Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json)
Hash identifier: 3zfJLDu6xgMwl7p7SfMTpynBpWYuqWda9RPE1/hzuDo=
Subject key identifier: B1:BD:3A:C1:5B:24:1D:0E:E3:35:79:39:E9:1A:94:FA:0D:64:20:8B
Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Certificate serial: 019695604BFE28FBFCC7D4220D63B1AAFE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
Manifest number: 0C1C
Signing time: Sat 03 May 2025 09:00:38 +0000
Manifest this update: Sat 03 May 2025 09:00:38 +0000
Manifest next update: Sun 04 May 2025 09:00:38 +0000
Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: zGgDsTcsFWiRqvsFkUy3yJ0qMF47xpNz9N5i4eZtVPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:60:4b:fe:28:fb:fc:c7:d4:22:0d:63:b1:aa:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7
Validity
Not Before: May 3 09:00:38 2025 GMT
Not After : May 4 09:00:38 2025 GMT
Subject: CN=b1bd3ac15b241d0ee3357939e91a94fa0d64208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:f0:66:14:71:b2:f3:38:87:57:b4:ed:af:
7e:07:01:3b:2c:3f:cd:49:a4:d2:45:ad:42:84:a2:
b3:23:9b:69:42:6c:43:41:83:71:49:a0:09:61:47:
04:0a:1e:c7:5a:cb:ef:be:f5:50:32:1a:7e:2d:38:
a5:84:a3:9c:e1:c6:ec:a8:fc:af:28:d9:82:6c:c7:
4b:ff:63:e5:61:62:99:be:d9:54:f5:d5:fb:b6:c6:
01:89:54:85:63:7c:69:4d:49:e8:34:18:18:4a:b2:
e5:b4:a8:a8:b9:c3:98:b8:ed:f8:5b:b4:63:1f:7e:
94:cf:16:e4:49:a8:b9:63:a1:0c:42:56:b8:5f:81:
0a:dd:3c:07:1e:94:21:ef:2e:c2:f3:b3:a9:56:4c:
04:8b:6a:7c:a5:b2:2b:bc:1e:a7:c9:1e:cd:bc:6a:
91:f0:df:3a:23:74:af:4a:e2:5b:d3:d9:54:c1:8c:
14:54:9c:14:03:97:24:8d:bd:39:3f:e6:85:9e:d2:
15:58:38:2f:c1:b8:0a:73:1f:f5:df:b5:20:bd:a2:
cf:b4:20:d0:e6:ed:41:42:5f:2f:37:f0:a8:b5:30:
bc:ea:8b:8a:bb:8d:f5:14:a2:e1:6a:0b:d2:96:dd:
da:36:90:e1:8c:48:2a:69:ed:c5:aa:da:4e:2e:89:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BD:3A:C1:5B:24:1D:0E:E3:35:79:39:E9:1A:94:FA:0D:64:20:8B
X509v3 Authority Key Identifier:
keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:13:1b:03:51:6c:55:a3:ad:ea:14:77:e9:72:72:86:bc:33:
ef:3f:63:35:b5:78:3d:f7:a0:43:05:69:e9:f0:66:ab:40:07:
0e:92:7d:de:3e:bf:34:76:9f:e0:49:5a:80:55:51:dc:49:75:
b8:59:7e:a5:7f:4e:22:90:dc:c0:e8:74:aa:f9:34:be:30:bc:
45:f1:2b:8e:48:c8:d3:5d:a3:86:e1:3b:6c:4d:88:30:d7:71:
33:bf:27:f4:45:7f:19:1f:da:2d:c5:4c:5a:51:67:7b:7c:85:
69:24:0b:8b:ba:e1:7c:c5:03:0a:7f:e3:3f:46:f1:a3:6b:13:
3f:03:2c:db:b1:d4:da:a0:69:02:b3:a4:d8:9c:41:a7:0b:7c:
83:b5:e3:79:ca:2a:da:fa:81:1f:5c:e6:20:e2:8d:50:5e:7e:
f5:6e:b9:21:86:71:27:7d:2c:ed:85:bc:0d:3b:a9:94:95:5c:
d2:b4:f1:e8:6c:a4:3e:b9:a4:6c:9a:16:c0:60:94:02:12:cb:
a0:76:52:68:05:82:f5:0f:17:6d:62:3f:43:dd:bd:90:dc:60:
ec:94:9e:8a:a0:a0:f6:6a:12:8c:37:ce:ee:15:86:1a:0f:10:
33:20:b1:62:b7:31:0a:d5:4f:81:02:db:6d:50:a6:3c:3d:1a:
a4:0a:9b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVYEv+KPv8x9QiDWOxqv4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGVlMjg2YWMyNGM1ZjI1OWYwYTcyYjNiNDhjMjQzNmRk
MzRjZjcwHhcNMjUwNTAzMDkwMDM4WhcNMjUwNTA0MDkwMDM4WjAzMTEwLwYDVQQD
EyhiMWJkM2FjMTViMjQxZDBlZTMzNTc5MzllOTFhOTRmYTBkNjQyMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR7wZhRxsvM4h1e07a9+BwE7LD/N
SaTSRa1ChKKzI5tpQmxDQYNxSaAJYUcECh7HWsvvvvVQMhp+LTilhKOc4cbsqPyv
KNmCbMdL/2PlYWKZvtlU9dX7tsYBiVSFY3xpTUnoNBgYSrLltKioucOYuO34W7Rj
H36UzxbkSai5Y6EMQla4X4EK3TwHHpQh7y7C87OpVkwEi2p8pbIrvB6nyR7NvGqR
8N86I3SvSuJb09lUwYwUVJwUA5ckjb05P+aFntIVWDgvwbgKcx/137UgvaLPtCDQ
5u1BQl8vN/CotTC86ouKu431FKLhagvSlt3aNpDhjEgqae3FqtpOLokYXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG9OsFbJB0O4zV5OekalPoNZCCLMB8GA1UdIwQY
MBaAFHxO4oasJMXyWfCnKztIwkNt00z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUt
MGIxNDFjOGY1YTNiLzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUtMGIxNDFjOGY1YTNi
LzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUBMbA1Fs
VaOt6hR36XJyhrwz7z9jNbV4PfegQwVp6fBmq0AHDpJ93j6/NHaf4ElagFVR3El1
uFl+pX9OIpDcwOh0qvk0vjC8RfErjkjI012jhuE7bE2IMNdxM78n9EV/GR/aLcVM
WlFne3yFaSQLi7rhfMUDCn/jP0bxo2sTPwMs27HU2qBpArOk2JxBpwt8g7Xjecoq
2vqBH1zmIOKNUF5+9W65IYZxJ30s7YW8DTuplJVc0rTx6GykPrmkbJoWwGCUAhLL
oHZSaAWC9Q8XbWI/Q929kNxg7JSeiqCg9moSjDfO7hWGGg8QMyCxYrcxCtVPgQLb
bVCmPD0apAqboQ==
-----END CERTIFICATE-----
Generated at Sat May 3 12:36:52 2025 by rpki-client