Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
File: 2Gcf4VfnflYoTFTVLi3w1_4609k.mft (raw, json)
Hash identifier: UT1VisCvUI+0wkARtrUZ7ql7YIOs96wmBQ/xeBbIUpU=
Subject key identifier: BD:34:EA:02:BD:A1:87:B1:33:51:E6:FF:4C:26:7D:AF:2D:73:F3:3E
Authority key identifier: D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
Certificate issuer: /CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Certificate serial: 01967D20B0A0C4464C9ADE9FD65A286A458A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
Manifest number: 11A4
Signing time: Mon 28 Apr 2025 16:00:16 +0000
Manifest this update: Mon 28 Apr 2025 16:00:16 +0000
Manifest next update: Tue 29 Apr 2025 16:00:16 +0000
Files and hashes: 1: 2Gcf4VfnflYoTFTVLi3w1_4609k.crl (hash: Pr3H19Cr4tpq0wulaabN5yAloGuaVf3w14Wg3E71taE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:20:b0:a0:c4:46:4c:9a:de:9f:d6:5a:28:6a:45:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8671fe157e77e56284c54d52e2df0d7fe3ad3d9
Validity
Not Before: Apr 28 16:00:16 2025 GMT
Not After : Apr 29 16:00:16 2025 GMT
Subject: CN=bd34ea02bda187b13351e6ff4c267daf2d73f33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:e6:e6:48:99:c7:85:b6:3a:e7:9a:73:7e:
67:cf:68:99:2e:e2:71:26:64:ea:c8:71:06:b9:e3:
37:45:8c:32:96:53:95:b1:4b:b1:ca:a1:31:0b:22:
24:18:04:8d:fb:1e:5d:c0:5f:22:9c:bd:eb:40:fb:
72:ea:31:28:e3:e6:bf:f4:38:77:9f:6f:8d:b8:45:
a1:50:c5:aa:b6:7e:43:6e:fa:ba:ee:41:09:92:f4:
58:b2:35:5c:88:2a:86:9c:b2:e5:74:9f:a4:a8:d1:
74:1a:3a:6a:39:f8:de:85:77:8f:8e:f6:b6:de:d1:
22:27:2d:6b:00:77:80:dd:7a:96:92:62:44:11:c6:
fd:26:04:11:99:08:34:f7:6f:ea:1b:30:c2:03:b6:
02:6c:6e:db:45:02:99:63:54:d6:e1:cb:a0:af:83:
d1:cf:bf:5a:1b:35:3d:0e:57:b3:0d:f6:50:5c:74:
38:e2:0a:62:f3:d7:bc:ef:c9:ab:50:8c:d8:8e:ee:
6a:82:fd:e1:21:c7:4f:e8:0d:34:06:e3:e6:27:b4:
d2:cb:4b:08:a3:0a:cc:f5:09:0d:83:13:f0:5d:8a:
c6:b0:82:e1:bd:63:d9:17:87:73:67:e7:59:24:c3:
bb:14:5b:35:c6:bc:df:a9:5a:46:0e:6a:56:67:8a:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:34:EA:02:BD:A1:87:B1:33:51:E6:FF:4C:26:7D:AF:2D:73:F3:3E
X509v3 Authority Key Identifier:
keyid:D8:67:1F:E1:57:E7:7E:56:28:4C:54:D5:2E:2D:F0:D7:FE:3A:D3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Gcf4VfnflYoTFTVLi3w1_4609k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/768b72-2a77-42b9-8b0c-1eabffaaff19/1/2Gcf4VfnflYoTFTVLi3w1_4609k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:77:b5:b3:7c:e8:b1:9f:1a:b8:fd:0f:27:6d:21:68:62:61:
