Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
File: pr640lzi1AsMuuWcEeKSvTcXDfo.mft (raw, json)
Hash identifier: s9zp7VOdMRJA91i3kzaOYT/BISkNANvqKRcEFkPwuvA=
Subject key identifier: 54:10:22:50:E5:92:02:3A:16:B8:34:86:92:BC:BA:7C:79:75:88:AF
Authority key identifier: A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
Certificate issuer: /CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Certificate serial: 01967AC4C673AB2A286171ED420E95AB52E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
Manifest number: 0F09
Signing time: Mon 28 Apr 2025 05:00:38 +0000
Manifest this update: Mon 28 Apr 2025 05:00:38 +0000
Manifest next update: Tue 29 Apr 2025 05:00:38 +0000
Files and hashes: 1: pr640lzi1AsMuuWcEeKSvTcXDfo.crl (hash: uYZFvKWTnyqkPnNqIibhzsajRSGASgXORYpT9ffm+EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:c6:73:ab:2a:28:61:71:ed:42:0e:95:ab:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6beb8d25ce2d40b0cbae59c11e292bd37170dfa
Validity
Not Before: Apr 28 05:00:38 2025 GMT
Not After : Apr 29 05:00:38 2025 GMT
Subject: CN=54102250e592023a16b8348692bcba7c797588af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:56:2a:ad:06:51:b9:88:dc:6f:11:2c:01:
2c:72:6a:f5:c0:5e:11:ab:5a:3a:45:6d:f1:05:88:
8d:57:24:5a:3b:69:4c:3a:c7:d6:8d:07:46:26:22:
2f:41:e7:bd:86:4e:d4:ab:e9:12:0f:2a:38:73:64:
61:68:08:45:e2:a6:23:e2:be:87:02:24:8f:68:18:
f2:9d:91:3f:4d:21:62:8d:25:a4:2c:74:43:fe:8b:
54:ac:77:09:6b:5c:31:a3:d3:23:2e:4f:be:cc:c7:
e5:44:b0:a0:77:69:c5:44:4c:9e:fa:b3:65:86:45:
dd:b0:c9:76:27:38:10:bb:17:31:79:e7:70:90:77:
c1:0e:61:6c:27:d3:32:cb:ef:90:d6:b2:65:1f:e4:
30:c7:0b:a9:c1:74:cf:7b:c6:bc:18:de:d8:05:99:
61:6c:ee:44:1b:40:4b:91:2c:5d:b2:a5:a5:46:b8:
b2:15:11:ce:95:f0:82:5d:fe:a0:3e:3e:70:13:7f:
fd:3b:6e:a0:74:44:d4:3e:27:4f:a8:22:36:c9:1a:
57:c3:f8:61:87:71:b9:c5:d9:b3:1f:7f:48:f0:20:
a6:c9:dd:41:26:e1:98:fa:f0:c4:d5:6e:b7:1a:6a:
29:0e:40:8f:1f:10:ab:58:bb:b1:93:c8:f3:e1:87:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:22:50:E5:92:02:3A:16:B8:34:86:92:BC:BA:7C:79:75:88:AF
X509v3 Authority Key Identifier:
keyid:A6:BE:B8:D2:5C:E2:D4:0B:0C:BA:E5:9C:11:E2:92:BD:37:17:0D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pr640lzi1AsMuuWcEeKSvTcXDfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5424d9-5348-4f6f-9390-45a40a21b8d3/1/pr640lzi1AsMuuWcEeKSvTcXDfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a9:e6:f9:82:5b:07:21:16:43:ac:28:78:86:ed:de:08:16:
