Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier: Up+bcj/cAHxb/RDpmeCrRZBRedA0URNFRtVGvhkptg4=
Subject key identifier: 11:35:BB:B2:9A:A3:A8:09:3B:03:85:CB:94:29:F3:EA:B4:F2:23:C8
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer: /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial: 019680221EAEB65756E65F1005802F2CE757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number: 1512
Signing time: Tue 29 Apr 2025 06:00:41 +0000
Manifest this update: Tue 29 Apr 2025 06:00:41 +0000
Manifest next update: Wed 30 Apr 2025 06:00:41 +0000
Files and hashes: 1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: 3esetMRgOx5N0PI0U7yXgi0ljkK3IWpeRY3dZSVi9Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:1e:ae:b6:57:56:e6:5f:10:05:80:2f:2c:e7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Validity
Not Before: Apr 29 06:00:41 2025 GMT
Not After : Apr 30 06:00:41 2025 GMT
Subject: CN=1135bbb29aa3a8093b0385cb9429f3eab4f223c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:35:09:5c:4a:7b:f7:61:1c:6a:d7:52:7a:3b:
da:1b:f6:8f:4f:95:07:c2:63:8b:5d:06:74:ea:ae:
ce:34:d5:e6:a4:57:fb:a4:32:e6:f2:7d:28:a8:ae:
47:c2:88:c0:f4:57:84:dc:c1:4e:15:fb:70:39:9f:
72:2c:e3:d0:6a:80:e0:13:ed:49:bb:47:2c:4d:9a:
cc:98:3c:f9:e5:95:03:62:9f:25:c3:dd:db:18:18:
61:65:e3:d8:35:ce:d4:5d:07:27:70:86:75:a5:fc:
41:bb:94:7c:53:a9:64:dd:61:a1:f0:e1:d5:09:cb:
8d:8c:15:0e:5d:e9:76:bc:c0:0a:da:78:1e:08:9f:
bc:88:b0:3c:6a:a1:3c:67:a4:95:8a:13:39:a7:9e:
9d:18:06:f7:26:1a:1e:1d:b3:3b:00:43:03:e5:49:
2a:1e:6c:35:3a:43:79:fd:b5:91:38:11:32:fe:96:
2b:24:8c:c3:b2:7a:1a:89:d5:e6:65:c7:b2:72:82:
51:47:09:f0:e1:8f:0a:61:fa:13:ca:ad:5f:3d:f4:
00:f3:fc:c5:05:75:c4:75:9c:8c:1f:54:cb:3f:34:
2a:92:3c:4c:b4:82:a8:2d:4d:8d:a8:a0:4d:50:28:
a7:2e:8d:22:ee:34:7e:8b:b8:94:cc:8a:63:3a:75:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:BB:B2:9A:A3:A8:09:3B:03:85:CB:94:29:F3:EA:B4:F2:23:C8
X509v3 Authority Key Identifier:
keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9c:7e:ef:9b:f2:a7:6b:49:95:c6:6f:d0:2b:0b:79:7b:48:
97:c3:e5:6c:d0:88:04:93:90:60:9a:c3:f7:5e:a2:44:be:9d:
ca:5c:6a:7c:f9:14:ed:96:f9:1d:2a:be:43:a6:f7:ae:c3:b7:
d3:34:1e:b2:6a:67:29:54:2f:93:a6:ae:96:21:ca:24:94:01:
a6:12:1e:3a:2d:39:e7:58:50:6b:a6:12:36:f7:33:5d:92:c6:
ea:57:1c:19:b1:d3:e8:fa:da:02:0f:ac:8b:67:8a:63:3b:c2:
7f:6c:3b:f9:f9:ec:59:be:08:a2:7c:f3:0f:4a:93:f3:3b:af:
b5:71:a5:81:f1:bb:1b:44:99:49:7f:4c:b6:28:66:f5:a0:44:
86:ba:88:8d:ef:28:ed:c6:fb:c1:c6:82:46:58:91:ef:cf:51:
05:17:25:2e:ef:5f:cb:7d:1d:28:12:d9:40:d2:6b:90:94:d5:
af:c6:83:01:91:6c:19:39:04:4d:a1:cc:84:d4:e2:a8:26:e3:
1f:ba:a6:24:69:4f:b1:fe:ff:7b:c1:7f:0c:ce:c7:d9:7c:8c:
83:f8:ce:26:0e:06:36:66:94:77:40:5d:8c:a9:ab:ee:41:1e:
20:7c:1e:f7:a6:43:01:32:24:fe:3b:bd:b0:05:5a:ba:5a:01:
04:b2:77:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIh6utldW5l8QBYAvLOdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmOTdmMWVjYTRjOGM0ZjAwYzI2NTUzMjU3ZGNkMjJiZTYw
OTMyZTQwHhcNMjUwNDI5MDYwMDQxWhcNMjUwNDMwMDYwMDQxWjAzMTEwLwYDVQQD
EygxMTM1YmJiMjlhYTNhODA5M2IwMzg1Y2I5NDI5ZjNlYWI0ZjIyM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8zUJXEp792EcatdSejvaG/aPT5UH
wmOLXQZ06q7ONNXmpFf7pDLm8n0oqK5HwojA9FeE3MFOFftwOZ9yLOPQaoDgE+1J
u0csTZrMmDz55ZUDYp8lw93bGBhhZePYNc7UXQcncIZ1pfxBu5R8U6lk3WGh8OHV
CcuNjBUOXel2vMAK2ngeCJ+8iLA8aqE8Z6SVihM5p56dGAb3JhoeHbM7AEMD5Ukq
Hmw1OkN5/bWROBEy/pYrJIzDsnoaidXmZceycoJRRwnw4Y8KYfoTyq1fPfQA8/zF
BXXEdZyMH1TLPzQqkjxMtIKoLU2NqKBNUCinLo0i7jR+i7iUzIpjOnVseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBE1u7Kao6gJOwOFy5Qp8+q08iPIMB8GA1UdIwQY
MBaAFP+X8eykyMTwDCZVMlfc0ivmCTLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMt
ZjljNzVhZDNhZWQzLzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9lNTgzODYtYmNmOC00ODI2LTk1ZWMtZjljNzVhZDNhZWQz
LzEvXzVmeDdLVEl4UEFNSmxVeVY5elNLLVlKTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJx+75vy
p2tJlcZv0CsLeXtIl8PlbNCIBJOQYJrD916iRL6dylxqfPkU7Zb5HSq+Q6b3rsO3
0zQesmpnKVQvk6auliHKJJQBphIeOi0551hQa6YSNvczXZLG6lccGbHT6PraAg+s
i2eKYzvCf2w7+fnsWb4IonzzD0qT8zuvtXGlgfG7G0SZSX9Mtihm9aBEhrqIje8o
7cb7wcaCRliR789RBRclLu9fy30dKBLZQNJrkJTVr8aDAZFsGTkETaHMhNTiqCbj
H7qmJGlPsf7/e8F/DM7H2XyMg/jOJg4GNmaUd0BdjKmr7kEeIHwe96ZDATIk/ju9
sAVauloBBLJ3oQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:53 2025 by rpki-client