Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: A9v4L1ziieOV/CZZ0pCZ0R0kWiX/I7L5vYWDk6w+vVI=
Subject key identifier: C1:9A:CA:F4:60:CF:EA:CA:F0:C5:C8:4A:2F:6A:D1:0E:E4:89:B1:8D
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 019678D64D7C26F8246F46C34191B2B17F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1518
Signing time: Sun 27 Apr 2025 20:00:32 +0000
Manifest this update: Sun 27 Apr 2025 20:00:32 +0000
Manifest next update: Mon 28 Apr 2025 20:00:32 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: G36iyh9YWkpREwtgM3CSrvPFCeng8fzzirs9y2WEvAA=)
2: cTvIsND0rcbhO2LRnW_ioplG7i0.roa (hash: cEDaT4nTfiZsrwarP2rDKx77YlDRn3t6MrTdDfbMfn0=)
3: ejCuuXb3IPaAQbLGykjSnhsrUI0.roa (hash: 2O/6jwQ1UqJYAgAcDjt8a/MDPHZ138YPWORfwXR/3iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:4d:7c:26:f8:24:6f:46:c3:41:91:b2:b1:7f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Apr 27 20:00:32 2025 GMT
Not After : Apr 28 20:00:32 2025 GMT
Subject: CN=c19acaf460cfeacaf0c5c84a2f6ad10ee489b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:2e:03:3a:71:c6:81:4b:65:28:09:f8:b7:
67:67:84:2f:10:e8:0f:92:7a:15:c5:f1:a2:6c:ed:
47:2e:98:d6:cd:b1:35:bb:ac:2a:43:57:cf:a6:0a:
c5:d8:57:b0:3f:4c:23:fd:45:2b:20:bd:89:07:60:
26:4a:15:b3:1f:34:c9:ce:05:c4:0a:46:f5:eb:70:
bb:4a:7e:c9:9c:c6:cb:1c:41:e1:41:29:8b:6f:bc:
b2:ad:b7:ee:e8:52:1a:b0:55:f3:11:b0:9b:f3:4b:
1f:65:dc:79:44:2b:33:3c:93:78:6e:5a:1a:9e:b7:
c7:43:a8:f6:04:bf:8a:5b:22:dc:c9:61:51:54:00:
b6:dc:ed:85:0e:8d:08:0f:cb:7d:32:fb:b2:99:09:
dc:4a:87:c0:d9:af:48:2c:ac:ca:92:6f:ad:a0:32:
25:2a:5d:7f:8f:9b:f0:f0:b5:7f:8a:e1:20:87:b1:
24:a4:81:92:f2:70:d0:fa:3f:a6:3d:57:2c:38:ba:
0a:55:90:0f:ba:30:05:17:33:4a:58:b1:94:d7:21:
26:b8:6e:28:d1:37:91:c2:17:2e:25:42:dc:fb:27:
57:b7:e7:54:9a:04:b0:81:d3:16:d6:6b:a9:2d:4a:
f9:94:95:4c:23:24:b1:e0:23:2a:30:f1:a1:d4:66:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:CA:F4:60:CF:EA:CA:F0:C5:C8:4A:2F:6A:D1:0E:E4:89:B1:8D
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:50:4a:b3:80:e3:07:4b:76:71:14:12:38:51:6a:16:1c:8b:
5d:e5:17:fc:17:bb:66:eb:86:eb:93:91:d8:28:37:fc:9e:f3:
bb:54:af:38:c1:e4:f2:b2:91:7f:a1:a3:e9:31:10:f2:c2:84:
9c:20:b5:9a:ed:a3:ac:1e:5b:ae:03:8c:82:0c:02:f1:9a:eb:
df:e6:c7:71:1e:a0:3c:cc:5c:49:92:c9:d9:83:c6:20:3a:f5:
29:b2:05:ce:46:61:6a:a5:22:8b:41:71:35:ca:ae:69:a3:e3:
f9:c6:3e:a0:b2:24:e4:29:ec:bf:2f:db:a6:93:63:bd:2a:47:
87:88:93:d3:64:19:97:ff:61:94:8d:66:24:57:6a:4f:38:e9:
5a:f1:a1:24:69:a4:dc:dd:bd:e7:41:1b:5f:55:6a:96:f4:f8:
25:1d:2c:07:c4:08:e8:a4:e9:e1:cb:cb:0f:c7:38:b4:a3:34:
15:99:ac:4b:54:f3:c5:b0:10:a9:10:fa:1f:66:85:bb:59:09:
6b:81:88:92:a4:5a:77:ac:43:61:55:84:20:b4:1f:c6:a6:02:
37:b8:b5:2f:a9:7e:28:a9:4b:c8:42:7b:36:8b:20:98:79:20:
ad:31:e0:21:24:0a:f5:8d:01:9c:6c:26:46:18:81:b6:50:52:
c4:22:9a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ41k18Jvgkb0bDQZGysX94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMjdiOTM5OTM0YTJjYzIwNmZmYmE2YmNlOWM5MGZkY2Jh
MzljNzEwHhcNMjUwNDI3MjAwMDMyWhcNMjUwNDI4MjAwMDMyWjAzMTEwLwYDVQQD
EyhjMTlhY2FmNDYwY2ZlYWNhZjBjNWM4NGEyZjZhZDEwZWU0ODliMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul4uAzpxxoFLZSgJ+LdnZ4QvEOgP
knoVxfGibO1HLpjWzbE1u6wqQ1fPpgrF2FewP0wj/UUrIL2JB2AmShWzHzTJzgXE
Ckb163C7Sn7JnMbLHEHhQSmLb7yyrbfu6FIasFXzEbCb80sfZdx5RCszPJN4bloa
nrfHQ6j2BL+KWyLcyWFRVAC23O2FDo0ID8t9MvuymQncSofA2a9ILKzKkm+toDIl
Kl1/j5vw8LV/iuEgh7EkpIGS8nDQ+j+mPVcsOLoKVZAPujAFFzNKWLGU1yEmuG4o
0TeRwhcuJULc+ydXt+dUmgSwgdMW1mupLUr5lJVMIySx4CMqMPGh1GaIlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGayvRgz+rK8MXISi9q0Q7kibGNMB8GA1UdIwQY
MBaAFN8nuTmTSizCBv+6a86ckP3Lo5xxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0Njgt
NmVkNTRkM2ZlNGY0LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NjYyNjEtODNiNS00ZWFkLWE0NjgtNmVkNTRkM2ZlNGY0
LzEvM3llNU9aTktMTUlHXzdwcnpweVFfY3VqbkhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlBKs4Dj
B0t2cRQSOFFqFhyLXeUX/Be7ZuuG65OR2Cg3/J7zu1SvOMHk8rKRf6Gj6TEQ8sKE
nCC1mu2jrB5brgOMggwC8Zrr3+bHcR6gPMxcSZLJ2YPGIDr1KbIFzkZhaqUii0Fx
NcquaaPj+cY+oLIk5Cnsvy/bppNjvSpHh4iT02QZl/9hlI1mJFdqTzjpWvGhJGmk
3N2950EbX1VqlvT4JR0sB8QI6KTp4cvLD8c4tKM0FZmsS1TzxbAQqRD6H2aFu1kJ
a4GIkqRad6xDYVWEILQfxqYCN7i1L6l+KKlLyEJ7NosgmHkgrTHgISQK9Y0BnGwm
RhiBtlBSxCKakA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:43:59 2025 by rpki-client