Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File: CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier: foewiICwF7Z8jofOdG47gl8M7acXmz/K/za2zQ1NzKk=
Subject key identifier: A7:ED:EF:4D:2A:B9:54:77:89:2C:87:31:77:27:C3:0E:59:A3:E1:BB
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer: /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial: 019685113FEF76C91B425255A86A145AD647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number: 07E4
Signing time: Wed 30 Apr 2025 05:00:22 +0000
Manifest this update: Wed 30 Apr 2025 05:00:22 +0000
Manifest next update: Thu 01 May 2025 05:00:22 +0000
Files and hashes: 1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: JKaEL7/KghX+argjNgiQX1aXvhENJFcEMKwhiNZJZfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:3f:ef:76:c9:1b:42:52:55:a8:6a:14:5a:d6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
Validity
Not Before: Apr 30 05:00:22 2025 GMT
Not After : May 1 05:00:22 2025 GMT
Subject: CN=a7edef4d2ab95477892c87317727c30e59a3e1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:53:17:2b:5c:d9:73:d3:4b:8e:d2:23:8e:
1f:8a:2b:24:02:42:7b:33:a5:a2:e2:09:a3:a0:4b:
06:9c:63:05:b1:11:87:a3:be:87:2b:fc:5a:55:0d:
1a:c2:81:39:67:73:0a:28:ec:64:3d:d0:e5:33:04:
d1:52:55:fa:c6:77:ef:90:e7:4d:22:62:af:2c:1b:
32:6b:5e:a7:f1:c9:ad:f0:28:71:5c:df:94:b4:e0:
01:40:fc:72:ad:98:2b:7d:76:90:0b:87:76:d0:4f:
a2:96:db:69:f1:10:44:f5:5e:5d:be:94:01:ba:16:
6b:ac:0a:38:3e:c9:a3:cc:14:e2:3b:cb:08:af:c1:
43:d8:5e:19:1c:7c:bb:9a:ca:d5:38:3f:be:f3:b4:
23:3f:f0:93:db:9a:c9:58:9e:a1:aa:d3:dc:d4:f7:
e2:fa:d9:a7:bf:1b:94:e4:19:31:91:b6:3d:ee:c2:
23:c8:9a:7b:12:38:11:20:6e:26:12:a5:d2:88:51:
cd:ad:cc:2d:e0:a1:2e:46:b9:f1:50:7c:c0:3a:47:
8e:dd:79:16:21:8f:3c:5b:69:51:32:d6:ed:42:91:
1a:83:3a:b2:3a:f2:8d:68:c5:c6:b1:c0:a9:0d:19:
67:bf:82:bb:16:70:54:b8:00:2a:b8:3d:a4:a3:f5:
2d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:ED:EF:4D:2A:B9:54:77:89:2C:87:31:77:27:C3:0E:59:A3:E1:BB
X509v3 Authority Key Identifier:
keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e5:ac:4a:40:48:7b:d3:ff:8d:27:83:11:25:02:fa:8c:2a:
eb:f6:ff:e9:da:4c:36:b6:2d:7e:a5:12:da:25:05:32:f2:ee:
0f:75:48:23:3f:dc:4e:97:29:1d:dd:3f:19:93:8b:e7:d1:26:
5d:11:19:6b:3d:7a:ca:9b:d9:d1:3b:6d:a7:be:44:b9:56:c1:
67:02:20:e7:1b:78:1a:09:46:df:c0:14:fc:4b:04:94:31:f9:
25:7a:d2:8c:e8:6f:8e:3d:6a:ea:09:e7:4f:1c:21:72:d7:05:
37:b7:25:01:7d:90:0a:55:ca:96:cc:7f:bf:a1:08:72:b5:87:
93:2c:9d:d3:72:38:81:5a:dd:97:b0:6b:55:d4:16:60:4e:51:
55:76:31:3d:a2:60:5b:1f:42:98:f5:5f:f2:1d:41:59:95:68:
a0:94:c1:2f:28:c8:3f:1f:f6:a6:ae:33:03:ca:e3:34:62:c2:
e7:f7:42:3b:fe:ad:06:2f:70:a4:18:f9:f3:81:b6:89:a0:8d:
8c:1a:ee:04:22:ce:49:91:4c:50:36:2e:b3:72:cd:ed:bb:2a:
45:2a:cb:99:87:73:0e:29:b9:52:7a:86:d6:a1:3d:07:7a:2f:
5c:e7:0d:a0:ac:89:19:37:de:93:01:a4:9c:62:20:9e:c3:db:
fa:cc:d0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFET/vdskbQlJVqGoUWtZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTgzNDRhNTIwYTM5OTkyNzliYjgyNDdlMTc5ZTg4NDA2
ZTM1NzgwHhcNMjUwNDMwMDUwMDIyWhcNMjUwNTAxMDUwMDIyWjAzMTEwLwYDVQQD
EyhhN2VkZWY0ZDJhYjk1NDc3ODkyYzg3MzE3NzI3YzMwZTU5YTNlMWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3RTFytc2XPTS47SI44fiiskAkJ7
M6Wi4gmjoEsGnGMFsRGHo76HK/xaVQ0awoE5Z3MKKOxkPdDlMwTRUlX6xnfvkOdN
ImKvLBsya16n8cmt8ChxXN+UtOABQPxyrZgrfXaQC4d20E+ilttp8RBE9V5dvpQB
uhZrrAo4PsmjzBTiO8sIr8FD2F4ZHHy7msrVOD++87QjP/CT25rJWJ6hqtPc1Pfi
+tmnvxuU5BkxkbY97sIjyJp7EjgRIG4mEqXSiFHNrcwt4KEuRrnxUHzAOkeO3XkW
IY88W2lRMtbtQpEagzqyOvKNaMXGscCpDRlnv4K7FnBUuAAquD2ko/UtOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKft700quVR3iSyHMXcnww5Zo+G7MB8GA1UdIwQY
MBaAFAgYNEpSCjmZJ5u4JH4XnohAbjV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMt
ODUxZWE2NWNiOThiLzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NmI4MTgtOWVlMS00YTA2LWE4ZWMtODUxZWE2NWNiOThi
LzEvQ0JnMFNsSUtPWmtubTdna2ZoZWVpRUJ1TlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyeWsSkBI
e9P/jSeDESUC+owq6/b/6dpMNrYtfqUS2iUFMvLuD3VIIz/cTpcpHd0/GZOL59Em
XREZaz16ypvZ0Tttp75EuVbBZwIg5xt4GglG38AU/EsElDH5JXrSjOhvjj1q6gnn
TxwhctcFN7clAX2QClXKlsx/v6EIcrWHkyyd03I4gVrdl7BrVdQWYE5RVXYxPaJg
Wx9CmPVf8h1BWZVooJTBLyjIPx/2pq4zA8rjNGLC5/dCO/6tBi9wpBj584G2iaCN
jBruBCLOSZFMUDYus3LN7bsqRSrLmYdzDim5UnqG1qE9B3ovXOcNoKyJGTfekwGk
nGIgnsPb+szQ+A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:15:24 2025 by rpki-client