Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: XrHa0e1inU/4F0Ky4uIX9XKwzOPjiUPKRd7WZpKYwXo=
Subject key identifier: 41:8F:2E:26:31:24:01:64:98:9A:3F:F9:A8:3E:31:CA:87:52:38:DE
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 0196760CDBC4D3CE32AB1B056871A0A8DA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 07:01:16 +0000
Manifest this update: Sun 27 Apr 2025 07:01:16 +0000
Manifest next update: Mon 28 Apr 2025 07:01:16 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: m9BezIZH9RYC2BvsQRTm2lDpGuxofHi6neO9GzQlPJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:db:c4:d3:ce:32:ab:1b:05:68:71:a0:a8:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Apr 27 07:01:16 2025 GMT
Not After : Apr 28 07:01:16 2025 GMT
Subject: CN=418f2e2631240164989a3ff9a83e31ca875238de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:1e:e3:15:eb:2b:4a:38:26:80:8c:69:6c:
49:29:f0:0b:e8:17:ab:6c:8f:16:9e:9c:16:fa:6d:
59:e4:e5:e0:1d:58:d1:bf:a1:07:30:11:e4:24:9b:
34:a8:62:1b:e8:ab:0d:1f:35:b1:97:be:83:f1:bc:
93:9f:e2:b6:51:5a:6d:10:ea:49:d1:cd:dd:ca:1d:
ae:05:d8:d2:72:21:41:c8:39:8e:56:e0:76:42:7d:
c3:05:7a:64:c7:d2:47:e9:7b:34:12:c3:00:cf:93:
71:f8:09:50:1f:3b:32:5f:55:62:dd:b6:be:5c:a0:
0e:4e:38:1c:66:b8:0a:3f:a1:36:3f:4b:be:d1:b8:
7b:77:09:bb:1d:88:95:94:b1:39:d5:e9:e8:52:53:
36:20:c8:15:3a:7b:3a:11:03:90:f2:35:4c:3d:3e:
f7:03:4d:f6:0f:09:0a:79:10:52:39:91:21:38:4e:
54:43:87:b4:69:62:c4:39:5e:1a:f1:5e:56:bc:d7:
15:5e:6f:fd:c2:59:04:a3:43:bb:25:32:76:1a:e6:
a6:96:1c:a0:4b:a1:74:8f:6f:ad:ef:1a:46:fa:36:
93:b1:0b:b6:20:37:a1:97:e7:69:fc:48:a9:03:96:
10:e1:ba:f3:76:40:e8:0a:02:e0:4d:a9:dc:99:17:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:2E:26:31:24:01:64:98:9A:3F:F9:A8:3E:31:CA:87:52:38:DE
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f4:f2:d5:39:39:10:8c:a4:eb:13:d1:53:65:a9:ba:95:00:
d7:bd:1b:33:a9:9a:2f:4c:15:33:db:e1:cd:e5:43:28:34:5a:
c0:f2:26:d9:65:98:a4:5b:c3:ad:f1:70:45:67:32:75:88:e4:
fc:10:fe:59:a7:06:f1:bb:f6:f2:e7:13:a6:58:15:19:8e:10:
e4:b2:d7:13:57:e7:d5:fe:43:43:e6:0a:c1:10:af:c4:42:36:
23:05:14:6f:9a:3e:1a:ef:d3:75:6a:7b:ac:7b:c1:02:26:9d:
a2:3e:ef:93:1e:c8:94:85:46:a2:e0:95:0f:6c:c1:c5:28:eb:
c4:b1:07:fc:f1:0a:b9:b6:5b:21:4a:96:50:e8:25:33:00:f4:
d3:cf:75:e4:1b:01:5e:63:84:17:73:c3:4b:d2:26:ff:9b:3e:
74:55:dc:1b:42:4d:2e:2d:b4:8f:7d:6c:86:1b:7b:2f:15:53:
49:8e:4c:fc:e3:f3:89:a9:39:93:99:00:cd:d2:e3:01:38:75:
e9:ac:d7:62:08:77:7c:f9:03:61:ba:67:d0:34:82:82:3d:bb:
3d:e9:22:0a:43:15:f7:2e:27:6a:af:88:97:57:b9:31:52:e7:
a9:1b:4c:07:25:b7:2b:16:d3:62:ca:f0:5a:0e:52:0d:1b:ca:
96:d1:1b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DNvE084yqxsFaHGgqNogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFmYTFmZTZkYzA5ZmE1NGQxYWY1OWMyZTEwMGNkMTQx
MmM3ZjAwHhcNMjUwNDI3MDcwMTE2WhcNMjUwNDI4MDcwMTE2WjAzMTEwLwYDVQQD
Eyg0MThmMmUyNjMxMjQwMTY0OTg5YTNmZjlhODNlMzFjYTg3NTIzOGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskUe4xXrK0o4JoCMaWxJKfAL6Ber
bI8WnpwW+m1Z5OXgHVjRv6EHMBHkJJs0qGIb6KsNHzWxl76D8byTn+K2UVptEOpJ
0c3dyh2uBdjSciFByDmOVuB2Qn3DBXpkx9JH6Xs0EsMAz5Nx+AlQHzsyX1Vi3ba+
XKAOTjgcZrgKP6E2P0u+0bh7dwm7HYiVlLE51enoUlM2IMgVOns6EQOQ8jVMPT73
A032DwkKeRBSOZEhOE5UQ4e0aWLEOV4a8V5WvNcVXm/9wlkEo0O7JTJ2Guamlhyg
S6F0j2+t7xpG+jaTsQu2IDehl+dp/EipA5YQ4brzdkDoCgLgTancmRdlGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGPLiYxJAFkmJo/+ag+McqHUjjeMB8GA1UdIwQY
MBaAFPJh+h/m3An6VNGvWcLhAM0UEsfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQt
ZTc3ZTBlMjFiMTZhLzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi81ZTBlNGYtNzQ2Yy00OTA4LTg1NWQtZTc3ZTBlMjFiMTZh
LzEvOG1INkgtYmNDZnBVMGE5Wnd1RUF6UlFTeF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovTy1Tk5
EIyk6xPRU2WpupUA170bM6maL0wVM9vhzeVDKDRawPIm2WWYpFvDrfFwRWcydYjk
/BD+WacG8bv28ucTplgVGY4Q5LLXE1fn1f5DQ+YKwRCvxEI2IwUUb5o+Gu/TdWp7
rHvBAiadoj7vkx7IlIVGouCVD2zBxSjrxLEH/PEKubZbIUqWUOglMwD008915BsB
XmOEF3PDS9Im/5s+dFXcG0JNLi20j31shht7LxVTSY5M/OPziak5k5kAzdLjATh1
6azXYgh3fPkDYbpn0DSCgj27PekiCkMV9y4naq+Il1e5MVLnqRtMByW3KxbTYsrw
Wg5SDRvKltEb1g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:15:36 2025 by rpki-client