Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
File: 1-G_kJ8_22FppXshlKKSDDLQIqBg.mft (raw, json)
Hash identifier: Nl+Ouu4NPo1jijb2j7sVj1/x6sGc1v1lnBlKD08u9oM=
Subject key identifier: 4E:D6:96:99:30:0D:37:18:F5:9F:05:65:0B:F0:B8:D0:F8:A9:81:2D
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 0196865B63C42F1997DC70AC3C753CA94843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
Manifest number: 1083
Signing time: Wed 30 Apr 2025 11:00:58 +0000
Manifest this update: Wed 30 Apr 2025 11:00:58 +0000
Manifest next update: Thu 01 May 2025 11:00:58 +0000
Files and hashes: 1: 1-G_kJ8_22FppXshlKKSDDLQIqBg.crl (hash: K0u4+MvNSmFvn6b81SbACvgn4mlhCp+0LbbrBT9Z56s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:63:c4:2f:19:97:dc:70:ac:3c:75:3c:a9:48:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Apr 30 11:00:58 2025 GMT
Not After : May 1 11:00:58 2025 GMT
Subject: CN=4ed69699300d3718f59f05650bf0b8d0f8a9812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:66:42:82:2e:53:bc:a8:81:09:bf:8e:a5:
40:74:33:66:5b:33:a7:57:3c:04:f9:c1:f6:ec:2a:
21:ce:0f:d5:b0:fc:80:07:f7:6a:27:4e:a5:88:43:
56:c2:4c:94:fa:3e:12:87:ad:10:6d:de:5f:37:dd:
04:1f:67:93:93:ab:f9:a7:99:87:1b:1e:bc:e4:0a:
e8:a5:f9:51:c0:54:45:da:d2:2e:47:c1:50:e0:86:
d9:e2:cf:14:f4:a8:46:b1:73:a1:75:30:56:dd:13:
a6:c0:40:0a:6f:56:00:ca:be:5b:81:57:7f:0e:bf:
6e:14:fd:71:e7:75:43:83:c5:6f:d3:36:80:d6:49:
f9:2f:87:d6:6b:c3:8d:b3:bc:9b:83:2d:9e:39:40:
2f:9a:94:97:c3:ce:45:31:c4:9a:b6:b3:da:93:fd:
a6:85:c5:37:9f:d7:93:fe:96:24:af:e1:da:d6:ba:
54:cb:21:df:67:50:f7:0d:21:d8:eb:30:b8:08:9f:
57:91:22:0b:a2:27:26:07:8c:db:ef:8c:8a:0e:2e:
1a:27:55:28:dc:71:7b:ce:c8:48:b3:c2:3d:af:33:
9d:9c:9f:f9:2e:48:29:f2:f0:24:5d:67:6f:49:f3:
8c:9f:bc:75:ac:60:44:ae:ea:96:2d:d3:f9:67:b1:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:96:99:30:0D:37:18:F5:9F:05:65:0B:F0:B8:D0:F8:A9:81:2D
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:27:52:c6:75:9d:42:fe:23:0f:5f:6c:ab:41:b9:93:13:59:
7d:0f:49:43:b7:4c:22:8f:4e:55:64:c8:51:ce:74:15:21:d1:
c6:58:d7:79:e5:fb:db:7c:28:c7:9a:ee:de:36:14:d0:3d:c2:
be:21:44:5c:f9:ba:a0:76:b9:87:69:dd:ff:a7:38:ad:d1:e8:
6e:ea:b8:dc:e3:43:54:02:e5:1c:01:15:bf:af:4c:98:cb:c9:
b3:0a:f0:78:63:fa:51:9e:8a:4f:18:f4:86:87:20:b0:2e:85:
a2:8a:24:39:bd:ce:6b:ff:7a:d4:1f:af:6c:fc:3a:fd:f3:eb:
a8:af:54:17:5a:ee:32:18:12:86:74:47:70:19:4d:81:4b:c6:
9d:31:b3:5f:74:a8:24:29:7f:de:c7:fb:45:e1:a9:dd:b0:a9:
fd:76:34:34:3b:79:c8:a4:03:2d:b5:83:b7:48:07:e0:90:1f:
79:73:66:0f:51:dc:e5:4d:0c:74:12:e4:86:ef:f2:df:fc:b7:
03:11:5a:7c:ca:f4:d6:bb:d3:e9:4c:29:b6:81:a3:fb:74:69:
f4:f4:c5:b4:d7:a9:d0:72:e1:93:78:3f:f6:a6:49:87:9f:f0:
e1:57:80:21:8b:c0:cc:fd:4a:aa:f6:be:2f:af:05:eb:e9:e2:
6a:1a:20:70
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaGW2PELxmX3HCsPHU8qUhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NmZlNDI3Y2ZmNmQ4NWE2OTVlYzg2NTI4YTQ4MzBjYjQw
OGE4MTgwHhcNMjUwNDMwMTEwMDU4WhcNMjUwNTAxMTEwMDU4WjAzMTEwLwYDVQQD
Eyg0ZWQ2OTY5OTMwMGQzNzE4ZjU5ZjA1NjUwYmYwYjhkMGY4YTk4MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH1mQoIuU7yogQm/jqVAdDNmWzOn
VzwE+cH27Cohzg/VsPyAB/dqJ06liENWwkyU+j4Sh60Qbd5fN90EH2eTk6v5p5mH
Gx685AropflRwFRF2tIuR8FQ4IbZ4s8U9KhGsXOhdTBW3ROmwEAKb1YAyr5bgVd/
Dr9uFP1x53VDg8Vv0zaA1kn5L4fWa8ONs7ybgy2eOUAvmpSXw85FMcSatrPak/2m
hcU3n9eT/pYkr+Ha1rpUyyHfZ1D3DSHY6zC4CJ9XkSILoicmB4zb74yKDi4aJ1Uo
3HF7zshIs8I9rzOdnJ/5Lkgp8vAkXWdvSfOMn7x1rGBEruqWLdP5Z7GQyQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFE7WlpkwDTcY9Z8FZQvwuND4qYEtMB8GA1UdIwQY
MBaAFPhv5CfP9thaaV7IZSikgwy0CKgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HX2tKOF8yMkZwcFhzaGxLS1NERExRSXFCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTkvOTA1Yzg4LTlkM2ItNDlkZS04OWU4
LTRkYmVmZDFmMmJmMC8xLzEtR19rSjhfMjJGcHBYc2hsS0tTRERMUUlxQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk5LzkwNWM4OC05ZDNiLTQ5ZGUtODllOC00ZGJlZmQxZjJi
ZjAvMS8xLUdfa0o4XzIyRnBwWHNobEtLU0RETFFJcUJnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARydS
xnWdQv4jD19sq0G5kxNZfQ9JQ7dMIo9OVWTIUc50FSHRxljXeeX723wox5ru3jYU
0D3CviFEXPm6oHa5h2nd/6c4rdHobuq43ONDVALlHAEVv69MmMvJswrweGP6UZ6K
Txj0hocgsC6FoookOb3Oa/961B+vbPw6/fPrqK9UF1ruMhgShnRHcBlNgUvGnTGz
X3SoJCl/3sf7ReGp3bCp/XY0NDt5yKQDLbWDt0gH4JAfeXNmD1Hc5U0MdBLkhu/y
3/y3AxFafMr01rvT6UwptoGj+3Rp9PTFtNep0HLhk3g/9qZJh5/w4VeAIYvAzP1K
qva+L68F6+niahogcA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:34:04 2025 by rpki-client