Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: KY8lUEOxEzDMuot9yUw7Sb8nY4xQaUCZd9iFYGrrNRM=
Subject key identifier: 78:35:32:73:26:52:DB:26:69:7A:65:65:C5:4B:7D:99:BD:44:46:9E
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 0196741E3220F171D004E8420C64160DBE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 1508
Signing time: Sat 26 Apr 2025 22:00:57 +0000
Manifest this update: Sat 26 Apr 2025 22:00:57 +0000
Manifest next update: Sun 27 Apr 2025 22:00:57 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: o1Bc2pBTogBq/NuRFTDfOvHRFGL0NgCngEi0KWBBuAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:32:20:f1:71:d0:04:e8:42:0c:64:16:0d:be:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Apr 26 22:00:57 2025 GMT
Not After : Apr 27 22:00:57 2025 GMT
Subject: CN=783532732652db26697a6565c54b7d99bd44469e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:e1:1b:ae:fc:9d:2a:32:f3:e7:a3:37:3d:
a3:72:ab:38:d0:52:03:96:46:b7:79:fa:18:c3:59:
9c:7b:20:84:99:cf:42:3f:4f:3b:bb:79:a8:cb:29:
bc:b2:4c:fd:f2:fb:8c:b1:e1:a1:71:bc:c3:6e:9d:
ec:2f:c8:3a:8f:ad:bc:be:fc:19:9a:83:27:33:ae:
50:13:43:b0:b0:db:c8:f2:90:f5:cf:10:dc:77:94:
81:37:0f:6e:4f:ee:64:4b:dc:31:a7:a2:f0:e2:d4:
dc:32:62:ad:f2:f3:0e:77:48:f4:3b:67:11:f2:03:
41:d5:12:19:a6:68:79:6c:a7:64:5e:69:28:a0:0d:
e2:73:1e:c8:ef:64:08:5f:a9:c3:c6:93:bc:1b:1b:
e4:d2:60:aa:27:ff:93:5a:26:4c:33:8e:05:ff:01:
67:2c:11:aa:bf:69:74:68:4c:40:95:b2:48:39:2f:
3e:f9:a7:e6:78:e5:86:31:4e:f0:71:0c:a5:10:43:
5c:a9:54:7c:54:b5:8f:5f:71:c1:80:44:78:f3:85:
af:20:b4:a8:37:d1:5a:95:e7:85:ff:ac:ec:ba:6e:
6b:70:e4:f9:6e:42:f4:d0:04:a2:76:d4:05:ce:74:
97:a2:3b:8b:75:20:97:f8:82:97:c6:af:db:13:25:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:35:32:73:26:52:DB:26:69:7A:65:65:C5:4B:7D:99:BD:44:46:9E
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:61:bc:b4:44:12:2d:69:c6:e9:e1:2a:5d:fd:6f:94:4f:72:
d6:c4:a3:5f:cd:05:f3:6d:ed:74:4e:a5:a0:42:e8:05:cc:ce:
91:e2:7a:9b:ea:95:d1:ff:3d:21:a8:a2:08:dd:b8:fc:b3:1c:
66:c6:e1:06:bb:ca:23:e4:13:77:72:3b:fe:26:a3:8d:08:b8:
e2:67:29:5c:b7:10:ce:da:5e:cb:d8:64:0c:11:62:c0:e3:f3:
54:da:d5:67:5f:6e:cc:c0:04:82:76:40:64:90:25:b4:73:36:
0b:48:02:a5:9b:a9:31:9e:88:dc:95:c6:23:df:cc:6a:9b:47:
25:c5:19:78:8a:e1:f1:2b:a2:56:db:63:55:84:d8:e3:54:92:
7b:07:ab:eb:92:35:cd:07:e1:36:60:fb:24:3b:bf:7e:ea:41:
7c:e1:c0:1f:45:5a:e1:49:b4:61:73:7e:6f:35:eb:03:8c:e0:
61:41:13:78:96:70:c5:b8:f7:77:1c:15:59:80:42:a6:b5:70:
45:52:09:0e:b2:a2:76:a6:21:7e:45:63:fe:8a:40:95:a4:1e:
4c:7d:6a:ef:1b:85:b0:d1:89:e6:c1:6e:8a:50:0d:d0:03:75:
00:50:ba:3f:24:59:d5:9a:c7:c6:cf:87:be:80:6d:e3:10:36:
8c:cf:4d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HjIg8XHQBOhCDGQWDb6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzk2NWVkZjI4MTdjNWZmMDk2NmYyMmQ3MmIxY2E4OGUw
ZDM3MmMwHhcNMjUwNDI2MjIwMDU3WhcNMjUwNDI3MjIwMDU3WjAzMTEwLwYDVQQD
Eyg3ODM1MzI3MzI2NTJkYjI2Njk3YTY1NjVjNTRiN2Q5OWJkNDQ0NjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+PhG678nSoy8+ejNz2jcqs40FID
lka3efoYw1mceyCEmc9CP087u3moyym8skz98vuMseGhcbzDbp3sL8g6j628vvwZ
moMnM65QE0OwsNvI8pD1zxDcd5SBNw9uT+5kS9wxp6Lw4tTcMmKt8vMOd0j0O2cR
8gNB1RIZpmh5bKdkXmkooA3icx7I72QIX6nDxpO8Gxvk0mCqJ/+TWiZMM44F/wFn
LBGqv2l0aExAlbJIOS8++afmeOWGMU7wcQylEENcqVR8VLWPX3HBgER484WvILSo
N9FaleeF/6zsum5rcOT5bkL00ASidtQFznSXojuLdSCX+IKXxq/bEyXnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg1MnMmUtsmaXplZcVLfZm9REaeMB8GA1UdIwQY
MBaAFBV5Ze3ygXxf8JZvItcrHKiODTcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYmNlMzAtMTNkMi00MjVhLThmYTMt
MzFhMGFiNDhhNTJmLzEvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xYmNlMzAtMTNkMi00MjVhLThmYTMtMzFhMGFiNDhhNTJm
LzEvRlhsbDdmS0JmRl93bG04aTF5c2NxSTROTnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWG8tEQS
LWnG6eEqXf1vlE9y1sSjX80F823tdE6loELoBczOkeJ6m+qV0f89IaiiCN24/LMc
ZsbhBrvKI+QTd3I7/iajjQi44mcpXLcQztpey9hkDBFiwOPzVNrVZ19uzMAEgnZA
ZJAltHM2C0gCpZupMZ6I3JXGI9/MaptHJcUZeIrh8SuiVttjVYTY41SSewer65I1
zQfhNmD7JDu/fupBfOHAH0Va4Um0YXN+bzXrA4zgYUETeJZwxbj3dxwVWYBCprVw
RVIJDrKidqYhfkVj/opAlaQeTH1q7xuFsNGJ5sFuilAN0AN1AFC6PyRZ1ZrHxs+H
voBt4xA2jM9NZQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:45:33 2025 by rpki-client