Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: 6tTsvQq9T6r3KH9vHUofBd+LsX44e8jkxOfkd2M4UkM=
Subject key identifier: 1D:3E:45:E1:6E:3E:7F:6F:BA:DE:9F:B8:A9:E4:23:5C:F7:CD:BC:AA
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019677FB22E7B1E8576B1262843C0ED1F6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: tIpVxb9sdT3ZyFx3q7Q3fNDENNAzFyDwPGcxV3Oni6I=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:22:e7:b1:e8:57:6b:12:62:84:3c:0e:d1:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=1d3e45e16e3e7f6fbade9fb8a9e4235cf7cdbcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:0f:78:3f:8a:d4:ee:ff:e4:c2:5e:9d:16:
ee:7e:23:5b:16:63:cd:8d:5b:38:4e:d3:34:d3:54:
23:27:af:eb:94:55:79:7d:2f:d5:ed:e4:a1:c0:0f:
3f:f2:9e:91:bf:d6:1f:c6:7f:54:41:94:43:04:c3:
76:01:b0:2b:9c:1e:99:54:1e:50:28:86:1d:29:bd:
1a:a6:4e:bb:24:4e:56:f1:30:1d:aa:5d:f0:3e:77:
60:67:4c:90:9f:5c:fb:73:37:6b:c7:1d:94:1d:a1:
a7:2a:b0:ab:dd:7a:14:a7:02:4d:88:13:94:3f:67:
4a:da:05:93:6e:fa:39:4e:25:10:28:cb:f1:15:65:
02:89:67:a8:58:25:81:34:f8:46:f2:48:66:ba:5b:
3c:36:bb:dc:a8:80:80:15:65:ae:22:3a:b6:18:8b:
af:47:23:12:e0:95:e0:0c:fd:15:db:12:a0:e1:39:
92:c9:23:5d:c6:c4:5c:11:45:57:5e:ce:a3:2e:4c:
62:b2:b1:f8:a1:fa:c4:4f:ea:59:1b:6f:46:9f:d5:
dc:87:5a:c0:fb:41:12:88:b5:25:3f:83:30:75:82:
00:57:ad:38:85:f6:a0:50:cf:02:38:6c:d3:22:ec:
2a:56:4f:b1:78:99:d6:62:ca:d7:7e:60:33:40:c0:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:45:E1:6E:3E:7F:6F:BA:DE:9F:B8:A9:E4:23:5C:F7:CD:BC:AA
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3a:e2:c9:aa:5e:99:63:72:ca:86:a9:55:fd:b6:7d:89:6e:
8a:0e:d2:03:3d:ef:87:58:09:c9:c9:f4:c7:e2:0b:0b:30:d2:
a6:1a:1e:d4:25:52:9b:11:d8:e3:ac:39:ec:e4:4f:6e:e0:40:
01:a9:be:b6:16:4c:64:c4:da:37:cf:9d:f8:b1:7a:a9:2c:93:
f3:3c:21:da:c7:51:c1:5f:54:a2:c3:3e:05:85:a7:63:25:e2:
d2:7a:ea:93:36:b5:cc:99:dc:9e:f6:5b:5c:bd:5d:12:1a:18:
e0:e7:8c:ac:ce:e2:b9:7c:a0:83:f7:ca:01:d8:b4:2f:a0:7e:
e0:36:9b:f8:a7:5c:5e:6a:a1:26:91:11:7a:85:cc:39:41:83:
b6:f7:bc:42:0b:71:a8:2f:11:88:2e:a5:dc:9f:24:0b:aa:f5:
94:e0:07:d4:13:2b:e4:45:aa:03:a8:fb:7a:37:42:46:76:fb:
25:0f:ef:ee:39:bc:29:f6:bd:96:e6:c9:d5:75:52:9e:3e:c1:
cf:e4:48:21:14:3c:eb:81:c5:e2:c0:0a:a6:0d:f5:c4:49:48:
d7:ae:f0:8b:df:b4:84:09:96:8d:0a:1c:ea:e2:03:b8:37:a8:
12:bb:b1:b2:3f:bf:91:3d:71:85:1b:0c:a2:85:b4:15:d4:7f:
5b:65:30:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+yLnsehXaxJihDwO0fa7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj
YWY3ZWYwHhcNMjUwNDI3MTYwMTA5WhcNMjUwNDI4MTYwMTA5WjAzMTEwLwYDVQQD
EygxZDNlNDVlMTZlM2U3ZjZmYmFkZTlmYjhhOWU0MjM1Y2Y3Y2RiY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAYPeD+K1O7/5MJenRbufiNbFmPN
jVs4TtM001QjJ6/rlFV5fS/V7eShwA8/8p6Rv9Yfxn9UQZRDBMN2AbArnB6ZVB5Q
KIYdKb0apk67JE5W8TAdql3wPndgZ0yQn1z7czdrxx2UHaGnKrCr3XoUpwJNiBOU
P2dK2gWTbvo5TiUQKMvxFWUCiWeoWCWBNPhG8khmuls8NrvcqICAFWWuIjq2GIuv
RyMS4JXgDP0V2xKg4TmSySNdxsRcEUVXXs6jLkxisrH4ofrET+pZG29Gn9Xch1rA
+0ESiLUlP4MwdYIAV604hfagUM8COGzTIuwqVk+xeJnWYsrXfmAzQMBrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0+ReFuPn9vut6fuKnkI1z3zbyqMB8GA1UdIwQY
MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt
MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh
LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDriyape
mWNyyoapVf22fYluig7SAz3vh1gJycn0x+ILCzDSphoe1CVSmxHY46w57ORPbuBA
Aam+thZMZMTaN8+d+LF6qSyT8zwh2sdRwV9UosM+BYWnYyXi0nrqkza1zJncnvZb
XL1dEhoY4OeMrM7iuXygg/fKAdi0L6B+4Dab+KdcXmqhJpEReoXMOUGDtve8Qgtx
qC8RiC6l3J8kC6r1lOAH1BMr5EWqA6j7ejdCRnb7JQ/v7jm8Kfa9lubJ1XVSnj7B
z+RIIRQ864HF4sAKpg31xElI167wi9+0hAmWjQoc6uIDuDeoEruxsj+/kT1xhRsM
ooW0FdR/W2UwNQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:52:02 2025 by rpki-client