Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier: mg5zo0wB20aBUf0rDanEizt0EHiK7355eebbCpJUrqc=
Subject key identifier: DD:C7:49:9A:2C:1D:4A:8B:24:E2:A7:4C:1C:F7:30:93:85:98:D5:7E
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer: /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial: 01967BA098B7C428644E34F49EF3303B75DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number: 030B
Signing time: Mon 28 Apr 2025 09:00:44 +0000
Manifest this update: Mon 28 Apr 2025 09:00:44 +0000
Manifest next update: Tue 29 Apr 2025 09:00:44 +0000
Files and hashes: 1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: V9k2tx6lVf6oUYdrd1c6XwKVWuBSrzfPw0mJoHEMAuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:98:b7:c4:28:64:4e:34:f4:9e:f3:30:3b:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Validity
Not Before: Apr 28 09:00:44 2025 GMT
Not After : Apr 29 09:00:44 2025 GMT
Subject: CN=ddc7499a2c1d4a8b24e2a74c1cf730938598d57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:00:db:c8:95:b4:56:13:72:57:36:ed:82:
16:51:d0:e9:7f:a4:b8:64:e9:a0:ab:e0:16:00:8f:
bb:a7:6c:41:aa:8c:cf:35:b7:14:f1:9c:46:28:8b:
2e:36:99:c0:b1:3e:87:39:22:60:0c:74:95:01:b3:
07:72:99:df:38:e1:92:c0:bf:e1:90:0d:67:68:3e:
25:20:9e:85:81:b3:e2:97:55:69:00:a8:b0:f1:22:
9c:ae:5d:b3:30:25:b7:fd:43:dc:90:fe:4c:29:e4:
ed:e7:98:98:97:8f:31:61:55:1e:81:79:84:84:ac:
79:4d:4c:10:56:ff:30:55:a8:96:d4:88:a5:08:bc:
62:71:b8:62:b9:fc:61:f7:f0:05:a6:ac:93:43:99:
c8:bc:2f:a7:46:a1:ed:93:6b:48:60:d2:7e:65:c0:
89:52:fa:8c:c5:51:f4:96:99:61:1c:85:d5:8d:68:
a0:92:75:e4:d9:0d:9e:b4:16:3a:b5:ed:20:b2:25:
1a:4f:ca:a0:b7:43:c3:8b:78:3e:59:9f:c7:7c:99:
f5:4b:9b:e0:76:79:14:2d:a7:bc:92:33:30:08:53:
36:35:13:79:38:d0:4a:12:f7:83:fc:0a:7a:de:2a:
41:57:8f:f5:40:a7:8d:da:9a:b1:a0:77:7b:d4:2d:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:49:9A:2C:1D:4A:8B:24:E2:A7:4C:1C:F7:30:93:85:98:D5:7E
X509v3 Authority Key Identifier:
keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c6:15:25:20:dd:cc:14:9f:c9:ad:00:6b:57:86:17:74:1a:
0c:c3:d3:52:77:5e:44:05:36:5e:b1:3c:85:a5:e9:19:fd:bb:
a0:f9:c5:48:7e:0e:e4:99:36:6f:c2:d3:80:fa:c1:9f:03:22:
e7:f3:d7:24:87:12:42:4a:49:73:b8:18:41:55:d0:4d:eb:3b:
54:52:fc:7d:1b:33:5d:0e:e8:93:2a:18:4d:a0:11:69:d0:26:
02:aa:57:a4:33:1a:d2:7a:e9:f1:f1:3c:58:c2:87:7e:5e:87:
e0:1c:91:aa:5c:47:b3:ee:62:93:4a:ef:40:d1:12:31:fa:d3:
90:2f:94:eb:57:4d:a2:26:08:f4:a5:12:04:7c:f8:bc:59:61:
01:fa:80:6b:0c:3b:fe:96:19:3d:bc:49:d3:46:5f:e0:cd:0b:
04:82:08:b8:76:35:6d:95:04:99:c5:50:d8:ca:ad:e7:b5:b4:
b7:19:f9:3e:80:01:3a:87:55:cd:1d:48:e0:d6:5f:75:b0:42:
33:ef:69:a5:b0:89:99:6f:0a:b2:f9:69:e9:76:36:fe:61:4a:
26:ab:95:90:1f:c6:51:dc:7a:d9:a9:a9:e6:e6:ce:ec:0d:21:
37:4b:97:71:d7:3a:b2:2c:b0:22:10:01:cc:c2:06:e8:5c:12:
70:0e:3e:3a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ7oJi3xChkTjT0nvMwO3XfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTYxYzJkNDk3Mzg5NzAwMGU1NmFjYjNjODQzZjIwMzRh
YTU2YTAwHhcNMjUwNDI4MDkwMDQ0WhcNMjUwNDI5MDkwMDQ0WjAzMTEwLwYDVQQD
EyhkZGM3NDk5YTJjMWQ0YThiMjRlMmE3NGMxY2Y3MzA5Mzg1OThkNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QMA28iVtFYTclc27YIWUdDpf6S4
ZOmgq+AWAI+7p2xBqozPNbcU8ZxGKIsuNpnAsT6HOSJgDHSVAbMHcpnfOOGSwL/h
kA1naD4lIJ6FgbPil1VpAKiw8SKcrl2zMCW3/UPckP5MKeTt55iYl48xYVUegXmE
hKx5TUwQVv8wVaiW1IilCLxicbhiufxh9/AFpqyTQ5nIvC+nRqHtk2tIYNJ+ZcCJ
UvqMxVH0lplhHIXVjWigknXk2Q2etBY6te0gsiUaT8qgt0PDi3g+WZ/HfJn1S5vg
dnkULae8kjMwCFM2NRN5ONBKEveD/Ap63ipBV4/1QKeN2pqxoHd71C3h+wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFN3HSZosHUqLJOKnTBz3MJOFmNV+MB8GA1UdIwQY
MBaAFPimHC1Jc4lwAOVqyzyEPyA0qlagMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LWWNMVWx6aVhBQTVXckxQSVFfSURTcVZxQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMTVhMDY3LTY5MTYtNDM4NS1hMjky
LTI3ODJlY2VlMGU5Mi8xLzEtS1ljTFVsemlYQUE1V3JMUElRX0lEU3FWcUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA2LzE1YTA2Ny02OTE2LTQzODUtYTI5Mi0yNzgyZWNlZTBl
OTIvMS8xLUtZY0xVbHppWEFBNVdyTFBJUV9JRFNxVnFBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ8YV
JSDdzBSfya0Aa1eGF3QaDMPTUndeRAU2XrE8haXpGf27oPnFSH4O5Jk2b8LTgPrB
nwMi5/PXJIcSQkpJc7gYQVXQTes7VFL8fRszXQ7okyoYTaARadAmAqpXpDMa0nrp
8fE8WMKHfl6H4ByRqlxHs+5ik0rvQNESMfrTkC+U61dNoiYI9KUSBHz4vFlhAfqA
aww7/pYZPbxJ00Zf4M0LBIIIuHY1bZUEmcVQ2Mqt57W0txn5PoABOodVzR1I4NZf
dbBCM+9ppbCJmW8Ksvlp6XY2/mFKJquVkB/GUdx62amp5ubO7A0hN0uXcdc6siyw
IhABzMIG6FwScA4+Og==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:57 2025 by rpki-client