Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
File: 5qi5LUxZf2wET3clKFSPnJEpoNM.mft (raw, json)
Hash identifier: akkqtdZa37jn4rEonTbvH95kuU3AK26DQCVPh9iL2ok=
Subject key identifier: 1D:21:20:7F:0F:17:94:A3:46:E9:44:9F:99:D2:54:9B:AF:E6:64:4A
Authority key identifier: E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
Certificate issuer: /CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Certificate serial: 0196748BC1F5412605E336454AEE6F861C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
Manifest number: 11EC
Signing time: Sun 27 Apr 2025 00:00:38 +0000
Manifest this update: Sun 27 Apr 2025 00:00:38 +0000
Manifest next update: Mon 28 Apr 2025 00:00:38 +0000
Files and hashes: 1: 5qi5LUxZf2wET3clKFSPnJEpoNM.crl (hash: kHslhosw52RT2NsOBAgFK8DPRNI8FBuNwG386WZzeVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:c1:f5:41:26:05:e3:36:45:4a:ee:6f:86:1c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8b92d4c597f6c044f772528548f9c9129a0d3
Validity
Not Before: Apr 27 00:00:38 2025 GMT
Not After : Apr 28 00:00:38 2025 GMT
Subject: CN=1d21207f0f1794a346e9449f99d2549bafe6644a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:2d:62:65:cd:2c:72:fb:e2:c3:f3:4a:9c:
78:3c:80:76:13:9a:58:57:7b:30:57:95:b4:6a:3f:
1e:e1:2d:fc:8c:21:90:74:82:44:f2:f7:b2:1d:98:
b4:5e:51:c4:c1:f7:86:bc:a7:ce:d5:73:60:c9:fe:
8c:5c:c2:2c:af:a4:af:61:c6:dd:d7:f4:c8:52:10:
51:20:fb:ee:2d:fb:f2:9e:65:04:b5:cf:61:c8:75:
0f:61:da:1f:c4:57:66:f9:ef:bf:55:e3:fc:5c:01:
bf:14:f0:ff:4b:cc:85:ee:ac:e6:20:c8:f9:79:93:
bb:66:f7:da:5a:76:96:80:38:e4:14:7c:7f:ad:9e:
3e:6d:45:0c:6e:64:c9:7f:0b:fc:40:35:40:45:77:
74:9c:59:81:5c:ac:25:f9:15:33:22:4c:9e:fb:01:
29:38:bc:cf:e5:34:a1:a2:4b:2e:84:bf:e3:4f:d9:
e7:c1:b1:c7:7e:37:27:c4:d1:1a:de:8c:11:de:da:
df:3d:a7:91:d7:ee:d6:6e:61:3b:01:7d:25:90:19:
55:34:d1:f2:01:6f:72:b3:f4:44:89:be:c4:98:11:
74:c1:07:47:9e:55:c2:64:6f:3d:5b:ef:fd:1c:83:
e3:cd:1c:53:0e:8a:32:bc:f7:39:01:f5:f6:fe:e9:
58:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:21:20:7F:0F:17:94:A3:46:E9:44:9F:99:D2:54:9B:AF:E6:64:4A
X509v3 Authority Key Identifier:
keyid:E6:A8:B9:2D:4C:59:7F:6C:04:4F:77:25:28:54:8F:9C:91:29:A0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qi5LUxZf2wET3clKFSPnJEpoNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9afc2-9169-4a8c-8816-deb7ff1b5e6d/1/5qi5LUxZf2wET3clKFSPnJEpoNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:df:01:d8:f1:d6:e3:3f:c6:7f:67:af:b8:39:e4:0d:7f:
9e:38:ca:aa:ea:5f:d5:d4:50:c5:bd:19:e4:2e:0a:81:89:ef:
ca:84:e2:24:bf:85:61:2e:f3:cc:75:d1:3d:6a:e4:1f:41:e5:
75:fe:c4:bb:29:bc:a1:b6:05:5c:2d:66:3a:7f:76:19:8b:d8:
9e:71:71:56:d1:f3:39:d7:1d:9f:ad:4e:6b:fc:6c:98:bc:72:
c0:73:ce:10:da:ca:0d:87:3a:24:2e:b9:e0:b3:44:aa:99:35:
92:7e:7d:ea:83:54:11:36:bb:e2:4f:14:05:14:24:cc:d6:2b:
80:e4:43:18:20:52:da:f6:f7:9e:8e:b6:a4:62:a5:93:8d:be:
4e:0b:95:17:70:8f:98:d4:3c:50:46:28:01:fc:d4:da:fa:a1:
b0:e5:6a:5b:34:91:ac:f6:9d:19:b6:8b:cc:78:aa:93:7b:8b:
2e:5f:6b:8e:fa:51:4c:ad:43:73:6b:56:ef:ce:06:ae:00:25:
8d:76:66:15:96:ef:1a:3c:f7:e4:08:d3:4f:8d:78:d2:aa:88:
54:65:bd:ba:73:35:de:ad:a0:57:67:3b:b8:c4:4f:3c:03:4c:
8f:2f:1b:9e:7e:30:12:fe:d0:ca:77:c1:87:3b:93:75:68:34:
48:59:42:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i8H1QSYF4zZFSu5vhhw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YThiOTJkNGM1OTdmNmMwNDRmNzcyNTI4NTQ4ZjljOTEy
OWEwZDMwHhcNMjUwNDI3MDAwMDM4WhcNMjUwNDI4MDAwMDM4WjAzMTEwLwYDVQQD
EygxZDIxMjA3ZjBmMTc5NGEzNDZlOTQ0OWY5OWQyNTQ5YmFmZTY2NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+0tYmXNLHL74sPzSpx4PIB2E5pY
V3swV5W0aj8e4S38jCGQdIJE8veyHZi0XlHEwfeGvKfO1XNgyf6MXMIsr6SvYcbd
1/TIUhBRIPvuLfvynmUEtc9hyHUPYdofxFdm+e+/VeP8XAG/FPD/S8yF7qzmIMj5
eZO7ZvfaWnaWgDjkFHx/rZ4+bUUMbmTJfwv8QDVARXd0nFmBXKwl+RUzIkye+wEp
OLzP5TShoksuhL/jT9nnwbHHfjcnxNEa3owR3trfPaeR1+7WbmE7AX0lkBlVNNHy
AW9ys/REib7EmBF0wQdHnlXCZG89W+/9HIPjzRxTDooyvPc5AfX2/ulYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0hIH8PF5SjRulEn5nSVJuv5mRKMB8GA1UdIwQY
MBaAFOaouS1MWX9sBE93JShUj5yRKaDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYt
ZGViN2ZmMWI1ZTZkLzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWFmYzItOTE2OS00YThjLTg4MTYtZGViN2ZmMWI1ZTZk
LzEvNXFpNUxVeFpmMndFVDNjbEtGU1BuSkVwb05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI//fAdjx
1uM/xn9nr7g55A1/njjKqupf1dRQxb0Z5C4KgYnvyoTiJL+FYS7zzHXRPWrkH0Hl
df7Euym8obYFXC1mOn92GYvYnnFxVtHzOdcdn61Oa/xsmLxywHPOENrKDYc6JC65
4LNEqpk1kn596oNUETa74k8UBRQkzNYrgORDGCBS2vb3no62pGKlk42+TguVF3CP
mNQ8UEYoAfzU2vqhsOVqWzSRrPadGbaLzHiqk3uLLl9rjvpRTK1Dc2tW784GrgAl
jXZmFZbvGjz35AjTT4140qqIVGW9unM13q2gV2c7uMRPPANMjy8bnn4wEv7QynfB
hzuTdWg0SFlCIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:52 2025 by rpki-client