Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
File: A7DUU6H8523DQvF17tz3ogrV2Ro.mft (raw, json)
Hash identifier: oIxecefvLzafzCaqA0rROX5fzeDOxUXuKm3ntmr9puw=
Subject key identifier: 24:7D:FC:58:C2:CD:9F:44:72:1A:58:AF:0B:77:C5:9C:15:0F:17:1F
Authority key identifier: 03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
Certificate issuer: /CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Certificate serial: 0196760CBE65A41CA779BCFFCBCE786B72D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 07:01:08 +0000
Manifest this update: Sun 27 Apr 2025 07:01:08 +0000
Manifest next update: Mon 28 Apr 2025 07:01:08 +0000
Files and hashes: 1: A7DUU6H8523DQvF17tz3ogrV2Ro.crl (hash: 0R8Ks4NnGZlt2u3e+UrPrVHvIEAoMV6t4POO6zGjFKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:be:65:a4:1c:a7:79:bc:ff:cb:ce:78:6b:72:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b0d453a1fce76dc342f175eedcf7a20ad5d91a
Validity
Not Before: Apr 27 07:01:08 2025 GMT
Not After : Apr 28 07:01:08 2025 GMT
Subject: CN=247dfc58c2cd9f44721a58af0b77c59c150f171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:cf:d3:b2:4a:e6:8d:2c:cc:41:93:c7:3e:
c7:cd:c4:ae:c6:ed:44:53:2e:ff:8f:81:08:b0:50:
a0:4e:3d:ae:81:d0:30:e6:d0:48:cf:5f:e6:6c:1d:
1f:26:0f:91:2c:9b:15:72:52:1d:1a:57:2d:b1:69:
aa:1c:12:e0:77:24:53:c7:44:75:f5:a1:d1:3f:77:
61:b5:b4:19:fe:fc:3c:fe:29:95:ed:95:9b:23:ae:
af:a2:cc:4e:a3:76:e7:af:95:2a:43:98:fb:fd:b6:
68:76:f0:3d:79:1d:13:e4:bd:1c:a5:64:b8:41:05:
30:91:ff:57:6a:80:fd:11:bb:aa:fc:fd:6e:89:e9:
3a:75:bd:ff:d1:3b:c9:f0:4d:16:45:bb:33:9a:3c:
55:68:84:21:ec:6c:d0:61:91:52:9b:8c:58:7d:bf:
6b:08:c5:03:a7:48:fc:f1:bf:c6:74:b9:96:5d:a1:
ad:af:c6:28:a4:5d:4d:4a:91:10:35:ad:b0:a3:21:
c1:01:67:45:62:86:a5:64:ad:2e:09:96:c0:58:b8:
25:7f:31:8d:84:0b:6b:af:af:bf:31:4b:34:82:d3:
77:e8:69:68:79:0d:dc:7a:21:07:ba:9d:ba:84:78:
64:3e:ee:b6:08:56:82:99:e4:dd:b6:cc:20:b8:88:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7D:FC:58:C2:CD:9F:44:72:1A:58:AF:0B:77:C5:9C:15:0F:17:1F
X509v3 Authority Key Identifier:
keyid:03:B0:D4:53:A1:FC:E7:6D:C3:42:F1:75:EE:DC:F7:A2:0A:D5:D9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7DUU6H8523DQvF17tz3ogrV2Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d594a4-5714-4c00-a8e6-b4312a58440c/1/A7DUU6H8523DQvF17tz3ogrV2Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3d:bc:d7:c0:b8:b5:ac:0b:20:f8:3e:f7:fa:17:d7:8a:a5:
15:13:71:b0:d1:84:14:72:c9:7f:c7:65:66:c2:ac:7a:4c:09:
53:cc:87:d1:86:35:38:1c:4c:e9:84:fc:6e:e9:91:e2:cc:ab:
b8:cc:c1:6d:a2:88:4f:d9:13:1d:06:9c:40:52:95:ed:53:50:
16:db:e4:5d:8b:aa:cf:a4:fd:90:3b:f8:98:32:fb:50:1a:40:
25:87:3d:8d:04:00:9e:05:ee:58:e4:c3:81:4a:ea:1b:b9:35:
3d:b9:40:6d:c0:24:13:eb:68:7e:5d:0c:cd:f3:77:69:76:9a:
ea:16:18:6b:27:d4:de:ec:be:dc:12:83:cf:00:f5:ab:d0:e5:
af:c4:c3:d5:67:20:ec:00:51:9a:95:19:78:57:e5:26:2e:52:
db:de:0e:5d:d0:c6:50:2d:c7:8c:ca:f4:2b:c5:fb:d7:a5:a2:
31:1f:70:2d:cb:c4:f5:f9:6a:dd:af:e9:e3:e8:b8:7a:f8:13:
a4:10:98:78:0a:41:5a:cf:a6:3c:45:2c:85:7a:1f:34:13:d7:
46:1a:ff:4d:d1:dc:a1:bd:94:56:d0:5d:b0:5b:41:6f:23:7c:
79:d8:8d:4e:6a:e3:f8:72:b5:91:c8:c4:3a:12:b6:c3:9a:cd:
3b:a9:aa:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DL5lpBynebz/y854a3LZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYjBkNDUzYTFmY2U3NmRjMzQyZjE3NWVlZGNmN2EyMGFk
NWQ5MWEwHhcNMjUwNDI3MDcwMTA4WhcNMjUwNDI4MDcwMTA4WjAzMTEwLwYDVQQD
EygyNDdkZmM1OGMyY2Q5ZjQ0NzIxYTU4YWYwYjc3YzU5YzE1MGYxNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskHP07JK5o0szEGTxz7HzcSuxu1E
Uy7/j4EIsFCgTj2ugdAw5tBIz1/mbB0fJg+RLJsVclIdGlctsWmqHBLgdyRTx0R1
9aHRP3dhtbQZ/vw8/imV7ZWbI66vosxOo3bnr5UqQ5j7/bZodvA9eR0T5L0cpWS4
QQUwkf9XaoD9Ebuq/P1uiek6db3/0TvJ8E0WRbszmjxVaIQh7GzQYZFSm4xYfb9r
CMUDp0j88b/GdLmWXaGtr8YopF1NSpEQNa2woyHBAWdFYoalZK0uCZbAWLglfzGN
hAtrr6+/MUs0gtN36GloeQ3ceiEHup26hHhkPu62CFaCmeTdtswguIi20wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR9/FjCzZ9EchpYrwt3xZwVDxcfMB8GA1UdIwQY
MBaAFAOw1FOh/Odtw0Lxde7c96IK1dkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYt
YjQzMTJhNTg0NDBjLzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kNTk0YTQtNTcxNC00YzAwLWE4ZTYtYjQzMTJhNTg0NDBj
LzEvQTdEVVU2SDg1MjNEUXZGMTd0ejNvZ3JWMlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD2818C4
tawLIPg+9/oX14qlFRNxsNGEFHLJf8dlZsKsekwJU8yH0YY1OBxM6YT8bumR4syr
uMzBbaKIT9kTHQacQFKV7VNQFtvkXYuqz6T9kDv4mDL7UBpAJYc9jQQAngXuWOTD
gUrqG7k1PblAbcAkE+tofl0MzfN3aXaa6hYYayfU3uy+3BKDzwD1q9Dlr8TD1Wcg
7ABRmpUZeFflJi5S294OXdDGUC3HjMr0K8X716WiMR9wLcvE9flq3a/p4+i4evgT
pBCYeApBWs+mPEUshXofNBPXRhr/TdHcob2UVtBdsFtBbyN8ediNTmrj+HK1kcjE
OhK2w5rNO6mqKw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:22 2025 by rpki-client