Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
File: MIVZam3hzL6mZbRWxNLM0JZJmx8.mft (raw, json)
Hash identifier: YHZoVbKL1S09hHpAHGBM/JceEMyRW9G+VKBzzFvx9N4=
Subject key identifier: 7E:F6:FC:63:95:DA:61:AA:F4:38:1D:0F:E2:A1:2F:69:E3:42:3D:BD
Authority key identifier: 30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
Certificate issuer: /CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Certificate serial: 01968390B267FA7FC5EA12DA3BDDCD02CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
Manifest number: 08FC
Signing time: Tue 29 Apr 2025 22:00:19 +0000
Manifest this update: Tue 29 Apr 2025 22:00:19 +0000
Manifest next update: Wed 30 Apr 2025 22:00:19 +0000
Files and hashes: 1: MIVZam3hzL6mZbRWxNLM0JZJmx8.crl (hash: /HltFiHQgdv9jtV/njZqYBH1bIJV5Fs6pMYShakOXYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:b2:67:fa:7f:c5:ea:12:da:3b:dd:cd:02:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3085596a6de1ccbea665b456c4d2ccd096499b1f
Validity
Not Before: Apr 29 22:00:19 2025 GMT
Not After : Apr 30 22:00:19 2025 GMT
Subject: CN=7ef6fc6395da61aaf4381d0fe2a12f69e3423dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:68:9a:ce:8b:5b:02:15:21:8f:8e:dc:de:53:
2c:fd:a6:52:c2:80:74:66:e0:af:07:eb:2a:23:28:
cb:f2:da:bd:64:a6:ad:28:9b:9b:4b:ab:44:fd:f6:
f1:ea:16:69:20:7e:ff:66:18:c8:62:b0:cf:04:2b:
8d:15:fb:49:86:ea:c9:0f:7d:25:35:45:90:34:78:
c5:f0:2a:8c:5c:24:6e:67:02:2b:6d:7d:f7:fd:9d:
a7:2d:ea:f5:c2:4c:2b:b5:a8:25:a3:85:c5:58:95:
9d:59:c1:86:be:a9:89:49:c9:dd:10:74:61:3d:d7:
45:88:33:43:32:cb:5f:36:2e:29:c9:19:19:d8:cf:
1e:4c:3c:b9:54:e4:e3:c6:85:fd:17:d9:f8:36:8e:
51:fa:9f:dd:b7:13:21:c4:a5:67:06:7a:20:44:92:
22:a2:c7:af:36:71:35:aa:0a:9f:08:05:9b:b1:53:
9b:3b:4b:04:d7:c1:10:68:9d:ab:a3:fc:87:bd:e1:
32:bf:10:6e:06:8c:da:18:49:6f:79:c3:84:ad:5f:
93:55:3a:db:1c:0d:7f:51:7a:00:da:0c:ba:88:49:
f6:07:c9:52:31:45:3a:05:e5:48:d1:fb:e0:b3:c0:
19:c4:a3:97:33:cd:bc:f8:cc:7d:89:73:4f:e1:cf:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F6:FC:63:95:DA:61:AA:F4:38:1D:0F:E2:A1:2F:69:E3:42:3D:BD
X509v3 Authority Key Identifier:
keyid:30:85:59:6A:6D:E1:CC:BE:A6:65:B4:56:C4:D2:CC:D0:96:49:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIVZam3hzL6mZbRWxNLM0JZJmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0f65fe-262f-474d-8cb6-8ccb674a3875/1/MIVZam3hzL6mZbRWxNLM0JZJmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:a3:7b:e5:f9:09:f6:a3:e0:45:9a:b2:13:3c:84:b5:8a:
1f:ed:85:c4:82:21:d1:b7:9e:28:25:c9:68:b7:e4:0f:3b:64:
2a:55:31:3f:2a:cc:19:ab:90:4b:f4:66:7a:b0:aa:8a:ec:25:
eb:1b:9b:95:0a:87:d1:3e:a1:a5:ed:86:8c:6f:fa:45:73:f1:
ee:66:95:d8:8f:49:a4:54:40:82:fd:f0:2b:72:88:35:f0:1c:
32:29:c8:ed:6f:b6:72:2d:a3:a2:30:88:e0:31:61:81:bf:45:
00:76:f8:53:ff:00:b8:ff:7b:0b:fa:3d:f0:42:d0:10:97:44:
e0:d9:58:2b:0f:e5:8b:ee:8a:95:1d:5f:b2:a0:bb:2b:aa:74:
69:11:41:cb:b5:7f:e2:77:71:c0:01:21:90:4e:4d:11:9d:b9:
c4:ee:39:9b:f2:96:71:77:8a:1b:81:f8:e0:e9:a4:6e:cc:50:
31:7f:b7:56:44:c0:d1:0c:d5:33:5c:1b:42:c0:a5:5b:45:a4:
de:76:bb:83:01:81:de:a2:d0:50:08:8f:fd:a9:e1:d9:9a:29:
b7:7d:0b:30:97:77:78:94:61:0a:66:90:9c:50:5c:2d:12:7c:
d4:bd:87:85:7f:91:4a:1c:5a:63:d0:e9:28:db:fb:a4:96:63:
c6:27:fe:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkLJn+n/F6hLaO93NAs9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwODU1OTZhNmRlMWNjYmVhNjY1YjQ1NmM0ZDJjY2QwOTY0
OTliMWYwHhcNMjUwNDI5MjIwMDE5WhcNMjUwNDMwMjIwMDE5WjAzMTEwLwYDVQQD
Eyg3ZWY2ZmM2Mzk1ZGE2MWFhZjQzODFkMGZlMmExMmY2OWUzNDIzZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2miazotbAhUhj47c3lMs/aZSwoB0
ZuCvB+sqIyjL8tq9ZKatKJubS6tE/fbx6hZpIH7/ZhjIYrDPBCuNFftJhurJD30l
NUWQNHjF8CqMXCRuZwIrbX33/Z2nLer1wkwrtaglo4XFWJWdWcGGvqmJScndEHRh
PddFiDNDMstfNi4pyRkZ2M8eTDy5VOTjxoX9F9n4No5R+p/dtxMhxKVnBnogRJIi
osevNnE1qgqfCAWbsVObO0sE18EQaJ2ro/yHveEyvxBuBozaGElvecOErV+TVTrb
HA1/UXoA2gy6iEn2B8lSMUU6BeVI0fvgs8AZxKOXM828+Mx9iXNP4c/EkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH72/GOV2mGq9DgdD+KhL2njQj29MB8GA1UdIwQY
MBaAFDCFWWpt4cy+pmW0VsTSzNCWSZsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYt
OGNjYjY3NGEzODc1LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8wZjY1ZmUtMjYyZi00NzRkLThjYjYtOGNjYjY3NGEzODc1
LzEvTUlWWmFtM2h6TDZtWmJSV3hOTE0wSlpKbXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0yje+X5
Cfaj4EWashM8hLWKH+2FxIIh0beeKCXJaLfkDztkKlUxPyrMGauQS/RmerCqiuwl
6xublQqH0T6hpe2GjG/6RXPx7maV2I9JpFRAgv3wK3KINfAcMinI7W+2ci2jojCI
4DFhgb9FAHb4U/8AuP97C/o98ELQEJdE4NlYKw/li+6KlR1fsqC7K6p0aRFBy7V/
4ndxwAEhkE5NEZ25xO45m/KWcXeKG4H44OmkbsxQMX+3VkTA0QzVM1wbQsClW0Wk
3na7gwGB3qLQUAiP/anh2Zopt30LMJd3eJRhCmaQnFBcLRJ81L2HhX+RShxaY9Dp
KNv7pJZjxif+iA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:56:40 2025 by rpki-client