Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
File: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft (raw, json)
Hash identifier: DG1BUvPnoItMVM0DobP0659Ovf1DaswK8ToU5qHU2uo=
Subject key identifier: 60:8C:14:33:6E:4E:B4:27:AC:C9:BF:0A:BE:00:B6:15:5B:B4:5C:87
Authority key identifier: DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
Certificate issuer: /CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Certificate serial: 019676E7D8D0DA7DD8B7B1E4532046C52702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
Manifest number: 0351
Signing time: Sun 27 Apr 2025 11:00:27 +0000
Manifest this update: Sun 27 Apr 2025 11:00:27 +0000
Manifest next update: Mon 28 Apr 2025 11:00:27 +0000
Files and hashes: 1: 2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl (hash: k7gleaOC5WyIH1tvoluVg4lKZBIsIBp6D1skpYGzL0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:d8:d0:da:7d:d8:b7:b1:e4:53:20:46:c5:27:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daa67c58b4a6fe212fc20fb756949addc1a9a62c
Validity
Not Before: Apr 27 11:00:27 2025 GMT
Not After : Apr 28 11:00:27 2025 GMT
Subject: CN=608c14336e4eb427acc9bf0abe00b6155bb45c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:d9:12:f9:8a:e3:9d:cb:80:af:e3:d8:76:
00:2a:76:7b:0f:79:f5:af:1f:ed:da:3f:6c:ac:d6:
4d:d3:a8:4a:37:41:e4:ff:96:47:9e:f2:cb:94:99:
39:d5:69:36:de:9b:16:0d:c0:e9:10:66:89:fc:94:
43:27:23:3c:e0:17:84:bc:42:df:05:7a:a2:64:70:
7f:e7:4f:21:25:9e:1c:34:97:b8:a4:9f:9b:eb:89:
a0:65:c2:cd:40:05:b5:77:a4:f8:ff:3c:bd:19:bf:
cb:da:d3:d6:08:df:a6:4e:90:c4:9a:2a:a6:79:32:
73:69:13:5c:35:41:74:98:d6:4c:b3:09:47:47:00:
3a:33:29:51:dd:63:b3:c7:04:ae:45:1f:12:11:b5:
9a:17:80:59:e7:30:aa:7e:71:aa:08:09:bb:84:3d:
0d:79:c0:4a:80:38:1b:b7:3e:48:87:40:ae:b3:d4:
68:b0:66:74:8c:86:af:e4:fd:34:1e:f8:b4:b6:58:
55:9b:56:ee:39:b8:ad:c3:7b:d6:a5:6f:f1:db:62:
1c:c1:58:f9:82:c2:e9:ec:14:31:52:f3:de:d6:3e:
c6:24:be:e2:fb:74:ce:91:e8:97:c1:92:b6:24:47:
a1:da:6b:44:51:a8:d7:84:16:d0:89:2f:34:29:a4:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:14:33:6E:4E:B4:27:AC:C9:BF:0A:BE:00:B6:15:5B:B4:5C:87
X509v3 Authority Key Identifier:
keyid:DA:A6:7C:58:B4:A6:FE:21:2F:C2:0F:B7:56:94:9A:DD:C1:A9:A6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qZ8WLSm_iEvwg-3VpSa3cGppiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f295ce-826d-4f54-970f-50f34f435f03/1/2qZ8WLSm_iEvwg-3VpSa3cGppiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:de:09:f8:18:fd:31:74:82:c3:fe:0f:10:9b:32:f0:59:57:
