Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File: 0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier: 66/A1Zmz2zasOVUVo+9/1+nKfEK2D96ZWFCoBpa2R/U=
Subject key identifier: 0D:70:1E:8D:49:78:3C:C1:DB:51:B4:F4:0F:E4:83:9B:25:28:E8:05
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer: /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial: 01968391020DB27E8AA57CE357202056DACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number: 0A9A
Signing time: Tue 29 Apr 2025 22:00:40 +0000
Manifest this update: Tue 29 Apr 2025 22:00:40 +0000
Manifest next update: Wed 30 Apr 2025 22:00:40 +0000
Files and hashes: 1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: CmRjXRjTElaQc32Rw1C1DPs6viIeVznjKn5qeO5YcPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:02:0d:b2:7e:8a:a5:7c:e3:57:20:20:56:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
Validity
Not Before: Apr 29 22:00:40 2025 GMT
Not After : Apr 30 22:00:40 2025 GMT
Subject: CN=0d701e8d49783cc1db51b4f40fe4839b2528e805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:8b:8c:58:56:f7:01:ee:1d:d0:53:d7:25:
42:a7:a6:63:0e:98:04:94:4a:13:8e:b9:0e:7c:87:
05:7e:9b:a3:88:11:29:d6:e2:45:0e:e7:e5:f3:d7:
05:e9:b0:5e:90:ee:3d:0a:e9:48:76:2c:3e:ac:21:
d0:24:65:5d:79:91:cb:37:23:68:c8:09:99:c3:c2:
b5:6b:c3:b1:3c:14:b9:05:e4:28:03:ad:6e:92:76:
9e:b3:9e:1e:4d:bd:66:05:dc:ff:57:8c:4e:cb:56:
66:a5:fb:2e:86:86:d8:72:34:58:a6:09:e4:51:09:
8e:5b:cf:48:16:4b:43:eb:5a:64:68:30:e5:df:c8:
70:b0:1f:b1:ec:92:af:c7:43:4b:31:ea:57:99:2f:
0d:c8:33:3a:dc:e3:65:da:04:28:a8:c5:b4:9e:16:
9c:52:1c:e6:d6:59:8c:f3:89:29:ad:1e:bf:c2:7c:
ae:b8:72:5e:e8:38:0f:99:8c:12:cd:85:06:bf:f1:
a3:cc:a0:d3:6a:fd:c8:01:c9:df:bf:14:42:1d:c5:
b1:05:53:bf:8c:01:25:d4:81:9b:4e:0e:5c:60:b6:
c6:84:08:91:c6:a8:16:08:2e:be:69:00:f4:4f:09:
94:c5:e2:02:ec:83:37:7e:97:45:05:b5:51:83:26:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:70:1E:8D:49:78:3C:C1:DB:51:B4:F4:0F:E4:83:9B:25:28:E8:05
X509v3 Authority Key Identifier:
keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ac:c2:af:f2:fa:2a:e1:fe:cd:b2:e8:0c:00:d0:32:af:84:
32:65:11:bb:5d:9f:aa:99:d0:d4:cf:6a:f4:42:fd:28:45:b1:
72:6e:05:3a:60:5b:6a:4f:79:e6:28:7a:4b:9b:69:65:4d:41:
b9:67:05:57:dd:3d:e3:7a:39:12:9e:06:5c:d4:12:07:43:2b:
ce:b0:ec:48:bc:11:bb:8c:b7:a2:4d:b3:71:d1:3f:88:e6:40:
09:40:a2:64:99:38:9a:6d:9f:4e:06:b8:1a:08:1f:4d:f2:22:
86:b3:3a:be:4c:c2:11:28:7f:4e:76:f0:1a:e3:42:d1:bd:96:
33:a1:b8:ce:e8:ae:8c:22:80:b8:b1:10:d8:95:40:1c:de:8b:
50:bf:5f:93:e7:56:7f:d2:06:08:7f:28:5a:95:f2:27:d6:b5:
f4:98:32:b5:ba:52:61:b0:8e:d0:79:a9:c1:1e:30:0d:fa:1a:
06:66:62:f9:27:cc:b4:8f:58:da:4f:5e:09:9d:70:77:e4:82:
f9:84:ed:23:da:d8:2f:04:4c:16:26:fa:16:c0:80:7e:08:51:
44:36:58:97:56:0b:0b:2b:06:16:32:c4:2e:9b:ca:f0:c7:3f:
17:10:fc:f5:88:d9:03:3f:ed:65:1c:45:57:fd:76:d0:4c:73:
b1:b3:2d:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkQINsn6KpXzjVyAgVtrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODIyMjYzYTg3MDdjNzZmM2RiM2I2YmU3MTIyMjY5Yzgy
N2FlNTUwHhcNMjUwNDI5MjIwMDQwWhcNMjUwNDMwMjIwMDQwWjAzMTEwLwYDVQQD
EygwZDcwMWU4ZDQ5NzgzY2MxZGI1MWI0ZjQwZmU0ODM5YjI1MjhlODA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte+LjFhW9wHuHdBT1yVCp6ZjDpgE
lEoTjrkOfIcFfpujiBEp1uJFDufl89cF6bBekO49CulIdiw+rCHQJGVdeZHLNyNo
yAmZw8K1a8OxPBS5BeQoA61uknaes54eTb1mBdz/V4xOy1ZmpfsuhobYcjRYpgnk
UQmOW89IFktD61pkaDDl38hwsB+x7JKvx0NLMepXmS8NyDM63ONl2gQoqMW0nhac
Uhzm1lmM84kprR6/wnyuuHJe6DgPmYwSzYUGv/GjzKDTav3IAcnfvxRCHcWxBVO/
jAEl1IGbTg5cYLbGhAiRxqgWCC6+aQD0TwmUxeIC7IM3fpdFBbVRgybUJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1wHo1JeDzB21G09A/kg5slKOgFMB8GA1UdIwQY
MBaAFNGCImOocHx289s7a+cSImnIJ65VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjIt
NGE3OTA0MTA2ZTNiLzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNWYyNDctODI2Yi00M2E4LWE0MjItNGE3OTA0MTA2ZTNi
LzEvMFlJaVk2aHdmSGJ6Mnp0cjV4SWlhY2ducmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOazCr/L6
KuH+zbLoDADQMq+EMmURu12fqpnQ1M9q9EL9KEWxcm4FOmBbak955ih6S5tpZU1B
uWcFV90943o5Ep4GXNQSB0MrzrDsSLwRu4y3ok2zcdE/iOZACUCiZJk4mm2fTga4
GggfTfIihrM6vkzCESh/TnbwGuNC0b2WM6G4zuiujCKAuLEQ2JVAHN6LUL9fk+dW
f9IGCH8oWpXyJ9a19JgytbpSYbCO0HmpwR4wDfoaBmZi+SfMtI9Y2k9eCZ1wd+SC
+YTtI9rYLwRMFib6FsCAfghRRDZYl1YLCysGFjLELpvK8Mc/FxD89YjZAz/tZRxF
V/120ExzsbMtZg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:48 2025 by rpki-client