Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json)
Hash identifier: rTtjyD4FgBP89ohf9aXZC3YJ7nq5fGSj4cbejVJ7e74=
Subject key identifier: 84:76:8C:E6:DF:7A:97:FC:42:A1:6C:DE:3D:6A:66:DE:8A:3A:87:32
Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3
Certificate serial: 0196851112EA77358BCE7D90A431078D6060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
Manifest number: 02DC
Signing time: Wed 30 Apr 2025 05:00:10 +0000
Manifest this update: Wed 30 Apr 2025 05:00:10 +0000
Manifest next update: Thu 01 May 2025 05:00:10 +0000
Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: H6bM+0Dq1h1OksJ261DYZ02GeitByiW5GdO7S1rFDRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:12:ea:77:35:8b:ce:7d:90:a4:31:07:8d:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3
Validity
Not Before: Apr 30 05:00:10 2025 GMT
Not After : May 1 05:00:10 2025 GMT
Subject: CN=84768ce6df7a97fc42a16cde3d6a66de8a3a8732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6c:bd:94:b8:e2:e0:58:01:eb:c8:77:2d:65:
f9:81:04:94:57:c8:3e:1b:84:99:45:e6:d9:4e:4c:
5b:6e:01:96:30:40:16:f8:9f:8e:a4:1b:ad:8e:1f:
dc:2c:2c:19:3d:14:15:01:57:da:7b:22:5f:e2:fd:
6c:38:16:b4:64:7a:2b:2b:3d:4a:93:98:9b:f0:1d:
f7:bd:20:00:f3:3c:4b:d6:a1:e0:16:ac:55:ab:1d:
56:3d:94:ad:f3:9b:0e:84:70:eb:24:b7:2a:61:c7:
28:99:06:c9:7c:ba:a3:c1:8c:e8:b7:05:52:3b:67:
f6:5a:26:74:5c:f7:c8:a9:33:8d:5c:86:8a:96:f6:
90:c1:8d:7c:27:62:f6:31:a9:30:cf:56:25:f9:09:
bf:fd:ed:fc:a6:b4:a1:b3:96:68:0d:32:e7:ec:95:
4b:81:3a:74:92:40:7b:e3:e9:8f:2e:32:1b:ba:25:
96:7c:e4:3d:d2:50:b2:b5:b8:f0:ef:7b:aa:fa:e7:
27:2b:b1:85:04:49:4f:f0:7d:05:6c:71:c9:08:0a:
f5:5b:87:9b:b8:9a:1f:f9:0b:5c:d2:21:f2:50:d8:
a6:58:73:a9:7c:89:40:d3:4d:a1:ac:20:60:b0:e8:
42:74:fa:4b:a0:13:d4:90:9e:44:5a:1a:8d:7e:38:
c1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:8C:E6:DF:7A:97:FC:42:A1:6C:DE:3D:6A:66:DE:8A:3A:87:32
X509v3 Authority Key Identifier:
keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:66:fe:b3:41:5e:c0:66:b9:93:e2:25:35:ef:cb:38:44:b0:
c6:19:94:7d:9b:e1:f5:8b:8c:3f:e4:f6:ee:6b:51:ed:2f:69:
24:ef:ad:c7:35:b5:f0:50:e5:9f:82:d0:65:f0:d4:be:4c:d7:
a3:f3:e8:40:10:a9:6c:7d:d4:b7:72:4b:a2:d3:ee:5d:f8:7b:
5e:ec:3d:ad:56:e4:32:51:2c:9a:53:62:8e:da:81:77:93:8f:
3a:7e:31:96:9b:55:58:1a:bf:ad:67:57:b6:51:60:ed:8a:6c:
49:4b:06:bc:7f:0e:24:11:e4:c9:8d:19:72:76:a5:2d:30:aa:
53:04:3d:06:62:55:b6:bb:71:34:a7:34:6f:13:2b:fa:8f:30:
bf:83:0b:1d:fd:9f:29:da:43:3d:79:90:0d:8e:24:5e:b7:86:
c6:ce:cd:8f:a5:f1:86:a1:69:e9:61:9a:ca:75:24:28:83:ee:
c6:51:ec:12:ef:42:77:bc:e0:ff:f0:16:d4:13:c1:d8:db:40:
68:00:c0:64:54:5a:e7:22:86:58:91:f8:e3:f0:66:48:a7:7c:
74:2e:d6:e9:f7:fa:a1:b7:5a:c5:70:dd:4e:7b:e3:f5:7d:e9:
6c:64:8c:ff:2a:f1:51:ab:ba:03:92:c2:a3:80:bf:09:7b:31:
a4:56:2a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFERLqdzWLzn2QpDEHjWBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTEwOTFkMzhlZWU1OTc5NjMzYWYyNzcyOGVlOTUyMzFh
ZmY2ZDMwHhcNMjUwNDMwMDUwMDEwWhcNMjUwNTAxMDUwMDEwWjAzMTEwLwYDVQQD
Eyg4NDc2OGNlNmRmN2E5N2ZjNDJhMTZjZGUzZDZhNjZkZThhM2E4NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmy9lLji4FgB68h3LWX5gQSUV8g+
G4SZRebZTkxbbgGWMEAW+J+OpButjh/cLCwZPRQVAVfaeyJf4v1sOBa0ZHorKz1K
k5ib8B33vSAA8zxL1qHgFqxVqx1WPZSt85sOhHDrJLcqYccomQbJfLqjwYzotwVS
O2f2WiZ0XPfIqTONXIaKlvaQwY18J2L2Makwz1Yl+Qm//e38prShs5ZoDTLn7JVL
gTp0kkB74+mPLjIbuiWWfOQ90lCytbjw73uq+ucnK7GFBElP8H0FbHHJCAr1W4eb
uJof+Qtc0iHyUNimWHOpfIlA002hrCBgsOhCdPpLoBPUkJ5EWhqNfjjBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR2jObfepf8QqFs3j1qZt6KOocyMB8GA1UdIwQY
MBaAFHXhCR047uWXljOvJ3KO6VIxr/bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEt
MGQ2NzFkNDcwMDc4LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEtMGQ2NzFkNDcwMDc4
LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGb+s0Fe
wGa5k+IlNe/LOESwxhmUfZvh9YuMP+T27mtR7S9pJO+txzW18FDln4LQZfDUvkzX
o/PoQBCpbH3Ut3JLotPuXfh7Xuw9rVbkMlEsmlNijtqBd5OPOn4xlptVWBq/rWdX
tlFg7YpsSUsGvH8OJBHkyY0ZcnalLTCqUwQ9BmJVtrtxNKc0bxMr+o8wv4MLHf2f
KdpDPXmQDY4kXreGxs7Nj6XxhqFp6WGaynUkKIPuxlHsEu9Cd7zg//AW1BPB2NtA
aADAZFRa5yKGWJH44/BmSKd8dC7W6ff6obdaxXDdTnvj9X3pbGSM/yrxUau6A5LC
o4C/CXsxpFYqHg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 15:54:07 2025 by rpki-client