
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File: jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier: GaH3yqevWp3T+c3fXkQHcGP0uLwkmSB+ntUdT2yixpU=
Subject key identifier: 63:4D:4C:80:6F:79:3A:16:60:9F:A9:D9:92:4B:7D:84:0B:81:90:27
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer: /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial: 019696E11BAD641A18610C5D9D68E3C2B911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number: 151D
Signing time: Sat 03 May 2025 16:00:57 +0000
Manifest this update: Sat 03 May 2025 16:00:57 +0000
Manifest next update: Sun 04 May 2025 16:00:57 +0000
Files and hashes: 1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: 2aSQd/hpZCvMKUWFLSf7YAxeWNZr5apDI3JXHoIJXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e1:1b:ad:64:1a:18:61:0c:5d:9d:68:e3:c2:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Validity
Not Before: May 3 16:00:57 2025 GMT
Not After : May 4 16:00:57 2025 GMT
Subject: CN=634d4c806f793a16609fa9d9924b7d840b819027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6a:cc:91:6a:79:ba:c9:a7:ae:7b:81:41:70:
b6:0b:66:7f:a3:61:23:ac:af:38:01:0e:00:6c:78:
80:34:e2:cc:00:f4:28:1e:a6:de:9d:ac:c9:85:e4:
80:8a:e5:4a:f6:a9:25:5f:79:f8:c3:b7:86:cf:86:
63:e2:4d:a8:ba:eb:0c:98:d4:c0:04:ec:18:b3:a5:
42:db:77:f0:e1:8e:5e:fa:49:09:1f:cc:ed:52:d0:
a5:f8:47:44:9a:3d:0a:8b:21:8a:9d:8f:09:a7:ab:
92:2e:f7:77:4c:b2:eb:94:58:f2:bd:6c:57:53:db:
ea:7d:8a:81:00:18:d4:55:fc:7b:fb:47:18:09:76:
c3:0b:aa:f7:ea:75:d2:cf:11:31:62:a0:f3:8a:41:
08:d5:76:47:ca:10:f8:7f:cf:5d:65:18:be:7f:b9:
89:9b:35:32:15:8d:95:b4:0b:81:c6:e7:cc:bd:d9:
f5:a1:7f:c2:72:75:52:88:b3:f5:1a:02:0a:e7:a3:
64:01:e9:9c:cf:a3:3e:b8:d2:f9:a8:8b:26:1c:c0:
a3:b8:73:46:17:fc:01:59:87:a6:ad:dc:d5:3d:5f:
d5:57:b2:21:19:76:04:23:28:69:eb:ac:83:88:c3:
ff:1a:f2:95:fa:94:fe:b8:0e:be:0a:3f:fd:59:8d:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:4C:80:6F:79:3A:16:60:9F:A9:D9:92:4B:7D:84:0B:81:90:27
X509v3 Authority Key Identifier:
keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c7:bc:b1:6d:a8:79:c8:8b:74:74:fe:09:f1:a1:59:b4:da:
15:d7:ff:42:98:8e:df:89:48:43:a1:c7:d1:5d:42:77:31:14:
96:79:5c:af:6c:4a:d3:4a:bf:eb:23:e2:ee:0f:82:e6:17:9d:
ff:b7:51:77:11:9a:e8:e5:4e:d5:c2:54:e1:c4:dc:a0:14:9a:
57:2d:68:7a:1b:bf:cc:51:3c:a5:49:ca:8c:3b:13:6d:29:10:
ae:b6:9a:b4:ee:dd:3b:9d:20:07:41:d6:b8:47:4f:1d:92:30:
92:c8:c6:39:2c:b4:31:fa:91:26:77:da:85:43:22:00:f8:33:
71:4b:5d:26:69:82:33:86:df:3b:df:dd:4e:9b:78:7f:d6:02:
21:ae:57:79:d5:d3:b4:6a:47:da:5b:1a:1b:f6:4a:23:0c:56:
22:ad:cf:21:10:d4:48:f8:32:03:85:7d:5d:ba:30:b7:24:9d:
d9:c7:77:93:87:8b:ab:27:d0:c6:d5:35:e8:93:ef:48:c7:8d:
7b:30:6d:17:41:4c:8d:1d:4a:91:99:72:b7:fc:17:f1:93:b9:
0d:f4:ea:dd:e6:de:ab:85:f8:30:c1:04:d2:fe:5b:eb:97:23:
38:b4:72:a0:6d:e2:b1:5b:0a:c5:55:6f:6e:55:33:f9:9f:9e:
44:c2:08:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaW4RutZBoYYQxdnWjjwrkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZTQyYzU2MGZjMjI4YjViYjRmNGNmMDBlZGUyZGZlMjZj
NjYzMGIwHhcNMjUwNTAzMTYwMDU3WhcNMjUwNTA0MTYwMDU3WjAzMTEwLwYDVQQD
Eyg2MzRkNGM4MDZmNzkzYTE2NjA5ZmE5ZDk5MjRiN2Q4NDBiODE5MDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WrMkWp5usmnrnuBQXC2C2Z/o2Ej
rK84AQ4AbHiANOLMAPQoHqbenazJheSAiuVK9qklX3n4w7eGz4Zj4k2ouusMmNTA
BOwYs6VC23fw4Y5e+kkJH8ztUtCl+EdEmj0KiyGKnY8Jp6uSLvd3TLLrlFjyvWxX
U9vqfYqBABjUVfx7+0cYCXbDC6r36nXSzxExYqDzikEI1XZHyhD4f89dZRi+f7mJ
mzUyFY2VtAuBxufMvdn1oX/CcnVSiLP1GgIK56NkAemcz6M+uNL5qIsmHMCjuHNG
F/wBWYemrdzVPV/VV7IhGXYEIyhp66yDiMP/GvKV+pT+uA6+Cj/9WY0N1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNNTIBveToWYJ+p2ZJLfYQLgZAnMB8GA1UdIwQY
MBaAFI3kLFYPwii1u09M8A7eLf4mxmMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMt
M2JmODNiN2UxN2JjLzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMtM2JmODNiN2UxN2Jj
LzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMe8sW2o
eciLdHT+CfGhWbTaFdf/QpiO34lIQ6HH0V1CdzEUlnlcr2xK00q/6yPi7g+C5hed
/7dRdxGa6OVO1cJU4cTcoBSaVy1oehu/zFE8pUnKjDsTbSkQrraatO7dO50gB0HW
uEdPHZIwksjGOSy0MfqRJnfahUMiAPgzcUtdJmmCM4bfO9/dTpt4f9YCIa5XedXT
tGpH2lsaG/ZKIwxWIq3PIRDUSPgyA4V9XbowtySd2cd3k4eLqyfQxtU16JPvSMeN
ezBtF0FMjR1KkZlyt/wX8ZO5DfTq3ebeq4X4MMEE0v5b65cjOLRyoG3isVsKxVVv
blUz+Z+eRMIISA==
-----END CERTIFICATE-----
Generated at Sat May 3 23:29:56 2025 by rpki-client