Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: IgGFtJYl9knsFfv8LOsZBolYTBGh2beAi1WL1XJgK4Q=
Subject key identifier: C5:72:5F:16:F3:33:E0:E3:A7:C3:80:0C:35:0F:56:10:84:52:A4:50
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 01969F3F2F8795D3388524B2B9C5F0FBF177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 07:00:40 +0000
Manifest this update: Mon 05 May 2025 07:00:40 +0000
Manifest next update: Tue 06 May 2025 07:00:40 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: nC5BPopvWYqd7UEp6ZL8rGN71S3tIPVlJE234Ilwaes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:2f:87:95:d3:38:85:24:b2:b9:c5:f0:fb:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: May 5 07:00:40 2025 GMT
Not After : May 6 07:00:40 2025 GMT
Subject: CN=c5725f16f333e0e3a7c3800c350f56108452a450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:39:6c:3f:da:ac:00:79:ba:aa:6b:22:6e:
95:eb:3e:48:c3:99:a5:17:ba:55:d8:3f:07:ac:53:
5e:97:43:7c:76:21:a8:30:ca:e9:47:c4:8a:61:87:
0e:68:97:a0:0c:a8:4d:14:7b:72:aa:3f:03:57:07:
7e:8d:81:bd:6c:2a:5d:64:f1:9d:fa:d4:40:b8:56:
d3:e0:17:c2:fd:56:22:79:46:6e:3e:1d:2a:26:59:
d0:14:2c:19:28:77:b6:24:69:8c:d7:3b:b5:9b:f0:
23:3f:0f:8c:cc:8b:55:4e:ae:6d:1e:72:0b:18:05:
3b:70:ba:57:6f:1f:63:5a:4b:f1:67:39:75:22:4c:
9d:84:12:57:0c:e1:bd:1b:2f:a5:e9:d8:ab:b5:c5:
cb:fd:82:45:83:ac:5b:74:5e:00:a4:5a:ab:99:7c:
72:8c:e2:30:db:7e:5d:4f:df:c3:c2:a2:7a:de:a4:
8f:67:84:27:9c:2f:55:3d:06:63:ec:93:68:ff:1a:
75:18:b2:09:15:d4:ee:64:64:16:7c:3d:e8:1f:81:
ed:06:48:48:dc:ec:b2:96:41:e1:05:1f:62:f5:35:
38:14:ef:30:d2:aa:8d:ef:62:db:73:24:0d:49:19:
68:87:d3:6c:29:3d:67:47:26:82:18:ac:15:36:0f:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:5F:16:F3:33:E0:E3:A7:C3:80:0C:35:0F:56:10:84:52:A4:50
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:f2:52:1b:02:c1:52:47:64:45:5f:a4:70:68:75:39:84:
91:0d:4f:25:a9:8b:ac:fa:1e:ef:00:fb:8b:c5:77:73:95:5c:
2c:68:8c:67:4f:93:cd:e3:62:24:8a:ae:d9:3f:9b:f2:f7:b0:
61:65:ed:aa:9b:5f:31:81:9e:40:fb:e7:76:74:d0:b1:69:93:
7b:fc:29:51:b4:29:38:98:15:f7:66:7d:ab:c2:98:9f:42:98:
33:69:8e:c3:39:82:1b:5a:2d:3d:e3:82:0a:40:23:fe:eb:de:
16:1d:a5:8b:c9:87:82:ac:18:e0:44:0c:bb:1b:ba:d8:dc:da:
87:99:9a:36:23:1f:91:c3:aa:40:45:4a:83:d6:4d:94:e5:b9:
3e:de:a5:7b:f0:05:ab:0a:20:5a:c2:05:9e:75:4b:49:75:1f:
6b:ff:56:ca:3e:fd:94:7e:62:f5:a0:1e:93:6d:0b:54:35:ef:
9d:bc:b5:80:7e:41:9e:b9:69:31:43:75:21:bc:81:fc:36:50:
0e:e8:e1:aa:dc:d7:f8:27:ef:9e:ee:90:bf:5d:75:7b:f7:97:
aa:17:3d:e4:10:68:06:41:75:9f:91:a2:f5:43:2f:ee:06:86:
32:64:ba:84:6f:1e:04:f8:f6:c8:80:69:fa:fc:fb:03:f3:2c:
b2:da:39:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafPy+HldM4hSSyucXw+/F3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2QxMGYyMmU1ZmZhNGIyMGY3ZDViNzgyOGM1NWI5NTA5
YTk3NTkwHhcNMjUwNTA1MDcwMDQwWhcNMjUwNTA2MDcwMDQwWjAzMTEwLwYDVQQD
EyhjNTcyNWYxNmYzMzNlMGUzYTdjMzgwMGMzNTBmNTYxMDg0NTJhNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TA5bD/arAB5uqprIm6V6z5Iw5ml
F7pV2D8HrFNel0N8diGoMMrpR8SKYYcOaJegDKhNFHtyqj8DVwd+jYG9bCpdZPGd
+tRAuFbT4BfC/VYieUZuPh0qJlnQFCwZKHe2JGmM1zu1m/AjPw+MzItVTq5tHnIL
GAU7cLpXbx9jWkvxZzl1IkydhBJXDOG9Gy+l6dirtcXL/YJFg6xbdF4ApFqrmXxy
jOIw235dT9/DwqJ63qSPZ4QnnC9VPQZj7JNo/xp1GLIJFdTuZGQWfD3oH4HtBkhI
3OyylkHhBR9i9TU4FO8w0qqN72LbcyQNSRloh9NsKT1nRyaCGKwVNg9O2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVyXxbzM+Djp8OADDUPVhCEUqRQMB8GA1UdIwQY
MBaAFHh9EPIuX/pLIPfVt4KMVblQmpdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUt
YmYwZGUyYmIxYzNjLzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUtYmYwZGUyYmIxYzNj
LzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSryUhsC
wVJHZEVfpHBodTmEkQ1PJamLrPoe7wD7i8V3c5VcLGiMZ0+TzeNiJIqu2T+b8vew
YWXtqptfMYGeQPvndnTQsWmTe/wpUbQpOJgV92Z9q8KYn0KYM2mOwzmCG1otPeOC
CkAj/uveFh2li8mHgqwY4EQMuxu62Nzah5maNiMfkcOqQEVKg9ZNlOW5Pt6le/AF
qwogWsIFnnVLSXUfa/9Wyj79lH5i9aAek20LVDXvnby1gH5BnrlpMUN1IbyB/DZQ
DujhqtzX+Cfvnu6Qv111e/eXqhc95BBoBkF1n5Gi9UMv7gaGMmS6hG8eBPj2yIBp
+vz7A/Mssto5Yg==
-----END CERTIFICATE-----
Generated at Mon May 5 16:42:17 2025 by rpki-client