Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json)
Hash identifier: czHZ4JhpCJhrqFOhCi+nECXKyZCCa8velXbH8OJPCM0=
Subject key identifier: 8A:FD:B2:11:5E:CC:94:C9:EC:9C:3E:AE:35:34:8A:80:35:9F:A1:7B
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 019675D585950A34D80BF24CDADA90F6B90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 06:00:49 +0000
Manifest this update: Sun 27 Apr 2025 06:00:49 +0000
Manifest next update: Mon 28 Apr 2025 06:00:49 +0000
Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=)
2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: xeIsJcQkaBOyPaF/Pm8HcQpsDJLou6r852NJKoCWDN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:85:95:0a:34:d8:0b:f2:4c:da:da:90:f6:b9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Apr 27 06:00:49 2025 GMT
Not After : Apr 28 06:00:49 2025 GMT
Subject: CN=8afdb2115ecc94c9ec9c3eae35348a80359fa17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:c9:e9:36:f9:55:ca:4d:0f:3d:4e:27:f1:
04:b4:19:4f:2f:90:9b:5d:f4:ca:a7:89:13:bb:f9:
d9:6c:eb:41:b7:5b:43:51:84:b8:fe:10:ca:e7:3b:
75:10:96:f4:81:e3:2d:43:38:0e:ec:86:ff:5f:26:
8f:e4:90:dd:cb:0e:6f:48:34:d8:70:b0:df:20:8e:
20:ea:89:59:aa:f4:17:7d:24:ad:3b:98:72:33:bf:
da:a6:ac:2e:57:6b:68:ce:86:13:1c:8a:ab:1f:ed:
93:b6:af:1e:a4:09:58:3f:be:5c:99:70:c1:c8:9d:
b0:f6:1f:32:b7:95:8d:be:65:9c:0a:bc:09:e4:cc:
ff:d4:e7:b0:0b:eb:cf:4d:d4:4d:f6:27:98:dd:94:
df:bb:af:a6:f1:50:07:3f:cd:c3:c2:e7:4f:ae:5c:
d4:64:77:ee:8f:d3:12:d8:5a:8a:0e:61:1f:61:bb:
07:03:cd:c6:cb:7c:e4:74:95:cd:24:9b:c7:4c:b7:
ab:f5:4e:09:d9:e1:eb:a7:fd:95:6f:e6:70:39:1a:
bb:d5:a3:aa:36:7c:42:3a:c8:d3:e0:f5:42:87:5d:
fd:ab:8b:57:52:6b:94:57:41:6d:fb:a1:85:0d:db:
51:d8:35:a1:a4:70:70:70:ba:a8:8e:20:2e:a5:ce:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:B2:11:5E:CC:94:C9:EC:9C:3E:AE:35:34:8A:80:35:9F:A1:7B
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:03:7a:df:a7:68:7d:08:51:cb:40:cd:54:5a:b8:60:d2:f8:
bd:db:1a:fb:94:89:bc:c6:90:6b:d8:5e:db:fc:7c:e4:a6:3e:
a2:9c:b1:31:2c:36:73:d1:9a:06:03:0e:38:36:ff:47:19:06:
9a:e1:13:0a:c2:6e:77:ae:20:6b:6d:e5:8e:6f:a3:db:12:e1:
4d:af:82:65:0c:fc:af:08:3c:42:70:92:c2:e2:12:7d:af:bb:
0e:da:3d:f5:4a:50:5c:d0:4f:fb:ef:9f:e8:81:2e:3e:dd:e9:
b4:b0:ee:df:e6:5a:4f:25:e3:b9:b2:1e:d8:dc:a4:1f:87:01:
cb:72:6d:58:3a:e0:10:a8:17:af:e8:a9:ee:2c:51:ea:3e:de:
b3:6d:6e:7f:b3:f1:59:31:49:cb:1b:dc:a5:ec:71:cc:64:2c:
5c:8f:ca:51:d5:67:41:0d:5e:be:07:ea:ad:ed:58:d5:5b:4d:
36:5c:86:2a:27:4c:3a:35:89:9e:de:cf:45:28:5f:b1:c5:4b:
6d:c4:d3:8a:75:02:e6:5e:f8:37:94:fc:94:df:51:2b:72:00:
55:b5:4e:c4:ad:ab:87:8b:ce:df:11:5e:6a:2f:12:e0:87:b7:
3e:7d:cb:33:ec:5a:9f:95:ec:2d:6c:8b:d8:13:39:41:7a:a7:
3d:d7:c0:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ11YWVCjTYC/JM2tqQ9rkPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj
MTM3NjcwHhcNMjUwNDI3MDYwMDQ5WhcNMjUwNDI4MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg4YWZkYjIxMTVlY2M5NGM5ZWM5YzNlYWUzNTM0OGE4MDM1OWZhMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlrJ6Tb5VcpNDz1OJ/EEtBlPL5Cb
XfTKp4kTu/nZbOtBt1tDUYS4/hDK5zt1EJb0geMtQzgO7Ib/XyaP5JDdyw5vSDTY
cLDfII4g6olZqvQXfSStO5hyM7/apqwuV2tozoYTHIqrH+2Ttq8epAlYP75cmXDB
yJ2w9h8yt5WNvmWcCrwJ5Mz/1OewC+vPTdRN9ieY3ZTfu6+m8VAHP83DwudPrlzU
ZHfuj9MS2FqKDmEfYbsHA83Gy3zkdJXNJJvHTLer9U4J2eHrp/2Vb+ZwORq71aOq
NnxCOsjT4PVCh139q4tXUmuUV0Ft+6GFDdtR2DWhpHBwcLqojiAupc5ilwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr9shFezJTJ7Jw+rjU0ioA1n6F7MB8GA1UdIwQY
MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt
OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5
LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAN636do
fQhRy0DNVFq4YNL4vdsa+5SJvMaQa9he2/x85KY+opyxMSw2c9GaBgMOODb/RxkG
muETCsJud64ga23ljm+j2xLhTa+CZQz8rwg8QnCSwuISfa+7Dto99UpQXNBP+++f
6IEuPt3ptLDu3+ZaTyXjubIe2NykH4cBy3JtWDrgEKgXr+ip7ixR6j7es21uf7Px
WTFJyxvcpexxzGQsXI/KUdVnQQ1evgfqre1Y1VtNNlyGKidMOjWJnt7PRShfscVL
bcTTinUC5l74N5T8lN9RK3IAVbVOxK2rh4vO3xFeai8S4Ie3Pn3LM+xan5XsLWyL
2BM5QXqnPdfA0g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:31 2025 by rpki-client