPof2LRYPfZChFyLj3OjBb9yULHDfR4cTJ7pVci+RWDzkyS8ijaOuAtaB
MW2wIpq9Pq0BM+W8kzr3z8z/VoOeCaO5f2sIptablewUh4A81SBcbbo8u+Oaoes6
3srmxXLLF267yq0Gxz6AgVeY8pMsnvQLPLEWFJ3gu4N4QPasd1opGMLKFgzd/mjf
gjyCXeJzU/h4CkLM5BQFhrYiTqtxpA8J3EGtgGIT7+jrGY24ysmxc7PH/6CLuHEC
VpNMfDDjsvpnkOfYJjdANWbDV6iLHvAaAfUGcrPe+ieEasHnsswR0qs4C/vd3lsh
Qe7zLQGW4qLqXg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:37:45 2025 by rpki-client