Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: mia6GJVKxTGrmNQ57jHb8PLzOyPPhWOuSyj85fiW0Rs=
Subject key identifier: 4A:F4:96:FB:59:AE:3A:AE:D0:FA:94:22:B7:58:6C:D2:EF:61:47:1C
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 019697858B1802A1E11333C0CDB5DC63BEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0D3D
Signing time: Sat 03 May 2025 19:00:33 +0000
Manifest this update: Sat 03 May 2025 19:00:33 +0000
Manifest next update: Sun 04 May 2025 19:00:33 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: mDbzILMPhTEu8u3nuhyqcwSCnh1DBA3LKkJ+G7Ym5VY=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:85:8b:18:02:a1:e1:13:33:c0:cd:b5:dc:63:be:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: May 3 19:00:33 2025 GMT
Not After : May 4 19:00:33 2025 GMT
Subject: CN=4af496fb59ae3aaed0fa9422b7586cd2ef61471c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:76:ba:0e:cc:70:a8:f8:db:5c:80:ae:c0:
46:b9:62:06:bb:b0:d8:38:ce:f8:45:57:28:0c:01:
46:4c:38:8b:56:85:80:9d:5c:34:b8:cb:7c:d2:4d:
ec:38:74:da:b4:04:33:a8:4d:94:23:b6:1d:4d:2d:
83:49:4c:ea:d3:df:44:b0:8d:fb:fb:cf:ce:95:89:
b6:85:2f:3f:23:6e:b4:33:7f:42:8f:63:41:80:fc:
6c:ce:06:27:ee:2c:5c:80:a7:5d:81:af:38:c4:0f:
3a:ed:af:3f:e9:8b:f8:da:50:38:70:9d:7f:44:0b:
b9:9d:22:77:d8:a8:41:6f:e3:0d:29:6e:10:5e:70:
48:f0:44:22:34:96:7e:b7:47:e2:ab:65:42:a7:de:
b8:9b:a7:b4:b9:13:41:07:a2:e2:ef:ad:8d:1c:eb:
6a:91:cb:06:11:79:34:3a:61:1b:dd:5b:f3:83:8c:
ba:1f:e9:e7:6f:a4:6a:8a:76:3b:eb:52:a0:df:0d:
c6:b5:91:5b:53:bd:a9:22:90:96:1e:08:27:6c:20:
f1:5d:21:6e:28:bd:d2:a8:88:cf:c9:1e:70:5e:e1:
59:82:25:c1:1b:30:33:1e:4e:52:12:c1:80:f8:2a:
1f:38:52:7e:0e:fe:4e:9d:4f:cd:5b:4e:09:69:a8:
48:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F4:96:FB:59:AE:3A:AE:D0:FA:94:22:B7:58:6C:D2:EF:61:47:1C
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:25:1d:d4:b2:b3:de:9a:26:e3:db:c7:52:c5:80:4f:63:0a:
bc:35:b7:e1:a8:a6:48:5b:f9:6d:6f:a2:fa:4e:cd:4f:03:fd:
24:82:92:10:3d:0d:71:e0:e4:30:1e:de:81:40:34:f4:33:22:
d5:a1:dd:cd:7b:52:39:7f:de:00:8a:88:68:9e:94:c8:7b:59:
bf:e7:c3:9d:9d:01:75:9e:ca:18:07:44:6c:b6:cb:e8:14:2d:
e8:a4:dc:50:30:34:87:b1:0c:f4:53:47:93:4f:6b:60:ab:3b:
27:0c:62:9f:1c:91:10:e9:29:c3:05:33:0b:90:cd:03:a0:09:
0b:3b:3a:6c:28:3c:c3:7e:90:21:d8:cf:a8:be:30:93:2f:c1:
8a:ea:cc:08:18:45:c3:54:dd:f8:b1:ff:2d:fe:6c:9f:c6:d3:
ad:40:d1:92:51:9f:90:c5:86:b2:4f:c8:a4:41:21:ae:29:8e:
9f:55:df:d4:24:33:83:91:a5:a5:03:fa:8d:79:2c:ae:c0:76:
88:ab:1b:a4:d5:a4:75:77:6d:6b:3c:3c:1b:48:b2:07:49:b7:
5c:42:1e:4a:00:7d:0c:93:46:77:01:7b:90:0e:31:14:50:8b:
b3:55:44:5c:69:4e:33:c4:22:5d:ed:fe:6c:98:ad:e7:cb:da:
4c:d5:84:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaXhYsYAqHhEzPAzbXcY760MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTcxNzM2MTMwOWQyOTM5MzUxYzlkOGJhMjE3M2RiODMx
OWE4OGYwHhcNMjUwNTAzMTkwMDMzWhcNMjUwNTA0MTkwMDMzWjAzMTEwLwYDVQQD
Eyg0YWY0OTZmYjU5YWUzYWFlZDBmYTk0MjJiNzU4NmNkMmVmNjE0NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne12ug7McKj421yArsBGuWIGu7DY
OM74RVcoDAFGTDiLVoWAnVw0uMt80k3sOHTatAQzqE2UI7YdTS2DSUzq099EsI37
+8/OlYm2hS8/I260M39Cj2NBgPxszgYn7ixcgKddga84xA867a8/6Yv42lA4cJ1/
RAu5nSJ32KhBb+MNKW4QXnBI8EQiNJZ+t0fiq2VCp964m6e0uRNBB6Li762NHOtq
kcsGEXk0OmEb3Vvzg4y6H+nnb6RqinY761Kg3w3GtZFbU72pIpCWHggnbCDxXSFu
KL3SqIjPyR5wXuFZgiXBGzAzHk5SEsGA+CofOFJ+Dv5OnU/NW04JaahI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr0lvtZrjqu0PqUIrdYbNLvYUccMB8GA1UdIwQY
MBaAFCGnFzYTCdKTk1HJ2Lohc9uDGaiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUt
ZjhhNDY5ZDRlMmIyLzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83ZmIzODEtZmM0NC00NGY2LWEzODUtZjhhNDY5ZDRlMmIy
LzEvSWFjWE5oTUowcE9UVWNuWXVpRnoyNE1acUk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyUd1LKz
3pom49vHUsWAT2MKvDW34aimSFv5bW+i+k7NTwP9JIKSED0NceDkMB7egUA09DMi
1aHdzXtSOX/eAIqIaJ6UyHtZv+fDnZ0BdZ7KGAdEbLbL6BQt6KTcUDA0h7EM9FNH
k09rYKs7JwxinxyREOkpwwUzC5DNA6AJCzs6bCg8w36QIdjPqL4wky/BiurMCBhF
w1Td+LH/Lf5sn8bTrUDRklGfkMWGsk/IpEEhrimOn1Xf1CQzg5GlpQP6jXksrsB2
iKsbpNWkdXdtazw8G0iyB0m3XEIeSgB9DJNGdwF7kA4xFFCLs1VEXGlOM8QiXe3+
bJit58vaTNWEuQ==
-----END CERTIFICATE-----
Generated at Sun May 4 03:22:19 2025 by rpki-client