
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File: I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier: jefr46yx9e6eKusGcNGmSeDF+hgzAI3Y7ICctfsz37k=
Subject key identifier: B8:3D:5E:1F:5D:1D:40:89:B0:8C:5B:98:00:68:B8:70:B4:5A:98:D0
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 01967E341583557F0D414E0775AB3D5A1F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number: 020C
Signing time: Mon 28 Apr 2025 21:01:04 +0000
Manifest this update: Mon 28 Apr 2025 21:01:04 +0000
Manifest next update: Tue 29 Apr 2025 21:01:04 +0000
Files and hashes: 1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: fk7hCf52mnl94cyxTOrZm5bmJAkP0GmJZtDsIH+uQ3Y=)
2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:15:83:55:7f:0d:41:4e:07:75:ab:3d:5a:1f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Apr 28 21:01:04 2025 GMT
Not After : Apr 29 21:01:04 2025 GMT
Subject: CN=b83d5e1f5d1d4089b08c5b980068b870b45a98d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:79:42:20:0c:8b:de:f3:64:04:6c:48:35:f7:
2a:f2:17:05:36:19:35:fa:5f:d8:23:52:f5:f6:27:
35:e4:d1:af:72:5b:6d:dd:67:0f:79:42:d0:01:6f:
23:88:c1:19:17:29:49:e5:75:6c:e4:76:f8:8f:ff:
ad:b3:59:ea:40:41:79:fa:ab:66:b0:15:b2:68:03:
e4:50:5f:61:26:f2:3f:a8:89:6a:b7:ea:6d:72:89:
51:fb:6d:84:ef:34:90:2d:e4:25:42:6e:c1:b6:72:
fb:05:60:74:03:aa:f3:73:c5:ac:f6:15:84:2b:a6:
6b:56:c6:82:36:f9:ad:74:6e:14:64:b7:75:d2:db:
50:a9:05:a7:c1:37:d7:11:75:32:25:53:85:36:53:
37:2d:69:45:93:a7:34:05:30:e6:94:c9:af:b0:b1:
03:4a:42:d0:ac:64:8f:2f:65:93:46:58:06:75:ea:
40:d2:cc:2b:0e:2c:e7:d7:58:65:96:fe:36:66:0d:
a8:60:79:3f:6d:82:0a:2e:86:da:12:8d:d0:b7:92:
c6:58:f4:79:ce:de:be:d1:66:88:ee:be:6e:ae:b2:
14:90:7f:1b:82:d8:1e:49:8d:74:d7:dc:bc:d8:b4:
9b:b8:00:f7:62:59:48:ad:87:75:c4:99:9a:d5:45:
c0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3D:5E:1F:5D:1D:40:89:B0:8C:5B:98:00:68:B8:70:B4:5A:98:D0
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3c:07:6c:95:5b:75:a9:57:b5:8d:c8:8e:32:62:1c:90:9d:
8c:50:8d:74:f0:47:02:11:7d:1f:20:57:c5:fb:8d:cb:5c:c5:
ca:6f:20:c5:27:b0:d0:45:f2:96:a6:45:5e:8d:10:7e:f2:83:
44:12:26:97:7a:8b:9a:2a:31:65:da:44:07:94:48:16:71:7e:
65:70:01:06:ff:6d:f5:fb:bd:93:e7:11:4d:8f:30:0f:f8:25:
da:86:2a:f5:41:b9:91:ab:cc:b3:01:67:ca:7d:66:cf:80:ae:
9a:f5:c9:96:53:09:65:a6:8e:59:1e:40:6f:d9:ad:8e:85:f4:
b4:3d:9e:85:c7:15:c4:bd:91:73:2e:a0:79:6c:4d:77:a9:27:
70:e1:9e:8e:0d:5c:a1:5d:dd:bf:d3:5d:25:2e:62:c6:48:6b:
7e:41:48:93:53:36:0f:ed:6d:91:d2:ed:21:75:e6:5f:9a:e5:
24:c0:8f:c6:f1:61:ed:06:33:d1:51:d2:ee:6f:18:21:84:a0:
3b:a5:91:c2:40:ba:b9:ea:66:26:c7:d3:12:a3:a4:44:4b:60:
64:fa:b9:2a:78:71:07:35:46:9b:ae:91:46:d4:0a:0e:1a:26:
23:51:2a:66:07:13:e9:93:f7:62:ef:77:0a:ce:e1:4c:de:54:
02:9a:5e:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NBWDVX8NQU4Hdas9Wh+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz
YmYzNmEwHhcNMjUwNDI4MjEwMTA0WhcNMjUwNDI5MjEwMTA0WjAzMTEwLwYDVQQD
EyhiODNkNWUxZjVkMWQ0MDg5YjA4YzViOTgwMDY4Yjg3MGI0NWE5OGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/XlCIAyL3vNkBGxINfcq8hcFNhk1
+l/YI1L19ic15NGvcltt3WcPeULQAW8jiMEZFylJ5XVs5Hb4j/+ts1nqQEF5+qtm
sBWyaAPkUF9hJvI/qIlqt+ptcolR+22E7zSQLeQlQm7BtnL7BWB0A6rzc8Ws9hWE
K6ZrVsaCNvmtdG4UZLd10ttQqQWnwTfXEXUyJVOFNlM3LWlFk6c0BTDmlMmvsLED
SkLQrGSPL2WTRlgGdepA0swrDizn11hllv42Zg2oYHk/bYIKLobaEo3Qt5LGWPR5
zt6+0WaI7r5urrIUkH8bgtgeSY1019y82LSbuAD3YllIrYd1xJma1UXAYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLg9Xh9dHUCJsIxbmABouHC0WpjQMB8GA1UdIwQY
MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt
NTk0YTI3ZGIxNDZiLzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi
LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzwHbJVb
dalXtY3IjjJiHJCdjFCNdPBHAhF9HyBXxfuNy1zFym8gxSew0EXylqZFXo0QfvKD
RBIml3qLmioxZdpEB5RIFnF+ZXABBv9t9fu9k+cRTY8wD/gl2oYq9UG5kavMswFn
yn1mz4CumvXJllMJZaaOWR5Ab9mtjoX0tD2ehccVxL2Rcy6geWxNd6kncOGejg1c
oV3dv9NdJS5ixkhrfkFIk1M2D+1tkdLtIXXmX5rlJMCPxvFh7QYz0VHS7m8YIYSg
O6WRwkC6uepmJsfTEqOkREtgZPq5KnhxBzVGm66RRtQKDhomI1EqZgcT6ZP3Yu93
Cs7hTN5UAppeJg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 01:21:37 2025 by rpki-client