76:5b:60:d4:7b:50:65:e1:56:19:de:5a:3b:08:3b:31:3f:cb:
8c:15:98:bc:3e:cc:56:1a:22:a5:91:0b:41:d5:36:1a:a6:57:
eb:56:d8:09:ef:06:ca:6c:01:20:17:3f:c3:b0:47:94:b3:29:
74:6e:fd:a1:42:43:bb:84:5e:7a:12:66:c6:e4:4c:96:34:84:
2b:be:68:51:51:f8:6e:36:db:c7:72:9f:6a:d2:ee:69:06:fa:
3f:87:1d:fb:1c:1b:1c:bb:86:65:55:fa:73:06:f9:aa:8b:9d:
85:6a:fe:89:54:2c:45:97:06:b7:9a:f3:36:cc:6a:96:e9:5d:
73:1f:e9:df:78:22:bd:23:18:ce:cc:62:9c:b7:25:6b:d3:f0:
b3:6f:f0:38:70:b5:0c:28:a4:5e:45:da:db:53:0f:4e:90:19:
a0:dd:cb:a8:42:32:91:61:7f:41:ca:2b:15:21:fb:68:e3:a9:
99:92:9b:2a:f2:bd:ff:8b:10:2a:0c:a8:c7:7d:0f:9a:a5:4b:
ca:25:94:e8:bb:6d:01:cf:3e:11:c6:50:30:e9:fa:0e:59:8b:
29:93:f5:f4:be:90:5c:05:fd:6a:fa:75:04:d4:6c:65:9e:b3:
56:8f:bd:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ259jQ2n3Yt7HkUyBGxScCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTY3YzU4YjRhNmZlMjEyZmMyMGZiNzU2OTQ5YWRkYzFh
OWE2MmMwHhcNMjUwNDI3MTEwMDI3WhcNMjUwNDI4MTEwMDI3WjAzMTEwLwYDVQQD
Eyg2MDhjMTQzMzZlNGViNDI3YWNjOWJmMGFiZTAwYjYxNTViYjQ1Yzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JXZEvmK453LgK/j2HYAKnZ7D3n1
rx/t2j9srNZN06hKN0Hk/5ZHnvLLlJk51Wk23psWDcDpEGaJ/JRDJyM84BeEvELf
BXqiZHB/508hJZ4cNJe4pJ+b64mgZcLNQAW1d6T4/zy9Gb/L2tPWCN+mTpDEmiqm
eTJzaRNcNUF0mNZMswlHRwA6MylR3WOzxwSuRR8SEbWaF4BZ5zCqfnGqCAm7hD0N
ecBKgDgbtz5Ih0Cus9RosGZ0jIav5P00Hvi0tlhVm1buObitw3vWpW/x22IcwVj5
gsLp7BQxUvPe1j7GJL7i+3TOkeiXwZK2JEeh2mtEUajXhBbQiS80KaTo1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCMFDNuTrQnrMm/Cr4AthVbtFyHMB8GA1UdIwQY
MBaAFNqmfFi0pv4hL8IPt1aUmt3BqaYsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFaOFdMU21faUV2d2ctM1ZwU2EzY0dwcGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMjk1Y2UtODI2ZC00ZjU0LTk3MGYt
NTBmMzRmNDM1ZjAzLzEvMnFaOFdMU21faUV2d2ctM1ZwU2EzY0dwcGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMjk1Y2UtODI2ZC00ZjU0LTk3MGYtNTBmMzRmNDM1ZjAz
LzEvMnFaOFdMU21faUV2d2ctM1ZwU2EzY0dwcGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN4J+Bj9
MXSCw/4PEJsy8FlXdltg1HtQZeFWGd5aOwg7MT/LjBWYvD7MVhoipZELQdU2GqZX
61bYCe8GymwBIBc/w7BHlLMpdG79oUJDu4ReehJmxuRMljSEK75oUVH4bjbbx3Kf
atLuaQb6P4cd+xwbHLuGZVX6cwb5qoudhWr+iVQsRZcGt5rzNsxqluldcx/p33gi
vSMYzsxinLcla9Pws2/wOHC1DCikXkXa21MPTpAZoN3LqEIykWF/QcorFSH7aOOp
mZKbKvK9/4sQKgyox30PmqVLyiWU6LttAc8+EcZQMOn6DlmLKZP19L6QXAX9avp1
BNRsZZ6zVo+9Zw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:44 2025 by rpki-client