Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
File: xI7JWf3qj9yJhS1C1QYi2C1soSw.mft (raw, json)
Hash identifier: 9+I25Az6PEJZQV6JzrzNFlW5tpBqCnHLHbzqrdSnJe0=
Subject key identifier: 04:22:13:DA:7A:6F:F2:0C:BE:E6:6C:3E:FC:86:36:F1:E7:A7:AE:36
Authority key identifier: C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
Certificate issuer: /CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Certificate serial: 019681D9AF8FABAE22BC929DB3CE2C53B7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
Manifest number: 04E4
Signing time: Tue 29 Apr 2025 14:00:49 +0000
Manifest this update: Tue 29 Apr 2025 14:00:49 +0000
Manifest next update: Wed 30 Apr 2025 14:00:49 +0000
Files and hashes: 1: xI7JWf3qj9yJhS1C1QYi2C1soSw.crl (hash: Y0NQ4cC6eHiHi5F2O16/eUgsSVrcoy4ppr0aZLgH2ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:af:8f:ab:ae:22:bc:92:9d:b3:ce:2c:53:b7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c48ec959fdea8fdc89852d42d50622d82d6ca12c
Validity
Not Before: Apr 29 14:00:49 2025 GMT
Not After : Apr 30 14:00:49 2025 GMT
Subject: CN=042213da7a6ff20cbee66c3efc8636f1e7a7ae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:af:8c:44:31:f5:8b:84:7b:ab:cd:eb:bc:
fe:27:fb:b7:23:6e:85:b6:a3:12:c8:35:69:e2:73:
24:05:0c:0b:ca:64:5c:5b:62:cf:29:24:a6:bd:ea:
e7:14:fe:ec:3c:aa:07:b1:c1:5f:57:7c:60:03:7f:
22:a2:44:1d:1e:4e:a0:63:18:00:5d:f0:44:e2:d5:
b9:a6:52:54:a1:0d:2d:0c:cf:88:e1:03:aa:0e:f0:
97:51:a5:70:96:f2:e4:a8:0b:61:1f:c5:ea:d6:03:
ae:d6:d7:48:ca:29:85:82:29:b6:d7:6b:54:61:1c:
b6:f0:35:b6:16:5d:85:06:23:0f:22:da:9b:31:f6:
65:3e:0f:58:75:f3:0b:a0:c7:d2:b7:a2:cd:91:2e:
f2:dc:87:84:55:4b:30:df:e8:13:c4:5e:9e:d2:4c:
91:61:0b:f5:4c:59:28:1c:5e:74:0a:00:49:2d:6d:
95:6c:e6:55:d8:3a:7e:11:00:40:dd:be:a7:a3:46:
0f:f2:08:1b:74:1e:3a:a8:ed:1d:6f:c6:60:3e:24:
09:d8:3e:5c:30:9c:97:95:7c:e7:f1:11:99:41:22:
39:3d:39:b9:ce:a8:7e:0a:b4:b1:5a:f0:20:0f:bc:
60:77:a1:9b:ed:5e:df:ba:c2:e4:b2:7e:b7:f5:23:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:13:DA:7A:6F:F2:0C:BE:E6:6C:3E:FC:86:36:F1:E7:A7:AE:36
X509v3 Authority Key Identifier:
keyid:C4:8E:C9:59:FD:EA:8F:DC:89:85:2D:42:D5:06:22:D8:2D:6C:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xI7JWf3qj9yJhS1C1QYi2C1soSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/959427-13e0-4d64-8c0c-4333ad4e213a/1/xI7JWf3qj9yJhS1C1QYi2C1soSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:69:f9:2a:42:f8:e4:3d:4a:d9:68:0a:b9:22:8b:82:5c:
b3:12:19:40:87:d9:73:85:9f:c5:45:2e:69:14:73:36:9a:99:
50:80:27:53:2e:39:c3:07:ce:3f:b2:d5:97:de:ce:85:0e:db:
93:c9:91:eb:6a:5c:ce:b0:97:23:0c:81:9e:01:f2:de:d6:e5:
7b:dc:5c:8e:b6:8a:03:db:ea:77:9e:ff:95:a5:ad:ca:76:b3:
2a:57:a9:b0:3f:57:ea:60:11:7e:d0:82:ce:7b:df:20:e3:d4:
46:1e:57:59:a4:4c:13:f7:26:74:88:19:21:5e:33:03:31:f3:
f3:c5:68:55:0e:79:bc:81:6d:c8:70:3d:bd:70:2a:b3:70:25:
6d:ee:e0:91:f2:98:60:9e:a0:40:86:8e:65:fa:55:15:83:72:
77:79:7b:76:d3:ff:3f:86:60:c7:5c:48:4b:61:92:51:47:27:
8b:37:5d:14:2c:5f:7d:14:53:cf:cb:94:e4:c9:b6:eb:d5:b5:
fa:a6:33:2f:83:21:80:2f:dd:82:cc:7a:70:82:09:a6:37:2b:
73:7d:f5:99:3f:40:f0:7a:45:da:26:26:ce:19:9b:a1:24:a7:
3e:ac:17:b2:bd:04:6e:f8:e0:0b:00:54:49:33:ec:b2:d8:f8:
99:a1:15:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaB2a+Pq64ivJKds84sU7fGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OGVjOTU5ZmRlYThmZGM4OTg1MmQ0MmQ1MDYyMmQ4MmQ2
Y2ExMmMwHhcNMjUwNDI5MTQwMDQ5WhcNMjUwNDMwMTQwMDQ5WjAzMTEwLwYDVQQD
EygwNDIyMTNkYTdhNmZmMjBjYmVlNjZjM2VmYzg2MzZmMWU3YTdhZTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVCvjEQx9YuEe6vN67z+J/u3I26F
tqMSyDVp4nMkBQwLymRcW2LPKSSmvernFP7sPKoHscFfV3xgA38iokQdHk6gYxgA
XfBE4tW5plJUoQ0tDM+I4QOqDvCXUaVwlvLkqAthH8Xq1gOu1tdIyimFgim212tU
YRy28DW2Fl2FBiMPItqbMfZlPg9YdfMLoMfSt6LNkS7y3IeEVUsw3+gTxF6e0kyR
YQv1TFkoHF50CgBJLW2VbOZV2Dp+EQBA3b6no0YP8ggbdB46qO0db8ZgPiQJ2D5c
MJyXlXzn8RGZQSI5PTm5zqh+CrSxWvAgD7xgd6Gb7V7fusLksn639SNLKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQiE9p6b/IMvuZsPvyGNvHnp642MB8GA1UdIwQY
MBaAFMSOyVn96o/ciYUtQtUGItgtbKEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMt
NDMzM2FkNGUyMTNhLzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85NTk0MjctMTNlMC00ZDY0LThjMGMtNDMzM2FkNGUyMTNh
LzEveEk3SldmM3FqOXlKaFMxQzFRWWkyQzFzb1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSZp+SpC
+OQ9StloCrkii4JcsxIZQIfZc4WfxUUuaRRzNpqZUIAnUy45wwfOP7LVl97OhQ7b
k8mR62pczrCXIwyBngHy3tble9xcjraKA9vqd57/laWtynazKlepsD9X6mARftCC
znvfIOPURh5XWaRME/cmdIgZIV4zAzHz88VoVQ55vIFtyHA9vXAqs3Albe7gkfKY
YJ6gQIaOZfpVFYNyd3l7dtP/P4Zgx1xIS2GSUUcnizddFCxffRRTz8uU5Mm269W1
+qYzL4MhgC/dgsx6cIIJpjcrc331mT9A8HpF2iYmzhmboSSnPqwXsr0EbvjgCwBU
STPsstj4maEVJw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:55:01 2025 by rpki-client