Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
File: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft (raw, json)
Hash identifier: uVjOJFLJ4sUdwlnL1DXOzaPFM9wXYQhtTQyIAtmfMBQ=
Subject key identifier: 37:43:FA:49:32:D8:AD:4C:27:BD:6D:4C:AC:C9:DB:08:CF:B8:33:94
Authority key identifier: 21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
Certificate issuer: /CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Certificate serial: 01968AA62D71370DB4DB32A4D4557BD4E9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
Manifest number: 08BA
Signing time: Thu 01 May 2025 07:01:08 +0000
Manifest this update: Thu 01 May 2025 07:01:08 +0000
Manifest next update: Fri 02 May 2025 07:01:08 +0000
Files and hashes: 1: Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl (hash: MIiKGjQGcGW80K+5yP4zraFhoEAC28TI8nRi97L3ZzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:a6:2d:71:37:0d:b4:db:32:a4:d4:55:7b:d4:e9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ce311c8ed60bef1b5e4f7d3b864107814418a3
Validity
Not Before: May 1 07:01:08 2025 GMT
Not After : May 2 07:01:08 2025 GMT
Subject: CN=3743fa4932d8ad4c27bd6d4cacc9db08cfb83394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:ad:b4:42:aa:47:ff:e9:05:4d:76:a0:85:
07:d8:d3:3c:b0:22:a8:3d:cd:a5:13:3c:79:fc:77:
0b:a2:4d:41:2b:d9:d1:1c:87:bb:b7:d6:5d:a0:cf:
1a:3b:b6:42:bf:95:90:50:a5:bc:98:9f:84:57:a8:
5d:ce:2d:87:6a:b0:97:b6:5c:6b:b6:40:08:dc:ef:
9f:1f:90:b9:b4:de:41:eb:9a:05:67:81:45:37:39:
a7:ea:05:9b:3a:e3:16:d8:f4:88:07:96:f1:a0:37:
49:23:ee:e1:2a:30:02:1c:ab:91:f7:8f:c0:7b:98:
37:90:ea:44:03:01:e8:d6:b7:6f:4d:60:64:98:48:
1f:21:e8:ca:e8:86:fc:6e:cd:cb:ab:cb:b7:ef:a0:
da:71:8b:cb:f1:78:50:56:f0:20:9e:87:79:c9:21:
81:88:4e:8c:a4:1e:cd:32:64:d4:58:a8:0d:b4:de:
10:b9:6a:5a:4c:f1:ed:79:fb:73:46:73:27:d1:5b:
f7:25:b1:d2:bc:9f:ad:24:b6:cc:d0:56:b8:fd:f3:
12:41:ff:6f:47:e4:5c:7f:d3:dd:6c:e2:b6:62:29:
be:e4:6d:8b:7b:0b:2f:e5:2a:bc:3a:b9:5f:2b:aa:
1a:30:e2:00:f2:5c:42:c3:1e:5d:c6:f4:ba:ae:7d:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:FA:49:32:D8:AD:4C:27:BD:6D:4C:AC:C9:DB:08:CF:B8:33:94
X509v3 Authority Key Identifier:
keyid:21:CE:31:1C:8E:D6:0B:EF:1B:5E:4F:7D:3B:86:41:07:81:44:18:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6bac55-9aaa-4530-8ff4-6027a6839ae4/1/Ic4xHI7WC-8bXk99O4ZBB4FEGKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:17:c3:64:3d:e5:05:48:ea:6c:bb:96:75:35:7a:08:95:
aa:64:72:21:0b:fe:6f:eb:8e:c3:87:38:e2:94:e0:fb:f4:31:
14:77:a3:ec:17:d5:fc:bb:e9:f2:2c:c3:51:53:89:bf:19:db:
02:81:39:5b:7d:48:e2:ee:ca:12:17:32:2b:ba:e1:bd:03:93:
42:7a:30:2d:3a:7a:e0:fa:21:41:c5:af:71:13:e2:b8:02:16:
99:41:28:8b:0a:d6:b1:b0:c0:67:e3:4f:b9:66:05:db:e4:70:
9e:44:82:ce:87:95:52:84:f6:31:33:14:03:6b:bd:24:d0:c5:
72:65:70:bf:f4:11:62:af:c0:c3:f9:19:c5:16:3d:ec:d8:41:
e0:97:e9:2f:ff:3e:ee:c5:a5:22:b7:bc:6c:f1:39:7f:4a:8d:
a1:e3:96:52:f8:21:21:de:08:ca:e6:dc:18:2c:01:2b:21:df:
ff:62:68:e4:f6:73:db:96:d4:36:ce:c9:95:8f:ab:0d:b6:02:
40:04:ff:2e:db:57:97:32:7f:66:33:72:4d:6b:05:4a:4c:ff:
f8:75:55:79:b9:a7:c7:2e:83:e0:89:01:7a:42:26:fa:ce:58:
9a:02:d7:ea:fe:d9:f1:29:5e:45:e7:b6:9e:34:87:e8:9d:29:
89:9b:4a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKpi1xNw202zKk1FV71OmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxY2UzMTFjOGVkNjBiZWYxYjVlNGY3ZDNiODY0MTA3ODE0
NDE4YTMwHhcNMjUwNTAxMDcwMTA4WhcNMjUwNTAyMDcwMTA4WjAzMTEwLwYDVQQD
EygzNzQzZmE0OTMyZDhhZDRjMjdiZDZkNGNhY2M5ZGIwOGNmYjgzMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK6ttEKqR//pBU12oIUH2NM8sCKo
Pc2lEzx5/HcLok1BK9nRHIe7t9ZdoM8aO7ZCv5WQUKW8mJ+EV6hdzi2HarCXtlxr
tkAI3O+fH5C5tN5B65oFZ4FFNzmn6gWbOuMW2PSIB5bxoDdJI+7hKjACHKuR94/A
e5g3kOpEAwHo1rdvTWBkmEgfIejK6Ib8bs3Lq8u376DacYvL8XhQVvAgnod5ySGB
iE6MpB7NMmTUWKgNtN4QuWpaTPHteftzRnMn0Vv3JbHSvJ+tJLbM0Fa4/fMSQf9v
R+Rcf9PdbOK2Yim+5G2Lewsv5Sq8OrlfK6oaMOIA8lxCwx5dxvS6rn36FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdD+kky2K1MJ71tTKzJ2wjPuDOUMB8GA1UdIwQY
MBaAFCHOMRyO1gvvG15PfTuGQQeBRBijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQt
NjAyN2E2ODM5YWU0LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi82YmFjNTUtOWFhYS00NTMwLThmZjQtNjAyN2E2ODM5YWU0
LzEvSWM0eEhJN1dDLThiWGs5OU80WkJCNEZFR0tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARw0Xw2Q9
5QVI6my7lnU1egiVqmRyIQv+b+uOw4c44pTg+/QxFHej7BfV/Lvp8izDUVOJvxnb
AoE5W31I4u7KEhcyK7rhvQOTQnowLTp64PohQcWvcRPiuAIWmUEoiwrWsbDAZ+NP
uWYF2+RwnkSCzoeVUoT2MTMUA2u9JNDFcmVwv/QRYq/Aw/kZxRY97NhB4JfpL/8+
7sWlIre8bPE5f0qNoeOWUvghId4IyubcGCwBKyHf/2Jo5PZz25bUNs7JlY+rDbYC
QAT/LttXlzJ/ZjNyTWsFSkz/+HVVebmnxy6D4IkBekIm+s5YmgLX6v7Z8SleRee2
njSH6J0piZtKog==
-----END CERTIFICATE-----
Generated at Thu May 1 16:20:28 2025 by rpki-client