Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: xPDTW+roaMkniuyKXEK9uZOVgeFZL/IUGWQ9APUDDLg=
Subject key identifier: 51:07:A8:E0:AA:F2:7E:A4:31:72:E3:9C:FF:72:47:27:83:49:AC:C5
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 0196760D1EA31F6338560378D8F0305B8D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 0DA9
Signing time: Sun 27 Apr 2025 07:01:33 +0000
Manifest this update: Sun 27 Apr 2025 07:01:33 +0000
Manifest next update: Mon 28 Apr 2025 07:01:33 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: aqDo+whevxLCP+/DSyTNeyIwPb35doDPoTktfbLe7ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0d:1e:a3:1f:63:38:56:03:78:d8:f0:30:5b:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Apr 27 07:01:33 2025 GMT
Not After : Apr 28 07:01:33 2025 GMT
Subject: CN=5107a8e0aaf27ea43172e39cff7247278349acc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:1a:13:14:c0:77:73:14:9d:f2:23:ba:94:
e9:5f:69:82:39:60:fb:91:e4:e4:5e:0f:e1:5f:fa:
1b:12:6e:0f:27:f5:13:62:1f:ae:62:ae:55:0b:30:
ea:3f:ac:3c:07:cc:52:6b:56:47:3b:72:78:b2:8a:
0e:d4:41:9d:10:43:54:fb:76:66:d8:9c:8e:01:9e:
9d:41:e7:91:71:f0:40:e5:9e:23:eb:82:12:77:a1:
65:b2:70:5c:2f:8c:31:e5:6a:26:ca:60:f5:84:38:
c8:8d:2f:e9:10:6b:58:9a:61:c0:02:40:8e:20:0a:
5e:19:7b:2b:d5:7c:36:c2:ea:3b:1e:d1:0e:05:67:
f2:7d:03:8c:cf:ba:21:83:19:a0:c9:ea:09:59:ac:
f4:5a:3a:3b:6e:10:c4:cf:66:86:5f:4c:f1:f3:27:
26:ea:3c:98:27:b1:d8:38:77:8f:44:4f:41:d5:24:
7d:f5:04:b8:2a:86:72:43:ed:c4:4c:b7:ed:83:ab:
16:4a:6e:f8:ea:fb:31:7d:b2:5b:93:7a:01:57:9f:
c4:aa:e5:f0:5b:27:6e:ba:4d:57:17:12:bd:ee:3b:
3c:55:35:47:90:b7:7c:38:f6:d1:97:2f:fe:70:c5:
80:14:ca:5c:ce:78:55:d6:a7:9f:dc:41:71:d6:fa:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:07:A8:E0:AA:F2:7E:A4:31:72:E3:9C:FF:72:47:27:83:49:AC:C5
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:97:06:82:17:63:6e:e1:0a:4e:42:16:26:aa:f3:9d:6d:
2f:77:c1:58:f8:b8:d2:33:36:ca:f1:01:66:8d:bf:4c:4e:a1:
51:bd:1c:a5:30:d6:f3:cb:af:c2:41:3f:40:1f:59:65:89:84:
2e:0d:5b:22:81:44:71:57:6a:2d:2c:d5:f8:48:f2:78:d2:00:
79:04:54:bb:22:85:72:84:04:6d:bd:4f:34:c7:d5:36:a8:90:
12:6f:a6:23:c6:75:b6:69:96:7c:f2:74:db:15:ea:81:20:25:
69:8e:6c:f8:a3:ee:38:27:3b:ed:ce:ee:9f:1b:e8:05:20:87:
a6:75:0d:f3:46:1e:e1:eb:32:f5:bf:2f:b7:11:71:90:d1:f9:
b0:72:dd:83:68:e1:c9:98:25:1c:3e:8e:8c:38:f1:3b:89:9b:
a5:af:33:af:f7:65:16:da:8a:e9:20:34:a2:45:51:bc:68:f9:
43:dc:fe:8b:3c:5a:a5:b5:a2:70:9d:8f:62:8b:85:12:98:ca:
f8:e0:ef:02:e3:8d:2f:ff:2e:7b:7f:b4:5b:f7:49:07:57:eb:
a1:6c:dc:4c:78:92:4b:75:2f:91:1c:d9:70:42:4c:02:03:94:
af:45:0c:4d:6e:0f:5a:7a:4d:bf:20:84:ca:20:3a:ff:c8:0a:
08:d7:94:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DR6jH2M4VgN42PAwW414MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZTNhODYzNjllZjc5ZGMxM2NmYjQzNzYxNWQ0OTIzODhi
ZjhjZTMwHhcNMjUwNDI3MDcwMTMzWhcNMjUwNDI4MDcwMTMzWjAzMTEwLwYDVQQD
Eyg1MTA3YThlMGFhZjI3ZWE0MzE3MmUzOWNmZjcyNDcyNzgzNDlhY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptYaExTAd3MUnfIjupTpX2mCOWD7
keTkXg/hX/obEm4PJ/UTYh+uYq5VCzDqP6w8B8xSa1ZHO3J4sooO1EGdEENU+3Zm
2JyOAZ6dQeeRcfBA5Z4j64ISd6FlsnBcL4wx5WomymD1hDjIjS/pEGtYmmHAAkCO
IApeGXsr1Xw2wuo7HtEOBWfyfQOMz7ohgxmgyeoJWaz0Wjo7bhDEz2aGX0zx8ycm
6jyYJ7HYOHePRE9B1SR99QS4KoZyQ+3ETLftg6sWSm746vsxfbJbk3oBV5/EquXw
Wyduuk1XFxK97js8VTVHkLd8OPbRly/+cMWAFMpcznhV1qef3EFx1vpGLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEHqOCq8n6kMXLjnP9yRyeDSazFMB8GA1UdIwQY
MBaAFLTjqGNp73ncE8+0N2FdSSOIv4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYt
ZjkwYThkY2UxYmZjLzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81YzU3ZGQtNDg2ZS00YzY5LWExMTYtZjkwYThkY2UxYmZj
LzEvdE9Pb1kybnZlZHdUejdRM1lWMUpJNGlfak9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKiXBoIX
Y27hCk5CFiaq851tL3fBWPi40jM2yvEBZo2/TE6hUb0cpTDW88uvwkE/QB9ZZYmE
Lg1bIoFEcVdqLSzV+EjyeNIAeQRUuyKFcoQEbb1PNMfVNqiQEm+mI8Z1tmmWfPJ0
2xXqgSAlaY5s+KPuOCc77c7unxvoBSCHpnUN80Ye4esy9b8vtxFxkNH5sHLdg2jh
yZglHD6OjDjxO4mbpa8zr/dlFtqK6SA0okVRvGj5Q9z+izxapbWicJ2PYouFEpjK
+ODvAuONL/8ue3+0W/dJB1froWzcTHiSS3UvkRzZcEJMAgOUr0UMTW4PWnpNvyCE
yiA6/8gKCNeUpA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:39 2025 by rpki-client