Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: Bo/Da/UPrcYjgYMx5/QCgXDSBu4tQqppeNw0rvbm5ZY=
Subject key identifier: 90:58:06:D7:83:B4:75:22:A4:55:17:D4:D6:0A:93:52:68:85:98:86
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019684DA69867E13ED0FC1C8DEC19DFEA9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 04:00:28 +0000
Manifest this update: Wed 30 Apr 2025 04:00:28 +0000
Manifest next update: Thu 01 May 2025 04:00:28 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: gWLem9lCgAOeIlbWRf0MDGj+vhaMnoW0R5HJ9ZuKssY=)
2: fB3zFlody1nthwMkhJVJflJzOIE.roa (hash: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=)
3: t7D4JJSP5z-u6M9bmWKtD19PybY.roa (hash: hgEfba4+416hOF8d8xJM4ix7obkJ8g22r+oy5Y4pB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:69:86:7e:13:ed:0f:c1:c8:de:c1:9d:fe:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Apr 30 04:00:28 2025 GMT
Not After : May 1 04:00:28 2025 GMT
Subject: CN=905806d783b47522a45517d4d60a935268859886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:1c:23:6b:70:8c:d7:a9:9f:7f:09:97:38:
43:3a:ea:f7:5b:86:da:eb:04:60:12:f6:87:9b:b0:
e0:d4:fe:63:87:8e:bc:f7:70:be:a6:79:0d:d9:8e:
b5:10:c1:e7:f1:68:04:9c:54:11:0e:6d:3c:50:16:
70:63:10:be:0b:c4:ca:94:61:6c:c9:f7:c9:6c:fb:
42:be:0b:b3:3a:ae:1a:97:0f:41:f6:16:51:4a:22:
c1:c4:37:46:50:f4:d9:45:47:8f:e6:53:6d:cc:3a:
45:94:e2:fa:c4:fa:a2:84:bb:df:93:90:e5:1b:84:
32:1f:35:7d:25:bd:90:39:09:3e:86:a4:3a:32:60:
a0:15:a8:64:ea:b4:0f:b6:59:81:4a:f7:96:0b:a6:
01:6e:b2:e8:5e:52:cd:47:89:fa:27:cc:90:0e:22:
2d:ad:7a:2f:48:80:59:6d:c9:a9:5f:33:93:a3:3f:
7d:68:cc:3a:77:f8:27:45:50:92:15:8d:cf:6d:b2:
f4:f6:d2:c3:2e:47:17:b3:eb:ed:93:6d:91:9d:4e:
b8:70:10:1d:ff:a2:41:eb:94:34:35:a7:c6:aa:0e:
2a:a8:5b:44:30:2d:e9:e0:e4:dd:ad:bc:52:55:64:
24:fc:09:28:75:78:b3:76:6c:59:f2:70:a2:14:59:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:06:D7:83:B4:75:22:A4:55:17:D4:D6:0A:93:52:68:85:98:86
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a3:0b:e4:df:19:4d:40:8c:8a:dc:07:5a:18:39:aa:a9:d2:
d1:4d:b4:8e:8b:b1:59:23:67:8e:53:72:05:9f:dd:30:aa:78:
7f:c5:d8:8c:6d:47:04:40:4f:34:de:fb:37:26:a6:86:89:27:
6b:61:de:f6:fc:b2:81:80:4a:61:c5:54:34:2e:b9:1d:fe:e8:
41:34:ad:eb:0e:92:b2:ad:3c:f9:58:57:27:6b:6d:66:b3:5e:
99:7e:2c:cd:c6:ba:50:a1:33:7b:be:d9:f4:34:06:43:6f:4a:
b3:a5:4f:ba:12:5e:f0:c5:60:b0:ad:9f:f9:c7:4d:18:cd:cc:
eb:de:5d:42:78:02:54:5a:0f:e9:90:65:50:6b:87:88:6b:50:
e8:98:93:98:e1:c1:99:5c:0c:65:bf:86:b6:4d:7b:1b:0f:d8:
20:b6:15:82:e0:b4:62:8c:a9:30:55:3d:7d:f4:d7:33:42:0f:
c7:9e:50:84:5c:67:84:f4:ff:f1:dc:34:5a:b7:b8:bf:3f:95:
83:ba:d8:6a:e3:5b:59:24:2a:31:d2:08:60:05:85:66:18:3e:
ff:46:28:00:c5:cb:4a:fb:4b:38:f5:7a:f2:1b:52:7f:6c:28:
76:be:f9:7a:a0:72:24:05:87:22:2f:f2:fe:1f:69:56:e9:ec:
15:b0:99:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2mmGfhPtD8HI3sGd/qnMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjUwNDMwMDQwMDI4WhcNMjUwNTAxMDQwMDI4WjAzMTEwLwYDVQQD
Eyg5MDU4MDZkNzgzYjQ3NTIyYTQ1NTE3ZDRkNjBhOTM1MjY4ODU5ODg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAcI2twjNepn38JlzhDOur3W4ba
6wRgEvaHm7Dg1P5jh46893C+pnkN2Y61EMHn8WgEnFQRDm08UBZwYxC+C8TKlGFs
yffJbPtCvguzOq4alw9B9hZRSiLBxDdGUPTZRUeP5lNtzDpFlOL6xPqihLvfk5Dl
G4QyHzV9Jb2QOQk+hqQ6MmCgFahk6rQPtlmBSveWC6YBbrLoXlLNR4n6J8yQDiIt
rXovSIBZbcmpXzOToz99aMw6d/gnRVCSFY3PbbL09tLDLkcXs+vtk22RnU64cBAd
/6JB65Q0NafGqg4qqFtEMC3p4OTdrbxSVWQk/AkodXizdmxZ8nCiFFm1OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBYBteDtHUipFUX1NYKk1JohZiGMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKML5N8Z
TUCMitwHWhg5qqnS0U20jouxWSNnjlNyBZ/dMKp4f8XYjG1HBEBPNN77Nyamhokn
a2He9vyygYBKYcVUNC65Hf7oQTSt6w6Ssq08+VhXJ2ttZrNemX4szca6UKEze77Z
9DQGQ29Ks6VPuhJe8MVgsK2f+cdNGM3M695dQngCVFoP6ZBlUGuHiGtQ6JiTmOHB
mVwMZb+Gtk17Gw/YILYVguC0YoypMFU9ffTXM0IPx55QhFxnhPT/8dw0Wre4vz+V
g7rYauNbWSQqMdIIYAWFZhg+/0YoAMXLSvtLOPV68htSf2wodr75eqByJAWHIi/y
/h9pVunsFbCZfg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:54 2025 by rpki-client