Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File: R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier: 7ZW69Q3xvnxOL8sIn3wsTww08B7ax7PJse+KtzRPWNY=
Subject key identifier: E1:46:E5:33:C8:C2:3F:56:A9:A0:E7:1E:78:E6:42:65:C3:11:75:9C
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer: /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial: 01967755FCC94951A9AF9655DF34C70D0B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 13:00:46 +0000
Manifest this update: Sun 27 Apr 2025 13:00:46 +0000
Manifest next update: Mon 28 Apr 2025 13:00:46 +0000
Files and hashes: 1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: 7x1Rh+xs4tk5707TRN+370Cn6qK8YKRygK4WwyFrzHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:fc:c9:49:51:a9:af:96:55:df:34:c7:0d:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Validity
Not Before: Apr 27 13:00:46 2025 GMT
Not After : Apr 28 13:00:46 2025 GMT
Subject: CN=e146e533c8c23f56a9a0e71e78e64265c311759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:10:a6:39:34:39:6a:4f:f8:2f:75:9e:6f:
80:c3:ba:8d:41:58:aa:d3:c0:f9:45:b2:4e:da:9e:
f4:66:07:d5:ec:17:c3:b9:69:08:09:16:25:b3:0d:
ab:10:f2:c9:bc:ff:53:7b:f0:86:ed:21:b4:b0:fa:
af:fc:13:9e:c7:94:67:ed:ad:b7:f7:31:78:78:58:
d2:17:a2:cc:87:11:84:10:e4:de:c0:aa:c2:f6:b5:
cc:da:86:03:a0:6c:fe:a9:11:97:85:67:0d:6f:06:
94:62:eb:a5:2c:03:00:9d:16:62:28:66:f9:57:e9:
a3:15:8c:da:70:d1:ae:4e:a4:74:58:ad:b4:b7:40:
e2:6a:24:57:0c:12:20:c7:d7:50:14:1c:6a:93:5c:
c5:7c:f8:0d:42:00:3a:7c:cb:b0:20:0d:89:e3:e0:
ce:ac:b4:1d:65:65:dd:81:81:93:4d:bc:f0:36:c8:
aa:fd:ba:11:c4:3d:3f:3e:e8:66:90:d3:2f:a9:73:
cf:88:22:7d:3f:6e:3e:47:89:ce:d5:9f:bb:27:12:
2a:7b:dc:7c:ac:3e:5e:ac:92:9a:be:2a:0e:5b:db:
cc:f1:83:37:74:ce:55:12:9d:d4:b4:d2:7d:55:95:
d6:29:13:ad:31:98:74:79:9e:e3:48:1e:6d:a9:cc:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:E5:33:C8:C2:3F:56:A9:A0:E7:1E:78:E6:42:65:C3:11:75:9C
X509v3 Authority Key Identifier:
keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:71:f7:bf:22:b0:e2:2a:cd:f9:fb:f8:c0:9b:95:d4:32:
98:9d:4b:73:d7:75:c9:e8:4e:5a:68:ac:34:e3:88:4a:9f:ea:
9c:53:62:e0:b5:8e:0b:8c:b6:d3:f8:f2:ef:c4:aa:ee:a4:4e:
f6:3a:6d:e7:47:91:8a:ac:7f:10:6a:b1:18:68:23:d2:0a:b0:
1f:d6:ff:68:5d:d2:b1:13:6f:7d:bc:3f:3e:70:a4:8d:6b:a3:
6e:5f:73:3a:73:ac:cb:4f:f8:67:5d:40:2f:ee:33:e3:30:68:
cd:6a:01:78:08:66:6c:7b:9a:76:a8:76:88:b1:81:32:13:e0:
a5:00:22:62:a1:1a:b3:9d:ee:64:56:69:c2:73:ff:b4:8a:5e:
3a:fd:db:73:32:6b:da:5c:25:d2:e7:33:85:0c:82:97:13:d8:
54:b1:d8:13:33:72:be:90:c7:36:81:e2:18:8e:8b:cc:09:69:
b5:48:9a:c6:38:3b:26:e3:d2:10:40:e4:98:79:89:49:08:96:
02:d6:57:9e:f8:d2:6e:8b:20:a7:7a:1a:ec:13:87:ab:40:01:
cb:8e:ce:6e:f0:65:63:1d:20:00:db:68:98:70:22:ec:88:58:
de:05:3c:14:64:ec:5b:6c:4b:28:09:c0:15:b1:f8:e2:75:48:
c0:c3:e8:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3VfzJSVGpr5ZV3zTHDQs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Y2M3ZTllMTZiZGYyZDRlNjFjNzVlZTdlMDAwMzNlNzY2
Zjk4OTcwHhcNMjUwNDI3MTMwMDQ2WhcNMjUwNDI4MTMwMDQ2WjAzMTEwLwYDVQQD
EyhlMTQ2ZTUzM2M4YzIzZjU2YTlhMGU3MWU3OGU2NDI2NWMzMTE3NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjkQpjk0OWpP+C91nm+Aw7qNQViq
08D5RbJO2p70ZgfV7BfDuWkICRYlsw2rEPLJvP9Te/CG7SG0sPqv/BOex5Rn7a23
9zF4eFjSF6LMhxGEEOTewKrC9rXM2oYDoGz+qRGXhWcNbwaUYuulLAMAnRZiKGb5
V+mjFYzacNGuTqR0WK20t0DiaiRXDBIgx9dQFBxqk1zFfPgNQgA6fMuwIA2J4+DO
rLQdZWXdgYGTTbzwNsiq/boRxD0/PuhmkNMvqXPPiCJ9P24+R4nO1Z+7JxIqe9x8
rD5erJKavioOW9vM8YM3dM5VEp3UtNJ9VZXWKROtMZh0eZ7jSB5tqcysAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFG5TPIwj9WqaDnHnjmQmXDEXWcMB8GA1UdIwQY
MBaAFEfMfp4WvfLU5hx17n4AAz52b5iXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2Mt
MWE3Zjg0YjQwNzkyLzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jYTViN2ItYjVkNi00MGFmLTg3N2MtMWE3Zjg0YjQwNzky
LzEvUjh4LW5oYTk4dFRtSEhYdWZnQURQblp2bUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlhx978i
sOIqzfn7+MCbldQymJ1Lc9d1yehOWmisNOOISp/qnFNi4LWOC4y20/jy78Sq7qRO
9jpt50eRiqx/EGqxGGgj0gqwH9b/aF3SsRNvfbw/PnCkjWujbl9zOnOsy0/4Z11A
L+4z4zBozWoBeAhmbHuadqh2iLGBMhPgpQAiYqEas53uZFZpwnP/tIpeOv3bczJr
2lwl0uczhQyClxPYVLHYEzNyvpDHNoHiGI6LzAlptUiaxjg7JuPSEEDkmHmJSQiW
AtZXnvjSbosgp3oa7BOHq0ABy47ObvBlYx0gANtomHAi7IhY3gU8FGTsW2xLKAnA
FbH44nVIwMPo3A==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:30 2025 by rpki-client