Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
File: mL_nROPS3UIxYU5-S61E1FUvCRs.mft (raw, json)
Hash identifier: /0Heu1cPRM081d0gkVGHNzCmsAD5CKwYNPAUNni9ovM=
Subject key identifier: A2:DD:7B:94:9E:EC:DC:4D:81:BA:FA:73:DB:F8:99:46:76:0F:FD:63
Authority key identifier: 98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
Certificate issuer: /CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Certificate serial: 01967831433EA35BE36F7F21D2E755285EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
Manifest number: 03E4
Signing time: Sun 27 Apr 2025 17:00:16 +0000
Manifest this update: Sun 27 Apr 2025 17:00:16 +0000
Manifest next update: Mon 28 Apr 2025 17:00:16 +0000
Files and hashes: 1: mL_nROPS3UIxYU5-S61E1FUvCRs.crl (hash: Rw0ogbAMXHOhOmZ5zoJE71Dc3ehJEKQX4BtTjukmJnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:43:3e:a3:5b:e3:6f:7f:21:d2:e7:55:28:5e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98bfe744e3d2dd4231614e7e4bad44d4552f091b
Validity
Not Before: Apr 27 17:00:16 2025 GMT
Not After : Apr 28 17:00:16 2025 GMT
Subject: CN=a2dd7b949eecdc4d81bafa73dbf89946760ffd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:cc:c0:72:47:ac:52:3f:91:1d:ff:b5:3d:
70:76:ad:5a:b4:58:e8:06:c7:f1:99:76:d0:a7:64:
33:17:48:e7:6e:dc:39:36:6c:a7:de:f4:73:12:0f:
ff:96:04:74:35:05:15:ad:5d:23:b8:9d:63:43:dd:
39:46:92:f4:94:b2:e8:93:2d:9b:65:2d:43:80:d3:
78:5c:70:d4:a7:4d:79:9f:24:88:73:66:51:b0:e3:
08:2d:8e:c7:a3:e0:ff:19:b8:90:7f:3f:50:c1:0e:
26:06:67:37:39:d6:fe:ce:ba:eb:35:83:46:0c:6b:
f1:85:73:c6:f4:01:f5:a2:e5:04:bf:a7:a5:56:aa:
29:83:cd:16:68:6e:a4:df:e2:2a:3a:5d:36:ef:34:
d6:50:21:79:4c:5d:d4:f9:df:e4:87:fc:c7:f2:92:
96:62:33:19:81:b0:4f:67:ba:12:d1:8e:64:e7:e1:
71:5f:42:0b:ed:e8:5e:6f:9b:8a:f0:b0:77:cf:37:
6f:38:a3:15:a3:43:3b:a7:1f:34:38:62:af:f5:c1:
2b:89:ee:71:1f:95:f2:a4:da:92:95:76:a7:c8:d9:
b5:ed:75:34:fc:82:0d:18:8f:c0:75:ac:55:bf:b0:
73:39:39:80:3b:c1:d7:b6:23:aa:ec:52:b1:d3:dc:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DD:7B:94:9E:EC:DC:4D:81:BA:FA:73:DB:F8:99:46:76:0F:FD:63
X509v3 Authority Key Identifier:
keyid:98:BF:E7:44:E3:D2:DD:42:31:61:4E:7E:4B:AD:44:D4:55:2F:09:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL_nROPS3UIxYU5-S61E1FUvCRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ae37f-9a82-4bac-bc0b-1fafa6c85052/1/mL_nROPS3UIxYU5-S61E1FUvCRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1a:da:07:72:e9:00:99:d4:94:d6:26:a7:07:10:01:60:5a:
