Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
File: PbRBy1aafHmaEFn_VzI7g3yqpU4.mft (raw, json)
Hash identifier: czF3oFuruu9Hy/tS7S+1cIvl6Ul2IVMMc/CPHLAclLw=
Subject key identifier: 44:DA:B8:02:32:C5:19:04:13:79:1F:19:3F:BE:87:95:66:65:EF:53
Authority key identifier: 3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
Certificate issuer: /CN=3db441cb569a7c799a1059ff57323b837caaa54e
Certificate serial: 019680FE1D935A30585A0FB7C03ED1DFA0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
Manifest number: 0271
Signing time: Tue 29 Apr 2025 10:00:59 +0000
Manifest this update: Tue 29 Apr 2025 10:00:59 +0000
Manifest next update: Wed 30 Apr 2025 10:00:59 +0000
Files and hashes: 1: PbRBy1aafHmaEFn_VzI7g3yqpU4.crl (hash: 2eJCuoknBhuMdAm24P3wGlZmZDvUpX9cmGFOB2djFrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:1d:93:5a:30:58:5a:0f:b7:c0:3e:d1:df:a0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db441cb569a7c799a1059ff57323b837caaa54e
Validity
Not Before: Apr 29 10:00:59 2025 GMT
Not After : Apr 30 10:00:59 2025 GMT
Subject: CN=44dab80232c5190413791f193fbe87956665ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:b7:7b:32:8c:6c:19:3b:9e:58:1b:b7:d5:
09:d2:b3:06:cf:e3:c0:4a:91:9a:71:34:c7:a0:98:
94:7c:4d:56:a1:dd:51:26:a9:85:80:f6:b3:a2:5f:
d3:d7:68:e7:02:4f:d4:f7:0b:d4:bd:fd:80:53:83:
06:94:5d:fc:2f:a1:1e:e3:91:3b:e4:25:e8:1c:ff:
ae:fc:5c:11:12:1b:ee:94:da:8d:d7:fc:d9:cd:d3:
0c:23:c6:f0:4c:dd:04:ec:bc:77:bd:d2:61:4c:6a:
30:27:cb:90:5e:40:fc:b1:16:18:18:bd:d4:93:46:
6f:d2:1d:af:97:6e:31:cc:d0:fd:fb:09:2f:bd:e7:
3f:71:8d:ff:6f:c7:3d:93:44:4f:e5:db:e5:17:f4:
ad:34:e6:ea:c1:16:2b:cb:4d:0f:d5:33:ca:94:8f:
bf:26:88:28:5e:94:11:e5:84:ce:4a:c9:3d:a4:86:
82:05:06:0c:f2:59:19:43:f8:68:f3:a5:a2:e7:ee:
79:d6:fe:e1:c1:88:d2:c8:fa:f0:7a:f4:20:20:18:
85:f0:43:55:af:a2:f3:4b:77:49:f5:b0:cd:d5:b1:
89:4e:c2:12:43:11:69:cf:12:a2:62:ea:4c:11:29:
fe:f7:87:f5:7c:85:74:61:cf:81:aa:ce:8c:0a:90:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DA:B8:02:32:C5:19:04:13:79:1F:19:3F:BE:87:95:66:65:EF:53
X509v3 Authority Key Identifier:
keyid:3D:B4:41:CB:56:9A:7C:79:9A:10:59:FF:57:32:3B:83:7C:AA:A5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbRBy1aafHmaEFn_VzI7g3yqpU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6bbce4-c7d6-4418-9368-247a86b40d5d/1/PbRBy1aafHmaEFn_VzI7g3yqpU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:23:ee:09:82:f1:54:06:97:99:8b:5d:75:47:3f:e5:0d:fa:
