Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: kKqUsuya16IQu3WDm4eXZ6Hs7B2Fv8VmialkRmS7VM4=
Subject key identifier: 7E:9A:5E:15:AB:14:0B:E9:61:09:A5:42:8B:C9:EA:F4:0E:DA:63:FF
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 019676E7F97A36597A7075662851CAF17C5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 11:00:36 +0000
Manifest this update: Sun 27 Apr 2025 11:00:36 +0000
Manifest next update: Mon 28 Apr 2025 11:00:36 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: fi12WtzlH9Co5kxwBYwheZmGe91wlKwTURz2HuJUIPU=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:f9:7a:36:59:7a:70:75:66:28:51:ca:f1:7c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Apr 27 11:00:36 2025 GMT
Not After : Apr 28 11:00:36 2025 GMT
Subject: CN=7e9a5e15ab140be96109a5428bc9eaf40eda63ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:eb:b2:a4:77:95:67:fa:65:9a:b7:45:8d:
63:0b:b8:af:f6:eb:89:ed:d9:96:35:50:21:ef:ed:
d5:60:18:fa:ac:3e:a9:21:19:c5:13:42:ac:77:b9:
0a:b8:46:eb:12:4b:36:d2:9c:f1:f9:55:d0:cb:24:
89:a2:8c:01:b6:c7:29:ff:cb:68:6f:31:db:a9:e5:
b9:f7:c9:dd:78:bc:48:51:2c:c1:44:88:26:51:fa:
db:33:d0:c7:81:ee:9b:f8:04:52:d6:41:7f:94:d3:
8b:0b:be:5e:81:25:86:10:ff:bc:7b:f2:63:2e:8e:
b1:ee:88:70:3b:b5:7e:4f:ca:3c:03:4d:f1:a2:3d:
cc:20:14:3a:1f:fe:b6:cc:7c:36:ea:f3:90:0a:a4:
8c:c3:61:80:cb:dc:6c:52:4a:1a:96:18:35:9d:c8:
35:e0:e4:da:bb:7a:f0:7f:aa:36:a0:e4:91:1f:39:
b2:a1:45:25:f4:47:e0:8a:2f:d8:8b:2f:4b:db:19:
9f:ed:2a:57:14:2b:b5:ba:28:20:12:f1:e8:da:74:
7c:c6:49:5c:68:bc:ab:68:66:bb:55:0e:d1:ca:12:
84:8c:d5:53:73:6b:e8:dd:2f:23:d4:95:9a:80:27:
6e:df:3a:98:06:4c:63:0f:2c:5d:72:0a:3f:45:17:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:5E:15:AB:14:0B:E9:61:09:A5:42:8B:C9:EA:F4:0E:DA:63:FF
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e4:75:fc:23:0b:c7:74:10:50:bd:df:ca:bf:9e:b9:1c:42:
2f:6a:0d:63:89:b9:16:3c:46:33:d5:37:a8:97:46:b4:63:91:
4f:6b:04:c5:78:f1:8d:6d:c9:24:4a:9f:36:95:e3:8d:bd:cb:
35:71:93:a6:32:1d:2d:c0:15:1e:ca:72:ea:fa:7a:c5:a0:a4:
0a:63:85:86:92:c2:70:90:26:1f:21:67:e2:4b:a7:b7:d0:49:
da:b3:a4:c8:fe:6e:e7:fe:cf:66:22:d7:a0:33:79:58:02:9a:
b7:c8:18:92:4c:30:f5:8e:6e:6b:6c:a1:3b:5e:e3:ab:6e:8c:
32:00:21:f0:ea:1e:af:cc:bc:f8:d1:5a:38:fc:2c:53:8c:1f:
28:6f:f6:41:34:ac:96:a6:6b:05:a4:fb:42:31:ba:10:15:3b:
e0:ac:47:82:0d:a5:58:da:46:e8:55:28:98:17:35:34:6c:6d:
ac:86:d2:cd:d0:16:49:a9:c4:bb:98:c8:fb:1d:5d:4d:20:26:
22:5b:2c:39:3e:aa:38:ea:9b:60:01:69:dc:30:a2:0f:3b:a5:
97:72:5c:4b:40:7a:be:81:e7:51:68:d3:9d:b6:92:05:d3:34:
23:f0:a0:bc:36:a2:39:32:ff:28:51:c9:2a:6f:4b:d6:2d:ad:
d5:97:36:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ25/l6Nll6cHVmKFHK8XxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjIzOTg5MzgwN2ViMDk4NDZlODI5NzI3ZDcxYTkyZTk2
M2E3YzgwHhcNMjUwNDI3MTEwMDM2WhcNMjUwNDI4MTEwMDM2WjAzMTEwLwYDVQQD
Eyg3ZTlhNWUxNWFiMTQwYmU5NjEwOWE1NDI4YmM5ZWFmNDBlZGE2M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/rsqR3lWf6ZZq3RY1jC7iv9uuJ
7dmWNVAh7+3VYBj6rD6pIRnFE0Ksd7kKuEbrEks20pzx+VXQyySJoowBtscp/8to
bzHbqeW598ndeLxIUSzBRIgmUfrbM9DHge6b+ARS1kF/lNOLC75egSWGEP+8e/Jj
Lo6x7ohwO7V+T8o8A03xoj3MIBQ6H/62zHw26vOQCqSMw2GAy9xsUkoalhg1ncg1
4OTau3rwf6o2oOSRHzmyoUUl9Efgii/Yiy9L2xmf7SpXFCu1uiggEvHo2nR8xklc
aLyraGa7VQ7RyhKEjNVTc2vo3S8j1JWagCdu3zqYBkxjDyxdcgo/RRfahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6aXhWrFAvpYQmlQovJ6vQO2mP/MB8GA1UdIwQY
MBaAFHYiOYk4B+sJhG6ClyfXGpLpY6fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMt
Y2E2N2ZkNjRkMzRjLzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NGMyY2UtOWY3Yi00Y2E3LWFiYmMtY2E2N2ZkNjRkMzRj
LzEvZGlJNWlUZ0g2d21FYm9LWEo5Y2FrdWxqcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuR1/CML
x3QQUL3fyr+euRxCL2oNY4m5FjxGM9U3qJdGtGORT2sExXjxjW3JJEqfNpXjjb3L
NXGTpjIdLcAVHspy6vp6xaCkCmOFhpLCcJAmHyFn4kunt9BJ2rOkyP5u5/7PZiLX
oDN5WAKat8gYkkww9Y5ua2yhO17jq26MMgAh8Ooer8y8+NFaOPwsU4wfKG/2QTSs
lqZrBaT7QjG6EBU74KxHgg2lWNpG6FUomBc1NGxtrIbSzdAWSanEu5jI+x1dTSAm
IlssOT6qOOqbYAFp3DCiDzull3JcS0B6voHnUWjTnbaSBdM0I/CgvDaiOTL/KFHJ
Km9L1i2t1Zc20Q==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:42:53 2025 by rpki-client