Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
File: rIpdP4uUYpQnOEoSDHdHYFY611o.mft (raw, json)
Hash identifier: AOFdQt6/ew3oP7L0//lO9Gx0Dydt/TEOABw/F1Qzarg=
Subject key identifier: E4:B9:F7:21:A6:AD:B0:2C:E9:51:65:70:B9:E9:D8:A1:3A:71:30:D8
Authority key identifier: AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
Certificate issuer: /CN=ac8a5d3f8b94629427384a120c774760563ad75a
Certificate serial: 01968391ACF4E694EB841384F47A8FA525DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
Manifest number: 0EF3
Signing time: Tue 29 Apr 2025 22:01:24 +0000
Manifest this update: Tue 29 Apr 2025 22:01:24 +0000
Manifest next update: Wed 30 Apr 2025 22:01:24 +0000
Files and hashes: 1: rIpdP4uUYpQnOEoSDHdHYFY611o.crl (hash: zNe7HEZrzBAGngaIOEvG3VG1tHR75AVoAwVTNAGvivk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:ac:f4:e6:94:eb:84:13:84:f4:7a:8f:a5:25:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a5d3f8b94629427384a120c774760563ad75a
Validity
Not Before: Apr 29 22:01:24 2025 GMT
Not After : Apr 30 22:01:24 2025 GMT
Subject: CN=e4b9f721a6adb02ce9516570b9e9d8a13a7130d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:ae:13:ed:e9:46:bb:e6:d5:d9:09:25:5d:
e0:f9:aa:f2:c9:9b:f5:b2:e4:cc:d1:81:29:89:ea:
fa:ad:b9:ed:32:11:a6:9a:a3:01:54:b3:1f:ff:31:
e3:23:7d:14:dc:a4:77:19:60:6c:91:0d:82:8f:74:
22:ee:c2:cf:67:f2:b9:ed:b2:71:ea:65:da:d2:60:
d7:20:a5:26:63:97:ad:59:bf:23:83:e3:39:97:f7:
38:27:81:f8:96:db:07:18:5a:f0:ac:7e:a7:36:e9:
80:7d:77:31:f5:7d:1c:02:e7:fd:0a:76:99:4d:f5:
a0:22:1b:9e:06:42:a9:43:19:ac:a0:fe:44:0e:60:
86:3b:a4:bd:9a:9d:85:04:e0:1e:0d:65:7a:41:1f:
d1:7f:09:ac:71:b6:6c:b6:49:3e:f7:f5:83:68:39:
53:0f:a9:72:ea:dc:03:50:03:b0:fe:a4:b6:1b:5b:
be:8c:f5:9c:9e:e4:84:01:57:8a:9a:bc:ee:a7:a6:
28:9a:66:5d:be:4a:ed:9b:94:db:04:b0:7f:74:34:
d2:b7:64:b6:a4:b6:fe:eb:d2:d9:5e:bc:88:07:28:
ef:7e:4d:95:fc:ad:1b:35:4b:63:0e:aa:d3:86:f4:
01:fa:13:ad:6c:28:ff:ea:34:76:51:88:dc:48:4a:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:F7:21:A6:AD:B0:2C:E9:51:65:70:B9:E9:D8:A1:3A:71:30:D8
X509v3 Authority Key Identifier:
keyid:AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:e8:18:3b:41:f6:59:96:3d:78:07:ad:3c:75:33:27:22:
9a:e7:58:26:6a:9d:13:c8:45:fe:41:e1:ec:b4:7e:24:4d:53:
4f:89:7a:7a:25:d0:77:7a:22:0a:a6:78:99:1e:80:22:85:4d:
6f:22:38:87:ee:e5:ae:b7:9c:22:10:d9:22:8a:c9:96:54:ba:
17:f2:f6:f4:b8:40:49:ea:6f:a8:9a:4c:98:41:dd:fb:ad:7b:
8e:c0:8f:01:aa:8c:45:8c:75:c9:bd:c9:17:fa:28:ac:04:8c:
96:b5:64:78:e5:bc:9b:53:62:a6:46:e3:51:22:36:44:80:80:
c8:56:62:47:5f:43:4d:a8:01:42:7a:9c:4e:3f:f2:96:fa:c2:
b5:49:70:b5:29:52:d1:0c:1d:8a:f0:66:2a:ce:e2:47:27:85:
29:09:12:1d:0a:e2:0a:da:f5:b1:99:a9:e3:86:f8:5c:fc:0a:
ab:31:7b:78:91:7a:66:7f:b6:1e:fe:aa:5d:e2:84:98:41:ef:
02:4f:ed:3b:a8:a3:57:40:35:3f:21:16:c8:d1:3a:1c:68:e0:
30:b5:9c:13:b9:8e:7b:2d:4e:d5:0a:f4:e4:89:46:a5:c0:79:
03:21:14:54:16:5c:5c:34:e8:fb:5f:7a:e3:8e:87:65:c1:52:
c7:49:d3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkaz05pTrhBOE9HqPpSXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGE1ZDNmOGI5NDYyOTQyNzM4NGExMjBjNzc0NzYwNTYz
YWQ3NWEwHhcNMjUwNDI5MjIwMTI0WhcNMjUwNDMwMjIwMTI0WjAzMTEwLwYDVQQD
EyhlNGI5ZjcyMWE2YWRiMDJjZTk1MTY1NzBiOWU5ZDhhMTNhNzEzMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25iuE+3pRrvm1dkJJV3g+aryyZv1
suTM0YEpier6rbntMhGmmqMBVLMf/zHjI30U3KR3GWBskQ2Cj3Qi7sLPZ/K57bJx
6mXa0mDXIKUmY5etWb8jg+M5l/c4J4H4ltsHGFrwrH6nNumAfXcx9X0cAuf9CnaZ
TfWgIhueBkKpQxmsoP5EDmCGO6S9mp2FBOAeDWV6QR/RfwmscbZstkk+9/WDaDlT
D6ly6twDUAOw/qS2G1u+jPWcnuSEAVeKmrzup6YommZdvkrtm5TbBLB/dDTSt2S2
pLb+69LZXryIByjvfk2V/K0bNUtjDqrThvQB+hOtbCj/6jR2UYjcSEoFVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOS59yGmrbAs6VFlcLnp2KE6cTDYMB8GA1UdIwQY
MBaAFKyKXT+LlGKUJzhKEgx3R2BWOtdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lMjRiYjYtNzM2My00NDQyLWI1Njgt
YzgwZGVjODdjZDA5LzEvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lMjRiYjYtNzM2My00NDQyLWI1NjgtYzgwZGVjODdjZDA5
LzEvcklwZFA0dVVZcFFuT0VvU0RIZEhZRlk2MTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSToGDtB
9lmWPXgHrTx1MycimudYJmqdE8hF/kHh7LR+JE1TT4l6eiXQd3oiCqZ4mR6AIoVN
byI4h+7lrrecIhDZIorJllS6F/L29LhASepvqJpMmEHd+617jsCPAaqMRYx1yb3J
F/oorASMlrVkeOW8m1NipkbjUSI2RICAyFZiR19DTagBQnqcTj/ylvrCtUlwtSlS
0QwdivBmKs7iRyeFKQkSHQriCtr1sZmp44b4XPwKqzF7eJF6Zn+2Hv6qXeKEmEHv
Ak/tO6ijV0A1PyEWyNE6HGjgMLWcE7mOey1O1Qr05IlGpcB5AyEUVBZcXDTo+196
446HZcFSx0nTLg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:21:16 2025 by rpki-client