Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json)
Hash identifier: cYLmTFNO9baoIECJI8t3pW7wxYUUKqyyoURRctNgKw4=
Subject key identifier: ED:DE:9B:67:D4:7C:5A:57:DC:A7:2A:90:96:3A:56:78:EA:C6:B1:56
Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Certificate serial: 019674C2718BCC5845C30025DF2B4CFF3051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 01:00:22 +0000
Manifest this update: Sun 27 Apr 2025 01:00:22 +0000
Manifest next update: Mon 28 Apr 2025 01:00:22 +0000
Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: c59+4in8jyYAqxqPyIUxbzy27qrcUCuhRm/XOYvakAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:71:8b:cc:58:45:c3:00:25:df:2b:4c:ff:30:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825
Validity
Not Before: Apr 27 01:00:22 2025 GMT
Not After : Apr 28 01:00:22 2025 GMT
Subject: CN=edde9b67d47c5a57dca72a90963a5678eac6b156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:2a:ed:e1:85:1b:c8:18:b3:66:3e:9a:56:
b7:ea:dd:02:5d:15:0b:15:20:49:aa:3e:61:1f:61:
1a:49:81:0e:5b:01:a4:80:45:aa:3b:32:03:14:fd:
41:27:14:d6:24:e6:b7:d1:35:13:c7:4d:b9:fd:fb:
49:21:1e:df:9a:31:59:d0:a7:97:b2:a3:62:96:e5:
53:80:8d:ad:01:93:24:13:7d:45:c5:67:e7:df:7b:
47:a9:25:ef:35:04:4c:db:fa:1e:f6:1c:a1:d9:4f:
b7:cb:cc:ad:e7:f9:4f:6d:b6:86:ed:c9:cd:3f:76:
bf:0a:c9:ff:d9:d5:94:91:56:b3:7d:73:dc:e3:a7:
9b:e0:24:25:bb:21:ba:0e:f1:23:cd:b2:eb:08:f3:
96:e5:e7:72:7e:d5:f6:89:cc:cf:ec:88:7a:2d:03:
52:ed:e0:0b:68:b5:f9:ed:ba:fd:32:d8:e8:ba:87:
85:f9:e7:35:d1:60:18:1a:a6:8a:80:ee:6f:55:8c:
e1:80:d1:37:6f:27:6d:26:9a:d2:ba:86:4e:c9:75:
02:6f:f9:a5:57:13:94:7a:1f:74:f3:53:cd:72:b0:
3b:f3:5c:b7:4a:57:c6:82:7f:8b:ac:22:c3:bf:a6:
c3:13:d0:b0:fb:db:ed:67:f3:41:98:68:8e:e4:65:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DE:9B:67:D4:7C:5A:57:DC:A7:2A:90:96:3A:56:78:EA:C6:B1:56
X509v3 Authority Key Identifier:
keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f0:d1:e4:64:48:a8:5e:35:ae:5e:ca:e1:0a:29:02:11:0f:
10:59:dd:6e:65:70:1d:cf:50:4f:be:10:9f:5d:72:a8:67:49:
9a:0a:1d:7c:e9:1e:56:ae:f9:f1:bf:d9:f7:10:f5:a2:55:68:
dc:1b:5a:da:95:fc:ef:0c:23:3f:ad:14:3c:4f:86:ad:e9:cc:
3c:88:f4:4c:b6:b5:24:78:1c:a3:03:d6:0e:6a:98:82:be:b6:
fa:0b:06:d6:f8:3e:dc:0b:03:82:cc:a3:ab:21:8c:2e:7b:77:
c2:43:a7:9e:a0:69:6d:aa:07:3a:dd:1c:06:35:a1:7c:c1:70:
ca:e8:50:01:cf:c3:a3:50:f5:f8:02:95:b1:e0:8a:ba:83:9d:
24:95:d4:2b:a8:f5:32:59:62:ef:4a:19:ad:f4:a5:7d:38:1d:
2d:9e:a6:2a:16:fd:4e:ef:09:83:cf:52:ba:ae:3f:01:65:33:
b8:e8:27:18:22:1a:d4:b5:c1:f9:f0:11:43:fa:e3:d7:5e:ce:
65:44:96:07:01:36:52:22:da:42:4b:9f:df:b7:73:00:d7:25:
77:44:2d:4d:37:35:51:f2:14:21:7b:ab:9c:26:cc:2b:ca:0c:
df:aa:23:d3:0b:39:43:e0:0c:b3:5c:a1:2d:9e:aa:ac:e9:8d:
d9:98:6a:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0wnGLzFhFwwAl3ytM/zBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NjYwMjVkOTM5ZTBjN2IxY2Y0NmMwMjE5ZWNmYTI1YTE5
NTM4MjUwHhcNMjUwNDI3MDEwMDIyWhcNMjUwNDI4MDEwMDIyWjAzMTEwLwYDVQQD
EyhlZGRlOWI2N2Q0N2M1YTU3ZGNhNzJhOTA5NjNhNTY3OGVhYzZiMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/gq7eGFG8gYs2Y+mla36t0CXRUL
FSBJqj5hH2EaSYEOWwGkgEWqOzIDFP1BJxTWJOa30TUTx025/ftJIR7fmjFZ0KeX
sqNiluVTgI2tAZMkE31FxWfn33tHqSXvNQRM2/oe9hyh2U+3y8yt5/lPbbaG7cnN
P3a/Csn/2dWUkVazfXPc46eb4CQluyG6DvEjzbLrCPOW5edyftX2iczP7Ih6LQNS
7eALaLX57br9MtjouoeF+ec10WAYGqaKgO5vVYzhgNE3bydtJprSuoZOyXUCb/ml
VxOUeh9081PNcrA781y3SlfGgn+LrCLDv6bDE9Cw+9vtZ/NBmGiO5GUy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3em2fUfFpX3KcqkJY6VnjqxrFWMB8GA1UdIwQY
MBaAFBdmAl2Tngx7HPRsAhns+iWhlTglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1Yjct
ZTI4MzUyZTc5ZjdkLzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1YjctZTI4MzUyZTc5Zjdk
LzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/DR5GRI
qF41rl7K4QopAhEPEFndbmVwHc9QT74Qn11yqGdJmgodfOkeVq758b/Z9xD1olVo
3Bta2pX87wwjP60UPE+GrenMPIj0TLa1JHgcowPWDmqYgr62+gsG1vg+3AsDgsyj
qyGMLnt3wkOnnqBpbaoHOt0cBjWhfMFwyuhQAc/Do1D1+AKVseCKuoOdJJXUK6j1
Mlli70oZrfSlfTgdLZ6mKhb9Tu8Jg89Suq4/AWUzuOgnGCIa1LXB+fARQ/rj117O
ZUSWBwE2UiLaQkuf37dzANcld0QtTTc1UfIUIXurnCbMK8oM36oj0ws5Q+AMs1yh
LZ6qrOmN2Zhqbg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:07 2025 by rpki-client