Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: zTaXAvDqIJMoH0TE8jtXMkFA3iBePhQVhML7LNn6M48=
Subject key identifier: 9D:94:A7:FB:FC:6A:57:CA:D8:45:F6:FA:4B:64:42:AF:11:81:B3:FC
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 0196839170FD503AD5505231668B5CF6F245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 114A
Signing time: Tue 29 Apr 2025 22:01:09 +0000
Manifest this update: Tue 29 Apr 2025 22:01:09 +0000
Manifest next update: Wed 30 Apr 2025 22:01:09 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: HHWfG9JJSN2iclaXFyFu6Ku1UH9AnXUn1Kf6aE8O6s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:70:fd:50:3a:d5:50:52:31:66:8b:5c:f6:f2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Apr 29 22:01:09 2025 GMT
Not After : Apr 30 22:01:09 2025 GMT
Subject: CN=9d94a7fbfc6a57cad845f6fa4b6442af1181b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:03:53:2b:61:a9:9c:48:bb:a5:a0:d4:b5:
0e:da:b4:56:54:85:9a:30:d1:be:90:b2:70:36:64:
51:6c:33:13:d4:f0:8a:eb:0b:83:7c:aa:5c:24:dc:
32:90:3c:29:ce:58:e5:46:40:00:00:49:2e:09:ae:
66:54:b4:c4:63:d9:f0:f0:9a:a5:24:cc:c9:11:03:
4d:6b:70:cb:15:34:a2:44:fc:d0:75:f7:7c:db:51:
fd:b4:c0:f2:bc:e5:17:88:24:d8:10:54:02:3c:f9:
4c:57:1c:77:6c:76:6d:53:12:6e:da:d9:3a:1c:90:
ef:e0:3f:f5:a1:80:66:c3:42:c5:78:d8:5e:7f:bc:
62:b7:30:9b:ff:15:05:79:5d:43:a6:3b:6a:5f:29:
b8:86:ce:24:a2:e4:69:58:a7:87:26:2a:8d:52:ab:
35:9d:5e:26:1c:46:01:75:79:a7:00:c6:22:da:11:
c2:95:3d:52:6b:a3:32:cf:98:3b:3b:76:3c:75:2d:
c9:05:8f:c9:cd:25:8f:72:27:4e:9a:1d:08:a2:97:
a4:68:86:77:c8:6f:d3:e8:92:28:33:c3:08:ed:65:
be:55:03:4e:18:05:24:7c:80:aa:f1:79:fb:54:c6:
80:96:fc:c5:1c:59:1a:53:c3:4e:bd:24:a6:ba:a2:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:94:A7:FB:FC:6A:57:CA:D8:45:F6:FA:4B:64:42:AF:11:81:B3:FC
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ce:c6:de:84:76:5b:ba:b0:3e:32:75:ac:28:a0:8c:33:ed:
74:64:ab:0b:6a:7e:a2:df:20:24:72:c2:07:90:fd:8b:37:67:
39:c2:50:d2:bd:91:c7:64:1d:7b:4a:ca:91:2d:56:d6:5e:9a:
fa:75:a7:f1:29:d2:cd:f9:01:2b:f1:3c:dc:76:db:78:17:f9:
86:c6:47:b3:c4:0a:f1:26:b2:e3:30:d7:e7:20:3d:1e:8a:6d:
cf:da:f8:e6:ff:f1:be:d1:7a:8c:f6:c7:4a:7a:23:30:af:d5:
62:0f:f8:3c:ef:06:3b:c7:ec:25:aa:d9:20:fb:1f:f7:04:db:
a7:11:a5:9b:3b:d9:a3:50:4b:44:fc:67:75:1c:00:be:8c:db:
84:5b:b8:2f:f6:60:58:d7:9f:f1:ad:aa:ef:db:19:3b:f5:9e:
8a:e1:ad:33:2b:ba:2a:d0:e0:33:27:ef:e4:0c:b9:c5:82:21:
57:a0:8d:8d:0b:f6:1d:06:a8:d6:2c:fd:c2:10:db:75:29:c7:
38:1f:e7:66:5f:b8:17:f3:77:d6:0a:3e:f9:aa:65:a8:4f:bf:
0a:e2:79:f5:cb:e4:2a:07:1c:a5:60:e1:49:2d:64:b0:04:39:
18:09:a5:7b:69:7a:a0:74:37:9a:71:1f:f5:e6:1b:92:8c:11:
08:92:ea:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkXD9UDrVUFIxZotc9vJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4
OGQwNTcwHhcNMjUwNDI5MjIwMTA5WhcNMjUwNDMwMjIwMTA5WjAzMTEwLwYDVQQD
Eyg5ZDk0YTdmYmZjNmE1N2NhZDg0NWY2ZmE0YjY0NDJhZjExODFiM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCsDUythqZxIu6Wg1LUO2rRWVIWa
MNG+kLJwNmRRbDMT1PCK6wuDfKpcJNwykDwpzljlRkAAAEkuCa5mVLTEY9nw8Jql
JMzJEQNNa3DLFTSiRPzQdfd821H9tMDyvOUXiCTYEFQCPPlMVxx3bHZtUxJu2tk6
HJDv4D/1oYBmw0LFeNhef7xitzCb/xUFeV1DpjtqXym4hs4kouRpWKeHJiqNUqs1
nV4mHEYBdXmnAMYi2hHClT1Sa6Myz5g7O3Y8dS3JBY/JzSWPcidOmh0IopekaIZ3
yG/T6JIoM8MI7WW+VQNOGAUkfICq8Xn7VMaAlvzFHFkaU8NOvSSmuqJVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ2Up/v8alfK2EX2+ktkQq8RgbP8MB8GA1UdIwQY
MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt
OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2
LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM7G3oR2
W7qwPjJ1rCigjDPtdGSrC2p+ot8gJHLCB5D9izdnOcJQ0r2Rx2Qde0rKkS1W1l6a
+nWn8SnSzfkBK/E83HbbeBf5hsZHs8QK8Say4zDX5yA9Hoptz9r45v/xvtF6jPbH
SnojMK/VYg/4PO8GO8fsJarZIPsf9wTbpxGlmzvZo1BLRPxndRwAvozbhFu4L/Zg
WNef8a2q79sZO/WeiuGtMyu6KtDgMyfv5Ay5xYIhV6CNjQv2HQao1iz9whDbdSnH
OB/nZl+4F/N31go++aplqE+/CuJ59cvkKgccpWDhSS1ksAQ5GAmle2l6oHQ3mnEf
9eYbkowRCJLqCQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:39:01 2025 by rpki-client