Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 7cKEt4gXtSj5m3PC7M7kmIT0mNdP2eZjVQOugXXAa7U=
Subject key identifier: F7:4A:81:4E:89:3D:86:CA:0F:0D:7A:4A:DC:17:FF:3C:24:6B:F2:23
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 0196854816A88A4D4850079BD71BC93CC58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 0EC6
Signing time: Wed 30 Apr 2025 06:00:16 +0000
Manifest this update: Wed 30 Apr 2025 06:00:16 +0000
Manifest next update: Thu 01 May 2025 06:00:16 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: plYBhMp2jU5107rzIEm53O5nyRfjb6D2T6Reec8xFAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:16:a8:8a:4d:48:50:07:9b:d7:1b:c9:3c:c5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Apr 30 06:00:16 2025 GMT
Not After : May 1 06:00:16 2025 GMT
Subject: CN=f74a814e893d86ca0f0d7a4adc17ff3c246bf223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:4e:ba:ae:01:51:91:b1:b9:be:1e:a1:99:
e0:cd:06:1e:be:f2:ce:9d:f0:54:d9:d7:41:78:5b:
f1:65:61:2e:b4:3f:e2:5e:b6:f6:c3:f0:31:19:0c:
98:07:14:df:30:76:2d:1e:43:3d:5c:d7:b0:b9:36:
f3:1b:55:27:84:a8:b9:5c:c2:0a:97:fa:49:fc:d8:
72:a6:57:78:ef:04:b3:18:f4:41:c1:b0:48:dd:4b:
79:62:3d:19:c9:4b:14:06:12:bb:74:4c:d0:7f:81:
2c:00:f2:ac:73:18:8e:9a:47:8d:1c:70:03:fd:e9:
4e:e9:5c:1b:5c:a9:08:bc:a0:a1:7d:9b:fb:90:30:
c4:a6:41:59:52:95:61:50:b5:8b:13:e9:0a:8a:b7:
0b:2e:73:23:b4:79:33:e1:ec:18:86:27:50:32:7e:
0f:fe:0f:a6:9d:82:94:35:26:5f:57:5d:46:a4:a2:
d6:aa:10:33:c7:62:c0:f7:9d:36:ec:78:82:fe:f2:
05:3e:35:87:d0:4b:02:14:8e:ff:83:0f:ef:03:01:
5f:23:d6:06:05:ab:cd:b3:59:79:e7:a3:10:7f:ab:
33:ae:aa:9a:3a:98:a7:79:5d:42:0d:dd:dc:a3:4e:
27:25:c1:3f:15:4c:3d:97:8c:5d:97:43:05:74:3f:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4A:81:4E:89:3D:86:CA:0F:0D:7A:4A:DC:17:FF:3C:24:6B:F2:23
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:87:bb:30:d1:a9:a0:fa:98:2e:a8:06:e3:97:3d:53:3c:cb:
54:95:fb:53:62:d8:b2:74:e2:8e:85:c2:bd:38:02:62:58:44:
95:ce:ce:13:c8:5f:2a:c4:91:d7:ba:96:56:fc:0d:c4:b7:ef:
d8:a9:6b:6f:fe:51:14:4c:cf:d9:e1:08:43:97:f9:fc:6c:6a:
3c:3b:e0:58:ca:68:66:a8:fd:3c:73:09:64:7c:a2:a4:e5:30:
51:2b:52:41:78:8d:2b:84:a4:2e:5c:10:97:1a:ce:37:a9:3d:
52:4e:c8:b1:4e:d3:df:d7:cc:8c:4b:b5:8b:9d:dd:ea:e6:47:
af:c5:a8:0a:1f:d8:48:47:e7:89:ae:74:ca:34:20:a9:e2:33:
23:77:9e:8e:17:ee:a7:d6:ed:bf:9d:12:63:bd:cf:54:7c:e5:
b0:e2:78:a2:01:7a:96:50:c0:c5:01:b3:43:cc:6f:3d:f9:ab:
b8:35:dc:36:14:79:7a:ad:bd:58:a4:cb:fa:b1:3d:01:ce:18:
f9:2e:60:bf:93:28:e5:ba:70:94:d2:86:3d:e2:22:57:b3:2d:
2a:e7:18:14:e5:a9:b4:20:77:66:8b:8b:76:61:97:8a:28:10:
2c:f8:88:36:2e:69:eb:6a:42:c0:39:47:a0:70:26:c2:de:12:
92:45:bf:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFSBaoik1IUAeb1xvJPMWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjUwNDMwMDYwMDE2WhcNMjUwNTAxMDYwMDE2WjAzMTEwLwYDVQQD
EyhmNzRhODE0ZTg5M2Q4NmNhMGYwZDdhNGFkYzE3ZmYzYzI0NmJmMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rpOuq4BUZGxub4eoZngzQYevvLO
nfBU2ddBeFvxZWEutD/iXrb2w/AxGQyYBxTfMHYtHkM9XNewuTbzG1UnhKi5XMIK
l/pJ/Nhypld47wSzGPRBwbBI3Ut5Yj0ZyUsUBhK7dEzQf4EsAPKscxiOmkeNHHAD
/elO6VwbXKkIvKChfZv7kDDEpkFZUpVhULWLE+kKircLLnMjtHkz4ewYhidQMn4P
/g+mnYKUNSZfV11GpKLWqhAzx2LA95027HiC/vIFPjWH0EsCFI7/gw/vAwFfI9YG
BavNs1l556MQf6szrqqaOpineV1CDd3co04nJcE/FUw9l4xdl0MFdD8/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdKgU6JPYbKDw16StwX/zwka/IjMB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIe7MNGp
oPqYLqgG45c9UzzLVJX7U2LYsnTijoXCvTgCYlhElc7OE8hfKsSR17qWVvwNxLfv
2Klrb/5RFEzP2eEIQ5f5/GxqPDvgWMpoZqj9PHMJZHyipOUwUStSQXiNK4SkLlwQ
lxrON6k9Uk7IsU7T39fMjEu1i53d6uZHr8WoCh/YSEfnia50yjQgqeIzI3eejhfu
p9btv50SY73PVHzlsOJ4ogF6llDAxQGzQ8xvPfmruDXcNhR5eq29WKTL+rE9Ac4Y
+S5gv5Mo5bpwlNKGPeIiV7MtKucYFOWptCB3ZouLdmGXiigQLPiINi5p62pCwDlH
oHAmwt4SkkW/Fw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:25 2025 by rpki-client