Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json)
Hash identifier: OISO6k6bqEDFwhwUaADEnOu/3DxU/yU1VhFg5dhc400=
Subject key identifier: A6:51:64:2F:81:E8:E9:71:EF:14:9E:CD:E7:84:D8:E7:57:DF:2F:81
Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Certificate serial: 01967E6ADEE38BCBAD14AA488F7D6E2B684F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
Manifest number: 04C4
Signing time: Mon 28 Apr 2025 22:00:55 +0000
Manifest this update: Mon 28 Apr 2025 22:00:55 +0000
Manifest next update: Tue 29 Apr 2025 22:00:55 +0000
Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: sZIwDMfV7MzBOG7GOqzVlV5WqwQAP8LivFWxQavflw4=)
2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:de:e3:8b:cb:ad:14:aa:48:8f:7d:6e:2b:68:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c
Validity
Not Before: Apr 28 22:00:55 2025 GMT
Not After : Apr 29 22:00:55 2025 GMT
Subject: CN=a651642f81e8e971ef149ecde784d8e757df2f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:9c:2f:6d:a5:1d:77:36:9f:08:6f:4e:9e:
c7:2d:42:2a:97:ca:c5:c7:72:6a:2e:5d:70:13:0c:
d7:49:11:36:7d:fc:9c:a5:c1:e0:84:e0:e4:be:ba:
f8:72:a0:d8:88:fb:e4:4a:b0:d5:7d:2e:ef:bd:ff:
2e:83:05:23:1f:a2:2a:05:a6:b3:13:0a:40:79:21:
dc:01:4d:fb:14:7e:a8:a6:d8:62:76:1d:c8:38:fe:
15:d6:1f:96:ef:35:2a:ff:67:cb:4e:28:da:97:e3:
01:8e:08:18:32:98:4c:f5:36:b8:0f:74:3d:2e:47:
65:47:01:58:f9:3a:f3:4e:4d:cb:9f:be:3a:2a:de:
a5:2e:42:ed:55:5c:7e:f0:6d:82:f4:4c:f8:db:0b:
28:e9:82:44:b4:46:c8:14:de:d9:b3:ca:06:58:14:
75:82:44:70:bb:0a:38:48:56:96:a0:d4:d7:a6:c9:
a6:cb:46:22:fc:01:ef:db:d0:58:98:45:3b:a8:9e:
f1:b5:3f:0b:84:2e:b7:2c:aa:eb:d7:29:22:c2:8e:
3b:1c:76:64:5f:35:70:43:34:b6:1d:32:b1:5e:cd:
f8:a8:59:7e:12:e8:e4:98:23:59:80:d6:9c:5b:d6:
7d:d6:a6:a7:f6:21:f9:76:69:80:11:08:0b:22:3a:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:51:64:2F:81:E8:E9:71:EF:14:9E:CD:E7:84:D8:E7:57:DF:2F:81
X509v3 Authority Key Identifier:
keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b4:70:d1:3e:00:f0:bd:fa:ab:09:b4:a5:af:57:32:d3:25:
73:cc:73:c8:81:2b:e7:90:f1:4d:03:70:6c:39:b2:f5:f5:61:
d0:95:e0:8c:d5:41:5e:ca:86:57:71:9f:ff:ab:28:2e:6e:7e:
4e:90:56:2c:00:cd:38:72:ce:6c:19:25:27:2e:8d:9b:a4:e9:
f0:af:9b:47:ea:7d:4e:93:1d:f9:d9:e0:6f:a7:de:f8:9e:93:
84:a5:14:5c:1b:41:6e:a3:5d:ec:3c:69:1a:2e:6c:9b:a3:71:
f9:37:95:30:b6:29:d4:c9:db:21:1f:31:3a:27:a4:55:8a:46:
78:37:70:55:37:fd:6f:51:23:4a:b2:e6:97:8a:fb:41:cb:1c:
2b:11:1d:ef:bb:93:71:03:22:9c:6f:d1:26:e4:f1:35:04:4e:
b5:18:46:50:f0:80:65:3e:a9:26:4d:c1:cf:fc:94:6e:ce:c3:
8c:de:7a:2f:82:48:12:30:f7:b4:d1:ae:0f:85:25:b2:a0:97:
41:3a:46:85:fb:c8:a0:3b:56:25:0d:8b:92:e8:24:42:f9:1e:
61:e8:af:d4:40:97:ab:85:ab:ba:00:16:6e:67:a7:aa:db:da:
f9:0b:11:10:ec:3c:3b:81:3b:7e:2b:47:61:9f:05:a6:ae:82:
27:b7:02:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+at7ji8utFKpIj31uK2hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx
YjZlMGMwHhcNMjUwNDI4MjIwMDU1WhcNMjUwNDI5MjIwMDU1WjAzMTEwLwYDVQQD
EyhhNjUxNjQyZjgxZThlOTcxZWYxNDllY2RlNzg0ZDhlNzU3ZGYyZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYGcL22lHXc2nwhvTp7HLUIql8rF
x3JqLl1wEwzXSRE2ffycpcHghODkvrr4cqDYiPvkSrDVfS7vvf8ugwUjH6IqBaaz
EwpAeSHcAU37FH6opthidh3IOP4V1h+W7zUq/2fLTijal+MBjggYMphM9Ta4D3Q9
LkdlRwFY+TrzTk3Ln746Kt6lLkLtVVx+8G2C9Ez42wso6YJEtEbIFN7Zs8oGWBR1
gkRwuwo4SFaWoNTXpsmmy0Yi/AHv29BYmEU7qJ7xtT8LhC63LKrr1ykiwo47HHZk
XzVwQzS2HTKxXs34qFl+EujkmCNZgNacW9Z91qan9iH5dmmAEQgLIjr2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZRZC+B6Olx7xSezeeE2OdX3y+BMB8GA1UdIwQY
MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt
MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3
LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJbRw0T4A
8L36qwm0pa9XMtMlc8xzyIEr55DxTQNwbDmy9fVh0JXgjNVBXsqGV3Gf/6soLm5+
TpBWLADNOHLObBklJy6Nm6Tp8K+bR+p9TpMd+dngb6fe+J6ThKUUXBtBbqNd7Dxp
Gi5sm6Nx+TeVMLYp1MnbIR8xOiekVYpGeDdwVTf9b1EjSrLml4r7QcscKxEd77uT
cQMinG/RJuTxNQROtRhGUPCAZT6pJk3Bz/yUbs7DjN56L4JIEjD3tNGuD4UlsqCX
QTpGhfvIoDtWJQ2LkugkQvkeYeiv1ECXq4WrugAWbmenqtva+QsREOw8O4E7fitH
YZ8Fpq6CJ7cCsA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 00:34:43 2025 by rpki-client