Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
File: 8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft (raw, json)
Hash identifier: TR5nCM+sBGS47VfTPcbLNyvMWORE3dffAXa+3GdxvEI=
Subject key identifier: 5E:C4:3C:03:FA:FE:94:D8:26:0B:51:2D:79:2F:9B:4D:FB:E2:06:7F
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Certificate issuer: /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial: 019676E797AA983E5FF10F824C4FDB9AED0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
Manifest number: 0536
Signing time: Sun 27 Apr 2025 11:00:11 +0000
Manifest this update: Sun 27 Apr 2025 11:00:11 +0000
Manifest next update: Mon 28 Apr 2025 11:00:11 +0000
Files and hashes: 1: 8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl (hash: YydO4O4f1HcDvE7U5MSby2LoBhZOHxDigj86TTV7DhE=)
2: TJhuA5qI7EN9HDyV96WXGF2JSfo.roa (hash: 5D865Bd9WMBm3Lfxl+Be0ercoZWZG3ocPw41PojFMmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:97:aa:98:3e:5f:f1:0f:82:4c:4f:db:9a:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Validity
Not Before: Apr 27 11:00:11 2025 GMT
Not After : Apr 28 11:00:11 2025 GMT
Subject: CN=5ec43c03fafe94d8260b512d792f9b4dfbe2067f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:2c:a5:7f:bf:f9:fb:ab:03:f3:48:ec:e2:
6d:50:97:2f:34:ba:d5:de:16:a5:3b:65:51:32:a8:
9e:c6:63:73:f1:6d:63:79:c0:35:d0:6b:8b:4f:54:
25:8c:ae:63:a8:9d:25:51:f9:b6:a4:cc:4b:7a:21:
d7:8a:35:b8:a9:dc:77:81:b7:06:36:cd:74:e9:4d:
72:71:d9:e0:5f:3b:bf:2b:6b:80:b3:06:35:20:b7:
b2:20:1f:ab:4b:08:9f:c6:f6:43:f7:84:d8:90:23:
84:f9:87:07:d7:17:d9:e9:5e:75:f7:d3:f1:8c:3a:
d2:b2:7e:97:78:73:6c:1b:2d:a6:04:85:88:fd:65:
06:70:f5:c7:30:f3:f4:64:48:1b:50:ca:cb:66:fd:
94:90:d6:83:18:93:c8:c8:b3:43:aa:42:3c:05:32:
7e:de:e8:ad:62:51:09:1e:fa:92:c9:15:84:c0:bc:
b1:a6:9d:ff:47:e5:96:2e:ed:99:d2:11:5b:8d:13:
6c:4f:26:24:ec:06:00:f5:e5:44:aa:1e:3e:d4:40:
ad:43:3d:75:7a:33:82:67:28:93:9f:6d:8a:4a:05:
5c:84:00:ca:09:81:50:42:f5:a8:0a:b2:58:93:ce:
8a:ed:fb:bd:f3:6d:cf:bd:94:84:07:42:ca:49:44:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:3C:03:FA:FE:94:D8:26:0B:51:2D:79:2F:9B:4D:FB:E2:06:7F
X509v3 Authority Key Identifier:
keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:a2:bb:0e:c6:00:91:3c:4f:a8:63:b8:95:24:28:95:49:
39:a9:c3:51:64:8e:3b:f1:9e:52:64:43:d9:d6:23:d8:49:34:
60:3c:b2:0d:da:2f:fb:4b:b4:84:9f:fc:39:01:17:3e:8f:42:
21:cc:6f:f9:63:20:2a:a5:6e:c5:e9:f1:ea:b5:b0:62:04:9e:
3e:1d:1a:56:3c:19:57:cb:d7:ce:ee:2e:e3:f9:6b:a4:88:21:
e4:55:4f:d4:8f:fd:2d:bd:29:a2:32:0a:33:a0:41:7c:87:22:
b9:fc:9e:1d:77:95:f8:df:1e:5c:1a:ad:0c:fa:4c:7f:86:8a:
2e:d0:77:4a:81:52:21:6a:a3:80:63:1b:c6:f2:3c:c2:e2:5a:
83:50:16:cb:ff:84:c4:df:74:45:3e:3a:64:a0:f2:6a:40:67:
b3:57:7d:37:9a:f2:87:a7:12:3d:3b:50:5a:29:ae:fb:12:91:
8a:fb:5a:b3:61:ed:c3:39:f5:41:62:84:e6:cc:8c:af:de:4f:
ca:0f:fa:a6:82:05:dd:15:66:62:bb:03:fa:3b:40:6c:3a:32:
ed:0f:7b:72:d6:91:b6:6f:06:1a:15:a7:03:32:7a:01:31:c4:
08:7f:4a:31:84:2d:fc:58:11:d7:7d:43:5b:3b:40:e4:52:ab:
33:a5:dd:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ255eqmD5f8Q+CTE/bmu0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZjRhNmMwYjNjMmIwYzAzMmRlZGRjZDIzZDQyMWZmYjk2
MjAwZmMwHhcNMjUwNDI3MTEwMDExWhcNMjUwNDI4MTEwMDExWjAzMTEwLwYDVQQD
Eyg1ZWM0M2MwM2ZhZmU5NGQ4MjYwYjUxMmQ3OTJmOWI0ZGZiZTIwNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3UspX+/+furA/NI7OJtUJcvNLrV
3halO2VRMqiexmNz8W1jecA10GuLT1QljK5jqJ0lUfm2pMxLeiHXijW4qdx3gbcG
Ns106U1ycdngXzu/K2uAswY1ILeyIB+rSwifxvZD94TYkCOE+YcH1xfZ6V5199Px
jDrSsn6XeHNsGy2mBIWI/WUGcPXHMPP0ZEgbUMrLZv2UkNaDGJPIyLNDqkI8BTJ+
3uitYlEJHvqSyRWEwLyxpp3/R+WWLu2Z0hFbjRNsTyYk7AYA9eVEqh4+1ECtQz11
ejOCZyiTn22KSgVchADKCYFQQvWoCrJYk86K7fu9823PvZSEB0LKSUQRXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7EPAP6/pTYJgtRLXkvm0374gZ/MB8GA1UdIwQY
MBaAFPL0psCzwrDAMt7dzSPUIf+5YgD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEt
MzA5ODY0YjRkNDkxLzEvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jYmU5OTctMWM4Yi00MjQyLWE3MDEtMzA5ODY0YjRkNDkx
LzEvOHZTbXdMUENzTUF5M3QzTkk5UWhfN2xpQVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8qiuw7G
AJE8T6hjuJUkKJVJOanDUWSOO/GeUmRD2dYj2Ek0YDyyDdov+0u0hJ/8OQEXPo9C
Icxv+WMgKqVuxenx6rWwYgSePh0aVjwZV8vXzu4u4/lrpIgh5FVP1I/9Lb0pojIK
M6BBfIciufyeHXeV+N8eXBqtDPpMf4aKLtB3SoFSIWqjgGMbxvI8wuJag1AWy/+E
xN90RT46ZKDyakBns1d9N5ryh6cSPTtQWimu+xKRivtas2Htwzn1QWKE5syMr95P
yg/6poIF3RVmYrsD+jtAbDoy7Q97ctaRtm8GGhWnAzJ6ATHECH9KMYQt/FgR131D
WztA5FKrM6XdXg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:33 2025 by rpki-client