Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: xSgbrHlJT2Z+c26TlNTicMi+3RTPTmZ20uOcmz1JfyE=
Subject key identifier: E2:71:CD:8C:93:8C:81:3C:19:4C:93:27:D5:9C:B0:E4:A7:70:B5:01
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 019678684A26DEEA59D7CE0050DA55B16949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 18:00:22 +0000
Manifest this update: Sun 27 Apr 2025 18:00:22 +0000
Manifest next update: Mon 28 Apr 2025 18:00:22 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: 1PLZr2TCAPGHir27syLDmAiRekysZXBIYc74vmaj4n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:4a:26:de:ea:59:d7:ce:00:50:da:55:b1:69:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Apr 27 18:00:22 2025 GMT
Not After : Apr 28 18:00:22 2025 GMT
Subject: CN=e271cd8c938c813c194c9327d59cb0e4a770b501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:77:8a:f6:f9:83:da:2d:b5:a1:51:6e:09:
ba:9b:de:bd:a8:28:93:d1:b3:e1:10:25:db:f9:4d:
f3:75:a5:26:bc:61:75:a6:f3:eb:06:54:93:b5:cc:
6d:7d:e9:7a:b3:30:05:97:66:fa:bc:1d:5c:27:05:
e7:8c:96:93:7f:86:50:18:d5:74:c0:8a:9a:c5:7e:
61:f1:d9:5c:35:ed:ec:03:be:67:33:c3:01:31:7e:
23:a8:bb:4b:13:76:9b:70:d3:48:6f:cf:fa:f8:0f:
81:73:be:de:85:e5:1a:7a:a7:30:5a:41:27:62:ae:
8b:22:79:cd:32:55:9c:8a:a3:94:c7:95:b5:37:39:
76:2e:06:7e:76:bc:67:54:ef:e5:f0:03:76:2f:9b:
b1:62:cb:0f:dc:55:48:a6:a3:41:5f:cc:8c:23:db:
99:13:39:5f:60:76:e6:c1:ac:3a:f6:c8:db:ac:99:
63:d0:06:a4:8d:f9:89:1b:bf:70:58:b1:61:ee:0d:
78:74:b7:30:69:82:9e:ed:90:c6:97:8f:ce:06:e7:
81:4a:4f:65:e9:d3:c3:3b:05:de:6a:4d:e7:82:43:
02:1d:84:e9:48:df:ab:8b:1c:94:ff:9d:05:72:11:
a0:28:fd:31:14:0f:15:1d:88:4f:6a:b6:ba:f8:32:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:71:CD:8C:93:8C:81:3C:19:4C:93:27:D5:9C:B0:E4:A7:70:B5:01
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:69:ff:fd:8f:e2:76:23:91:a3:4b:64:5f:5e:de:4a:07:49:
37:01:e5:9a:01:27:2a:e1:9e:cb:92:48:bc:ba:a3:47:a2:6d:
cd:bd:f5:59:97:fb:f9:a4:4b:e1:35:f9:b9:dd:0c:36:a6:2d:
dd:a0:61:40:cc:59:bb:b5:7e:51:d1:d3:54:ec:71:43:51:63:
b3:d9:d6:37:47:86:ce:67:bb:2e:c4:5c:ef:78:fa:15:5d:d4:
b2:57:51:ce:68:e9:07:dd:e3:7d:8f:e3:fb:67:2a:ce:a5:c9:
8d:b3:13:23:32:99:4b:91:1e:ee:3c:eb:2d:46:49:46:26:75:
7b:3e:31:c7:8c:cf:21:8c:42:f8:4b:a9:f4:fc:c7:c0:a9:eb:
2f:34:ae:6d:74:c0:e0:41:1e:c8:50:f0:79:c5:2a:e2:ba:61:
83:8e:7d:08:1f:7e:7a:15:9c:07:50:f3:0c:a6:8f:16:07:60:
46:bc:82:5b:00:4b:b6:fe:c6:da:02:81:01:89:25:9e:c5:af:
f4:42:bf:b8:ae:ef:8f:fb:62:a4:92:79:00:0f:a0:6b:c8:72:
e6:1c:ca:82:20:5c:bb:66:6c:50:bb:a6:a2:2d:dc:6d:62:29:
98:ed:72:ab:4f:83:03:5e:8d:cb:d8:ff:65:e8:71:13:f6:d8:
ab:a0:71:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aEom3upZ184AUNpVsWlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODJjOGFlNzk2NzBiZmFmM2FjOGRhODg3NDg1ODFlMzk5
NzJiZWIwHhcNMjUwNDI3MTgwMDIyWhcNMjUwNDI4MTgwMDIyWjAzMTEwLwYDVQQD
EyhlMjcxY2Q4YzkzOGM4MTNjMTk0YzkzMjdkNTljYjBlNGE3NzBiNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs053ivb5g9ottaFRbgm6m969qCiT
0bPhECXb+U3zdaUmvGF1pvPrBlSTtcxtfel6szAFl2b6vB1cJwXnjJaTf4ZQGNV0
wIqaxX5h8dlcNe3sA75nM8MBMX4jqLtLE3abcNNIb8/6+A+Bc77eheUaeqcwWkEn
Yq6LInnNMlWciqOUx5W1Nzl2LgZ+drxnVO/l8AN2L5uxYssP3FVIpqNBX8yMI9uZ
EzlfYHbmwaw69sjbrJlj0AakjfmJG79wWLFh7g14dLcwaYKe7ZDGl4/OBueBSk9l
6dPDOwXeak3ngkMCHYTpSN+rixyU/50FchGgKP0xFA8VHYhPara6+DISRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJxzYyTjIE8GUyTJ9WcsOSncLUBMB8GA1UdIwQY
MBaAFG+CyK55Zwv686yNqIdIWB45lyvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYt
YTM4NjdkNTM5MDBjLzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kNTVhY2QtZTVjNy00MzA3LWEwOGYtYTM4NjdkNTM5MDBj
LzEvYjRMSXJubG5DX3J6ckkyb2gwaFlIam1YSy1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2n//Y/i
diORo0tkX17eSgdJNwHlmgEnKuGey5JIvLqjR6Jtzb31WZf7+aRL4TX5ud0MNqYt
3aBhQMxZu7V+UdHTVOxxQ1Fjs9nWN0eGzme7LsRc73j6FV3UsldRzmjpB93jfY/j
+2cqzqXJjbMTIzKZS5Ee7jzrLUZJRiZ1ez4xx4zPIYxC+Eup9PzHwKnrLzSubXTA
4EEeyFDwecUq4rphg459CB9+ehWcB1DzDKaPFgdgRryCWwBLtv7G2gKBAYklnsWv
9EK/uK7vj/tipJJ5AA+ga8hy5hzKgiBcu2ZsULumoi3cbWIpmO1yq0+DA16Ny9j/
ZehxE/bYq6BxBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:15:42 2025 by rpki-client