Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: LKPA5IpWROnBir8cXqu7QHCVU9xfYcIiJzhb8Q0V55Q=
Subject key identifier: 58:DD:6B:34:F5:A1:DE:25:43:AE:4E:AA:D7:8E:DE:DA:77:7E:F2:39
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0196827EA98C8455546C303062FC0F116BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 17:01:01 +0000
Manifest this update: Tue 29 Apr 2025 17:01:01 +0000
Manifest next update: Wed 30 Apr 2025 17:01:01 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: 1leFXLyN1BA6kHWEbTJTtI1wZ2NXMguCb1B3bLCHZQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:a9:8c:84:55:54:6c:30:30:62:fc:0f:11:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Apr 29 17:01:01 2025 GMT
Not After : Apr 30 17:01:01 2025 GMT
Subject: CN=58dd6b34f5a1de2543ae4eaad78ededa777ef239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:22:02:a7:cc:22:d0:00:b6:3a:48:48:5e:
2d:90:37:89:61:58:63:0f:80:31:cb:33:d7:0d:f7:
1e:4b:5b:ea:a3:ed:f4:95:2b:61:1e:69:e1:9c:f5:
09:3e:39:49:4c:10:a3:d3:06:80:07:0a:cd:fd:04:
83:95:e1:2a:45:ef:9e:c4:c5:f3:46:7a:00:e7:da:
ac:be:ce:11:ed:00:2d:ca:de:9e:1b:09:65:d4:41:
b8:ca:ef:c4:44:9b:57:20:0b:df:31:97:93:98:ac:
60:3a:d1:5a:52:7b:b6:cc:f8:4a:08:1c:18:38:af:
b4:b1:bf:b4:95:31:6b:53:cc:36:83:21:d4:f4:4b:
09:f3:48:0d:c8:14:85:be:3d:f8:f6:cf:d7:94:28:
65:e3:fe:ac:b3:67:48:b8:5f:fe:b0:91:ba:ee:b9:
ab:1e:9d:98:28:7b:bf:2f:e9:22:82:f4:78:94:dd:
42:58:e4:c2:f5:09:75:d4:7b:9b:59:7b:89:90:f8:
09:59:ca:80:14:6e:22:51:88:63:8b:b8:b1:f3:de:
c8:d1:93:11:99:01:7c:c0:9d:4a:50:18:60:1a:ea:
55:3b:5d:9c:83:e0:77:0a:ca:29:72:d2:ea:b1:23:
ec:1a:91:10:d2:80:31:29:6c:79:93:64:31:40:a5:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:6B:34:F5:A1:DE:25:43:AE:4E:AA:D7:8E:DE:DA:77:7E:F2:39
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:7c:9a:c8:dd:01:e7:7f:d4:e4:a2:12:65:95:d0:bd:e6:
41:6f:61:6b:c4:8f:90:a1:df:fe:ba:29:23:b4:f7:74:c5:c6:
01:ef:00:c3:c2:26:94:ce:35:95:35:72:1b:30:41:56:e9:ae:
d7:46:11:80:f9:82:4d:2b:ca:07:09:07:47:ad:8d:2f:a6:3b:
f3:45:83:43:b0:3a:87:84:23:ae:ca:96:c2:c1:b9:e3:c7:fd:
49:97:56:e0:2d:11:aa:7a:70:d1:b5:84:25:9f:69:36:bb:ab:
06:40:15:36:07:be:86:2c:1d:95:9b:e1:e0:02:6e:8c:1a:0f:
09:b4:ec:61:4e:5d:97:29:44:61:4b:ba:da:f5:79:3e:26:56:
c1:53:a2:15:43:2e:43:bc:f3:75:f9:60:9c:8a:a5:56:f5:15:
40:54:13:da:86:b6:aa:bc:c5:1f:2e:5b:dd:dd:b9:9d:8a:56:
95:a0:18:12:a6:16:d3:22:e2:3e:19:77:9c:62:4a:37:a5:7d:
9b:d1:0c:79:67:af:e9:06:8e:40:f7:e8:67:8f:f8:02:b8:a9:
1a:aa:ac:e6:fd:a3:d6:96:7c:30:25:fc:39:c3:9a:bc:ab:b4:
d1:88:03:2e:a8:84:55:df:d7:b7:34:8e:44:2c:c4:78:85:17:
37:06:67:a0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaCfqmMhFVUbDAwYvwPEWvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy
MTA4MTgwHhcNMjUwNDI5MTcwMTAxWhcNMjUwNDMwMTcwMTAxWjAzMTEwLwYDVQQD
Eyg1OGRkNmIzNGY1YTFkZTI1NDNhZTRlYWFkNzhlZGVkYTc3N2VmMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFEiAqfMItAAtjpISF4tkDeJYVhj
D4AxyzPXDfceS1vqo+30lSthHmnhnPUJPjlJTBCj0waABwrN/QSDleEqRe+exMXz
RnoA59qsvs4R7QAtyt6eGwll1EG4yu/ERJtXIAvfMZeTmKxgOtFaUnu2zPhKCBwY
OK+0sb+0lTFrU8w2gyHU9EsJ80gNyBSFvj349s/XlChl4/6ss2dIuF/+sJG67rmr
Hp2YKHu/L+kigvR4lN1CWOTC9Ql11HubWXuJkPgJWcqAFG4iUYhji7ix897I0ZMR
mQF8wJ1KUBhgGupVO12cg+B3CsopctLqsSPsGpEQ0oAxKWx5k2QxQKVb4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFjdazT1od4lQ65OqteO3tp3fvI5MB8GA1UdIwQY
MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5
LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi
OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt98
msjdAed/1OSiEmWV0L3mQW9ha8SPkKHf/ropI7T3dMXGAe8Aw8ImlM41lTVyGzBB
Vumu10YRgPmCTSvKBwkHR62NL6Y780WDQ7A6h4QjrsqWwsG548f9SZdW4C0Rqnpw
0bWEJZ9pNrurBkAVNge+hiwdlZvh4AJujBoPCbTsYU5dlylEYUu62vV5PiZWwVOi
FUMuQ7zzdflgnIqlVvUVQFQT2oa2qrzFHy5b3d25nYpWlaAYEqYW0yLiPhl3nGJK
N6V9m9EMeWev6QaOQPfoZ4/4AripGqqs5v2j1pZ8MCX8OcOavKu00YgDLqiEVd/X
tzSORCzEeIUXNwZnoA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:00 2025 by rpki-client