69:05:9c:08:f9:a5:12:ed:b4:ff:a4:02:aa:9e:eb:45:01:4f:
7d:e8:8c:fa:9f:4d:8e:a5:19:ac:05:e7:f9:bd:4e:26:2e:dc:
a6:cd:b2:6b:d2:4e:d1:f2:7c:dc:a8:c8:2a:c2:be:9e:27:74:
ec:69:64:68:8f:aa:90:15:52:2b:fd:82:11:75:c1:c7:5a:1f:
8e:8c:e5:55:4a:75:73:df:d3:85:58:d3:bc:78:17:b4:49:11:
28:06:16:27:35:a7:f8:b0:3a:83:34:69:47:e3:0d:5c:33:35:
b2:50:37:61:3d:80:1c:63:12:52:05:96:b0:1b:a9:24:b1:4a:
46:4f:e3:14:fc:33:3d:fe:5a:b7:58:74:72:29:00:56:d5:7b:
22:15:af:b3:1b:87:b9:0a:00:c9:f3:b4:57:12:95:74:d5:cb:
96:de:ad:12:c6:4d:9e:77:4b:b9:aa:99:63:55:6f:fd:d3:1a:
74:e0:cc:49:24:fa:76:d8:f7:02:8d:42:5b:0d:89:3b:6f:b1:
4b:c9:84:40:df:66:0f:fa:98:6f:31:57:35:60:c6:08:49:9a:
b1:d5:b7:44:e4:92:2e:e5:f3:3b:34:9b:a1:50:ab:2d:39:c0:
a5:56:2a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9ILCgxEZMmt6f1looakWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NjcxZmUxNTdlNzdlNTYyODRjNTRkNTJlMmRmMGQ3ZmUz
YWQzZDkwHhcNMjUwNDI4MTYwMDE2WhcNMjUwNDI5MTYwMDE2WjAzMTEwLwYDVQQD
EyhiZDM0ZWEwMmJkYTE4N2IxMzM1MWU2ZmY0YzI2N2RhZjJkNzNmMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAXm5kiZx4W2Oueac35nz2iZLuJx
JmTqyHEGueM3RYwyllOVsUuxyqExCyIkGASN+x5dwF8inL3rQPty6jEo4+a/9Dh3
n2+NuEWhUMWqtn5Dbvq67kEJkvRYsjVciCqGnLLldJ+kqNF0GjpqOfjehXePjva2
3tEiJy1rAHeA3XqWkmJEEcb9JgQRmQg092/qGzDCA7YCbG7bRQKZY1TW4cugr4PR
z79aGzU9DlezDfZQXHQ44gpi89e878mrUIzYju5qgv3hIcdP6A00BuPmJ7TSy0sI
owrM9QkNgxPwXYrGsILhvWPZF4dzZ+dZJMO7FFs1xrzfqVpGDmpWZ4rIOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL006gK9oYexM1Hm/0wmfa8tc/M+MB8GA1UdIwQY
MBaAFNhnH+FX535WKExU1S4t8Nf+OtPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMt
MWVhYmZmYWFmZjE5LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy83NjhiNzItMmE3Ny00MmI5LThiMGMtMWVhYmZmYWFmZjE5
LzEvMkdjZjRWZm5mbFlvVEZUVkxpM3cxXzQ2MDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3e1s3zo
sZ8auP0PJ20haGJhaQWcCPmlEu20/6QCqp7rRQFPfeiM+p9NjqUZrAXn+b1OJi7c
ps2ya9JO0fJ83KjIKsK+nid07GlkaI+qkBVSK/2CEXXBx1ofjozlVUp1c9/ThVjT
vHgXtEkRKAYWJzWn+LA6gzRpR+MNXDM1slA3YT2AHGMSUgWWsBupJLFKRk/jFPwz
Pf5at1h0cikAVtV7IhWvsxuHuQoAyfO0VxKVdNXLlt6tEsZNnndLuaqZY1Vv/dMa
dODMSST6dtj3Ao1CWw2JO2+xS8mEQN9mD/qYbzFXNWDGCEmasdW3ROSSLuXzOzSb
oVCrLTnApVYqqA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:39 2025 by rpki-client