Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: y6yOoK2wmLOMFqEJa+9AXeT5bJ41Bs+M17S2KNeRsJ0=
Subject key identifier: A4:8E:11:33:A9:A1:7F:E5:65:E4:B5:F6:17:12:79:E0:2A:7A:EB:1A
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 0196B7B50C193A8978393B10DEC96A54E686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0A61
Signing time: Sat 10 May 2025 01:00:17 +0000
Manifest this update: Sat 10 May 2025 01:00:17 +0000
Manifest next update: Sun 11 May 2025 01:00:17 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: N0f9oxGENZwgYO+ARWfd7PRq0BuJoNzghhHTLWyhaG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:0c:19:3a:89:78:39:3b:10:de:c9:6a:54:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: May 10 01:00:17 2025 GMT
Not After : May 11 01:00:17 2025 GMT
Subject: CN=a48e1133a9a17fe565e4b5f6171279e02a7aeb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f7:0e:35:5c:11:a5:a2:cf:52:0b:bf:08:95:
16:2a:0b:a5:1b:64:03:00:be:b4:6b:58:9c:cc:e5:
55:8a:a0:28:49:8b:b1:cd:67:48:c7:79:e2:d9:47:
1d:d6:e5:5d:7e:df:7e:81:81:89:d4:ab:1c:1f:6c:
21:2b:08:2e:09:4d:ea:94:fc:d7:43:60:54:dc:c8:
79:54:cd:4d:1b:1d:18:5a:d0:87:7c:d7:b1:1f:42:
f8:27:8e:08:f8:80:d0:e8:c0:c9:2c:c4:20:54:bb:
bc:af:72:8c:8f:36:b0:a3:b4:91:12:6d:5e:9e:15:
ab:0f:8d:b7:5d:a9:0b:c4:17:72:be:40:7c:20:26:
15:0f:f2:40:95:66:ac:76:25:26:66:c8:b5:2b:a5:
ec:6e:e3:4d:34:1e:da:38:a1:a8:dc:fb:9e:21:f2:
6a:b6:ca:90:c6:5b:00:a4:ae:0e:e3:d4:17:01:1d:
ad:a5:99:e2:5b:15:b9:40:89:0f:6a:85:50:d7:a2:
3a:cc:bf:49:ef:81:bd:c2:75:31:8a:1d:0f:38:b0:
0c:82:5e:a8:be:a3:c3:40:43:a3:3d:2d:88:b6:50:
4c:dc:45:fe:d6:58:a7:9a:70:b7:56:7a:28:f8:8f:
18:b7:78:b8:c1:3c:b6:c6:8b:5e:ab:34:67:eb:6a:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:11:33:A9:A1:7F:E5:65:E4:B5:F6:17:12:79:E0:2A:7A:EB:1A
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ef:6e:b7:8d:af:c2:95:b5:0e:cc:f8:bf:5d:ae:06:c6:0b:
e3:af:7d:4e:b0:71:77:46:35:6f:3b:7f:d0:af:2d:b3:c3:f6:
9e:fb:5a:dd:d1:71:58:b8:ee:da:8d:bb:6d:49:30:8b:84:32:
96:e3:5f:ba:8a:fb:f1:e3:35:b9:65:65:35:48:ec:a3:9b:ce:
fe:5d:43:07:65:14:4a:ee:41:28:e5:b7:eb:ee:d3:73:63:e1:
3c:3b:2f:71:d7:01:80:ad:c7:d4:71:14:fb:1e:40:67:1e:e9:
02:4b:00:5b:8f:d8:be:69:6c:e0:aa:5b:2c:47:e8:e2:13:f5:
18:a2:22:aa:cb:12:92:f2:62:f1:8c:87:d5:f7:11:20:7a:22:
de:a7:7e:ea:e4:74:83:e1:10:8b:bb:69:cf:a4:8c:66:d3:66:
bf:5b:29:21:6b:8a:59:50:b8:fb:4a:33:0e:9b:d0:26:04:e4:
65:0b:52:6f:2b:6f:1d:d7:c7:9b:1f:24:1b:44:d1:67:9e:7f:
c4:5e:c0:8f:0a:50:a2:a1:df:65:9f:a2:aa:69:b8:76:64:33:
6b:6f:ac:60:89:83:d9:cb:71:2c:82:b7:66:34:a0:ba:b3:7c:
e5:a0:c0:0a:85:1b:da:1f:53:9a:fc:1a:45:8d:f4:0d:4e:21:
f0:32:8a:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3tQwZOol4OTsQ3slqVOaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1
YmU2YzQwHhcNMjUwNTEwMDEwMDE3WhcNMjUwNTExMDEwMDE3WjAzMTEwLwYDVQQD
EyhhNDhlMTEzM2E5YTE3ZmU1NjVlNGI1ZjYxNzEyNzllMDJhN2FlYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/cONVwRpaLPUgu/CJUWKgulG2QD
AL60a1iczOVViqAoSYuxzWdIx3ni2Ucd1uVdft9+gYGJ1KscH2whKwguCU3qlPzX
Q2BU3Mh5VM1NGx0YWtCHfNexH0L4J44I+IDQ6MDJLMQgVLu8r3KMjzawo7SREm1e
nhWrD423XakLxBdyvkB8ICYVD/JAlWasdiUmZsi1K6XsbuNNNB7aOKGo3PueIfJq
tsqQxlsApK4O49QXAR2tpZniWxW5QIkPaoVQ16I6zL9J74G9wnUxih0POLAMgl6o
vqPDQEOjPS2ItlBM3EX+1linmnC3Vnoo+I8Yt3i4wTy2xoteqzRn62o5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSOETOpoX/lZeS19hcSeeAqeusaMB8GA1UdIwQY
MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt
YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2
LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe9ut42v
wpW1Dsz4v12uBsYL4699TrBxd0Y1bzt/0K8ts8P2nvta3dFxWLju2o27bUkwi4Qy
luNfuor78eM1uWVlNUjso5vO/l1DB2UUSu5BKOW36+7Tc2PhPDsvcdcBgK3H1HEU
+x5AZx7pAksAW4/Yvmls4KpbLEfo4hP1GKIiqssSkvJi8YyH1fcRIHoi3qd+6uR0
g+EQi7tpz6SMZtNmv1spIWuKWVC4+0ozDpvQJgTkZQtSbytvHdfHmx8kG0TRZ55/
xF7AjwpQoqHfZZ+iqmm4dmQza2+sYImD2ctxLIK3ZjSgurN85aDACoUb2h9Tmvwa
RY30DU4h8DKKxw==
-----END CERTIFICATE-----
Generated at Sat May 10 05:00:47 2025 by rpki-client