Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
File: I6lUuSO6IAjpheuiQdG3AHF_iEM.mft (raw, json)
Hash identifier: dgyB4mTe4zTBI0oWtCFkfUa9/NXDDCXOqVr510h68SE=
Subject key identifier: 27:02:24:C5:B1:D3:B8:9D:D8:69:61:31:A6:65:37:7D:BD:2C:82:70
Authority key identifier: 23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
Certificate issuer: /CN=23a954b923ba2008e985eba241d1b700717f8843
Certificate serial: 019677FB5463F18AAE9C532B2799E7699650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
Manifest number: 1358
Signing time: Sun 27 Apr 2025 16:01:21 +0000
Manifest this update: Sun 27 Apr 2025 16:01:21 +0000
Manifest next update: Mon 28 Apr 2025 16:01:21 +0000
Files and hashes: 1: I6lUuSO6IAjpheuiQdG3AHF_iEM.crl (hash: Zkz5uGxOifdAhHWNw6WuEguGiWbvBn1u0fEyRR6hX6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:54:63:f1:8a:ae:9c:53:2b:27:99:e7:69:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a954b923ba2008e985eba241d1b700717f8843
Validity
Not Before: Apr 27 16:01:21 2025 GMT
Not After : Apr 28 16:01:21 2025 GMT
Subject: CN=270224c5b1d3b89dd8696131a665377dbd2c8270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:cc:13:0c:31:c6:16:59:97:7f:c5:7a:21:
c8:61:db:70:a8:ed:c8:c9:13:4a:dc:79:dd:fe:14:
68:cf:a1:1a:f7:52:3e:fb:a4:fe:e0:e4:62:12:2e:
f5:51:73:40:f4:1c:0d:2f:ac:85:61:0a:3a:ae:a1:
bc:52:58:53:64:86:80:cb:92:da:0b:d8:20:06:04:
fb:0b:91:6c:5d:a3:bf:ca:06:ee:3b:3d:e8:b5:55:
90:96:9a:df:a2:5e:af:e6:a8:dd:15:17:8d:11:24:
4f:43:a3:74:6f:ca:87:df:1d:b2:c7:b7:10:23:f3:
78:a0:d2:bd:bf:d3:e3:98:94:e0:e0:fe:ad:2f:12:
2d:d3:5f:37:fb:03:40:1a:6f:65:58:be:e5:f4:a6:
6f:f3:60:ba:0c:c8:3a:df:a3:f6:8a:1f:c4:9c:cb:
bd:00:7e:19:65:d1:5f:9a:6d:a1:9a:f8:98:ac:9d:
f0:0c:22:e1:d0:81:70:c8:ed:41:0e:73:ec:e8:5d:
87:48:cb:b5:f6:dc:16:e0:ab:5f:6a:68:5d:2b:68:
b6:79:d8:e9:18:62:2f:1d:b2:35:db:65:13:7a:c3:
72:c2:f9:33:34:a6:3f:9d:2a:2b:bf:8d:3b:6a:80:
a3:71:51:3c:cc:e6:1e:95:28:1c:18:9f:73:52:be:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:24:C5:B1:D3:B8:9D:D8:69:61:31:A6:65:37:7D:BD:2C:82:70
X509v3 Authority Key Identifier:
keyid:23:A9:54:B9:23:BA:20:08:E9:85:EB:A2:41:D1:B7:00:71:7F:88:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6lUuSO6IAjpheuiQdG3AHF_iEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d9760-e36e-47c2-96e3-6dc510e98b73/1/I6lUuSO6IAjpheuiQdG3AHF_iEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:22:81:1f:db:40:24:1b:75:a0:4e:54:03:d1:74:2a:2f:48:
57:a1:02:c3:0e:ab:3a:b3:f4:0e:e4:dc:5d:07:96:02:e3:67:
3f:f7:fd:21:42:3d:c2:3c:b4:f7:a9:21:b5:46:11:9c:55:53:
2b:9e:9b:a6:30:1d:bf:9b:4b:5d:e1:a1:a5:0a:9f:ba:1f:f3:
30:06:79:cb:47:78:f3:60:d6:c0:69:a8:ca:83:42:be:0e:d8:
63:55:7f:1c:4e:13:34:90:4a:6a:75:76:f9:60:dd:16:eb:ee:
43:d0:99:c6:6c:5e:40:f1:0b:b0:ff:eb:db:2c:7c:47:78:6e:
e2:42:73:d5:70:7e:fd:df:17:96:e4:73:98:ff:ac:ae:ae:14:
4f:2d:43:8c:14:3c:cb:56:e1:3c:84:b1:fc:60:94:41:fa:07:
e5:06:34:3a:e5:5c:9b:1f:85:8e:70:63:a6:b9:8e:9b:f3:65:
8a:28:d4:03:a6:58:3c:c7:73:a2:05:e6:87:68:c7:dc:dc:2f:
f1:bd:34:e4:a8:dd:41:74:78:c0:c3:2a:f7:65:09:01:08:61:
07:9e:c3:79:32:20:e4:94:72:85:63:ae:68:0a:58:01:c0:08:
2c:a6:17:da:3b:d1:9a:94:9c:03:32:68:0e:98:43:d6:00:20:
a5:48:03:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+1Rj8YqunFMrJ5nnaZZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk1NGI5MjNiYTIwMDhlOTg1ZWJhMjQxZDFiNzAwNzE3
Zjg4NDMwHhcNMjUwNDI3MTYwMTIxWhcNMjUwNDI4MTYwMTIxWjAzMTEwLwYDVQQD
EygyNzAyMjRjNWIxZDNiODlkZDg2OTYxMzFhNjY1Mzc3ZGJkMmM4MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81PMEwwxxhZZl3/FeiHIYdtwqO3I
yRNK3Hnd/hRoz6Ea91I++6T+4ORiEi71UXNA9BwNL6yFYQo6rqG8UlhTZIaAy5La
C9ggBgT7C5FsXaO/ygbuOz3otVWQlprfol6v5qjdFReNESRPQ6N0b8qH3x2yx7cQ
I/N4oNK9v9PjmJTg4P6tLxIt0183+wNAGm9lWL7l9KZv82C6DMg636P2ih/EnMu9
AH4ZZdFfmm2hmviYrJ3wDCLh0IFwyO1BDnPs6F2HSMu19twW4KtfamhdK2i2edjp
GGIvHbI122UTesNywvkzNKY/nSorv407aoCjcVE8zOYelSgcGJ9zUr5ZnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcCJMWx07id2GlhMaZlN329LIJwMB8GA1UdIwQY
MBaAFCOpVLkjuiAI6YXrokHRtwBxf4hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMt
NmRjNTEwZTk4YjczLzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81ZDk3NjAtZTM2ZS00N2MyLTk2ZTMtNmRjNTEwZTk4Yjcz
LzEvSTZsVXVTTzZJQWpwaGV1aVFkRzNBSEZfaUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyKBH9tA
JBt1oE5UA9F0Ki9IV6ECww6rOrP0DuTcXQeWAuNnP/f9IUI9wjy096khtUYRnFVT
K56bpjAdv5tLXeGhpQqfuh/zMAZ5y0d482DWwGmoyoNCvg7YY1V/HE4TNJBKanV2
+WDdFuvuQ9CZxmxeQPELsP/r2yx8R3hu4kJz1XB+/d8XluRzmP+srq4UTy1DjBQ8
y1bhPISx/GCUQfoH5QY0OuVcmx+FjnBjprmOm/NliijUA6ZYPMdzogXmh2jH3Nwv
8b005KjdQXR4wMMq92UJAQhhB57DeTIg5JRyhWOuaApYAcAILKYX2jvRmpScAzJo
DphD1gAgpUgDuA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:21:12 2025 by rpki-client