Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
File: aRWYIN1xgAT7FchbJweWy06EpOo.mft (raw, json)
Hash identifier: gk7LmGTMZUCXRqmtW3X2Eb2sO/zbAPQydnCME7/+5c4=
Subject key identifier: 3D:59:7A:7B:00:3B:61:FD:22:B6:30:84:48:8A:68:E7:75:FE:5D:8F
Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea
Certificate serial: 019677FB8BB8FB984DCF45590967A65C928D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
Manifest number: 37
Signing time: Sun 27 Apr 2025 16:01:36 +0000
Manifest this update: Sun 27 Apr 2025 16:01:36 +0000
Manifest next update: Mon 28 Apr 2025 16:01:36 +0000
Files and hashes: 1: aRWYIN1xgAT7FchbJweWy06EpOo.crl (hash: w75rHkR03WIL/lnNNv7EJ9xY1Xnz+B7UkwiSL22YOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:8b:b8:fb:98:4d:cf:45:59:09:67:a6:5c:92:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea
Validity
Not Before: Apr 27 16:01:36 2025 GMT
Not After : Apr 28 16:01:36 2025 GMT
Subject: CN=3d597a7b003b61fd22b63084488a68e775fe5d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:74:b5:47:74:94:80:81:25:d2:5d:cd:b2:
5b:79:ce:d0:2c:16:0c:50:a6:ca:e1:93:f3:f4:3e:
bd:91:43:e1:5b:46:6a:ae:20:ad:85:bf:6c:bd:03:
4e:03:08:15:a4:da:23:05:fb:ee:dc:86:0e:36:4d:
6a:87:42:16:39:87:fa:62:6f:a7:cf:bf:04:60:c4:
ba:6a:d4:7c:b8:c1:1a:fc:71:ac:57:b6:8b:0a:7a:
f2:bd:71:57:62:ef:35:eb:cd:fb:0a:f2:84:2a:0f:
61:18:8c:87:39:99:fd:c5:66:2b:0b:f5:ae:2a:1a:
5f:65:2b:6c:0f:7f:6b:45:4c:3f:b8:91:69:cc:07:
be:8a:cd:f8:bc:4c:fd:aa:a4:19:95:a3:11:8c:25:
97:0b:d9:d8:df:cd:a5:2b:37:ed:6d:e1:64:33:6d:
9c:04:e7:81:99:e1:df:fd:85:f4:5b:c4:36:08:5e:
74:0e:3c:6e:85:3c:8b:ca:3e:15:ed:fc:eb:2f:7f:
59:95:aa:e6:78:92:98:89:9c:8f:0f:1e:a6:cc:c0:
d0:44:ee:ea:17:4c:c7:b9:1a:63:45:38:8e:40:11:
90:1c:4b:3f:77:2a:be:a4:50:d1:7e:f2:74:d5:1d:
57:72:13:e6:84:5b:bf:32:fc:8a:c4:02:7c:1e:11:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:59:7A:7B:00:3B:61:FD:22:B6:30:84:48:8A:68:E7:75:FE:5D:8F
X509v3 Authority Key Identifier:
keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e1:4e:dd:b8:57:8b:87:47:b3:94:88:e4:0f:b0:3d:2c:ce:
e8:7c:64:22:c9:97:c2:f4:29:69:aa:72:52:17:5e:a8:ec:b9:
98:c6:38:c2:96:08:15:52:09:b9:6a:f0:f5:db:f5:6d:17:8a:
69:bf:05:12:de:10:1c:82:1e:84:ed:b5:7f:bc:2d:18:6e:9a:
77:6b:af:b8:44:48:49:4b:b0:76:13:4d:88:64:e3:02:60:44:
c9:f2:ad:b6:e0:c5:48:33:d9:29:94:3d:89:ab:71:16:46:3c:
39:c3:72:01:82:10:5e:85:2e:d0:ec:86:cb:91:77:45:0a:d8:
55:f9:21:ab:b2:52:19:fe:c6:a3:78:e1:70:69:04:64:b4:c8:
0f:b4:9f:4c:41:9c:48:55:0a:29:53:17:88:70:36:a1:18:c4:
cd:52:7f:97:8f:d8:f5:8b:77:02:19:52:9b:73:cc:57:7c:a7:
8c:16:4e:08:d9:73:ca:d9:83:1f:24:16:e4:53:89:ee:38:56:
c5:b3:3c:6b:28:bd:9b:22:88:eb:76:77:e5:6f:1a:e3:24:ac:
c3:07:9d:41:94:ba:95:70:e4:79:bd:16:7a:8d:bc:d9:4d:6b:
40:67:55:7c:b3:07:a1:16:d0:09:54:67:48:7a:29:8f:7e:05:
59:a0:2f:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+4u4+5hNz0VZCWemXJKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4
NGE0ZWEwHhcNMjUwNDI3MTYwMTM2WhcNMjUwNDI4MTYwMTM2WjAzMTEwLwYDVQQD
EygzZDU5N2E3YjAwM2I2MWZkMjJiNjMwODQ0ODhhNjhlNzc1ZmU1ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qd0tUd0lICBJdJdzbJbec7QLBYM
UKbK4ZPz9D69kUPhW0ZqriCthb9svQNOAwgVpNojBfvu3IYONk1qh0IWOYf6Ym+n
z78EYMS6atR8uMEa/HGsV7aLCnryvXFXYu816837CvKEKg9hGIyHOZn9xWYrC/Wu
KhpfZStsD39rRUw/uJFpzAe+is34vEz9qqQZlaMRjCWXC9nY382lKzftbeFkM22c
BOeBmeHf/YX0W8Q2CF50DjxuhTyLyj4V7fzrL39ZlarmeJKYiZyPDx6mzMDQRO7q
F0zHuRpjRTiOQBGQHEs/dyq+pFDRfvJ01R1XchPmhFu/MvyKxAJ8HhFWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1ZensAO2H9IrYwhEiKaOd1/l2PMB8GA1UdIwQY
MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt
Yzk0OWYwNTkxZjViLzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi
LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeFO3bhX
i4dHs5SI5A+wPSzO6HxkIsmXwvQpaapyUhdeqOy5mMY4wpYIFVIJuWrw9dv1bReK
ab8FEt4QHIIehO21f7wtGG6ad2uvuERISUuwdhNNiGTjAmBEyfKttuDFSDPZKZQ9
iatxFkY8OcNyAYIQXoUu0OyGy5F3RQrYVfkhq7JSGf7Go3jhcGkEZLTID7SfTEGc
SFUKKVMXiHA2oRjEzVJ/l4/Y9Yt3AhlSm3PMV3ynjBZOCNlzytmDHyQW5FOJ7jhW
xbM8ayi9myKI63Z35W8a4ySswwedQZS6lXDkeb0Weo282U1rQGdVfLMHoRbQCVRn
SHopj34FWaAvHw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:19:28 2025 by rpki-client