Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.mft (raw, json)
Hash identifier: 9OubGXKh912m/gcgB4yoiGvQ6xca7TI4MYSkbTR/pTs=
Subject key identifier: 7A:5B:83:39:13:66:8C:06:97:18:36:4B:57:16:E9:FB:70:A5:06:D3
Authority key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Certificate issuer: /CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Certificate serial: 019684356AA37BA38D95D16244B474ED75F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
Manifest number: E0
Signing time: Wed 30 Apr 2025 01:00:15 +0000
Manifest this update: Wed 30 Apr 2025 01:00:15 +0000
Manifest next update: Thu 01 May 2025 01:00:15 +0000
Files and hashes: 1: bSsrfHiimiI-pZxnydqj3H7bHnQ.crl (hash: kb3CsLCAMJ2OR3GMyQhwSBJCFkUJ6mSFNqzqyztA4fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:6a:a3:7b:a3:8d:95:d1:62:44:b4:74:ed:75:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Validity
Not Before: Apr 30 01:00:15 2025 GMT
Not After : May 1 01:00:15 2025 GMT
Subject: CN=7a5b833913668c069718364b5716e9fb70a506d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:74:94:18:db:9d:41:d7:fd:5d:95:6c:29:
22:c5:1b:f7:61:8d:10:c8:5f:fb:8f:ab:a7:33:bd:
2e:44:79:ea:ce:79:80:33:76:09:ec:9e:92:1d:b3:
2b:f8:2e:ad:0b:c2:04:0b:0a:54:30:80:b5:24:af:
a2:49:6c:70:aa:67:8d:eb:8d:7a:c8:2d:c3:1f:a2:
8a:8c:03:99:40:ce:95:7f:9c:0a:04:f6:d8:cb:30:
cd:70:fe:e8:df:1f:67:62:7a:a3:66:7e:24:21:27:
a3:8d:34:f2:11:ef:74:f2:9e:ed:ed:d8:6a:1b:db:
08:25:c0:ba:b7:74:4e:c9:5f:62:00:c5:76:e3:0a:
04:57:4f:73:e3:d1:a9:72:d0:71:d6:a7:0e:c9:ae:
14:13:5b:ac:47:7c:e0:0b:f1:14:05:48:94:20:73:
f9:7f:cb:23:8e:d6:1a:24:fa:78:5c:ba:4f:77:cc:
b0:94:98:50:2f:86:a8:e1:24:12:ec:42:96:7c:57:
90:c9:40:16:3b:cf:10:ea:5f:3e:d0:4b:59:86:d6:
a1:5f:17:34:16:b1:31:a4:c1:36:cc:2b:90:82:fb:
4b:79:40:b6:d7:d2:f7:ec:59:e4:23:17:67:69:9f:
4b:8c:b5:e5:33:72:34:7f:8e:89:0b:52:3e:33:6b:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:83:39:13:66:8C:06:97:18:36:4B:57:16:E9:FB:70:A5:06:D3
X509v3 Authority Key Identifier:
keyid:6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ac:68:84:af:7a:96:00:18:37:dc:ae:a4:5c:89:ef:94:0f:
64:61:b0:a2:dd:d6:aa:64:9f:7a:37:b9:5e:20:ce:a2:b5:4e:
96:d9:8d:9e:b7:70:cf:d6:aa:d6:0d:8e:a6:17:b1:a6:ea:16:
ff:cc:21:f0:ef:09:97:9f:61:a3:97:10:9c:05:13:4f:de:0f:
b7:d1:09:a8:c9:a0:b8:75:45:f0:b7:3b:ec:8c:fd:af:66:dc:
d3:d3:85:8d:0a:f9:2a:01:f8:5d:69:c2:34:ad:5b:0f:dc:74:
46:e0:69:b9:ee:6a:0e:2d:07:d4:57:7c:b5:d1:17:54:17:22:
a4:e8:a8:3a:0c:09:77:f7:78:16:ed:78:9f:eb:22:34:e6:31:
6e:0a:80:93:82:b8:46:45:1c:bc:2f:79:0b:d4:0a:60:96:f2:
85:d8:7e:25:fa:7e:3f:23:93:97:09:b8:fd:35:a6:86:3b:04:
2b:89:c7:a7:4c:f3:f9:31:2b:0b:26:a4:df:9d:5c:ea:93:2f:
2f:0b:7f:c9:95:8a:27:09:c4:95:2c:39:37:80:25:92:cc:c0:
b2:ac:2f:b8:a7:25:14:6d:55:a1:6e:1f:5c:a4:8c:55:e3:f2:
f5:e6:66:68:67:3f:3f:fd:b6:78:d7:ec:61:39:82:26:bf:a1:
e1:94:dd:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENWqje6ONldFiRLR07XX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmIyYjdjNzhhMjlhMjIzZWE1OWM2N2M5ZGFhM2RjN2Vk
YjFlNzQwHhcNMjUwNDMwMDEwMDE1WhcNMjUwNTAxMDEwMDE1WjAzMTEwLwYDVQQD
Eyg3YTViODMzOTEzNjY4YzA2OTcxODM2NGI1NzE2ZTlmYjcwYTUwNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCp0lBjbnUHX/V2VbCkixRv3YY0Q
yF/7j6unM70uRHnqznmAM3YJ7J6SHbMr+C6tC8IECwpUMIC1JK+iSWxwqmeN6416
yC3DH6KKjAOZQM6Vf5wKBPbYyzDNcP7o3x9nYnqjZn4kISejjTTyEe908p7t7dhq
G9sIJcC6t3ROyV9iAMV24woEV09z49GpctBx1qcOya4UE1usR3zgC/EUBUiUIHP5
f8sjjtYaJPp4XLpPd8ywlJhQL4ao4SQS7EKWfFeQyUAWO88Q6l8+0EtZhtahXxc0
FrExpME2zCuQgvtLeUC219L37FnkIxdnaZ9LjLXlM3I0f46JC1I+M2vlTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpbgzkTZowGlxg2S1cW6ftwpQbTMB8GA1UdIwQY
MBaAFG0rK3x4opoiPqWcZ8nao9x+2x50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUt
MGM1MjU1NmU5ODY1LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lOGEyZjYtNmMwZi00Mjc2LTg0OWUtMGM1MjU1NmU5ODY1
LzEvYlNzcmZIaWltaUktcFp4bnlkcWozSDdiSG5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqxohK96
lgAYN9yupFyJ75QPZGGwot3WqmSfeje5XiDOorVOltmNnrdwz9aq1g2OphexpuoW
/8wh8O8Jl59ho5cQnAUTT94Pt9EJqMmguHVF8Lc77Iz9r2bc09OFjQr5KgH4XWnC
NK1bD9x0RuBpue5qDi0H1Fd8tdEXVBcipOioOgwJd/d4Fu14n+siNOYxbgqAk4K4
RkUcvC95C9QKYJbyhdh+Jfp+PyOTlwm4/TWmhjsEK4nHp0zz+TErCyak351c6pMv
Lwt/yZWKJwnElSw5N4AlkszAsqwvuKclFG1VoW4fXKSMVePy9eZmaGc/P/22eNfs
YTmCJr+h4ZTdsA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:16:49 2025 by rpki-client