Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier: H7Q1sit25DTWHr/2P+ZNIrnnXoqBdvhwRnSmi1ISnvU=
Subject key identifier: 56:DB:5B:10:E8:E5:FF:42:C2:8C:20:09:77:49:2A:A2:50:E7:C5:C6
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer: /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial: 01967BD744E5F792D10E9C327181E7E8A508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 10:00:27 +0000
Manifest this update: Mon 28 Apr 2025 10:00:27 +0000
Manifest next update: Tue 29 Apr 2025 10:00:27 +0000
Files and hashes: 1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: coANsrFCexY7/PhC+HBR1W7QzEMlc9E2snUdEB6N45w=)
2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:44:e5:f7:92:d1:0e:9c:32:71:81:e7:e8:a5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
Validity
Not Before: Apr 28 10:00:27 2025 GMT
Not After : Apr 29 10:00:27 2025 GMT
Subject: CN=56db5b10e8e5ff42c28c200977492aa250e7c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:27:ee:a7:40:50:d8:a4:a5:09:bb:3a:47:4a:
fb:c1:60:f4:6e:12:ad:fd:7f:d4:8b:83:8b:dd:5a:
1f:0e:c0:95:52:42:15:81:db:d0:e3:01:f1:e5:f5:
d5:d0:e7:89:fa:99:1a:b6:bd:bb:0e:c1:59:25:f1:
3b:ec:36:f2:17:0c:5c:12:e6:04:16:24:cb:99:95:
2c:54:d1:2b:51:af:fa:3e:cf:ce:d5:84:50:dc:65:
58:a7:ec:ee:b3:2f:35:95:3e:d5:b3:40:96:8a:b4:
59:7a:2c:d6:d9:03:d8:fc:df:d1:38:47:da:ca:b0:
51:6d:45:88:b0:99:78:9a:a4:d4:a0:80:1e:02:56:
20:b7:11:19:8f:00:4f:cf:b8:de:63:02:30:fc:ac:
83:68:70:ef:69:98:c4:b4:36:08:5f:33:54:45:f4:
e3:2f:a6:0f:70:5a:43:88:80:43:60:a1:86:6f:9d:
5a:4d:6b:64:4a:4e:2e:3f:9b:1c:2b:f3:b0:1e:7d:
03:ee:a8:67:bc:27:6e:fa:b0:e0:4b:db:3e:5a:2e:
3b:0c:53:5c:92:93:91:d1:a3:08:81:38:8d:47:35:
57:17:20:59:5a:0a:8a:0c:47:ed:00:6a:68:a6:72:
b8:d9:27:15:61:74:df:f7:be:6d:52:d7:e2:05:1d:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:5B:10:E8:E5:FF:42:C2:8C:20:09:77:49:2A:A2:50:E7:C5:C6
X509v3 Authority Key Identifier:
keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3b:ae:a7:61:6e:78:ea:be:c7:d4:20:33:76:34:9d:42:26:
02:c3:c1:95:23:28:50:95:0e:3b:08:c4:ee:c0:02:09:da:d8:
25:a5:0e:b6:7d:59:08:46:75:44:d5:28:3a:03:cd:51:e0:3d:
ff:90:f7:f4:e1:89:40:f9:5c:59:8f:33:18:b0:33:4f:11:f4:
23:55:b5:98:ff:e4:0b:cf:00:23:8a:3e:2d:9a:05:0b:9e:1b:
a8:5d:19:16:29:c9:f4:e9:61:f2:52:27:c8:02:c2:fc:9e:9f:
bf:09:a0:cd:6c:b6:57:b3:4c:ca:6d:45:fa:58:b2:9b:59:06:
48:3f:ff:cf:a0:09:a0:c5:93:bc:ff:5f:a1:e9:51:35:99:49:
f9:35:d4:10:6b:64:07:f7:94:17:ef:8b:af:71:e2:09:dc:f6:
a0:66:41:b2:51:d7:4a:00:98:c1:10:e9:12:f8:60:a2:11:03:
15:59:bf:3f:44:6d:69:cd:c6:2d:c7:52:a8:1f:c9:be:7b:8c:
a3:9f:95:e7:9f:ca:19:29:4a:a1:a9:a9:ce:67:31:87:01:5c:
da:68:3f:e9:ff:73:51:cd:fe:a3:c2:e4:94:aa:7e:30:a2:33:
d3:c7:1c:5f:52:83:d7:c2:34:8d:76:47:a6:aa:eb:53:04:93:
5c:c9:50:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ710Tl95LRDpwycYHn6KUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMDgzODA4NzYzYzI2MjU0MTAyMGQyZTgxZGEzNGFhYTM4
MjgzYjcwHhcNMjUwNDI4MTAwMDI3WhcNMjUwNDI5MTAwMDI3WjAzMTEwLwYDVQQD
Eyg1NmRiNWIxMGU4ZTVmZjQyYzI4YzIwMDk3NzQ5MmFhMjUwZTdjNWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyfup0BQ2KSlCbs6R0r7wWD0bhKt
/X/Ui4OL3VofDsCVUkIVgdvQ4wHx5fXV0OeJ+pkatr27DsFZJfE77DbyFwxcEuYE
FiTLmZUsVNErUa/6Ps/O1YRQ3GVYp+zusy81lT7Vs0CWirRZeizW2QPY/N/ROEfa
yrBRbUWIsJl4mqTUoIAeAlYgtxEZjwBPz7jeYwIw/KyDaHDvaZjEtDYIXzNURfTj
L6YPcFpDiIBDYKGGb51aTWtkSk4uP5scK/OwHn0D7qhnvCdu+rDgS9s+Wi47DFNc
kpOR0aMIgTiNRzVXFyBZWgqKDEftAGpopnK42ScVYXTf975tUtfiBR00IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbbWxDo5f9CwowgCXdJKqJQ58XGMB8GA1UdIwQY
MBaAFAsIOAh2PCYlQQINLoHaNKqjgoO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmIt
NDY5MjVjNTI0OWU2LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83ZTQ3ZDctNjEzNy00MzAwLTkzNmItNDY5MjVjNTI0OWU2
LzEvQ3dnNENIWThKaVZCQWcwdWdkbzBxcU9DZzdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAszuup2Fu
eOq+x9QgM3Y0nUImAsPBlSMoUJUOOwjE7sACCdrYJaUOtn1ZCEZ1RNUoOgPNUeA9
/5D39OGJQPlcWY8zGLAzTxH0I1W1mP/kC88AI4o+LZoFC54bqF0ZFinJ9Olh8lIn
yALC/J6fvwmgzWy2V7NMym1F+liym1kGSD//z6AJoMWTvP9foelRNZlJ+TXUEGtk
B/eUF++Lr3HiCdz2oGZBslHXSgCYwRDpEvhgohEDFVm/P0Rtac3GLcdSqB/JvnuM
o5+V55/KGSlKoampzmcxhwFc2mg/6f9zUc3+o8LklKp+MKIz08ccX1KD18I0jXZH
pqrrUwSTXMlQKg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:15:50 2025 by rpki-client