Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: DLggp4FeaWcOUWUAu61u7TIc8Ii2sOOfN//iDGWJZ2A=
Subject key identifier: 8E:47:72:79:F7:26:72:8F:45:DD:DA:B7:94:BD:23:CF:DB:CC:45:AF
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01967F467D8524E7AB831EFEFC4DD2FF31B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: C8
Signing time: Tue 29 Apr 2025 02:00:48 +0000
Manifest this update: Tue 29 Apr 2025 02:00:48 +0000
Manifest next update: Wed 30 Apr 2025 02:00:48 +0000
Files and hashes: 1: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: Qy4PbOYcZGeDrfp9G66cva+Q5J9Vq8Cxg30WwoWZP6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:7d:85:24:e7:ab:83:1e:fe:fc:4d:d2:ff:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Apr 29 02:00:48 2025 GMT
Not After : Apr 30 02:00:48 2025 GMT
Subject: CN=8e477279f726728f45dddab794bd23cfdbcc45af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:6f:20:46:b4:2b:4e:ac:f0:57:56:fe:b2:
92:65:5e:08:5a:32:26:39:90:ac:bd:e9:5c:41:62:
4c:e5:59:75:9a:c5:1d:fe:81:6a:2f:b1:d6:e5:3d:
fe:a6:e9:0e:07:33:5d:cb:a5:a0:b8:f2:37:20:20:
e5:67:fc:9b:5f:32:df:b6:d6:4c:0f:1c:f3:bd:78:
cf:2f:d5:b4:6d:ab:b1:28:2b:5d:ae:b9:b0:4d:b4:
f9:44:31:45:28:f5:41:da:fc:2d:79:b5:29:e9:8a:
d4:2e:01:1f:21:44:0b:75:f5:d4:85:7f:c0:e3:15:
57:d3:6e:94:c6:40:91:18:b4:ba:73:fc:25:d2:09:
c2:72:6b:ab:e7:49:fb:6e:f6:8f:83:4e:3f:75:f5:
b2:13:36:2f:83:b9:d1:bd:ce:dc:04:49:de:dd:41:
73:e7:5f:48:5a:6b:21:3e:64:a8:7e:d2:1b:ca:f8:
7d:b4:7c:15:2b:2b:86:ae:73:f3:7b:97:3e:c5:04:
af:20:a7:c9:ea:38:3b:ad:cf:49:d9:39:cd:50:43:
c0:13:c7:dd:49:f8:0f:48:78:b6:c4:5c:24:bf:5c:
f7:ba:10:6b:83:79:52:62:86:e6:4f:86:d5:16:2c:
c7:bc:ba:af:89:f1:b2:c7:4a:83:bb:31:ab:21:24:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:72:79:F7:26:72:8F:45:DD:DA:B7:94:BD:23:CF:DB:CC:45:AF
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d2:a2:16:0d:7e:0a:b4:3d:46:b1:fd:45:fb:7a:60:06:af:
74:88:c0:5f:17:34:32:d2:e3:1a:67:62:9e:0a:a2:9e:27:dd:
4d:fe:0f:f3:4f:c8:b0:de:52:96:03:00:4c:21:e5:85:da:cf:
cd:7c:ce:4a:cd:69:46:6b:2d:b8:be:f9:35:7c:04:81:aa:b8:
5d:b5:d8:1e:2b:48:4e:65:a3:1f:6e:41:10:e4:f2:f9:8d:7f:
f9:4d:0a:89:02:17:82:fb:1f:ff:9c:0f:4d:2d:d2:00:5b:9c:
9c:6a:d3:07:6e:e7:cf:ea:4e:b6:c1:fd:84:af:ff:63:fa:36:
9c:78:35:89:46:0f:ac:18:08:a2:7d:c5:aa:9a:33:0e:2c:4e:
d2:87:c6:26:82:9f:40:2c:88:61:99:a8:ec:4c:f9:56:60:d9:
d6:14:e1:dd:23:32:96:ac:0a:9c:90:21:f4:ed:bc:7b:9f:1c:
7f:c3:b5:89:22:a5:ea:b9:84:94:7d:69:32:b7:5b:35:e4:27:
ae:07:bc:a1:97:5c:d7:1b:a8:f1:aa:f9:e0:b3:c8:17:00:53:
d9:56:67:6a:25:5f:16:f7:a7:9f:eb:8d:87:a9:2a:70:57:23:
ca:5a:6a:ae:e3:21:27:68:7a:0d:c7:ad:c0:43:e9:83:4b:62:
11:d3:5f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/Rn2FJOergx7+/E3S/zGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTk1NTVlYzIzMjgyNmM3ZGQ2ZDlhOTI2YjUzNjAyODM3
OTQ5ZjYwHhcNMjUwNDI5MDIwMDQ4WhcNMjUwNDMwMDIwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZTQ3NzI3OWY3MjY3MjhmNDVkZGRhYjc5NGJkMjNjZmRiY2M0NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNFvIEa0K06s8FdW/rKSZV4IWjIm
OZCsvelcQWJM5Vl1msUd/oFqL7HW5T3+pukOBzNdy6WguPI3ICDlZ/ybXzLfttZM
DxzzvXjPL9W0bauxKCtdrrmwTbT5RDFFKPVB2vwtebUp6YrULgEfIUQLdfXUhX/A
4xVX026UxkCRGLS6c/wl0gnCcmur50n7bvaPg04/dfWyEzYvg7nRvc7cBEne3UFz
519IWmshPmSoftIbyvh9tHwVKyuGrnPze5c+xQSvIKfJ6jg7rc9J2TnNUEPAE8fd
SfgPSHi2xFwkv1z3uhBrg3lSYobmT4bVFizHvLqvifGyx0qDuzGrISQqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5Hcnn3JnKPRd3at5S9I8/bzEWvMB8GA1UdIwQY
MBaAFDxZVV7CMoJsfdbZqSa1NgKDeUn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iYTk0MDQtNzhmMy00OTM1LTllMmUt
OTViMTM3M2M1Mzk5LzEvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iYTk0MDQtNzhmMy00OTM1LTllMmUtOTViMTM3M2M1Mzk5
LzEvUEZsVlhzSXlnbXg5MXRtcEpyVTJBb041U2ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNKiFg1+
CrQ9RrH9Rft6YAavdIjAXxc0MtLjGmdingqinifdTf4P80/IsN5SlgMATCHlhdrP
zXzOSs1pRmstuL75NXwEgaq4XbXYHitITmWjH25BEOTy+Y1/+U0KiQIXgvsf/5wP
TS3SAFucnGrTB27nz+pOtsH9hK//Y/o2nHg1iUYPrBgIon3FqpozDixO0ofGJoKf
QCyIYZmo7Ez5VmDZ1hTh3SMylqwKnJAh9O28e58cf8O1iSKl6rmElH1pMrdbNeQn
rge8oZdc1xuo8ar54LPIFwBT2VZnaiVfFvenn+uNh6kqcFcjylpqruMhJ2h6Dcet
wEPpg0tiEdNfoQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:07:15 2025 by rpki-client