Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: kLaxF28NsneixfiQ7nVcQGiHPjPrBKp5tXotZ8CeKfQ=
Subject key identifier: 1A:BF:1A:14:62:50:61:8E:41:D3:D4:90:A1:5B:3C:EB:BB:CB:AE:9D
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 0196767A57ED0D5F9BADF6247AF56514E589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: 0KBn4azHWnSk9L5kBe/fp2T/inLwr3cuET3YHiYexQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:57:ed:0d:5f:9b:ad:f6:24:7a:f5:65:14:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=1abf1a146250618e41d3d490a15b3cebbbcbae9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:12:e0:7d:38:55:6a:3d:09:14:61:97:23:75:
73:10:a0:30:54:ab:86:c8:08:b6:9e:c4:0c:28:29:
8b:e8:07:69:d9:63:d8:76:4e:f3:35:04:d7:3c:d3:
ce:f9:8d:17:32:0f:b4:77:e5:f6:91:bf:6a:42:a1:
95:84:cf:d3:78:e0:85:0f:a4:05:aa:95:bd:cc:a9:
51:b6:88:38:0b:6e:23:6d:cd:57:c4:cd:62:09:a3:
89:b1:bc:2a:37:5a:11:46:fb:f7:6e:ad:09:52:2b:
91:ec:b6:04:a1:af:a2:b1:71:d4:ce:66:62:f9:09:
43:d6:66:57:0b:02:5a:a0:bf:78:40:a3:fd:a1:b6:
0c:be:da:68:3d:79:b0:49:93:0d:e2:f5:f3:3b:06:
89:02:93:c2:84:11:e7:f7:18:50:4c:68:8f:a4:1e:
02:88:c9:e5:b2:52:c2:4a:4f:d1:81:64:4d:ae:b6:
e5:11:b4:49:09:99:c5:64:ce:3a:27:f1:55:4a:cd:
10:d3:e8:6d:18:9b:77:a1:b3:65:86:82:cc:a3:f6:
da:1f:c3:51:43:67:86:d2:9b:4b:dc:ea:eb:15:f5:
dc:26:91:d0:6f:c6:e0:58:a6:a0:79:c9:11:1d:b4:
cf:ae:f4:d0:48:60:c1:a0:c2:24:c9:fc:36:75:e0:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BF:1A:14:62:50:61:8E:41:D3:D4:90:A1:5B:3C:EB:BB:CB:AE:9D
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fb:ae:e4:ef:58:40:4c:05:ea:30:48:63:0a:19:30:17:b6:
4f:28:42:85:41:38:29:37:f6:5f:ee:d6:c7:18:e8:ad:eb:84:
67:22:be:bc:a6:eb:9f:5c:92:5c:46:ab:a4:f5:2b:a7:c6:1a:
cc:26:4a:6b:c2:1b:98:5b:47:43:44:bf:19:e5:ad:46:f1:2c:
af:81:96:b7:12:66:5a:95:4d:d7:c4:f5:af:57:b2:9a:8f:b7:
e7:e8:6b:ab:a5:ad:bb:b6:e9:7b:f7:a3:1f:a8:a8:36:da:7c:
2a:22:c0:6a:84:20:7b:ad:6f:ba:92:36:5f:17:ab:b1:8a:9a:
29:06:da:ff:60:0f:cc:1c:ca:19:37:b8:48:a0:24:87:29:fe:
f7:00:b1:61:63:99:66:94:67:3d:34:3c:48:11:65:37:68:a1:
78:32:e3:73:7f:46:6f:19:e2:1b:87:33:b0:b4:1e:87:58:25:
83:bc:50:80:2e:ef:f8:c8:20:e8:89:cf:44:ed:1f:73:40:1f:
e2:ba:74:a2:88:b8:e0:d9:ba:2f:54:55:22:da:85:b0:2d:4c:
5f:79:0b:17:c4:43:c0:77:e0:3d:89:7e:76:05:a6:ae:8a:d7:
44:05:1d:fb:83:7f:5a:d5:db:e0:66:b5:9f:18:20:69:fc:c2:
03:63:0a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2elftDV+brfYkevVlFOWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTRkMjQ3NmIzMTUxZTFlN2YwMzYwZGNlNGYzODUxMjVl
ZWQ1ZmIwHhcNMjUwNDI3MDkwMDUxWhcNMjUwNDI4MDkwMDUxWjAzMTEwLwYDVQQD
EygxYWJmMWExNDYyNTA2MThlNDFkM2Q0OTBhMTViM2NlYmJiY2JhZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxLgfThVaj0JFGGXI3VzEKAwVKuG
yAi2nsQMKCmL6Adp2WPYdk7zNQTXPNPO+Y0XMg+0d+X2kb9qQqGVhM/TeOCFD6QF
qpW9zKlRtog4C24jbc1XxM1iCaOJsbwqN1oRRvv3bq0JUiuR7LYEoa+isXHUzmZi
+QlD1mZXCwJaoL94QKP9obYMvtpoPXmwSZMN4vXzOwaJApPChBHn9xhQTGiPpB4C
iMnlslLCSk/RgWRNrrblEbRJCZnFZM46J/FVSs0Q0+htGJt3obNlhoLMo/baH8NR
Q2eG0ptL3OrrFfXcJpHQb8bgWKageckRHbTPrvTQSGDBoMIkyfw2deCvEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq/GhRiUGGOQdPUkKFbPOu7y66dMB8GA1UdIwQY
MBaAFJuU0kdrMVHh5/A2Dc5POFEl7tX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQt
ODIyZWFmMGQyMmIwLzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQtODIyZWFmMGQyMmIw
LzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPuu5O9Y
QEwF6jBIYwoZMBe2TyhChUE4KTf2X+7WxxjoreuEZyK+vKbrn1ySXEarpPUrp8Ya
zCZKa8IbmFtHQ0S/GeWtRvEsr4GWtxJmWpVN18T1r1eymo+35+hrq6Wtu7bpe/ej
H6ioNtp8KiLAaoQge61vupI2XxersYqaKQba/2APzBzKGTe4SKAkhyn+9wCxYWOZ
ZpRnPTQ8SBFlN2iheDLjc39GbxniG4czsLQeh1glg7xQgC7v+Mgg6InPRO0fc0Af
4rp0ooi44Nm6L1RVItqFsC1MX3kLF8RDwHfgPYl+dgWmrorXRAUd+4N/WtXb4Ga1
nxggafzCA2MKqw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:59 2025 by rpki-client