Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
File: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft (raw, json)
Hash identifier: 5QAG9VIW+dDuesz2icxtIPrNPmNTW2oM5452wpiVeb8=
Subject key identifier: 89:22:36:1D:E7:19:D4:93:E0:36:D6:B4:C0:60:82:42:20:16:1F:1C
Authority key identifier: F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
Certificate issuer: /CN=f0a95b78b0576501278efd7e020269ba1f06d386
Certificate serial: 0196760BF92DE8CE1C0C32353B05EC7AC6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
Manifest number: 0AE5
Signing time: Sun 27 Apr 2025 07:00:18 +0000
Manifest this update: Sun 27 Apr 2025 07:00:18 +0000
Manifest next update: Mon 28 Apr 2025 07:00:18 +0000
Files and hashes: 1: 8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl (hash: vloVnbwdVIqonskrxZv4sV7LzOdB+HVMbZn4AnykTrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:f9:2d:e8:ce:1c:0c:32:35:3b:05:ec:7a:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a95b78b0576501278efd7e020269ba1f06d386
Validity
Not Before: Apr 27 07:00:18 2025 GMT
Not After : Apr 28 07:00:18 2025 GMT
Subject: CN=8922361de719d493e036d6b4c060824220161f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:21:8b:d6:d4:5f:1a:c7:23:1b:1d:cb:95:bd:
8a:a6:e0:eb:10:a2:50:d7:af:7f:6a:e4:e4:22:51:
1f:64:04:ed:49:1c:67:be:66:c3:c0:5f:ed:96:fa:
a5:33:de:a7:d3:bc:42:5f:fa:1d:01:0d:ed:c6:7b:
0c:97:31:87:5f:ac:c7:52:a2:96:73:14:54:5a:b2:
14:47:d1:1f:aa:10:48:1c:02:fb:8a:27:11:3b:84:
fd:36:a2:f7:3a:dd:f6:e8:37:0b:b9:1c:3a:27:01:
24:ef:73:c2:22:65:5d:25:48:8d:4b:a1:dd:c5:f4:
b9:79:dc:c1:13:2c:0a:91:f1:47:bd:ae:2d:af:8c:
ea:3a:40:e3:be:66:ba:45:1d:c4:78:6f:87:8c:9e:
ce:6d:5a:5d:d9:be:4f:94:3f:30:d0:bf:aa:a2:5c:
5c:a2:f4:e3:89:9e:4d:ef:2d:21:b9:47:1c:65:94:
b7:12:fb:f8:c3:38:39:ff:8e:e2:ea:33:11:81:9a:
2b:1c:1a:b9:b0:f6:d3:a9:d1:89:94:a5:dd:bb:88:
47:8b:ce:54:31:86:c6:8a:8f:fd:00:38:ad:aa:66:
8b:65:4a:c3:75:a1:23:04:4b:11:35:68:42:6d:ed:
ec:eb:62:ec:39:d5:0d:07:03:ac:12:f6:e4:00:1a:
44:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:36:1D:E7:19:D4:93:E0:36:D6:B4:C0:60:82:42:20:16:1F:1C
X509v3 Authority Key Identifier:
keyid:F0:A9:5B:78:B0:57:65:01:27:8E:FD:7E:02:02:69:BA:1F:06:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KlbeLBXZQEnjv1-AgJpuh8G04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/92c89c-4493-44dc-8261-bddef60cf9d8/1/8KlbeLBXZQEnjv1-AgJpuh8G04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3b:57:2d:e7:5a:3b:c6:f4:17:b1:33:0e:ca:94:3e:be:da:
dd:bc:a0:50:75:36:ee:37:7e:1f:34:d8:9f:22:bf:2b:f4:6a:
c6:f8:10:37:64:70:2f:8c:aa:93:20:2b:89:b1:63:f5:dc:0a:
66:1c:49:b9:ad:71:42:58:63:16:00:67:6a:39:c7:5d:7c:c6:
5f:da:39:05:36:40:1c:e7:48:49:b8:03:8f:3b:40:ea:d1:e3:
c9:f1:82:ef:7f:07:82:52:61:cb:c1:ba:09:09:19:e3:82:bf:
67:2b:e1:56:67:33:83:43:c0:c4:cc:b5:9e:7d:50:9c:06:50:
f7:bc:f6:3e:cd:ef:e6:7a:bd:d3:84:c5:02:dc:fe:e5:fd:0c:
0e:ac:3a:4a:00:7c:6e:c2:bb:1a:1e:f7:ed:ee:70:15:da:e9:
9f:f7:8b:e8:3b:10:dd:3b:93:c7:8b:dc:3f:89:e6:c3:6e:14:
77:78:bc:e1:2b:ff:62:ed:4c:f3:3a:10:11:6e:0b:b7:20:20:
7a:c5:45:4d:2e:22:2e:60:6a:eb:1f:34:f2:f6:3a:74:bc:02:
40:ce:74:06:fb:16:af:9d:2a:09:7a:38:fc:cd:2b:08:d8:6e:
e8:54:78:00:24:e8:1f:69:e3:22:49:a0:de:d2:99:0e:0c:08:
86:30:5e:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2C/kt6M4cDDI1OwXsesanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYTk1Yjc4YjA1NzY1MDEyNzhlZmQ3ZTAyMDI2OWJhMWYw
NmQzODYwHhcNMjUwNDI3MDcwMDE4WhcNMjUwNDI4MDcwMDE4WjAzMTEwLwYDVQQD
Eyg4OTIyMzYxZGU3MTlkNDkzZTAzNmQ2YjRjMDYwODI0MjIwMTYxZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiGL1tRfGscjGx3Llb2KpuDrEKJQ
169/auTkIlEfZATtSRxnvmbDwF/tlvqlM96n07xCX/odAQ3txnsMlzGHX6zHUqKW
cxRUWrIUR9EfqhBIHAL7iicRO4T9NqL3Ot326DcLuRw6JwEk73PCImVdJUiNS6Hd
xfS5edzBEywKkfFHva4tr4zqOkDjvma6RR3EeG+HjJ7ObVpd2b5PlD8w0L+qolxc
ovTjiZ5N7y0huUccZZS3Evv4wzg5/47i6jMRgZorHBq5sPbTqdGJlKXdu4hHi85U
MYbGio/9ADitqmaLZUrDdaEjBEsRNWhCbe3s62LsOdUNBwOsEvbkABpEIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkiNh3nGdST4DbWtMBggkIgFh8cMB8GA1UdIwQY
MBaAFPCpW3iwV2UBJ479fgICabofBtOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEt
YmRkZWY2MGNmOWQ4LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85MmM4OWMtNDQ5My00NGRjLTgyNjEtYmRkZWY2MGNmOWQ4
LzEvOEtsYmVMQlhaUUVuanYxLUFnSnB1aDhHMDRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVztXLeda
O8b0F7EzDsqUPr7a3bygUHU27jd+HzTYnyK/K/RqxvgQN2RwL4yqkyAribFj9dwK
ZhxJua1xQlhjFgBnajnHXXzGX9o5BTZAHOdISbgDjztA6tHjyfGC738HglJhy8G6
CQkZ44K/ZyvhVmczg0PAxMy1nn1QnAZQ97z2Ps3v5nq904TFAtz+5f0MDqw6SgB8
bsK7Gh737e5wFdrpn/eL6DsQ3TuTx4vcP4nmw24Ud3i84Sv/Yu1M8zoQEW4LtyAg
esVFTS4iLmBq6x808vY6dLwCQM50BvsWr50qCXo4/M0rCNhu6FR4ACToH2njIkmg
3tKZDgwIhjBelg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:46:16 2025 by rpki-client