Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: K03gM0wjJ1pFkLLoAKxPyBGkHDsRvaMOd09oGSq34fo=
Subject key identifier: 2B:9A:39:3F:C8:22:0C:D3:9E:E0:09:21:36:A5:2D:DE:FF:C8:7B:4E
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 01967AC467C230A2C51AA1FE26C1471609FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 027C
Signing time: Mon 28 Apr 2025 05:00:14 +0000
Manifest this update: Mon 28 Apr 2025 05:00:14 +0000
Manifest next update: Tue 29 Apr 2025 05:00:14 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: Xs7mFdLRcpyJqIBVYFBGyJp7Z7W+ywpaHRixNcwDThk=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:67:c2:30:a2:c5:1a:a1:fe:26:c1:47:16:09:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Apr 28 05:00:14 2025 GMT
Not After : Apr 29 05:00:14 2025 GMT
Subject: CN=2b9a393fc8220cd39ee0092136a52ddeffc87b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:b8:d4:77:71:1b:5f:e3:8b:e9:04:bf:8e:
8a:db:d2:95:80:82:5f:d0:1e:9d:e1:30:15:8e:da:
5d:47:4f:37:a4:02:3a:d1:3c:0c:89:fd:36:ff:c0:
dc:ee:4e:71:31:ab:88:78:6f:c0:ae:ef:8b:8d:09:
83:75:68:08:db:ce:96:23:a1:db:22:cf:b0:e1:f3:
aa:9d:e3:87:a9:b4:7e:cb:79:43:a0:6a:13:90:50:
02:14:24:14:ca:c3:fc:54:d1:6e:30:81:e2:a7:94:
4d:04:87:db:35:96:5a:c2:39:39:7a:ff:65:be:48:
88:06:da:85:7a:f0:7f:09:e7:f2:4d:71:1b:d7:6c:
2f:72:3b:0e:33:38:23:98:04:d6:0e:d1:ba:26:0d:
f6:4b:fb:cc:40:2d:d3:4d:d0:0e:b1:0e:bd:89:64:
7c:eb:1d:32:8f:c1:42:64:79:6c:f8:db:5d:19:05:
2d:c4:dc:63:0c:3a:bd:c0:97:22:3f:32:19:7c:31:
ed:f8:b0:cd:ba:bc:20:eb:1f:66:b1:64:32:70:f5:
b9:0c:9c:c5:59:0d:5d:a7:ee:a9:56:3f:66:43:1b:
6a:fa:ed:f8:36:9f:13:ec:09:77:c1:7e:3e:38:68:
3e:3c:e1:08:e4:f7:ca:d1:c6:66:d5:60:83:e6:9d:
16:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9A:39:3F:C8:22:0C:D3:9E:E0:09:21:36:A5:2D:DE:FF:C8:7B:4E
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:35:e0:9f:d4:49:71:d6:1c:4a:3e:4d:51:dc:1f:c5:44:eb:
34:bd:ec:c9:ad:d0:21:5c:d1:43:04:31:6b:aa:6e:77:8e:89:
f9:7d:8c:0a:9e:9e:61:2d:33:94:f8:75:9e:24:7e:17:a2:fd:
a0:2e:af:bf:ba:ba:ae:64:74:e6:cf:98:23:3c:7f:87:c2:87:
58:5f:4a:b9:e0:c4:86:05:f6:b1:d3:9d:0d:98:a9:3b:ff:78:
3f:ec:76:a4:67:b3:90:e2:4b:b4:30:bd:ee:c3:79:f2:a7:59:
43:1d:4e:8e:99:3f:40:8b:ab:20:4c:29:29:ba:04:8c:92:00:
cc:8c:7d:ce:5f:7e:3a:39:48:01:fc:bf:61:61:32:d7:67:c9:
31:ba:8e:df:da:1c:9a:a1:cf:79:91:58:c9:86:82:66:10:69:
a5:55:b9:74:a8:47:02:32:fe:26:cc:4d:3d:1d:2e:66:e6:1a:
1a:4d:a6:bf:2e:6a:ff:71:20:c4:ec:11:ae:7d:78:29:76:72:
c2:b8:b3:24:20:6e:e7:f8:10:0c:7e:db:1b:0e:ff:65:79:dd:
33:24:46:1b:4a:dc:22:77:47:05:4f:fc:7a:41:c9:4f:f1:02:
cb:0e:d2:3a:07:32:5b:fb:0d:fa:db:bd:1e:f8:46:a6:d6:60:
d6:1b:ee:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6xGfCMKLFGqH+JsFHFgn/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MmQwYjgyNjY0NGExODM4N2NmODMyMmRiN2U2NDZhZjYz
ZDk4NmEwHhcNMjUwNDI4MDUwMDE0WhcNMjUwNDI5MDUwMDE0WjAzMTEwLwYDVQQD
EygyYjlhMzkzZmM4MjIwY2QzOWVlMDA5MjEzNmE1MmRkZWZmYzg3YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT641HdxG1/ji+kEv46K29KVgIJf
0B6d4TAVjtpdR083pAI60TwMif02/8Dc7k5xMauIeG/Aru+LjQmDdWgI286WI6Hb
Is+w4fOqneOHqbR+y3lDoGoTkFACFCQUysP8VNFuMIHip5RNBIfbNZZawjk5ev9l
vkiIBtqFevB/CefyTXEb12wvcjsOMzgjmATWDtG6Jg32S/vMQC3TTdAOsQ69iWR8
6x0yj8FCZHls+NtdGQUtxNxjDDq9wJciPzIZfDHt+LDNurwg6x9msWQycPW5DJzF
WQ1dp+6pVj9mQxtq+u34Np8T7Al3wX4+OGg+POEI5PfK0cZm1WCD5p0WcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuaOT/IIgzTnuAJITalLd7/yHtOMB8GA1UdIwQY
MBaAFKQtC4JmRKGDh8+DItt+ZGr2PZhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0Mjgt
ZTgyZDVlZTRlNDBmLzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yMjYwZjItM2NjZC00NGU1LTg0MjgtZTgyZDVlZTRlNDBm
LzEvcEMwTGdtWkVvWU9IejRNaTIzNWthdlk5bUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzXgn9RJ
cdYcSj5NUdwfxUTrNL3sya3QIVzRQwQxa6pud46J+X2MCp6eYS0zlPh1niR+F6L9
oC6vv7q6rmR05s+YIzx/h8KHWF9KueDEhgX2sdOdDZipO/94P+x2pGezkOJLtDC9
7sN58qdZQx1Ojpk/QIurIEwpKboEjJIAzIx9zl9+OjlIAfy/YWEy12fJMbqO39oc
mqHPeZFYyYaCZhBppVW5dKhHAjL+JsxNPR0uZuYaGk2mvy5q/3EgxOwRrn14KXZy
wrizJCBu5/gQDH7bGw7/ZXndMyRGG0rcIndHBU/8ekHJT/ECyw7SOgcyW/sN+tu9
HvhGptZg1hvuGg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:41 2025 by rpki-client