
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier: vW5U1lR0MVqkTyHda65/n7F1tsGJelH6xJAjZa2tFEo=
Subject key identifier: DD:2D:00:37:2B:C4:63:A9:1F:9A:37:EE:07:13:65:42:A8:A6:9E:30
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer: /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial: 01968A37969EE302443F3D7576606825CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 05:00:20 +0000
Manifest this update: Thu 01 May 2025 05:00:20 +0000
Manifest next update: Fri 02 May 2025 05:00:20 +0000
Files and hashes: 1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: wyo5wZoodeJfH3CdWUjQh8vES7cBJ5bsxKdNT3mjjfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:37:96:9e:e3:02:44:3f:3d:75:76:60:68:25:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Validity
Not Before: May 1 05:00:20 2025 GMT
Not After : May 2 05:00:20 2025 GMT
Subject: CN=dd2d00372bc463a91f9a37ee07136542a8a69e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:b4:c5:3f:73:ed:7e:55:57:35:2f:51:ae:
30:4d:8d:e2:9c:33:bf:18:90:c6:3a:eb:dd:80:b6:
9e:0c:d4:62:d0:22:28:cd:38:5b:d7:08:7a:07:e0:
ca:62:c2:37:98:a1:b6:73:14:99:4b:c8:80:d4:1c:
84:f1:60:ba:ef:14:05:d6:5a:71:4e:58:14:91:90:
b5:9e:b1:bf:f0:c9:c6:d4:c7:d4:4e:53:47:51:b8:
d8:ec:1f:70:7c:33:8d:49:00:52:1b:45:bb:4b:bb:
09:3d:14:f0:e3:1c:16:fd:17:b0:65:65:51:49:01:
cd:21:3b:1e:95:48:8f:43:b2:1e:68:5e:96:db:e2:
69:c1:b1:69:7a:7c:e3:20:10:9d:fb:be:bc:9b:9e:
c2:3a:34:89:9a:d0:ae:1e:96:b0:93:72:23:41:71:
a4:c5:c8:1d:ea:d6:fa:62:cd:fb:77:05:45:cb:b6:
55:b5:d7:f7:4a:7b:7e:82:dc:ad:a0:35:f5:02:61:
0c:eb:83:4b:94:49:77:9a:5d:03:2c:97:02:45:2b:
7c:06:11:28:ef:cd:9e:6e:49:cb:c8:c2:59:f6:2f:
22:c0:95:42:f2:3d:69:c1:ed:32:25:66:70:c3:37:
8f:1c:91:22:71:4b:30:99:f2:58:14:c0:b9:d8:4b:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2D:00:37:2B:C4:63:A9:1F:9A:37:EE:07:13:65:42:A8:A6:9E:30
X509v3 Authority Key Identifier:
keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:66:66:e3:a3:ed:b5:76:b0:ca:77:73:7c:f0:e7:0b:54:c1:
83:24:e5:de:3f:e8:d3:4f:0a:75:c8:14:4d:73:08:8c:b9:14:
6f:71:c5:ea:92:f5:74:f4:ce:f8:90:18:c0:bb:ca:99:06:35:
f3:bd:d1:1a:cd:fd:85:b8:50:ae:69:67:59:5c:22:2c:42:4c:
f2:8a:eb:24:42:40:b2:9c:f6:d5:b3:e4:29:8c:08:e9:8f:34:
2f:a6:5a:84:8c:89:df:1c:21:ae:3a:29:7b:4d:a7:f5:99:94:
7c:6c:94:99:4b:4d:bf:e9:04:83:d0:a7:63:b4:6a:63:01:6e:
4b:47:a7:f0:8f:7f:10:33:2d:93:3e:14:e2:81:fb:63:2a:83:
53:a4:6c:5f:3f:11:d5:63:f4:0d:44:49:8c:c0:62:8a:b6:a8:
6b:d6:08:29:50:43:12:a0:0c:0b:84:3e:75:c9:9a:ff:48:d4:
f6:d0:87:e5:c4:71:48:4f:2a:41:44:a6:c4:86:51:6d:df:d9:
61:69:e5:06:9c:17:09:89:0b:72:94:43:f0:0b:e7:66:29:9c:
df:1d:49:d4:21:e9:3f:a7:40:18:cd:32:03:bf:42:fa:ce:9a:
44:0d:fb:aa:e4:23:21:12:1a:4b:ef:dd:ef:78:f2:94:d9:91:
88:c6:b1:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKN5ae4wJEPz11dmBoJcsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRiMDhlMTMzOGE1NzlhZDM3ODk1MzVmYTczYTVlNTQ1
MTFmZjEwHhcNMjUwNTAxMDUwMDIwWhcNMjUwNTAyMDUwMDIwWjAzMTEwLwYDVQQD
EyhkZDJkMDAzNzJiYzQ2M2E5MWY5YTM3ZWUwNzEzNjU0MmE4YTY5ZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyva0xT9z7X5VVzUvUa4wTY3inDO/
GJDGOuvdgLaeDNRi0CIozThb1wh6B+DKYsI3mKG2cxSZS8iA1ByE8WC67xQF1lpx
TlgUkZC1nrG/8MnG1MfUTlNHUbjY7B9wfDONSQBSG0W7S7sJPRTw4xwW/RewZWVR
SQHNITselUiPQ7IeaF6W2+JpwbFpenzjIBCd+768m57COjSJmtCuHpawk3IjQXGk
xcgd6tb6Ys37dwVFy7ZVtdf3Snt+gtytoDX1AmEM64NLlEl3ml0DLJcCRSt8BhEo
782ebknLyMJZ9i8iwJVC8j1pwe0yJWZwwzePHJEicUswmfJYFMC52EtXLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0tADcrxGOpH5o37gcTZUKopp4wMB8GA1UdIwQY
MBaAFNCNsI4TOKV5rTeJU1+nOl5UUR/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yYjJjYjMtY2NiNi00MWUwLTg5YmMt
MWI3NjA0NTFkYWM4LzEvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yYjJjYjMtY2NiNi00MWUwLTg5YmMtMWI3NjA0NTFkYWM4
LzEvMEkyd2poTTRwWG10TjRsVFg2YzZYbFJSSF9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2Zm46Pt
tXawyndzfPDnC1TBgyTl3j/o008KdcgUTXMIjLkUb3HF6pL1dPTO+JAYwLvKmQY1
873RGs39hbhQrmlnWVwiLEJM8orrJEJAspz21bPkKYwI6Y80L6ZahIyJ3xwhrjop
e02n9ZmUfGyUmUtNv+kEg9CnY7RqYwFuS0en8I9/EDMtkz4U4oH7YyqDU6RsXz8R
1WP0DURJjMBiiraoa9YIKVBDEqAMC4Q+dcma/0jU9tCH5cRxSE8qQUSmxIZRbd/Z
YWnlBpwXCYkLcpRD8AvnZimc3x1J1CHpP6dAGM0yA79C+s6aRA37quQjIRIaS+/d
73jylNmRiMaxmA==
-----END CERTIFICATE-----
Generated at Thu May 1 09:37:51 2025 by rpki-client