93:fd:5c:26:8f:1e:0d:2b:28:bd:8f:d4:29:a8:4f:cf:08:6f:
5b:d2:e3:20:c0:a1:b5:ae:87:31:d3:e6:3e:e2:76:a6:78:79:
53:3a:40:48:4e:dc:a1:c8:28:82:6b:36:cd:3d:fc:07:e6:bb:
42:85:ab:c7:fd:22:3e:df:a9:82:14:03:14:aa:cb:53:60:3e:
4f:72:d5:19:4c:29:13:db:cf:01:5b:be:f6:f3:38:e6:42:8d:
3e:2c:f5:a8:67:97:96:d6:e0:e6:57:9c:8d:d0:71:51:f1:cd:
a8:68:3d:8f:8d:af:70:39:c4:02:4d:44:00:91:17:a2:b1:e7:
ea:88:d6:85:b7:ca:61:b1:bf:9c:32:84:d7:a6:14:c1:82:c3:
65:9d:24:0a:49:e9:aa:c3:1d:e6:a9:08:31:b0:b8:b3:05:20:
6e:92:0d:3c:27:bd:49:e1:8c:9f:a4:37:ac:11:d3:6d:98:2d:
a8:53:aa:6d:48:cd:77:31:02:ca:00:67:39:9a:ff:fe:f0:07:
49:18:93:ff:ed:1d:fd:f6:ae:8a:66:58:00:ce:cb:49:e7:f3:
0a:b8:31:ff:87:48:ae:0c:38:05:a8:68:b8:32:37:78:72:3d:
a8:9a:11:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xMZzqyooYXHtQg6Vq1LmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YmViOGQyNWNlMmQ0MGIwY2JhZTU5YzExZTI5MmJkMzcx
NzBkZmEwHhcNMjUwNDI4MDUwMDM4WhcNMjUwNDI5MDUwMDM4WjAzMTEwLwYDVQQD
Eyg1NDEwMjI1MGU1OTIwMjNhMTZiODM0ODY5MmJjYmE3Yzc5NzU4OGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0FWKq0GUbmI3G8RLAEscmr1wF4R
q1o6RW3xBYiNVyRaO2lMOsfWjQdGJiIvQee9hk7Uq+kSDyo4c2RhaAhF4qYj4r6H
AiSPaBjynZE/TSFijSWkLHRD/otUrHcJa1wxo9MjLk++zMflRLCgd2nFREye+rNl
hkXdsMl2JzgQuxcxeedwkHfBDmFsJ9Myy++Q1rJlH+QwxwupwXTPe8a8GN7YBZlh
bO5EG0BLkSxdsqWlRriyFRHOlfCCXf6gPj5wE3/9O26gdETUPidPqCI2yRpXw/hh
h3G5xdmzH39I8CCmyd1BJuGY+vDE1W63GmopDkCPHxCrWLuxk8jz4YfgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQQIlDlkgI6Frg0hpK8unx5dYivMB8GA1UdIwQY
MBaAFKa+uNJc4tQLDLrlnBHikr03Fw36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81NDI0ZDktNTM0OC00ZjZmLTkzOTAt
NDVhNDBhMjFiOGQzLzEvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81NDI0ZDktNTM0OC00ZjZmLTkzOTAtNDVhNDBhMjFiOGQz
LzEvcHI2NDBsemkxQXNNdXVXY0VlS1N2VGNYRGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkanm+YJb
ByEWQ6woeIbt3ggWk/1cJo8eDSsovY/UKahPzwhvW9LjIMChta6HMdPmPuJ2pnh5
UzpASE7cocgogms2zT38B+a7QoWrx/0iPt+pghQDFKrLU2A+T3LVGUwpE9vPAVu+
9vM45kKNPiz1qGeXltbg5lecjdBxUfHNqGg9j42vcDnEAk1EAJEXorHn6ojWhbfK
YbG/nDKE16YUwYLDZZ0kCknpqsMd5qkIMbC4swUgbpINPCe9SeGMn6Q3rBHTbZgt
qFOqbUjNdzECygBnOZr//vAHSRiT/+0d/fauimZYAM7LSefzCrgx/4dIrgw4Baho
uDI3eHI9qJoRdw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:28:47 2025 by rpki-client