Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File: M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier: N1YAscZoTYLSfYQJelGpCts2m6/2aBXyQv9uGCVs7UQ=
Subject key identifier: 20:7C:B6:23:30:9A:23:4B:3E:53:95:FC:29:A6:4B:B3:FF:19:07:CD
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial: 01967E33A401A943C420C6D2A8771529E2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number: 0191
Signing time: Mon 28 Apr 2025 21:00:35 +0000
Manifest this update: Mon 28 Apr 2025 21:00:35 +0000
Manifest next update: Tue 29 Apr 2025 21:00:35 +0000
Files and hashes: 1: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: UQm6V7ungOTnLD5Z5TVV7BLrzQJJ7DNj8PtMACWm+V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:a4:01:a9:43:c4:20:c6:d2:a8:77:15:29:e2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Validity
Not Before: Apr 28 21:00:35 2025 GMT
Not After : Apr 29 21:00:35 2025 GMT
Subject: CN=207cb623309a234b3e5395fc29a64bb3ff1907cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:93:06:0f:1b:d0:a4:1d:f4:a2:71:ea:41:
06:0c:53:c3:3e:cf:89:3d:21:7f:ae:9e:f1:02:f4:
99:8d:e2:fc:80:d3:1a:dc:5e:b5:e1:0b:30:3e:c2:
22:fb:81:65:f7:e0:f8:b5:c8:b0:ba:21:a5:57:60:
49:94:7b:35:c6:0f:d2:aa:56:fa:ae:c7:bc:8a:5a:
4a:c4:7b:b6:49:8c:ac:e8:36:30:06:c2:4a:05:82:
d7:c9:a6:8c:65:40:7f:8d:13:2d:8f:a1:a2:07:00:
c6:11:da:ad:0c:20:c4:7d:3f:a0:49:ec:bf:2c:8b:
af:e5:fe:7e:92:8e:bf:79:3c:87:10:8a:ad:d9:50:
80:7f:52:97:f1:4f:65:a5:4f:ea:dd:68:5d:bb:0d:
6a:b4:fa:0e:63:1a:08:f4:be:b0:5a:3c:de:f5:45:
d1:31:66:43:35:de:c1:86:ac:5a:7c:e1:a6:56:80:
6d:0b:a7:29:6f:16:13:62:e2:b4:de:cb:18:c0:d0:
c2:9f:72:4d:68:3a:5b:81:cd:c1:16:0d:49:8d:a4:
e5:28:b6:b6:3f:68:67:17:5f:b1:63:4e:a2:c4:be:
56:17:7f:1e:f9:d7:a9:ed:2e:6a:56:38:cb:89:1f:
9e:bb:e0:bc:41:ff:13:56:c8:17:31:fb:33:3e:e3:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7C:B6:23:30:9A:23:4B:3E:53:95:FC:29:A6:4B:B3:FF:19:07:CD
X509v3 Authority Key Identifier:
keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9e:67:6c:f8:99:3e:59:1f:0c:f2:07:af:da:92:88:10:92:
f4:a8:c7:8e:ca:f3:09:b3:98:85:de:40:31:f1:51:55:25:49:
bc:85:8d:4e:45:d8:7d:aa:a5:f7:66:fc:2f:06:2a:20:41:8c:
bd:a8:9c:6e:2a:8e:03:95:2c:69:2a:34:bb:f0:61:72:a1:e9:
ac:c8:6d:54:93:26:cb:3a:25:9e:99:40:59:79:8a:73:2a:3e:
4d:24:dc:ee:0b:16:73:fd:19:4e:48:6b:93:c5:fc:24:36:a5:
cd:fa:c0:bb:eb:54:2d:a3:51:a1:48:62:e8:84:a3:dd:71:d5:
ac:1c:ff:dc:3b:c1:da:ef:8c:0c:bd:ec:63:7d:2b:9a:ef:60:
10:e8:fc:eb:66:b9:e3:ed:0d:1d:a4:d7:7d:0e:30:2b:02:98:
ba:b7:11:f1:95:d7:18:d6:44:98:8b:93:3f:8b:45:ee:93:6b:
67:cf:5d:a1:8e:a5:6b:b0:0b:91:85:6b:5e:19:41:f9:d4:d4:
30:e6:f1:f5:6d:ae:e6:37:59:39:b5:94:43:e2:31:7d:1d:ee:
8d:dd:db:a2:5e:ad:e0:21:13:c1:81:13:c6:70:60:57:59:c3:
eb:1b:fd:61:28:73:64:73:7e:40:bc:47:af:e0:a1:75:1e:c3:
38:0c:33:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+M6QBqUPEIMbSqHcVKeLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk
YjliODkwHhcNMjUwNDI4MjEwMDM1WhcNMjUwNDI5MjEwMDM1WjAzMTEwLwYDVQQD
EygyMDdjYjYyMzMwOWEyMzRiM2U1Mzk1ZmMyOWE2NGJiM2ZmMTkwN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNCTBg8b0KQd9KJx6kEGDFPDPs+J
PSF/rp7xAvSZjeL8gNMa3F614QswPsIi+4Fl9+D4tciwuiGlV2BJlHs1xg/Sqlb6
rse8ilpKxHu2SYys6DYwBsJKBYLXyaaMZUB/jRMtj6GiBwDGEdqtDCDEfT+gSey/
LIuv5f5+ko6/eTyHEIqt2VCAf1KX8U9lpU/q3Whduw1qtPoOYxoI9L6wWjze9UXR
MWZDNd7BhqxafOGmVoBtC6cpbxYTYuK03ssYwNDCn3JNaDpbgc3BFg1JjaTlKLa2
P2hnF1+xY06ixL5WF38e+dep7S5qVjjLiR+eu+C8Qf8TVsgXMfszPuM2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB8tiMwmiNLPlOV/CmmS7P/GQfNMB8GA1UdIwQY
MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt
NzBjMjI4ZWU5Yzk1LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1
LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZ5nbPiZ
PlkfDPIHr9qSiBCS9KjHjsrzCbOYhd5AMfFRVSVJvIWNTkXYfaql92b8LwYqIEGM
vaicbiqOA5UsaSo0u/BhcqHprMhtVJMmyzolnplAWXmKcyo+TSTc7gsWc/0ZTkhr
k8X8JDalzfrAu+tULaNRoUhi6ISj3XHVrBz/3DvB2u+MDL3sY30rmu9gEOj862a5
4+0NHaTXfQ4wKwKYurcR8ZXXGNZEmIuTP4tF7pNrZ89doY6la7ALkYVrXhlB+dTU
MObx9W2u5jdZObWUQ+IxfR3ujd3bol6t4CETwYETxnBgV1nD6xv9YShzZHN+QLxH
r+ChdR7DOAwzAA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:11 2025 by rpki-client