Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: 17xR5PuZdXj3Lxv9uyErmbmYcfKKVA3GaGsviQ2TlXc=
Subject key identifier: BC:C2:A7:8C:70:2B:0E:00:24:40:05:C9:AB:EA:B9:DA:D7:9D:88:62
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 019675307349C03EAF2423CAD3B41A1363B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 0295
Signing time: Sun 27 Apr 2025 03:00:31 +0000
Manifest this update: Sun 27 Apr 2025 03:00:31 +0000
Manifest next update: Mon 28 Apr 2025 03:00:31 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: KbWftZ4/FmldH8gL4Vj/M75ibsD2DH6TvM6Qfd9Dhf8=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:73:49:c0:3e:af:24:23:ca:d3:b4:1a:13:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Apr 27 03:00:31 2025 GMT
Not After : Apr 28 03:00:31 2025 GMT
Subject: CN=bcc2a78c702b0e00244005c9abeab9dad79d8862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:9a:40:38:d1:ae:88:10:64:13:1f:4a:a8:
98:74:d8:3c:37:91:bf:23:b5:60:1c:28:06:af:89:
ec:cc:2a:e9:54:2a:c9:d4:b1:f1:36:96:b4:a5:31:
16:e7:96:cb:26:04:5e:8a:cc:af:7a:d7:5f:84:9c:
d7:72:f1:cb:22:74:52:0d:c9:cd:3d:24:6a:73:92:
1a:32:88:cb:a1:00:31:20:37:9d:90:d5:89:81:44:
76:2a:43:08:eb:63:37:88:9e:b5:f7:0b:ff:56:98:
38:9f:3b:06:67:6d:e5:61:1f:40:ed:c4:14:8d:4f:
af:88:11:f8:90:1e:4b:9b:a3:39:d2:0f:51:0c:15:
99:e0:48:43:c9:7f:c8:87:f7:e0:b4:1a:3a:c7:ad:
f2:0b:5d:a5:07:bf:ab:76:90:ed:66:e7:26:87:31:
60:21:b3:58:96:7f:a3:3e:c4:e3:a5:26:f3:d4:58:
fe:bf:bc:de:b4:b2:27:8b:22:2b:1d:7a:20:4c:c7:
9c:64:c3:1b:b7:a9:d1:d7:6f:62:dd:25:85:70:4f:
0a:25:67:63:3f:4a:56:c1:62:34:17:10:f4:47:89:
1c:90:77:98:64:27:98:48:d5:5e:d9:96:3c:7d:a5:
c7:88:66:ca:43:3a:ab:b6:d1:2d:ab:ff:92:a6:22:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:A7:8C:70:2B:0E:00:24:40:05:C9:AB:EA:B9:DA:D7:9D:88:62
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:92:d3:1c:75:86:77:60:f6:2b:03:6e:77:4d:81:ef:6f:
50:45:28:b0:98:f5:2d:30:2c:4e:0b:80:4c:bd:20:3e:5d:81:
75:b6:e0:44:e8:35:c8:6b:b4:c5:6b:f5:7d:6b:be:06:b5:9a:
8a:01:b3:3c:ba:43:9d:11:d0:7c:ed:a4:f2:ae:5d:e3:3d:ef:
14:07:aa:d2:78:23:89:82:30:cc:84:bd:e0:5e:b8:6f:17:45:
d4:c9:85:9a:e8:90:8f:16:c0:33:1a:ea:6c:a1:f0:fd:b1:fb:
a6:86:d8:25:f5:a9:ee:4e:fc:fa:76:b1:45:be:cf:55:fa:03:
83:bc:75:7f:c8:03:0d:77:51:b9:41:ba:91:c3:94:ea:aa:16:
94:fb:a5:8a:7f:a3:47:33:58:2f:0a:6f:c2:7a:b7:95:a3:1f:
e2:81:66:bf:cd:76:94:9e:d3:ba:47:a8:cf:8a:1d:a9:13:f3:
22:da:74:43:0b:70:d0:e3:44:26:0f:70:0d:87:98:b2:36:e8:
5e:3d:f3:06:8a:e3:03:1c:68:5c:ee:ae:91:8d:fa:e5:12:1f:
c6:c6:f9:c4:43:92:68:86:0a:bd:8f:45:00:e3:23:e3:74:c4:
ba:4b:fd:65:3b:a8:f2:5f:92:09:e9:cd:20:f4:96:b9:88:1e:
a0:71:87:2f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZ1MHNJwD6vJCPK07QaE2O0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTFjOTU2MGZhOTEwNWU2YmRjNGI0OTJlZmFiNjQxYWI1
MDgwMWQwHhcNMjUwNDI3MDMwMDMxWhcNMjUwNDI4MDMwMDMxWjAzMTEwLwYDVQQD
EyhiY2MyYTc4YzcwMmIwZTAwMjQ0MDA1YzlhYmVhYjlkYWQ3OWQ4ODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QKaQDjRrogQZBMfSqiYdNg8N5G/
I7VgHCgGr4nszCrpVCrJ1LHxNpa0pTEW55bLJgReisyvetdfhJzXcvHLInRSDcnN
PSRqc5IaMojLoQAxIDedkNWJgUR2KkMI62M3iJ619wv/Vpg4nzsGZ23lYR9A7cQU
jU+viBH4kB5Lm6M50g9RDBWZ4EhDyX/Ih/fgtBo6x63yC12lB7+rdpDtZucmhzFg
IbNYln+jPsTjpSbz1Fj+v7zetLIniyIrHXogTMecZMMbt6nR129i3SWFcE8KJWdj
P0pWwWI0FxD0R4kckHeYZCeYSNVe2ZY8faXHiGbKQzqrttEtq/+SpiLRlQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLzCp4xwKw4AJEAFyavqudrXnYhiMB8GA1UdIwQY
MBaAFPoRyVYPqRBea9xLSS76tkGrUIAdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oSEpWZy1wRUY1cjNFdEpMdnEyUWF0UWdCMC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvMDBlZTZhLTVlOTUtNGUxMC04ZWU2
LTdlMjIyYmZlY2M5MC8xLzEtaEhKVmctcEVGNXIzRXRKTHZxMlFhdFFnQjAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4LzAwZWU2YS01ZTk1LTRlMTAtOGVlNi03ZTIyMmJmZWNj
OTAvMS8xLWhISlZnLXBFRjVyM0V0Skx2cTJRYXRRZ0IwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx2S
0xx1hndg9isDbndNge9vUEUosJj1LTAsTguATL0gPl2BdbbgROg1yGu0xWv1fWu+
BrWaigGzPLpDnRHQfO2k8q5d4z3vFAeq0ngjiYIwzIS94F64bxdF1MmFmuiQjxbA
MxrqbKHw/bH7pobYJfWp7k78+naxRb7PVfoDg7x1f8gDDXdRuUG6kcOU6qoWlPul
in+jRzNYLwpvwnq3laMf4oFmv812lJ7Tukeoz4odqRPzItp0Qwtw0ONEJg9wDYeY
sjboXj3zBorjAxxoXO6ukY365RIfxsb5xEOSaIYKvY9FAOMj43TEukv9ZTuo8l+S
CenNIPSWuYgeoHGHLw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:37 2025 by rpki-client