Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File: 0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier: D2tZxggtBpouHUuHFvrHfau37EhU3jOfGbQbHyyz0RI=
Subject key identifier: BF:B0:60:50:35:61:03:A8:E8:59:4F:AC:11:C5:D1:E2:C4:8B:49:E0
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer: /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial: 01967C458D15BADE6FE7376D96C09DEAE5C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number: 0DEA
Signing time: Mon 28 Apr 2025 12:00:54 +0000
Manifest this update: Mon 28 Apr 2025 12:00:54 +0000
Manifest next update: Tue 29 Apr 2025 12:00:54 +0000
Files and hashes: 1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: zwgPmmb5TUSL2z5vgm8HQF6zgtBJvzJ3InE+4n/YsFo=)
2: H6uSFDtLoI4YQD04FkS4VSFpIhw.roa (hash: hv1JnxHOhWB0hv+54xUCZyY9gAEBPU8rdk2117x7KVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:8d:15:ba:de:6f:e7:37:6d:96:c0:9d:ea:e5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
Validity
Not Before: Apr 28 12:00:54 2025 GMT
Not After : Apr 29 12:00:54 2025 GMT
Subject: CN=bfb06050356103a8e8594fac11c5d1e2c48b49e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c6:2d:52:11:01:78:23:e6:07:3f:cb:05:8c:
9a:41:d7:73:b3:62:0b:e6:04:1e:9d:c3:41:81:13:
1e:ab:30:25:98:3a:62:76:18:40:88:d7:71:e2:a2:
9a:75:0f:40:85:c5:8d:30:b9:99:06:fa:62:5d:e1:
af:22:04:0e:73:7e:b7:68:27:60:42:dc:e0:e7:a8:
ce:0d:0b:e5:59:21:e0:7a:48:48:f8:21:7c:08:03:
bb:01:3a:f5:87:62:88:cc:3f:be:58:cb:0a:4a:9a:
cd:07:90:d0:74:8d:59:76:aa:48:a7:35:3a:d0:fb:
a0:72:f1:0a:d1:37:49:d5:3e:db:7e:19:6c:8e:cf:
11:a5:fd:12:6f:61:0e:29:61:f3:33:25:94:48:4e:
2a:1d:e8:ac:5f:a6:bb:2d:7a:2e:3e:60:50:8f:53:
07:2b:19:8e:0c:05:08:88:cf:e0:f9:75:37:fa:8f:
30:d6:af:3f:c4:74:fc:5e:a2:d8:78:53:d4:32:d4:
eb:b1:29:ed:22:ff:a4:0b:aa:48:bf:e2:ee:41:e4:
a7:8d:c1:b0:b8:1f:34:16:33:3a:d4:0b:13:05:d5:
96:41:f3:c7:a0:f6:e7:46:7e:99:b1:a7:68:d7:91:
d7:1d:0a:50:ea:ac:46:61:e9:8e:19:fc:dd:5c:0e:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B0:60:50:35:61:03:A8:E8:59:4F:AC:11:C5:D1:E2:C4:8B:49:E0
X509v3 Authority Key Identifier:
keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:f8:f2:09:a2:52:9d:2a:6c:0f:34:0a:67:c6:33:f1:04:
16:c2:8e:2c:cf:f9:c3:af:68:0c:f8:e3:54:2a:e9:e8:f2:91:
20:27:86:51:d5:5a:7b:9b:d2:23:f2:eb:f0:47:40:b0:49:70:
c7:1c:39:b3:e9:17:63:e8:26:c4:2b:12:a6:ca:a7:f4:35:d6:
7b:d4:7f:cb:72:9a:ce:99:f6:0c:b7:e6:c9:e8:05:12:94:59:
7f:d7:0f:26:f1:1e:5d:ec:4e:9c:ad:9d:55:33:85:77:fc:fe:
05:19:24:b9:4d:3b:5b:8d:3c:d5:c4:34:84:82:6f:cf:38:e8:
99:d8:2e:84:eb:30:8e:12:fb:f8:18:41:6b:78:2d:b4:2f:60:
60:74:df:c7:e3:be:bc:7a:01:0d:a4:b6:96:47:25:11:d3:2f:
0e:32:50:2e:8a:2f:26:6b:a3:62:74:15:74:6d:83:dc:be:07:
cb:9c:ff:54:d1:80:44:1e:64:eb:ce:ed:73:0f:82:97:b4:5c:
80:92:48:a4:5b:8b:cf:f8:6c:0f:cd:8b:e7:05:ae:39:98:ee:
ad:c1:6b:9a:c2:23:bc:62:9a:fb:d7:3a:42:c0:a0:2b:98:d4:
5e:12:42:f2:53:7d:41:b8:f5:4d:58:3f:6b:30:d3:9e:37:51:
51:58:f4:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RY0Vut5v5zdtlsCd6uXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMDU0MmE2MTM1NTI0MTQyMTk0Y2FhNzA4ZTdkYjJjY2E2
YjRlNjMwHhcNMjUwNDI4MTIwMDU0WhcNMjUwNDI5MTIwMDU0WjAzMTEwLwYDVQQD
EyhiZmIwNjA1MDM1NjEwM2E4ZTg1OTRmYWMxMWM1ZDFlMmM0OGI0OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28YtUhEBeCPmBz/LBYyaQddzs2IL
5gQencNBgRMeqzAlmDpidhhAiNdx4qKadQ9AhcWNMLmZBvpiXeGvIgQOc363aCdg
Qtzg56jODQvlWSHgekhI+CF8CAO7ATr1h2KIzD++WMsKSprNB5DQdI1ZdqpIpzU6
0PugcvEK0TdJ1T7bfhlsjs8Rpf0Sb2EOKWHzMyWUSE4qHeisX6a7LXouPmBQj1MH
KxmODAUIiM/g+XU3+o8w1q8/xHT8XqLYeFPUMtTrsSntIv+kC6pIv+LuQeSnjcGw
uB80FjM61AsTBdWWQfPHoPbnRn6Zsado15HXHQpQ6qxGYemOGfzdXA5hWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+wYFA1YQOo6FlPrBHF0eLEi0ngMB8GA1UdIwQY
MBaAFNIFQqYTVSQUIZTKpwjn2yzKa05jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUt
YWI0MmI0YzkzZWQ5LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9jMzA5ZWMtMzI1NC00MjAwLTlhNWUtYWI0MmI0YzkzZWQ5
LzEvMGdWQ3BoTlZKQlFobE1xbkNPZmJMTXByVG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHOP48gmi
Up0qbA80CmfGM/EEFsKOLM/5w69oDPjjVCrp6PKRICeGUdVae5vSI/Lr8EdAsElw
xxw5s+kXY+gmxCsSpsqn9DXWe9R/y3Kazpn2DLfmyegFEpRZf9cPJvEeXexOnK2d
VTOFd/z+BRkkuU07W4081cQ0hIJvzzjomdguhOswjhL7+BhBa3gttC9gYHTfx+O+
vHoBDaS2lkclEdMvDjJQLoovJmujYnQVdG2D3L4Hy5z/VNGARB5k687tcw+Cl7Rc
gJJIpFuLz/hsD82L5wWuOZjurcFrmsIjvGKa+9c6QsCgK5jUXhJC8lN9Qbj1TVg/
azDTnjdRUVj0yQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:30 2025 by rpki-client