Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
File: c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft (raw, json)
Hash identifier: oDuH1nNlHJ9iUjjRgj8m88r1uYZIV2FoQDFYK/LaT8A=
Subject key identifier: 7F:07:CE:97:82:21:56:A8:CB:B6:E2:B3:45:E3:78:45:E2:19:21:82
Authority key identifier: 73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
Certificate issuer: /CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Certificate serial: 01967BD85F21F0E50C1C55BAB1169D892FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 10:01:39 +0000
Manifest this update: Mon 28 Apr 2025 10:01:39 +0000
Manifest next update: Tue 29 Apr 2025 10:01:39 +0000
Files and hashes: 1: c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl (hash: tKwH8h6Fv1+mJqLHjC/EjyBU61WvhzTdvsQNe4wW4wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d8:5f:21:f0:e5:0c:1c:55:ba:b1:16:9d:89:2f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736cf7d6682d5dc2a31c71839cdf13edf7db43f2
Validity
Not Before: Apr 28 10:01:39 2025 GMT
Not After : Apr 29 10:01:39 2025 GMT
Subject: CN=7f07ce97822156a8cbb6e2b345e37845e2192182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:c9:d2:b7:c7:07:0d:6e:83:17:4d:0d:d5:
35:c5:5b:a8:e3:36:f4:49:8a:7f:ab:97:4d:0f:52:
09:f0:12:aa:fd:62:74:8b:b8:81:3b:43:91:b2:ec:
e0:67:19:55:3a:ee:5f:2b:dc:38:a4:c5:1b:0c:c7:
d6:29:81:ab:db:71:08:9e:38:7d:80:f5:8e:c3:6e:
f8:85:53:c0:bc:33:ef:ec:16:0e:df:54:4a:24:28:
37:ee:1a:48:0e:bd:ef:5b:c6:65:f4:c7:93:3f:04:
d1:83:e6:c8:c8:b9:fe:f8:2a:17:8b:0b:5e:de:f8:
36:16:39:23:c0:1f:be:0e:ea:17:2e:82:fb:de:a9:
c2:4d:e4:aa:bf:da:f2:6c:d6:a6:85:14:72:79:6e:
cf:bd:dd:ca:53:0c:a3:10:53:55:b1:63:c5:c0:65:
a9:a5:65:19:e3:c9:b6:4c:ef:0f:90:45:c3:11:25:
db:63:56:1d:6f:c4:cb:75:df:b1:8f:b2:d0:45:51:
7d:b2:42:2e:6c:ec:6e:39:5c:3e:3d:1d:3b:b0:4d:
ed:d7:74:99:81:54:6f:7e:77:4a:eb:e4:92:ee:64:
67:db:3e:00:1f:d7:d0:9b:3f:13:76:7e:16:93:9f:
bb:a1:2a:d4:1b:0b:61:9e:81:af:1c:2c:52:a7:25:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:CE:97:82:21:56:A8:CB:B6:E2:B3:45:E3:78:45:E2:19:21:82
X509v3 Authority Key Identifier:
keyid:73:6C:F7:D6:68:2D:5D:C2:A3:1C:71:83:9C:DF:13:ED:F7:DB:43:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2z31mgtXcKjHHGDnN8T7ffbQ_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d204c-0cc1-48ee-9616-672c6cdff021/1/c2z31mgtXcKjHHGDnN8T7ffbQ_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d4:a6:ff:ad:f9:11:b0:b0:de:61:f0:83:41:c5:d8:1d:4a:
9d:31:56:af:b7:4e:f5:2a:3d:18:aa:38:11:3a:5a:79:63:82:
ce:f0:5b:f3:7d:e4:f5:e5:d7:a8:d4:08:59:59:1c:81:a5:ca:
d7:bc:f9:7e:d3:0d:38:c6:a2:54:17:90:8d:50:0c:ce:3c:ef:
f0:31:c7:cd:85:c4:5b:34:46:55:7f:bf:bc:23:5b:41:22:a4:
b2:f6:4e:6f:c8:e2:94:9c:9d:f5:15:e0:3f:f8:68:8d:6c:cc:
05:db:fe:8b:fd:36:44:b2:a6:8f:60:0b:36:7b:c2:d7:fe:ff:
09:2b:c2:c6:d8:73:c5:fc:64:08:a2:aa:8e:23:92:cb:65:41:
72:72:64:3f:59:f0:93:98:bb:02:48:47:9a:39:ea:60:4c:c7:
d3:26:82:d1:a3:f9:7d:33:d3:b8:bb:86:1c:c8:b4:96:e2:e2:
a9:8a:95:72:b9:be:e2:da:8e:9c:4d:17:19:39:1a:ae:04:34:
18:e5:39:4a:c6:79:37:e0:71:69:8e:df:79:8a:5f:f6:24:51:
b9:35:1a:fb:22:df:a2:2a:d2:6d:85:ab:66:82:ae:ea:fd:e8:
66:82:d4:6c:af:f3:f8:cb:1b:e6:4c:9a:3e:89:02:b8:3e:7e:
6b:8e:f5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ72F8h8OUMHFW6sRadiS/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmNmN2Q2NjgyZDVkYzJhMzFjNzE4MzljZGYxM2VkZjdk
YjQzZjIwHhcNMjUwNDI4MTAwMTM5WhcNMjUwNDI5MTAwMTM5WjAzMTEwLwYDVQQD
Eyg3ZjA3Y2U5NzgyMjE1NmE4Y2JiNmUyYjM0NWUzNzg0NWUyMTkyMTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIzJ0rfHBw1ugxdNDdU1xVuo4zb0
SYp/q5dND1IJ8BKq/WJ0i7iBO0ORsuzgZxlVOu5fK9w4pMUbDMfWKYGr23EInjh9
gPWOw274hVPAvDPv7BYO31RKJCg37hpIDr3vW8Zl9MeTPwTRg+bIyLn++CoXiwte
3vg2FjkjwB++DuoXLoL73qnCTeSqv9rybNamhRRyeW7Pvd3KUwyjEFNVsWPFwGWp
pWUZ48m2TO8PkEXDESXbY1Ydb8TLdd+xj7LQRVF9skIubOxuOVw+PR07sE3t13SZ
gVRvfndK6+SS7mRn2z4AH9fQmz8Tdn4Wk5+7oSrUGwthnoGvHCxSpyXygwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8HzpeCIVaoy7bis0XjeEXiGSGCMB8GA1UdIwQY
MBaAFHNs99ZoLV3Coxxxg5zfE+3320PyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJ6MzFtZ3RYY0tqSEhHRG5OOFQ3ZmZiUV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wZDIwNGMtMGNjMS00OGVlLTk2MTYt
NjcyYzZjZGZmMDIxLzEvYzJ6MzFtZ3RYY0tqSEhHRG5OOFQ3ZmZiUV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wZDIwNGMtMGNjMS00OGVlLTk2MTYtNjcyYzZjZGZmMDIx
LzEvYzJ6MzFtZ3RYY0tqSEhHRG5OOFQ3ZmZiUV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNSm/635
EbCw3mHwg0HF2B1KnTFWr7dO9So9GKo4ETpaeWOCzvBb833k9eXXqNQIWVkcgaXK
17z5ftMNOMaiVBeQjVAMzjzv8DHHzYXEWzRGVX+/vCNbQSKksvZOb8jilJyd9RXg
P/hojWzMBdv+i/02RLKmj2ALNnvC1/7/CSvCxthzxfxkCKKqjiOSy2VBcnJkP1nw
k5i7AkhHmjnqYEzH0yaC0aP5fTPTuLuGHMi0luLiqYqVcrm+4tqOnE0XGTkargQ0
GOU5SsZ5N+BxaY7feYpf9iRRuTUa+yLfoirSbYWrZoKu6v3oZoLUbK/z+Msb5kya
PokCuD5+a4712A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:41:04 2025 by rpki-client