Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json)
Hash identifier: KJ3+83rYCqm3nHTqPrPzGqmSUcfw1iTt+4kYZdwqmpg=
Subject key identifier: C4:C8:A8:D4:EB:C2:2A:4F:8E:C4:DB:38:DA:A5:D4:53:20:EC:38:28
Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14
Certificate serial: 019679E91E1D77D1E7827487DC1575BBABAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
Manifest number: 0D06
Signing time: Mon 28 Apr 2025 01:00:42 +0000
Manifest this update: Mon 28 Apr 2025 01:00:42 +0000
Manifest next update: Tue 29 Apr 2025 01:00:42 +0000
Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: 0CP1NiEwU38gw6jXBD2JKivKwkp9/NoeuDxKKSFNq6Y=)
2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=)
3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:1e:1d:77:d1:e7:82:74:87:dc:15:75:bb:ab:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14
Validity
Not Before: Apr 28 01:00:42 2025 GMT
Not After : Apr 29 01:00:42 2025 GMT
Subject: CN=c4c8a8d4ebc22a4f8ec4db38daa5d45320ec3828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:c3:f2:b6:a9:80:96:ee:88:2b:74:c6:dc:
7f:56:88:cc:af:30:fd:52:6e:ea:ea:00:99:3b:7c:
e8:9a:1b:17:2f:f8:bf:42:89:c4:34:0e:35:2c:65:
2d:ff:b3:b2:be:73:31:d8:e6:e0:f1:22:c6:b8:87:
8d:6c:88:2b:f1:0d:74:3d:9a:34:59:85:59:ff:b0:
ae:e4:c2:38:20:0c:3c:87:e4:bf:38:3f:1e:e5:bb:
7c:a1:ad:f6:a4:80:c1:6d:b9:7e:7a:60:0b:68:61:
44:77:39:2f:fd:fc:fd:ac:e9:41:c5:fd:3f:b8:c6:
a1:d8:58:bd:ff:fc:c8:66:db:62:4f:e3:c0:ff:09:
9d:b2:9b:f4:28:57:73:4e:96:49:2c:bf:41:b6:6e:
2e:fc:19:b4:c9:87:f7:b4:60:53:e0:06:90:61:37:
f5:63:5b:e7:22:9a:68:d3:58:78:0c:8b:02:ff:49:
63:55:2f:9d:27:5c:38:e7:a5:79:e4:00:42:e4:f4:
bb:12:d8:57:c7:28:00:37:06:d1:0d:68:69:bf:c2:
e4:fb:fb:c0:ac:56:19:16:07:88:a7:a4:a5:66:2f:
96:d9:ce:d8:3c:06:36:53:5e:9d:1b:46:21:8d:d7:
97:0b:e7:20:2a:21:89:d3:52:04:e6:1c:a3:74:f3:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:A8:D4:EB:C2:2A:4F:8E:C4:DB:38:DA:A5:D4:53:20:EC:38:28
X509v3 Authority Key Identifier:
keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1c:bd:2f:77:5a:1b:0a:9d:a1:ac:ff:1b:59:ed:da:64:17:
81:ab:98:dd:f4:c3:1b:54:f9:44:69:05:cd:0d:59:d9:5b:2e:
7d:f9:56:00:12:92:5e:af:94:4f:2a:a0:03:99:12:3a:7c:54:
e3:ae:c9:49:43:80:31:3a:df:57:ff:2d:e4:ff:0a:ee:be:e3:
bb:1a:53:89:41:73:f6:b3:c0:96:dc:ef:ca:3d:e9:6f:82:60:
cf:7c:c6:a8:d1:90:bb:ee:e9:d8:9d:9b:8b:42:82:a1:b2:26:
c1:70:48:dd:f9:4e:d9:13:fa:41:03:26:f2:4b:dd:7a:1c:24:
6c:75:57:ca:87:af:59:35:90:27:cf:7a:1e:25:8a:53:03:9c:
e5:97:3e:1d:12:50:5f:e3:6c:ce:4d:3b:5a:00:80:9f:5e:67:
2b:ff:76:52:8a:6d:c4:c4:b1:f6:5c:ad:30:3e:95:4e:99:e7:
e4:2a:48:6b:6c:fb:c9:75:5a:53:1d:ee:7f:0f:6d:c2:34:55:
ba:ce:1e:bc:bc:0c:de:41:32:44:56:8c:8d:0c:31:40:e5:6c:
97:11:93:d0:47:ca:f5:72:cc:d8:69:28:75:06:69:df:01:34:
ca:a3:4f:55:18:84:d0:05:ba:b6:46:d0:42:9f:31:59:90:53:
30:44:af:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56R4dd9HngnSH3BV1u6uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy
ODFmMTQwHhcNMjUwNDI4MDEwMDQyWhcNMjUwNDI5MDEwMDQyWjAzMTEwLwYDVQQD
EyhjNGM4YThkNGViYzIyYTRmOGVjNGRiMzhkYWE1ZDQ1MzIwZWMzODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCzD8rapgJbuiCt0xtx/VojMrzD9
Um7q6gCZO3zomhsXL/i/QonENA41LGUt/7OyvnMx2Obg8SLGuIeNbIgr8Q10PZo0
WYVZ/7Cu5MI4IAw8h+S/OD8e5bt8oa32pIDBbbl+emALaGFEdzkv/fz9rOlBxf0/
uMah2Fi9//zIZttiT+PA/wmdspv0KFdzTpZJLL9Btm4u/Bm0yYf3tGBT4AaQYTf1
Y1vnIppo01h4DIsC/0ljVS+dJ1w456V55ABC5PS7EthXxygANwbRDWhpv8Lk+/vA
rFYZFgeIp6SlZi+W2c7YPAY2U16dG0YhjdeXC+cgKiGJ01IE5hyjdPNYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTIqNTrwipPjsTbONql1FMg7DgoMB8GA1UdIwQY
MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt
MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk
LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBy9L3da
Gwqdoaz/G1nt2mQXgauY3fTDG1T5RGkFzQ1Z2VsufflWABKSXq+UTyqgA5kSOnxU
467JSUOAMTrfV/8t5P8K7r7juxpTiUFz9rPAltzvyj3pb4Jgz3zGqNGQu+7p2J2b
i0KCobImwXBI3flO2RP6QQMm8kvdehwkbHVXyoevWTWQJ896HiWKUwOc5Zc+HRJQ
X+Nszk07WgCAn15nK/92UoptxMSx9lytMD6VTpnn5CpIa2z7yXVaUx3ufw9twjRV
us4evLwM3kEyRFaMjQwxQOVslxGT0EfK9XLM2GkodQZp3wE0yqNPVRiE0AW6tkbQ
Qp8xWZBTMESv4g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:09:19 2025 by rpki-client