Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
File: 2jIgJypGmu1lzCp_bZf8qZH37IE.mft (raw, json)
Hash identifier: nUKUtgAqzMmr1MOWQTw9aEtLQneNMPzP61Uahx1/sZo=
Subject key identifier: 3E:7F:00:FD:FB:F2:AA:63:97:2B:A4:F0:01:94:54:B9:48:77:17:71
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Certificate issuer: /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial: 01967943D5C06A5EA00275C934C0AFDE33C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 22:00:10 +0000
Manifest this update: Sun 27 Apr 2025 22:00:10 +0000
Manifest next update: Mon 28 Apr 2025 22:00:10 +0000
Files and hashes: 1: 2jIgJypGmu1lzCp_bZf8qZH37IE.crl (hash: EN3DxxQ7DSu9LnTaZEgCPI/ICMNx9GXbawK6fjV1DoY=)
2: G5AySBQmGTZguSR2UN46mLZeA6A.roa (hash: 6MYLur+lADg+zzLuGL4/PdmDjdeT2Db312IWeWciAtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:43:d5:c0:6a:5e:a0:02:75:c9:34:c0:af:de:33:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Validity
Not Before: Apr 27 22:00:10 2025 GMT
Not After : Apr 28 22:00:10 2025 GMT
Subject: CN=3e7f00fdfbf2aa63972ba4f0019454b948771771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:a2:08:57:e7:ca:94:fa:0f:d3:9f:9a:f0:
eb:05:3f:5d:da:2d:64:c3:27:8e:39:49:2b:71:39:
bd:f8:ba:8e:f8:ef:b3:ea:9e:00:bf:4f:de:73:28:
82:e6:29:b9:a5:51:46:6a:e7:27:c2:db:7c:37:c4:
4f:3a:b5:99:0b:7d:87:6d:f8:c0:31:72:82:90:c0:
34:63:2e:e8:cc:22:d6:ae:c9:70:bb:a6:4e:71:a7:
c8:30:2e:e6:c5:fb:a2:dc:ec:ad:43:14:ca:d0:d4:
5d:51:b2:eb:22:51:8e:1a:95:89:6d:b3:0c:07:12:
ec:cc:f3:3f:45:bf:a3:56:04:f9:23:95:9a:68:a2:
e9:c3:24:7c:be:a9:16:f9:40:27:dc:6a:e8:95:85:
16:aa:48:79:46:7d:89:99:87:7a:f8:ca:c6:42:ce:
77:78:30:4d:d0:93:4d:d6:d1:e6:e2:7c:3d:3b:0f:
7b:cb:11:66:1c:5e:27:31:1e:1f:e1:cc:f1:58:b8:
fb:62:6b:5f:d4:75:df:1f:47:e6:e8:a7:94:80:d9:
27:c5:07:f2:14:a3:f3:ee:8e:c7:8e:a1:8f:cb:14:
e1:85:d8:8a:d9:f0:29:90:67:1a:15:d2:e8:16:b3:
4d:0f:5b:94:76:a0:86:94:8b:02:1d:0f:ba:df:75:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7F:00:FD:FB:F2:AA:63:97:2B:A4:F0:01:94:54:B9:48:77:17:71
X509v3 Authority Key Identifier:
keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:f6:1d:c2:b6:35:03:57:1c:03:58:6f:3d:15:d5:46:3c:
63:a7:93:c0:82:f9:7c:c8:df:a5:5f:8b:ae:b7:45:bf:e6:a7:
af:6b:5d:2e:be:a7:4c:0f:21:62:37:b8:7f:3e:cd:a1:3f:53:
16:97:00:5c:75:72:1b:9d:04:45:01:d6:5e:d8:a6:08:63:ee:
02:e6:be:49:34:e3:24:ae:45:1c:a8:b5:04:e4:cc:d1:cd:4b:
b3:12:bc:b1:54:5d:1f:9e:a1:fe:41:69:55:05:bd:af:e7:56:
60:dc:42:0c:0f:19:73:99:6a:09:82:0b:1f:27:8a:aa:10:e8:
42:99:26:92:e1:bb:81:2b:02:8a:8c:9a:0f:03:74:6c:09:73:
78:1f:d8:77:5a:2b:63:18:7e:5e:e2:cb:42:4a:e9:10:2a:a3:
88:3f:84:21:38:d6:8d:c9:3b:64:f3:83:ba:85:a4:14:6d:8c:
13:85:11:e9:9e:b3:ae:25:b6:58:2f:09:15:a5:43:01:6e:37:
09:48:5b:2b:5e:de:6f:2d:d6:4e:ba:2f:af:c6:34:6c:c3:96:
6c:a7:33:ec:49:d7:53:b3:1b:bc:15:91:62:3c:7e:07:a1:59:
ed:cb:a1:f0:92:db:2f:6a:6e:73:cd:6a:a0:35:09:39:50:15:
61:97:52:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5Q9XAal6gAnXJNMCv3jPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm
N2VjODEwHhcNMjUwNDI3MjIwMDEwWhcNMjUwNDI4MjIwMDEwWjAzMTEwLwYDVQQD
EygzZTdmMDBmZGZiZjJhYTYzOTcyYmE0ZjAwMTk0NTRiOTQ4NzcxNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurmiCFfnypT6D9OfmvDrBT9d2i1k
wyeOOUkrcTm9+LqO+O+z6p4Av0/ecyiC5im5pVFGaucnwtt8N8RPOrWZC32HbfjA
MXKCkMA0Yy7ozCLWrslwu6ZOcafIMC7mxfui3OytQxTK0NRdUbLrIlGOGpWJbbMM
BxLszPM/Rb+jVgT5I5WaaKLpwyR8vqkW+UAn3GrolYUWqkh5Rn2JmYd6+MrGQs53
eDBN0JNN1tHm4nw9Ow97yxFmHF4nMR4f4czxWLj7Ymtf1HXfH0fm6KeUgNknxQfy
FKPz7o7HjqGPyxThhdiK2fApkGcaFdLoFrNND1uUdqCGlIsCHQ+633VAiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5/AP378qpjlyuk8AGUVLlIdxdxMB8GA1UdIwQY
MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt
MjQxZWVjZmY5YWIwLzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw
LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfz2HcK2
NQNXHANYbz0V1UY8Y6eTwIL5fMjfpV+LrrdFv+anr2tdLr6nTA8hYje4fz7NoT9T
FpcAXHVyG50ERQHWXtimCGPuAua+STTjJK5FHKi1BOTM0c1LsxK8sVRdH56h/kFp
VQW9r+dWYNxCDA8Zc5lqCYILHyeKqhDoQpkmkuG7gSsCioyaDwN0bAlzeB/Yd1or
Yxh+XuLLQkrpECqjiD+EITjWjck7ZPODuoWkFG2ME4UR6Z6zriW2WC8JFaVDAW43
CUhbK17eby3WTrovr8Y0bMOWbKcz7EnXU7MbvBWRYjx+B6FZ7cuh8JLbL2puc81q
oDUJOVAVYZdSsg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:14:34 2025 by rpki-client