Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: NINM+5yWddXNsTCO365zDfLYL/Z8gGAw1VG64Gggckw=
Subject key identifier: F4:34:12:2B:33:C0:13:04:5B:60:AD:82:4B:39:9E:0B:3C:D4:59:40
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 0196771EAD0CAB033D9F5C81CC084079D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 12:00:21 +0000
Manifest this update: Sun 27 Apr 2025 12:00:21 +0000
Manifest next update: Mon 28 Apr 2025 12:00:21 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: n5M+/hphf2TneZ6Sce/15V/NxUnFAqeXpADs6eAp664=)
2: QkxLvU8YDu4oULS0kxiCVhyfd8E.roa (hash: K9WP596tCXV0nIPIOmpyOTvsvplxAvnAucKosmkCUac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ad:0c:ab:03:3d:9f:5c:81:cc:08:40:79:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Apr 27 12:00:21 2025 GMT
Not After : Apr 28 12:00:21 2025 GMT
Subject: CN=f434122b33c013045b60ad824b399e0b3cd45940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:64:76:42:03:02:73:04:6e:7a:13:5d:dc:
62:d2:78:79:e5:b9:91:24:07:bf:0d:d2:aa:d6:a2:
ea:2a:ae:0e:94:0f:39:1c:c6:25:38:ab:ae:cb:1d:
a5:5e:77:e6:4d:a7:76:9e:27:91:29:d0:84:f1:a4:
5d:93:05:a8:ba:fd:88:5f:c5:59:1b:c2:ac:76:0d:
dd:fc:b8:5e:9d:13:05:0e:d6:8c:62:a0:a0:d1:b1:
8d:39:3e:1f:52:c2:b0:cb:41:9b:a0:62:b6:d3:fb:
d3:49:28:ab:6a:9b:e0:43:19:87:99:3f:49:9f:ce:
c7:16:17:ba:3b:5a:b8:df:0d:0d:5a:1c:af:c8:61:
fd:6e:72:0e:6b:e2:5f:6d:40:13:06:33:a4:86:3f:
5d:10:ed:d1:9c:e8:9d:37:49:c0:8e:9e:f1:48:64:
d5:ba:25:34:2a:9c:69:cd:18:b1:43:cf:de:f3:dc:
92:6e:9a:5c:89:da:2b:be:97:68:35:7f:b5:71:92:
45:71:48:c2:97:5f:dc:26:cd:23:bd:59:72:4e:cf:
76:a1:fc:3a:bc:b9:76:70:00:6d:8a:3d:ae:63:64:
2d:08:51:7a:eb:3f:8f:55:66:34:34:bb:ef:82:83:
ab:ad:3f:76:70:c9:dc:14:c3:b4:d3:16:54:a5:75:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:12:2B:33:C0:13:04:5B:60:AD:82:4B:39:9E:0B:3C:D4:59:40
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:d9:6c:fe:6f:67:a5:25:9f:07:b2:c0:3d:cf:62:0a:9f:
40:88:2a:4b:a3:4c:90:ac:4d:61:a8:65:1e:aa:db:13:f5:55:
9b:bb:ca:06:7a:d2:d3:aa:f4:8c:e7:38:4e:66:f2:6e:37:be:
36:85:8d:8a:59:0e:7b:d0:32:c7:56:d5:1c:83:c2:4f:8f:5c:
85:d8:7a:b6:84:4a:5a:47:8c:4e:30:cf:13:8d:bc:64:b7:d0:
ce:5e:d1:2b:bd:86:05:05:f8:43:52:a7:b6:fc:da:16:06:5b:
34:fc:42:fd:4d:30:22:68:7b:f9:aa:73:3d:6e:50:d1:0e:11:
d2:79:95:58:0b:7d:36:95:24:7b:dc:b6:6c:0f:fe:1d:26:da:
1a:5d:25:b3:9b:a1:79:a0:de:13:53:fd:8a:13:5b:5f:53:c4:
6e:dc:09:ad:c4:8b:e3:d4:50:5a:54:41:83:a3:e5:51:62:dc:
f1:46:2a:4e:4e:ba:1a:d9:8d:4d:98:cf:c7:c9:bf:2b:e9:93:
da:42:fa:ef:f5:05:d7:e6:80:6b:99:df:80:36:c6:e4:b6:3b:
ed:41:cf:31:85:c8:7e:9e:55:e4:45:9b:e7:47:c5:cc:1b:1e:
b7:dc:1a:48:46:04:5b:67:9e:f1:60:26:a5:70:d9:94:da:1d:
ad:9a:02:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3Hq0MqwM9n1yBzAhAedlXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1MzkwYjhkNjgwMjE4MDNlN2JlOWZjZjVlOGUxMzkz
YWMwNDMwHhcNMjUwNDI3MTIwMDIxWhcNMjUwNDI4MTIwMDIxWjAzMTEwLwYDVQQD
EyhmNDM0MTIyYjMzYzAxMzA0NWI2MGFkODI0YjM5OWUwYjNjZDQ1OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWdkdkIDAnMEbnoTXdxi0nh55bmR
JAe/DdKq1qLqKq4OlA85HMYlOKuuyx2lXnfmTad2nieRKdCE8aRdkwWouv2IX8VZ
G8Ksdg3d/LhenRMFDtaMYqCg0bGNOT4fUsKwy0GboGK20/vTSSirapvgQxmHmT9J
n87HFhe6O1q43w0NWhyvyGH9bnIOa+JfbUATBjOkhj9dEO3RnOidN0nAjp7xSGTV
uiU0KpxpzRixQ8/e89ySbppcidorvpdoNX+1cZJFcUjCl1/cJs0jvVlyTs92ofw6
vLl2cABtij2uY2QtCFF66z+PVWY0NLvvgoOrrT92cMncFMO00xZUpXUTvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ0EiszwBMEW2Ctgks5ngs81FlAMB8GA1UdIwQY
MBaAFAtaU5C41oAhgD576fz16OE5OsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEt
ZTdjZDE4ODU1ZTJjLzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy82MWNjNmUtMjFmNC00ZTljLWEzODEtZTdjZDE4ODU1ZTJj
LzEvQzFwVGtMaldnQ0dBUG52cF9QWG80VGs2d0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+XZbP5v
Z6UlnweywD3PYgqfQIgqS6NMkKxNYahlHqrbE/VVm7vKBnrS06r0jOc4Tmbybje+
NoWNilkOe9Ayx1bVHIPCT49chdh6toRKWkeMTjDPE428ZLfQzl7RK72GBQX4Q1Kn
tvzaFgZbNPxC/U0wImh7+apzPW5Q0Q4R0nmVWAt9NpUke9y2bA/+HSbaGl0ls5uh
eaDeE1P9ihNbX1PEbtwJrcSL49RQWlRBg6PlUWLc8UYqTk66GtmNTZjPx8m/K+mT
2kL67/UF1+aAa5nfgDbG5LY77UHPMYXIfp5V5EWb50fFzBset9waSEYEW2ee8WAm
pXDZlNodrZoCag==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:27 2025 by rpki-client