9b:ae:1e:f1:23:bf:0c:5c:fd:05:1b:a1:5e:d7:93:87:8c:1a:
23:15:e0:c0:10:16:47:38:9e:db:2c:9b:c0:f2:bb:72:83:2a:
62:60:ee:45:4d:99:57:30:c4:fe:e6:d0:8e:b1:2e:1f:da:db:
53:4c:41:fb:c4:78:81:3f:e9:74:10:e8:8a:85:56:23:7a:bc:
9b:1e:68:32:b3:3a:34:8f:0f:1f:1f:f2:35:fa:e4:cd:fb:26:
3a:24:d5:f8:f1:48:2b:ba:a2:f8:30:ff:57:24:4c:e7:7b:3b:
17:c2:a1:28:d7:cf:1c:33:d5:5c:47:a7:34:4b:b9:b9:a4:51:
ee:1b:a5:24:46:19:d8:62:46:06:9d:b4:f3:f3:7c:62:e0:c1:
57:c7:72:c6:b2:e6:0f:e8:44:22:bd:62:8f:b9:3f:42:66:65:
45:60:bd:a2:69:53:e9:9a:93:45:f2:67:21:45:12:f0:f4:ca:
3f:f8:5f:f5:59:c6:3a:14:86:f9:4a:19:f6:ae:f5:7e:90:e6:
2f:84:7b:3f:c8:e4:1c:fa:54:06:aa:f6:e7:84:77:95:42:f0:
71:97:cf:22:b8:28:a5:66:63:dc:26:c7:c4:38:c2:26:54:83:
54:e6:e9:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4MUM+o1vjb38h0udVKF7lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YmZlNzQ0ZTNkMmRkNDIzMTYxNGU3ZTRiYWQ0NGQ0NTUy
ZjA5MWIwHhcNMjUwNDI3MTcwMDE2WhcNMjUwNDI4MTcwMDE2WjAzMTEwLwYDVQQD
EyhhMmRkN2I5NDllZWNkYzRkODFiYWZhNzNkYmY4OTk0Njc2MGZmZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto7MwHJHrFI/kR3/tT1wdq1atFjo
BsfxmXbQp2QzF0jnbtw5Nmyn3vRzEg//lgR0NQUVrV0juJ1jQ905RpL0lLLoky2b
ZS1DgNN4XHDUp015nySIc2ZRsOMILY7Ho+D/GbiQfz9QwQ4mBmc3Odb+zrrrNYNG
DGvxhXPG9AH1ouUEv6elVqopg80WaG6k3+IqOl027zTWUCF5TF3U+d/kh/zH8pKW
YjMZgbBPZ7oS0Y5k5+FxX0IL7eheb5uK8LB3zzdvOKMVo0M7px80OGKv9cErie5x
H5XypNqSlXanyNm17XU0/IINGI/AdaxVv7BzOTmAO8HXtiOq7FKx09yMAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLde5Se7NxNgbr6c9v4mUZ2D/1jMB8GA1UdIwQY
MBaAFJi/50Tj0t1CMWFOfkutRNRVLwkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGIt
MWZhZmE2Yzg1MDUyLzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80YWUzN2YtOWE4Mi00YmFjLWJjMGItMWZhZmE2Yzg1MDUy
LzEvbUxfblJPUFMzVUl4WVU1LVM2MUUxRlV2Q1JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhraB3Lp
AJnUlNYmpwcQAWBam64e8SO/DFz9BRuhXteTh4waIxXgwBAWRzie2yybwPK7coMq
YmDuRU2ZVzDE/ubQjrEuH9rbU0xB+8R4gT/pdBDoioVWI3q8mx5oMrM6NI8PHx/y
NfrkzfsmOiTV+PFIK7qi+DD/VyRM53s7F8KhKNfPHDPVXEenNEu5uaRR7hulJEYZ
2GJGBp208/N8YuDBV8dyxrLmD+hEIr1ij7k/QmZlRWC9omlT6ZqTRfJnIUUS8PTK
P/hf9VnGOhSG+UoZ9q71fpDmL4R7P8jkHPpUBqr254R3lULwcZfPIrgopWZj3CbH
xDjCJlSDVObpWg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:57:35 2025 by rpki-client