Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
File: CCaVQ8pHFYt-d3WHre_9fnxosGE.mft (raw, json)
Hash identifier: M1XDAb7ZkWahqQr/LVLGB/YiDd2sZuf6xJCdihTvCkk=
Subject key identifier: 75:88:A2:79:2D:1B:0B:E4:47:C9:11:C4:8C:13:DD:C1:40:FA:7E:32
Authority key identifier: 08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
Certificate issuer: /CN=08269543ca47158b7e777587adeffd7e7c68b061
Certificate serial: 01967D8F0893D0ED847EC2D98F07189DCA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
Manifest number: 0ECC
Signing time: Mon 28 Apr 2025 18:00:47 +0000
Manifest this update: Mon 28 Apr 2025 18:00:47 +0000
Manifest next update: Tue 29 Apr 2025 18:00:47 +0000
Files and hashes: 1: CCaVQ8pHFYt-d3WHre_9fnxosGE.crl (hash: iuGJILUVnmwfefCLhLHvN6QG3pg05eKXvt3ATX1y+uw=)
2: QFbV3cLIo6fGM98z7n86TaXk26k.roa (hash: OdVi+1rHdt0zdTh+loubxHzRa31DZflpr11+itY/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8f:08:93:d0:ed:84:7e:c2:d9:8f:07:18:9d:ca:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08269543ca47158b7e777587adeffd7e7c68b061
Validity
Not Before: Apr 28 18:00:47 2025 GMT
Not After : Apr 29 18:00:47 2025 GMT
Subject: CN=7588a2792d1b0be447c911c48c13ddc140fa7e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:33:11:6b:89:37:91:28:df:2c:c4:a1:36:
e9:99:d1:ee:86:f7:b9:31:88:64:6f:e0:22:82:98:
7d:e3:c3:c2:cb:f5:51:27:4e:82:31:0d:4e:82:61:
82:bf:b6:ec:6a:8e:ea:7b:d8:e4:d8:52:71:2c:fe:
d8:3b:2e:fc:fd:d6:10:ad:20:3e:13:ca:3c:af:90:
16:1c:54:22:fe:5a:8f:25:64:93:e3:7a:84:a5:37:
f2:3d:cc:f1:d0:37:0c:07:a7:0a:4b:21:47:50:f2:
a7:ea:fb:da:5a:a5:19:8a:fc:83:f6:7c:d7:36:44:
9f:db:80:3b:9d:42:18:50:58:55:24:a3:73:65:62:
7e:d4:e4:d4:60:31:b2:a3:2d:21:3c:d0:9b:9e:76:
ae:68:ed:28:ab:02:aa:61:27:30:46:b9:da:51:fa:
38:ae:fa:67:17:3c:03:73:0c:0a:37:f3:ea:a9:6c:
aa:0e:23:78:53:9d:24:6c:42:02:fe:45:29:ca:6f:
73:1f:51:15:09:c4:09:33:0e:88:16:84:c0:2b:68:
33:83:c2:79:41:7f:84:87:ed:bc:7e:d9:ea:c8:d7:
50:77:ef:0c:c1:4d:74:09:fb:84:27:d7:49:c9:51:
01:7b:9f:64:e1:72:08:5c:98:d7:20:eb:32:04:f1:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:88:A2:79:2D:1B:0B:E4:47:C9:11:C4:8C:13:DD:C1:40:FA:7E:32
X509v3 Authority Key Identifier:
keyid:08:26:95:43:CA:47:15:8B:7E:77:75:87:AD:EF:FD:7E:7C:68:B0:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCaVQ8pHFYt-d3WHre_9fnxosGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7ef6a6-f22b-4216-8618-60ffde0cd7c7/1/CCaVQ8pHFYt-d3WHre_9fnxosGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:65:c4:af:01:60:c2:92:c6:f4:fc:9f:6e:c6:cc:20:ad:8e:
