Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier: E/G5WX2jE/ZkGi2TiihaF4bMqwVhZ+RqR0tWkYl3UKE=
Subject key identifier: D6:4F:C2:24:44:0A:1E:5C:3D:AE:30:A1:90:E3:24:2B:FC:21:36:71
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer: /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial: 01967B3279877D7258C63F0D23BB520B043E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 07:00:27 +0000
Manifest this update: Mon 28 Apr 2025 07:00:27 +0000
Manifest next update: Tue 29 Apr 2025 07:00:27 +0000
Files and hashes: 1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: N425bxDqP80mVrqZ5+3UGSkyveTz6+qtvTJwX7VQQwM=)
2: 8WExy4twgMjUhhd6ZwwuMmQy8hc.roa (hash: DEuWlnE+ezZMUM7awLwZ5+QzOvWVXlr73rgH56B1SXs=)
3: UPhAaB84R0Xe1XTexqfwP-ciVHM.roa (hash: p28psRkGWXa6krQq8ETJGtszXl3PhjiqO+T48rxu9sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:79:87:7d:72:58:c6:3f:0d:23:bb:52:0b:04:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Validity
Not Before: Apr 28 07:00:27 2025 GMT
Not After : Apr 29 07:00:27 2025 GMT
Subject: CN=d64fc224440a1e5c3dae30a190e3242bfc213671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4e:22:f6:61:13:cf:53:71:b4:99:3a:8f:0a:
08:17:23:88:6b:3a:99:7f:af:9b:21:9a:58:ed:b1:
05:62:be:98:69:aa:95:dd:50:40:c8:6e:53:ca:16:
1f:e5:66:07:6e:d3:63:f9:0d:42:c7:52:5d:62:2e:
df:35:7f:15:8c:8d:38:86:d9:cf:de:a0:f5:5f:e7:
3e:0b:c8:a8:5d:4a:1e:22:df:61:03:82:1e:ac:9e:
26:95:f2:1d:89:db:aa:ed:b5:8a:6f:af:3d:0d:43:
75:cb:ef:06:1d:d9:77:24:1a:36:40:76:f1:55:ca:
87:85:97:fa:95:83:51:a8:2b:b7:bc:b3:e4:b9:73:
0e:b6:78:ab:5b:b7:3e:d7:0c:3a:e6:04:64:6d:a2:
b9:88:9e:8f:21:f7:11:3c:97:33:b4:86:0e:82:7f:
32:51:d6:c5:a6:14:43:a5:19:16:9b:02:fc:2a:e2:
5e:34:e0:22:38:01:9e:b6:0d:16:8a:98:ba:f5:66:
f3:22:0f:d7:5d:0c:ad:4a:6a:4c:7a:ef:de:35:fd:
97:17:e0:16:d0:7c:4a:19:a5:83:97:c0:84:9a:e6:
63:16:c7:3a:38:7c:e7:3b:b9:85:f5:ec:39:af:6c:
85:2c:1f:77:9c:d5:8e:c5:b5:60:56:82:ca:df:75:
b8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:C2:24:44:0A:1E:5C:3D:AE:30:A1:90:E3:24:2B:FC:21:36:71
X509v3 Authority Key Identifier:
keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:81:2a:c9:20:45:9c:e4:38:65:0d:ec:be:fd:20:ad:e1:2c:
8a:58:01:66:31:a5:53:5f:97:8f:3b:4b:b0:25:1a:90:ef:af:
49:f7:83:27:e2:6e:b9:a9:c2:ea:61:74:c3:ce:30:a3:76:cc:
1f:03:8d:92:f9:76:12:7b:a0:76:77:c4:1c:78:36:31:3f:ad:
f7:ff:a3:66:f4:7c:6a:a6:dc:54:78:53:07:49:3b:3f:61:2c:
66:e3:0c:54:59:31:1b:f4:a5:26:5d:97:1e:9c:97:4f:93:d4:
dd:99:b0:b4:72:96:0f:17:36:97:96:4e:55:fa:ca:c2:58:3b:
10:15:a7:ba:8f:87:e5:3d:a9:c0:a8:1a:b9:d5:a0:a8:97:3a:
16:1f:98:4f:68:f3:04:d9:b5:96:b1:73:a9:c2:fd:cd:dc:71:
af:24:9f:06:86:c7:44:31:9c:25:58:0a:27:e8:88:3e:7b:1a:
e6:69:1a:24:b1:60:26:34:bc:7d:e8:03:08:0e:2f:85:31:f9:
b8:65:90:46:f6:77:49:63:0b:16:9e:95:d2:50:bd:97:2f:a7:
20:41:7c:44:af:77:c4:1b:9e:18:a0:2a:11:82:8e:39:dd:91:
0b:c0:66:3b:79:f8:ae:0b:72:6a:b4:56:ba:c0:9f:3a:e0:68:
8f:b9:6a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7MnmHfXJYxj8NI7tSCwQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MjMyOWQ4ZDdlNTQxOTUzZTEyMGZkMDVmNjZjYzZlYmFi
MDY4NGQwHhcNMjUwNDI4MDcwMDI3WhcNMjUwNDI5MDcwMDI3WjAzMTEwLwYDVQQD
EyhkNjRmYzIyNDQ0MGExZTVjM2RhZTMwYTE5MGUzMjQyYmZjMjEzNjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE4i9mETz1NxtJk6jwoIFyOIazqZ
f6+bIZpY7bEFYr6YaaqV3VBAyG5TyhYf5WYHbtNj+Q1Cx1JdYi7fNX8VjI04htnP
3qD1X+c+C8ioXUoeIt9hA4IerJ4mlfIdiduq7bWKb689DUN1y+8GHdl3JBo2QHbx
VcqHhZf6lYNRqCu3vLPkuXMOtnirW7c+1ww65gRkbaK5iJ6PIfcRPJcztIYOgn8y
UdbFphRDpRkWmwL8KuJeNOAiOAGetg0Wipi69WbzIg/XXQytSmpMeu/eNf2XF+AW
0HxKGaWDl8CEmuZjFsc6OHznO7mF9ew5r2yFLB93nNWOxbVgVoLK33W44wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZPwiRECh5cPa4woZDjJCv8ITZxMB8GA1UdIwQY
MBaAFNYjKdjX5UGVPhIP0F9mzG66sGhNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUt
NzMyMDJmMGUxZDAzLzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lODUxODAtMTkxMC00YzQyLWExZjUtNzMyMDJmMGUxZDAz
LzEvMWlNcDJOZmxRWlUtRWdfUVgyYk1icnF3YUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIEqySBF
nOQ4ZQ3svv0greEsilgBZjGlU1+XjztLsCUakO+vSfeDJ+JuuanC6mF0w84wo3bM
HwONkvl2EnugdnfEHHg2MT+t9/+jZvR8aqbcVHhTB0k7P2EsZuMMVFkxG/SlJl2X
HpyXT5PU3ZmwtHKWDxc2l5ZOVfrKwlg7EBWnuo+H5T2pwKgaudWgqJc6Fh+YT2jz
BNm1lrFzqcL9zdxxrySfBobHRDGcJVgKJ+iIPnsa5mkaJLFgJjS8fegDCA4vhTH5
uGWQRvZ3SWMLFp6V0lC9ly+nIEF8RK93xBueGKAqEYKOOd2RC8BmO3n4rgtyarRW
usCfOuBoj7lqug==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:11:51 2025 by rpki-client