Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File: cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier: 6MDYzkpdnhMq5WFlU74gi7I6+2u7rsNop7QkaA44dPM=
Subject key identifier: 93:3A:B9:B7:CC:61:8D:24:35:F3:C8:06:D3:74:12:8C:92:62:C8:15
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer: /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial: 01969304EF366630DE0C95C6CA98F3DCA4A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number: 1062
Signing time: Fri 02 May 2025 22:01:36 +0000
Manifest this update: Fri 02 May 2025 22:01:36 +0000
Manifest next update: Sat 03 May 2025 22:01:36 +0000
Files and hashes: 1: PpEWGz-OwlSLlk0QHrICVTcwUWc.roa (hash: WptBbhD5BCS6QBVvLotY3hLMhEGQcn9whh44ucm6M50=)
2: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: QHRCIYkufC7WEWPTGsNZ71v1zUgZm7YK+TEcEiKxABk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:04:ef:36:66:30:de:0c:95:c6:ca:98:f3:dc:a4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
Validity
Not Before: May 2 22:01:36 2025 GMT
Not After : May 3 22:01:36 2025 GMT
Subject: CN=933ab9b7cc618d2435f3c806d374128c9262c815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:2c:bf:c2:99:6d:50:21:91:1e:a7:38:61:
0e:0d:cd:c0:5e:46:41:68:b7:c3:e4:b5:8f:37:c8:
3d:12:1b:be:ed:25:f2:c3:16:29:1e:27:09:f4:d5:
c6:bf:80:78:b4:9b:88:52:e4:a0:fe:12:a9:71:08:
cd:6f:c4:47:f4:29:2c:0c:e0:c2:74:9e:52:13:f6:
a7:11:41:94:30:e7:55:60:5a:d6:dc:38:d4:d6:9a:
02:11:0a:a1:74:38:f9:94:0a:49:7a:6a:4b:e6:14:
c7:51:04:1c:bb:26:96:14:2c:9a:1a:39:75:6d:76:
9a:92:09:87:25:c6:1d:c6:7f:b3:46:97:1e:3c:79:
5c:2a:05:1c:d0:72:dc:53:bd:0f:d3:43:42:4b:13:
a6:28:6f:65:e6:c2:f8:e9:8b:0a:e1:63:e1:e8:15:
db:b3:93:0c:e0:be:39:f2:a8:29:13:bb:8e:27:aa:
01:0b:89:5e:88:dc:11:6f:c2:78:bb:a1:61:17:00:
d5:d2:73:cb:a5:d8:af:2f:72:60:b0:54:b8:59:d1:
b8:d8:9c:d3:2b:8f:e0:1c:b9:b7:73:39:11:36:fb:
96:3a:fe:13:e0:55:49:49:ea:42:3b:95:3d:04:07:
bb:64:c9:d5:57:07:8e:50:3d:6a:d8:fd:1d:29:19:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3A:B9:B7:CC:61:8D:24:35:F3:C8:06:D3:74:12:8C:92:62:C8:15
X509v3 Authority Key Identifier:
keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:65:63:8a:c3:d0:91:f6:20:84:f7:60:64:13:4e:ca:e9:e5:
09:ab:a4:88:9d:e1:b5:f8:1b:b8:28:1f:25:90:21:f9:f9:35:
e5:04:af:32:ef:ad:c6:13:66:69:6d:6d:50:7d:5c:d5:5e:11:
f9:05:c9:8c:13:ac:56:8f:38:af:47:81:2a:ff:fd:95:7c:ca:
31:0c:3f:c4:0b:95:db:84:c9:0e:46:b9:e9:6c:46:b4:c7:bf:
ee:96:19:3a:75:e3:3b:79:5b:7e:20:7d:c7:e5:48:59:0d:62:
03:87:79:86:8b:43:3f:60:47:0a:96:f4:65:65:43:e8:c9:17:
01:20:d5:ba:bb:26:5e:d4:36:bf:4a:ea:7f:4e:c4:b8:ec:5e:
76:3f:da:6f:bc:d1:95:1d:a9:15:85:f2:9a:ef:d3:d5:58:84:
ae:4d:48:5d:eb:bb:62:be:b4:0e:76:fd:8b:3f:ef:2e:4e:ba:
d0:25:de:ff:a0:fe:6a:d0:71:33:5c:2e:a8:a6:56:f8:39:c3:
12:e4:f9:d6:c6:e6:de:59:47:f7:11:13:7e:87:14:bf:15:76:
ee:30:b9:74:1b:fa:71:0a:86:ac:1c:c7:87:97:cf:6f:a7:d6:
a6:e1:07:4a:6d:05:fa:5e:58:3a:bb:35:e6:48:5d:b0:7f:7f:
97:e2:1f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaTBO82ZjDeDJXGypjz3KSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2M0OGVkNDZjYjc5NDkwZTE2NjJkYjAxYzMxZDAyZDAy
ZWZmZTIwHhcNMjUwNTAyMjIwMTM2WhcNMjUwNTAzMjIwMTM2WjAzMTEwLwYDVQQD
Eyg5MzNhYjliN2NjNjE4ZDI0MzVmM2M4MDZkMzc0MTI4YzkyNjJjODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubIsv8KZbVAhkR6nOGEODc3AXkZB
aLfD5LWPN8g9Ehu+7SXywxYpHicJ9NXGv4B4tJuIUuSg/hKpcQjNb8RH9CksDODC
dJ5SE/anEUGUMOdVYFrW3DjU1poCEQqhdDj5lApJempL5hTHUQQcuyaWFCyaGjl1
bXaakgmHJcYdxn+zRpcePHlcKgUc0HLcU70P00NCSxOmKG9l5sL46YsK4WPh6BXb
s5MM4L458qgpE7uOJ6oBC4leiNwRb8J4u6FhFwDV0nPLpdivL3JgsFS4WdG42JzT
K4/gHLm3czkRNvuWOv4T4FVJSepCO5U9BAe7ZMnVVweOUD1q2P0dKRl3wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJM6ubfMYY0kNfPIBtN0EoySYsgVMB8GA1UdIwQY
MBaAFHA8SO1Gy3lJDhZi2wHDHQLQLv/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEt
MzU4ODNhZjlhMzIzLzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kYTFjNDMtMTkxNi00NmFlLTg0OTEtMzU4ODNhZjlhMzIz
LzEvY0R4STdVYkxlVWtPRm1MYkFjTWRBdEF1Xy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2VjisPQ
kfYghPdgZBNOyunlCaukiJ3htfgbuCgfJZAh+fk15QSvMu+txhNmaW1tUH1c1V4R
+QXJjBOsVo84r0eBKv/9lXzKMQw/xAuV24TJDka56WxGtMe/7pYZOnXjO3lbfiB9
x+VIWQ1iA4d5hotDP2BHCpb0ZWVD6MkXASDVursmXtQ2v0rqf07EuOxedj/ab7zR
lR2pFYXymu/T1ViErk1IXeu7Yr60Dnb9iz/vLk660CXe/6D+atBxM1wuqKZW+DnD
EuT51sbm3llH9xETfocUvxV27jC5dBv6cQqGrBzHh5fPb6fWpuEHSm0F+l5YOrs1
5khdsH9/l+IfsA==
-----END CERTIFICATE-----
Generated at Sat May 3 05:15:43 2025 by rpki-client