Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: oJ9hh5LzUnNRZsSnnmTZn/JY9FUnLlCwShpsSVd0gvM=
Subject key identifier: 1B:B2:4E:9C:02:DA:58:A9:76:70:B5:1F:29:2D:A7:39:39:B8:E9:58
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 0196760C1736EADC77F1DC21F7B94447912E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1338
Signing time: Sun 27 Apr 2025 07:00:25 +0000
Manifest this update: Sun 27 Apr 2025 07:00:25 +0000
Manifest next update: Mon 28 Apr 2025 07:00:25 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: qu4aRzXaxSdWMJclFS4Z3doEbJG5tSgtuSsrwuKTmyY=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:17:36:ea:dc:77:f1:dc:21:f7:b9:44:47:91:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Apr 27 07:00:25 2025 GMT
Not After : Apr 28 07:00:25 2025 GMT
Subject: CN=1bb24e9c02da58a97670b51f292da73939b8e958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:83:d6:75:b1:50:8f:76:5f:11:b6:c5:fb:
9e:bb:0a:9a:b9:a3:61:6c:ff:05:8e:d9:6e:7e:bf:
5c:18:b1:e7:63:fc:dd:39:60:b3:a9:c5:06:40:aa:
c2:5f:12:c8:29:04:98:d4:ad:ce:b2:b9:01:0c:64:
09:09:e1:14:55:81:7c:42:62:52:e3:3c:fe:bf:66:
7a:6d:81:2e:67:1e:05:30:05:fa:fd:7d:45:84:67:
10:0a:2d:12:6c:07:45:2f:3e:ea:03:03:e8:98:6b:
7c:6a:6a:92:75:5b:02:ad:2c:ba:71:96:85:4f:53:
18:40:73:f0:f5:3c:dd:42:bd:60:92:5c:6a:1b:b3:
82:58:77:9f:fe:08:37:56:9d:9a:0c:ae:dc:e5:3f:
ac:ee:35:f8:9f:32:a1:50:6b:5a:5e:09:74:76:73:
86:3c:fe:72:8b:60:0e:a7:2b:90:c3:da:3c:3f:35:
4d:fb:f1:0a:5c:58:be:2d:69:5b:8b:bd:4b:6c:e5:
d0:37:cd:5e:a5:f5:df:ca:24:87:21:28:95:d7:08:
39:b2:e6:42:27:b6:dc:3f:d0:24:f0:9a:f2:ec:b3:
38:e2:49:a1:27:d2:4c:2c:1c:40:df:14:b6:d9:f1:
e4:84:73:03:a7:81:7e:86:4d:af:55:8e:2f:db:20:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:4E:9C:02:DA:58:A9:76:70:B5:1F:29:2D:A7:39:39:B8:E9:58
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8f:22:00:09:8c:fe:75:58:7d:b8:e2:bd:d5:d1:58:a7:9b:
ab:1d:d3:84:2e:29:96:1a:a5:d9:4b:2a:4b:e0:20:8a:e8:4c:
16:75:49:f8:f3:14:1a:30:fd:74:55:20:80:42:6a:4d:17:1c:
58:b2:72:bb:4a:c3:41:36:c0:a7:16:1f:ce:2e:81:4f:77:21:
c2:12:ab:55:62:43:9d:cd:b6:5b:43:08:e2:40:35:2c:67:36:
fc:07:17:97:5c:e4:67:76:f0:2b:4b:54:c2:cc:17:65:60:20:
56:fd:47:f8:d6:08:09:d0:80:27:85:b7:61:02:d7:19:7b:ff:
8e:11:16:41:11:c5:4b:00:ad:83:0b:af:b9:78:b8:ca:97:43:
73:52:5c:65:9a:25:49:20:3c:ba:8e:bf:7a:c2:4b:15:55:ca:
0a:ef:77:e8:8e:67:62:cf:b7:50:9c:29:d9:b7:7f:58:1b:d0:
be:31:13:d2:d7:2b:a5:e6:18:25:4f:9f:86:d4:9c:30:ad:27:
6a:73:c7:d2:ef:e1:f9:a5:16:19:c1:f9:9b:86:f7:8a:79:8b:
ae:eb:db:ca:2c:80:2c:e5:2c:e8:36:09:38:38:fd:02:73:7d:
de:56:1a:4c:27:bd:7f:d4:f8:9b:e6:bb:77:b2:c9:88:24:76:
45:75:32:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2DBc26tx38dwh97lER5EuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODRlMGNlZTU3NWM2MTkwNTNmOGVlMmIxMDA0Y2M0NDJm
ZDJjZWQwHhcNMjUwNDI3MDcwMDI1WhcNMjUwNDI4MDcwMDI1WjAzMTEwLwYDVQQD
EygxYmIyNGU5YzAyZGE1OGE5NzY3MGI1MWYyOTJkYTczOTM5YjhlOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpKD1nWxUI92XxG2xfueuwqauaNh
bP8Fjtlufr9cGLHnY/zdOWCzqcUGQKrCXxLIKQSY1K3OsrkBDGQJCeEUVYF8QmJS
4zz+v2Z6bYEuZx4FMAX6/X1FhGcQCi0SbAdFLz7qAwPomGt8amqSdVsCrSy6cZaF
T1MYQHPw9TzdQr1gklxqG7OCWHef/gg3Vp2aDK7c5T+s7jX4nzKhUGtaXgl0dnOG
PP5yi2AOpyuQw9o8PzVN+/EKXFi+LWlbi71LbOXQN81epfXfyiSHISiV1wg5suZC
J7bcP9Ak8Jry7LM44kmhJ9JMLBxA3xS22fHkhHMDp4F+hk2vVY4v2yAXbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuyTpwC2lipdnC1Hyktpzk5uOlYMB8GA1UdIwQY
MBaAFNSE4M7ldcYZBT+O4rEATMRC/SztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEt
ZWMwMjYyYWIzM2YxLzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC83ODQ3ZmItZjU1YS00OTk1LTg1MzEtZWMwMjYyYWIzM2Yx
LzEvMUlUZ3p1VjF4aGtGUDQ3aXNRQk14RUw5TE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlI8iAAmM
/nVYfbjivdXRWKebqx3ThC4plhql2UsqS+AgiuhMFnVJ+PMUGjD9dFUggEJqTRcc
WLJyu0rDQTbApxYfzi6BT3chwhKrVWJDnc22W0MI4kA1LGc2/AcXl1zkZ3bwK0tU
wswXZWAgVv1H+NYICdCAJ4W3YQLXGXv/jhEWQRHFSwCtgwuvuXi4ypdDc1JcZZol
SSA8uo6/esJLFVXKCu936I5nYs+3UJwp2bd/WBvQvjET0tcrpeYYJU+fhtScMK0n
anPH0u/h+aUWGcH5m4b3inmLruvbyiyALOUs6DYJODj9AnN93lYaTCe9f9T4m+a7
d7LJiCR2RXUyJw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:27:39 2025 by rpki-client