Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
File: 2n_WDMjnu2KTIE8woibgCHUksLU.mft (raw, json)
Hash identifier: pDnePGCM7s31RwuYuveiHGQK8ZJLuf8gaQLFNCam8sg=
Subject key identifier: 46:1B:F3:67:BD:B9:7E:D9:72:F8:27:2A:7D:72:C6:59:AF:1D:7E:49
Authority key identifier: DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
Certificate issuer: /CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Certificate serial: 01967A5758ECE44C610A11D472DCCE2CDDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
Manifest number: 150D
Signing time: Mon 28 Apr 2025 03:01:06 +0000
Manifest this update: Mon 28 Apr 2025 03:01:06 +0000
Manifest next update: Tue 29 Apr 2025 03:01:06 +0000
Files and hashes: 1: 2n_WDMjnu2KTIE8woibgCHUksLU.crl (hash: Mq3/kbwvtopQCZJS//GjQpGB0iL/lOv4Y/WtHPaOODA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:58:ec:e4:4c:61:0a:11:d4:72:dc:ce:2c:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da7fd60cc8e7bb6293204f30a226e0087524b0b5
Validity
Not Before: Apr 28 03:01:06 2025 GMT
Not After : Apr 29 03:01:06 2025 GMT
Subject: CN=461bf367bdb97ed972f8272a7d72c659af1d7e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f2:0c:a0:2c:d8:b0:8a:db:74:e5:fc:42:ce:
43:39:2f:7e:35:64:ce:ce:1c:10:5a:4f:4a:0d:3b:
dd:c6:e1:ed:d8:a3:0c:42:2c:ee:dd:64:64:49:63:
82:cb:91:5e:01:32:16:0a:c4:a6:58:b7:52:a6:ec:
d1:22:d8:ac:59:bb:0b:b3:50:75:f6:e6:d3:e7:58:
13:25:c7:10:6d:39:59:72:a6:b1:33:d0:90:26:7b:
c2:1a:51:97:c1:36:02:4d:25:09:49:bb:6a:41:74:
06:d8:51:fa:88:50:48:bc:50:2b:48:c9:c7:3e:a7:
4c:eb:91:f8:8c:a2:d3:1d:bf:bf:0d:36:bb:8e:94:
8d:ed:89:27:17:71:81:91:11:30:87:60:2a:26:11:
1d:41:1a:6e:0d:bc:a5:d8:e3:f4:7d:73:37:d6:9b:
36:e1:8a:32:f0:be:14:00:a2:d9:4d:bd:e2:4d:4c:
8c:70:fe:b0:49:ce:a8:67:67:a3:ba:68:33:56:31:
40:40:78:94:28:9f:68:ac:7b:d5:7d:d5:4d:05:30:
ec:72:32:3a:9f:3f:03:60:97:05:8a:3a:4c:18:77:
8f:a5:1d:73:8e:5d:62:07:43:b7:e9:42:40:54:01:
df:a7:37:8b:e4:0c:d4:d1:89:9a:49:82:d6:6f:cd:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1B:F3:67:BD:B9:7E:D9:72:F8:27:2A:7D:72:C6:59:AF:1D:7E:49
X509v3 Authority Key Identifier:
keyid:DA:7F:D6:0C:C8:E7:BB:62:93:20:4F:30:A2:26:E0:08:75:24:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n_WDMjnu2KTIE8woibgCHUksLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0195d0-1ab8-40a0-a7f9-d6ab93ed9fb5/1/2n_WDMjnu2KTIE8woibgCHUksLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:db:9c:c9:2f:5a:30:a2:aa:91:01:6a:de:f2:9d:99:8a:
32:d9:3c:b4:c9:45:aa:61:3b:43:55:19:68:6f:fb:e9:c9:c2:
b0:85:8f:8d:9c:5f:be:f7:9b:40:3f:29:f3:da:95:68:3a:48:
bb:60:e5:eb:de:c4:9d:0a:a2:b2:68:de:01:b4:94:39:f1:3e:
f2:02:3b:43:f9:d5:ae:02:ef:0d:e0:ad:b7:37:3f:51:8a:c1:
d0:21:58:22:24:e9:83:b3:81:d9:8e:c2:76:f2:df:9c:29:d7:
28:7b:0c:ac:9e:09:0b:37:28:a7:de:97:c5:72:8b:ba:96:3a:
b8:a2:07:d5:a8:c0:72:ec:b9:70:19:97:af:b5:57:3e:d0:3a:
53:b5:74:70:b3:f5:9e:90:b4:b9:80:0c:e7:ec:f3:9b:c5:9e:
9f:10:39:db:35:13:3f:9d:9a:4f:44:7c:c9:79:1b:3a:ed:04:
f6:81:a2:c2:43:06:ff:c0:3c:f9:85:7e:7f:f8:c8:55:ae:70:
a7:8b:25:d4:45:f6:8a:aa:11:5e:a3:75:8f:0e:fa:94:5e:ef:
06:2d:03:5d:57:ae:50:d4:67:59:c3:f1:8e:37:45:ed:04:3c:
4b:7c:1d:89:ec:02:cf:4f:6f:5a:49:b3:98:3e:6e:6b:bd:c6:
af:93:85:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6V1js5ExhChHUctzOLN23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhN2ZkNjBjYzhlN2JiNjI5MzIwNGYzMGEyMjZlMDA4NzUy
NGIwYjUwHhcNMjUwNDI4MDMwMTA2WhcNMjUwNDI5MDMwMTA2WjAzMTEwLwYDVQQD
Eyg0NjFiZjM2N2JkYjk3ZWQ5NzJmODI3MmE3ZDcyYzY1OWFmMWQ3ZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PIMoCzYsIrbdOX8Qs5DOS9+NWTO
zhwQWk9KDTvdxuHt2KMMQizu3WRkSWOCy5FeATIWCsSmWLdSpuzRItisWbsLs1B1
9ubT51gTJccQbTlZcqaxM9CQJnvCGlGXwTYCTSUJSbtqQXQG2FH6iFBIvFArSMnH
PqdM65H4jKLTHb+/DTa7jpSN7YknF3GBkREwh2AqJhEdQRpuDbyl2OP0fXM31ps2
4Yoy8L4UAKLZTb3iTUyMcP6wSc6oZ2ejumgzVjFAQHiUKJ9orHvVfdVNBTDscjI6
nz8DYJcFijpMGHePpR1zjl1iB0O36UJAVAHfpzeL5AzU0YmaSYLWb81ljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYb82e9uX7ZcvgnKn1yxlmvHX5JMB8GA1UdIwQY
MBaAFNp/1gzI57tikyBPMKIm4Ah1JLC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3Zjkt
ZDZhYjkzZWQ5ZmI1LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8wMTk1ZDAtMWFiOC00MGEwLWE3ZjktZDZhYjkzZWQ5ZmI1
LzEvMm5fV0RNam51MktUSUU4d29pYmdDSFVrc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd//bnMkv
WjCiqpEBat7ynZmKMtk8tMlFqmE7Q1UZaG/76cnCsIWPjZxfvvebQD8p89qVaDpI
u2Dl697EnQqismjeAbSUOfE+8gI7Q/nVrgLvDeCttzc/UYrB0CFYIiTpg7OB2Y7C
dvLfnCnXKHsMrJ4JCzcop96XxXKLupY6uKIH1ajAcuy5cBmXr7VXPtA6U7V0cLP1
npC0uYAM5+zzm8WenxA52zUTP52aT0R8yXkbOu0E9oGiwkMG/8A8+YV+f/jIVa5w
p4sl1EX2iqoRXqN1jw76lF7vBi0DXVeuUNRnWcPxjjdF7QQ8S3wdiewCz09vWkmz
mD5ua73Gr5OFBg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:18:18 2025 by rpki-client