Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: haGWqx5zMHokHrNhVNV9Ok/ZnssfLEKz1jmlPywPH6o=
Subject key identifier: 8F:B3:90:17:35:A0:21:FB:44:8F:86:3D:2E:7A:24:2F:21:F3:E1:7E
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 0196741D810DCEE363D0F7F1F55F6C992D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 086A
Signing time: Sat 26 Apr 2025 22:00:12 +0000
Manifest this update: Sat 26 Apr 2025 22:00:12 +0000
Manifest next update: Sun 27 Apr 2025 22:00:12 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: 3DMWQl5UZrRoT1bJtrMTcwfYpWhRRwI/A6C4EymfLfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:81:0d:ce:e3:63:d0:f7:f1:f5:5f:6c:99:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Apr 26 22:00:12 2025 GMT
Not After : Apr 27 22:00:12 2025 GMT
Subject: CN=8fb3901735a021fb448f863d2e7a242f21f3e17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:56:4c:22:68:13:98:68:40:0a:ff:ec:7a:
f9:0e:dc:e9:a3:68:ab:75:99:fc:aa:6a:5c:13:96:
a9:e8:e5:df:80:d3:76:53:1b:62:55:6e:1b:be:34:
4e:a1:c0:49:29:42:bc:88:94:1e:7d:a2:5e:ed:fa:
b8:49:c0:9a:85:96:8a:d2:bc:2a:3f:b7:91:b5:39:
fb:c5:59:c5:04:fb:26:3f:59:ca:62:2f:a0:91:59:
5a:2e:2e:e4:24:5e:59:dc:a3:1d:d4:76:a3:f7:79:
88:db:9f:32:11:18:cc:07:cd:06:89:58:a2:cd:43:
32:1f:74:bc:b9:fa:38:2f:79:33:4a:8b:95:37:2f:
5c:e1:b1:df:02:08:de:2c:5a:6e:3e:8d:8a:86:78:
c9:9f:8d:93:4f:cb:8e:5e:12:4a:c8:ab:69:73:66:
f1:43:a9:bb:cf:0b:0f:3e:14:23:cb:ad:ba:89:60:
bf:28:15:d5:1a:59:ca:ba:1e:6b:19:4c:01:89:24:
04:e2:3c:63:80:f6:ca:ba:57:ff:7f:7e:26:f8:cc:
02:a8:61:87:ef:13:40:80:21:6d:b4:54:6a:6f:ca:
f5:c2:bf:fd:94:c1:d6:41:9a:54:11:14:5e:37:b7:
2d:d4:c7:99:88:a7:06:f2:d7:45:92:e9:bb:ea:c2:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:90:17:35:A0:21:FB:44:8F:86:3D:2E:7A:24:2F:21:F3:E1:7E
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:10:59:99:a8:e4:c7:f3:a6:b7:d5:94:e1:24:13:fc:6b:77:
56:6a:ad:53:64:b9:97:a6:80:f9:3e:b5:ab:70:e7:0a:40:24:
5e:70:e3:c2:1c:73:b8:3a:e6:36:b1:b5:5d:b4:65:8d:22:3f:
0f:75:4a:ed:c0:74:b0:be:cd:92:e1:fb:d6:0d:17:56:6a:59:
68:36:4d:57:8d:44:27:b6:92:5c:e4:2b:dc:c9:9f:7d:7e:a9:
e3:79:fc:04:a5:41:9b:fe:71:4e:93:74:d2:92:39:03:0f:a6:
b9:2b:73:44:a1:ec:34:3b:ad:cc:c8:6f:91:eb:79:c1:b4:74:
9a:1f:dd:63:30:59:a2:f5:73:c3:5a:8a:49:4d:3a:41:a7:c8:
b1:5f:b8:13:0f:c9:76:1d:39:81:bb:07:76:d6:a8:b6:54:b0:
b7:6f:21:a6:3a:2c:79:53:00:46:fe:38:da:cf:80:2f:60:16:
d5:29:be:78:7e:bd:89:72:8c:48:19:97:7e:fd:c7:86:69:69:
02:0f:07:7e:cb:d0:34:fe:29:2f:23:86:07:a1:f6:c4:3d:06:
72:3f:96:4a:55:6b:44:c4:7e:f8:1c:d5:53:e8:25:07:88:27:
eb:6c:8b:b0:64:15:7e:44:56:23:ac:d2:0a:54:f8:f8:5d:e0:
85:98:da:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0HYENzuNj0Pfx9V9smS2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjUwNDI2MjIwMDEyWhcNMjUwNDI3MjIwMDEyWjAzMTEwLwYDVQQD
Eyg4ZmIzOTAxNzM1YTAyMWZiNDQ4Zjg2M2QyZTdhMjQyZjIxZjNlMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdlWTCJoE5hoQAr/7Hr5Dtzpo2ir
dZn8qmpcE5ap6OXfgNN2UxtiVW4bvjROocBJKUK8iJQefaJe7fq4ScCahZaK0rwq
P7eRtTn7xVnFBPsmP1nKYi+gkVlaLi7kJF5Z3KMd1Haj93mI258yERjMB80GiVii
zUMyH3S8ufo4L3kzSouVNy9c4bHfAgjeLFpuPo2KhnjJn42TT8uOXhJKyKtpc2bx
Q6m7zwsPPhQjy626iWC/KBXVGlnKuh5rGUwBiSQE4jxjgPbKulf/f34m+MwCqGGH
7xNAgCFttFRqb8r1wr/9lMHWQZpUERReN7ct1MeZiKcG8tdFkum76sIC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+zkBc1oCH7RI+GPS56JC8h8+F+MB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxBZmajk
x/Omt9WU4SQT/Gt3VmqtU2S5l6aA+T61q3DnCkAkXnDjwhxzuDrmNrG1XbRljSI/
D3VK7cB0sL7NkuH71g0XVmpZaDZNV41EJ7aSXOQr3MmffX6p43n8BKVBm/5xTpN0
0pI5Aw+muStzRKHsNDutzMhvket5wbR0mh/dYzBZovVzw1qKSU06QafIsV+4Ew/J
dh05gbsHdtaotlSwt28hpjoseVMARv442s+AL2AW1Sm+eH69iXKMSBmXfv3Hhmlp
Ag8HfsvQNP4pLyOGB6H2xD0Gcj+WSlVrRMR++BzVU+glB4gn62yLsGQVfkRWI6zS
ClT4+F3ghZjarw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:51 2025 by rpki-client