Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: 4Q5HXek88aR2w9iTAJCONb2jAOposhtojQoUk4+k0ss=
Subject key identifier: AF:DA:80:65:86:9C:D1:25:7E:2A:AC:76:AB:48:D4:70:94:CB:2E:AA
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01967FB420AB76806B5047E4DB302E7EE3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0C9B
Signing time: Tue 29 Apr 2025 04:00:33 +0000
Manifest this update: Tue 29 Apr 2025 04:00:33 +0000
Manifest next update: Wed 30 Apr 2025 04:00:33 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: GSZ0mJ9TOEZk68sCu0qzYf6iotTfTcOgYC1N/18DsQs=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:20:ab:76:80:6b:50:47:e4:db:30:2e:7e:e3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Apr 29 04:00:33 2025 GMT
Not After : Apr 30 04:00:33 2025 GMT
Subject: CN=afda8065869cd1257e2aac76ab48d47094cb2eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:b6:51:aa:46:41:2d:19:92:84:29:ef:86:
af:63:48:5c:c2:96:c3:fc:59:ca:fb:e8:b8:60:a1:
d7:21:b5:ad:f4:7a:ed:23:96:08:fd:6c:48:e9:49:
72:54:40:bd:1d:08:69:53:96:5d:af:28:20:d2:04:
8b:28:16:9f:f8:63:a5:5f:d9:29:7b:ef:9a:f3:db:
82:88:4c:57:9d:d6:2a:3a:76:d6:90:35:59:9e:c3:
dc:c4:e2:7c:c6:24:8a:0e:8c:01:6f:1c:8f:df:7f:
02:84:87:0f:36:4b:ec:b4:60:75:0f:bf:78:6d:78:
ee:dc:fa:13:dc:18:cc:88:3c:e6:7e:c2:ec:74:93:
f3:d9:b5:03:d1:3f:54:6a:a0:d2:6d:63:f2:84:72:
97:5a:07:7b:2b:46:a2:c1:66:d3:59:7c:de:96:2c:
8f:c2:6f:26:e0:32:e6:80:2d:d4:09:9f:86:8c:75:
d8:8c:25:0d:ac:ac:7e:c0:de:15:4c:2b:c6:ff:af:
8f:1b:b0:d9:bd:0c:c4:7a:e3:55:a6:f6:1c:9a:af:
03:37:60:3a:ae:ad:09:83:16:5f:f9:fb:84:10:d2:
0b:24:cb:cf:05:ac:78:29:e4:e9:b6:36:c1:2a:a7:
cc:67:91:74:49:09:bc:b4:f0:79:40:bc:9b:52:29:
1a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DA:80:65:86:9C:D1:25:7E:2A:AC:76:AB:48:D4:70:94:CB:2E:AA
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1b:50:14:d5:10:b5:5a:53:67:91:41:04:fc:34:23:60:08:
34:11:87:ca:77:ff:31:80:41:57:57:27:ba:a3:04:e5:e6:87:
12:4f:e2:e3:8d:93:38:75:b8:cd:6b:9e:b0:61:95:a0:21:f3:
97:73:f1:24:d2:f7:c1:ec:0f:28:ee:27:e7:d5:85:9c:ce:fc:
4a:87:af:7c:d9:a9:e1:93:5c:6f:45:5c:2e:ba:23:ea:7b:53:
c7:7b:9d:9a:fd:f0:47:1e:8f:18:ad:56:00:50:2d:34:e0:d5:
35:8c:25:58:26:b6:d1:d3:8a:43:71:57:77:5c:83:e5:c4:60:
d2:55:c2:45:65:92:c2:e7:af:a9:1d:9f:af:10:3a:74:f5:b3:
d0:74:cd:27:1d:27:9e:79:75:4f:42:a6:b1:6a:fe:2a:df:11:
20:b0:76:30:8c:26:1c:44:b4:54:70:3a:a3:ba:25:e4:29:70:
ac:99:88:a1:0b:56:7a:72:4c:f6:fd:65:68:b4:6b:59:b6:cb:
7e:b5:2e:8e:86:bf:b1:86:f4:d9:d6:57:6e:88:4b:43:61:46:
58:b5:ce:4b:35:b5:e8:20:36:3d:21:36:a9:6d:6a:be:33:01:
79:97:0a:68:e6:39:a7:ee:05:75:a3:da:f1:b0:86:76:a0:d0:
0d:ef:7f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tCCrdoBrUEfk2zAufuPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0
MGE1ODgwHhcNMjUwNDI5MDQwMDMzWhcNMjUwNDMwMDQwMDMzWjAzMTEwLwYDVQQD
EyhhZmRhODA2NTg2OWNkMTI1N2UyYWFjNzZhYjQ4ZDQ3MDk0Y2IyZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogO2UapGQS0ZkoQp74avY0hcwpbD
/FnK++i4YKHXIbWt9HrtI5YI/WxI6UlyVEC9HQhpU5Zdrygg0gSLKBaf+GOlX9kp
e++a89uCiExXndYqOnbWkDVZnsPcxOJ8xiSKDowBbxyP338ChIcPNkvstGB1D794
bXju3PoT3BjMiDzmfsLsdJPz2bUD0T9UaqDSbWPyhHKXWgd7K0aiwWbTWXzeliyP
wm8m4DLmgC3UCZ+GjHXYjCUNrKx+wN4VTCvG/6+PG7DZvQzEeuNVpvYcmq8DN2A6
rq0JgxZf+fuEENILJMvPBax4KeTptjbBKqfMZ5F0SQm8tPB5QLybUikaoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/agGWGnNElfiqsdqtI1HCUyy6qMB8GA1UdIwQY
MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt
MmY3ZmQxZjBlOWMzLzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz
LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhtQFNUQ
tVpTZ5FBBPw0I2AINBGHynf/MYBBV1cnuqME5eaHEk/i442TOHW4zWuesGGVoCHz
l3PxJNL3wewPKO4n59WFnM78SoevfNmp4ZNcb0VcLroj6ntTx3udmv3wRx6PGK1W
AFAtNODVNYwlWCa20dOKQ3FXd1yD5cRg0lXCRWWSwuevqR2frxA6dPWz0HTNJx0n
nnl1T0KmsWr+Kt8RILB2MIwmHES0VHA6o7ol5ClwrJmIoQtWenJM9v1laLRrWbbL
frUujoa/sYb02dZXbohLQ2FGWLXOSzW16CA2PSE2qW1qvjMBeZcKaOY5p+4FdaPa
8bCGdqDQDe9/Rg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:36 2025 by rpki-client