97:07:6d:45:dc:2e:a1:d0:2c:f1:17:a4:09:98:17:9c:61:ed:
0d:9f:4c:37:8d:52:2e:71:cc:d9:5b:41:d6:6b:20:13:29:c7:
66:24:d4:73:35:19:ef:1e:bf:03:7e:67:97:45:75:f1:f4:9b:
d9:d2:81:00:64:57:de:b4:8d:4d:d1:d8:7e:74:0e:a4:82:ba:
e2:c4:c4:e3:6a:25:1b:3e:a3:8b:37:0e:b3:69:f0:df:9d:b2:
0c:4e:6d:92:9e:17:23:cf:1a:69:04:45:19:07:99:54:74:1c:
b8:09:ad:5b:f4:70:96:72:da:e9:bb:a4:32:7e:67:64:58:33:
29:f0:a1:dc:4e:f6:a0:ec:df:3a:ad:09:46:d7:b2:08:b6:ac:
46:71:2c:9b:4e:92:24:2a:ad:5f:c7:f3:93:bb:31:1a:dc:7e:
2c:88:61:49:0a:95:29:c5:aa:dc:21:bf:74:e5:47:b7:76:b4:
f4:1e:9d:ed:a9:c5:08:5a:9f:d1:46:ce:05:f0:83:6c:78:88:
69:be:74:52:82:6e:57:c6:3f:0e:e9:36:71:b2:36:b3:1d:91:
ac:62:52:6e:51:5f:38:a6:0a:b2:07:c9:f7:b8:89:9f:82:30:
13:e8:83:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jwiT0O2EfsLZjwcYncoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjY5NTQzY2E0NzE1OGI3ZTc3NzU4N2FkZWZmZDdlN2M2
OGIwNjEwHhcNMjUwNDI4MTgwMDQ3WhcNMjUwNDI5MTgwMDQ3WjAzMTEwLwYDVQQD
Eyg3NTg4YTI3OTJkMWIwYmU0NDdjOTExYzQ4YzEzZGRjMTQwZmE3ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvczEWuJN5Eo3yzEoTbpmdHuhve5
MYhkb+Aigph948PCy/VRJ06CMQ1OgmGCv7bsao7qe9jk2FJxLP7YOy78/dYQrSA+
E8o8r5AWHFQi/lqPJWST43qEpTfyPczx0DcMB6cKSyFHUPKn6vvaWqUZivyD9nzX
NkSf24A7nUIYUFhVJKNzZWJ+1OTUYDGyoy0hPNCbnnauaO0oqwKqYScwRrnaUfo4
rvpnFzwDcwwKN/PqqWyqDiN4U50kbEIC/kUpym9zH1EVCcQJMw6IFoTAK2gzg8J5
QX+Eh+28ftnqyNdQd+8MwU10CfuEJ9dJyVEBe59k4XIIXJjXIOsyBPF2lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWIonktGwvkR8kRxIwT3cFA+n4yMB8GA1UdIwQY
MBaAFAgmlUPKRxWLfnd1h63v/X58aLBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgt
NjBmZmRlMGNkN2M3LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83ZWY2YTYtZjIyYi00MjE2LTg2MTgtNjBmZmRlMGNkN2M3
LzEvQ0NhVlE4cEhGWXQtZDNXSHJlXzlmbnhvc0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGXErwFg
wpLG9PyfbsbMIK2OlwdtRdwuodAs8RekCZgXnGHtDZ9MN41SLnHM2VtB1msgEynH
ZiTUczUZ7x6/A35nl0V18fSb2dKBAGRX3rSNTdHYfnQOpIK64sTE42olGz6jizcO
s2nw352yDE5tkp4XI88aaQRFGQeZVHQcuAmtW/RwlnLa6bukMn5nZFgzKfCh3E72
oOzfOq0JRteyCLasRnEsm06SJCqtX8fzk7sxGtx+LIhhSQqVKcWq3CG/dOVHt3a0
9B6d7anFCFqf0UbOBfCDbHiIab50UoJuV8Y/Duk2cbI2sx2RrGJSblFfOKYKsgfJ
97iJn4IwE+iDng==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:02:31 2025 by rpki-client