12:02:e8:cf:6b:03:b2:7a:8a:de:e1:61:e4:26:da:ae:02:51:
00:79:05:f8:03:a3:ee:16:58:f7:86:b8:e2:29:63:e2:5a:07:
57:f6:1f:9e:0f:d6:28:60:a7:c6:99:f9:d4:13:4c:74:30:5b:
da:44:21:83:c4:b6:81:16:7f:c2:7d:69:b9:42:30:62:d4:84:
91:3f:0c:09:d9:86:66:b9:a5:be:64:26:3f:48:f8:9a:9e:f7:
35:7f:a8:fe:7d:30:2e:ca:1e:f9:6e:e3:43:5f:8a:6a:10:f1:
8f:55:8d:07:b2:12:40:14:c6:4b:35:65:8a:a5:c0:69:05:d4:
ea:8b:50:9f:9e:5f:bd:c0:17:af:59:4b:85:70:a0:3b:a1:21:
2e:fc:73:43:c5:0e:58:ab:a5:ed:a7:c3:8b:cb:2b:2c:6f:66:
99:37:63:24:82:ef:76:67:73:37:62:6f:1a:fd:01:43:4a:ac:
6e:6f:a6:0c:e4:1f:8a:e5:42:e4:c6:29:ba:bb:a0:2c:52:b3:
01:24:6e:e0:55:87:6c:05:1d:c8:ce:18:1d:37:51:e2:8b:a6:
d3:a0:8a:80:b4:16:e1:af:e9:9c:d2:db:d6:58:06:3e:37:03:
e5:7b:e9:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/h2TWjBYWg+3wD7R36CnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYjQ0MWNiNTY5YTdjNzk5YTEwNTlmZjU3MzIzYjgzN2Nh
YWE1NGUwHhcNMjUwNDI5MTAwMDU5WhcNMjUwNDMwMTAwMDU5WjAzMTEwLwYDVQQD
Eyg0NGRhYjgwMjMyYzUxOTA0MTM3OTFmMTkzZmJlODc5NTY2NjVlZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN63ezKMbBk7nlgbt9UJ0rMGz+PA
SpGacTTHoJiUfE1Wod1RJqmFgPazol/T12jnAk/U9wvUvf2AU4MGlF38L6Ee45E7
5CXoHP+u/FwREhvulNqN1/zZzdMMI8bwTN0E7Lx3vdJhTGowJ8uQXkD8sRYYGL3U
k0Zv0h2vl24xzND9+wkvvec/cY3/b8c9k0RP5dvlF/StNObqwRYry00P1TPKlI+/
JogoXpQR5YTOSsk9pIaCBQYM8lkZQ/ho86Wi5+551v7hwYjSyPrwevQgIBiF8ENV
r6LzS3dJ9bDN1bGJTsISQxFpzxKiYupMESn+94f1fIV0Yc+Bqs6MCpD2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETauAIyxRkEE3kfGT++h5VmZe9TMB8GA1UdIwQY
MBaAFD20QctWmnx5mhBZ/1cyO4N8qqVOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgt
MjQ3YTg2YjQwZDVkLzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82YmJjZTQtYzdkNi00NDE4LTkzNjgtMjQ3YTg2YjQwZDVk
LzEvUGJSQnkxYWFmSG1hRUZuX1Z6STdnM3lxcFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiPuCYLx
VAaXmYtddUc/5Q36EgLoz2sDsnqK3uFh5CbargJRAHkF+AOj7hZY94a44ilj4loH
V/Yfng/WKGCnxpn51BNMdDBb2kQhg8S2gRZ/wn1puUIwYtSEkT8MCdmGZrmlvmQm
P0j4mp73NX+o/n0wLsoe+W7jQ1+KahDxj1WNB7ISQBTGSzVliqXAaQXU6otQn55f
vcAXr1lLhXCgO6EhLvxzQ8UOWKul7afDi8srLG9mmTdjJILvdmdzN2JvGv0BQ0qs
bm+mDOQfiuVC5MYpurugLFKzASRu4FWHbAUdyM4YHTdR4oum06CKgLQW4a/pnNLb
1lgGPjcD5XvpMg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:52 2025 by rpki-client