Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File: 481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier: GyH6qUnLHViFEm0KTrv0jRlZmW+snRES6rM2kWFuhxY=
Subject key identifier: A3:42:95:02:B4:57:5C:09:D2:C3:AB:45:29:A4:67:C6:FC:9A:6A:29
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer: /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial: 01968C940F0C2E8C094656A56D6FF1F0AC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number: 040F
Signing time: Thu 01 May 2025 16:00:35 +0000
Manifest this update: Thu 01 May 2025 16:00:35 +0000
Manifest next update: Fri 02 May 2025 16:00:35 +0000
Files and hashes: 1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: NeeXHmDCj9rRg7E0TKyk1ganWJZbH9eyhKfqHuSIeok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:94:0f:0c:2e:8c:09:46:56:a5:6d:6f:f1:f0:ac:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Validity
Not Before: May 1 16:00:35 2025 GMT
Not After : May 2 16:00:35 2025 GMT
Subject: CN=a3429502b4575c09d2c3ab4529a467c6fc9a6a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:e7:d3:1c:06:ce:cc:58:fe:46:8b:97:fe:
7c:3e:12:99:7b:d2:87:a9:b4:ca:c3:e2:74:d9:67:
26:54:84:7b:9b:34:cb:0c:15:c5:9d:9f:45:2e:00:
5d:32:fb:c2:19:b3:de:42:7c:cf:96:6a:61:89:63:
bc:0c:ff:48:97:5e:14:ce:fc:13:18:a0:1e:4d:b0:
19:ec:93:b8:91:3f:fd:a6:f1:85:87:b8:ba:fa:4a:
8c:7e:0f:17:b6:9e:cd:41:85:d8:73:4a:06:2b:a1:
d5:fe:10:93:52:23:74:5f:21:d2:e5:bf:60:f7:e5:
87:99:5d:c3:f4:6b:7a:40:2c:0f:00:24:47:14:04:
8b:d6:8b:30:9e:13:b1:44:57:8b:72:fe:b1:7c:0a:
45:e5:1a:28:47:9a:45:e7:7f:d6:91:c0:d5:92:07:
38:59:0c:c8:00:9e:05:3a:35:d6:4b:01:80:e5:c3:
48:52:d8:a5:73:5e:e3:56:95:d1:d4:33:46:7e:19:
b7:c2:38:14:52:91:8d:f4:ed:b1:7f:75:22:83:66:
5d:e5:26:4a:7c:d1:31:34:b3:4d:1e:13:de:6a:5d:
81:c9:d8:17:5d:5a:80:1e:f0:54:83:4a:fb:62:10:
b5:be:6b:b2:5c:c0:d7:b1:fc:8d:05:8c:fd:bf:85:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:42:95:02:B4:57:5C:09:D2:C3:AB:45:29:A4:67:C6:FC:9A:6A:29
X509v3 Authority Key Identifier:
keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:a3:d9:d7:03:91:97:21:0a:37:21:e4:01:1f:ba:d0:62:
e2:1a:b9:0a:97:73:eb:02:d6:45:9c:c9:44:2c:44:b1:04:bd:
79:28:2b:95:46:7b:96:3f:1f:84:35:bd:8d:0e:9f:01:b7:6a:
e4:45:98:a0:12:0a:df:d9:e0:5f:f3:0f:43:5c:2c:58:2f:ef:
85:b6:5e:10:74:b2:e1:09:da:e2:ea:0b:b9:cb:b7:d6:89:db:
b8:db:ef:ec:34:c0:13:0f:b1:b7:ce:02:6e:9b:9e:90:48:51:
96:49:f7:9c:46:f8:93:8d:a3:c4:7d:70:aa:6a:4e:06:9e:b0:
05:16:2d:ba:82:1e:ab:b4:41:d9:ce:5f:11:27:b0:e1:1c:61:
47:01:3a:cd:19:9c:19:37:88:ad:08:0c:96:78:00:f0:aa:e8:
6e:00:fe:2b:45:c1:26:d1:f0:49:8d:22:b7:ba:d5:ed:1f:8e:
54:cc:3c:eb:f3:8c:63:f8:35:93:36:f2:aa:d5:fb:7f:1e:01:
6f:e6:af:31:b3:7d:9d:cd:56:b1:1e:ed:c0:57:79:08:ea:eb:
0c:8a:a6:c0:cb:01:0a:9d:44:4a:be:8b:0e:91:5f:a6:f1:8f:
a4:99:9b:e3:6e:47:9f:12:05:39:a3:17:5a:e3:b5:cb:9e:1d:
0f:a5:a9:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMlA8MLowJRlalbW/x8KwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzY2Q2NTdhMTIwNTMyZGYzM2RlNTBmZTFhYzJiMzYyMGFj
NGFlNGYwHhcNMjUwNTAxMTYwMDM1WhcNMjUwNTAyMTYwMDM1WjAzMTEwLwYDVQQD
EyhhMzQyOTUwMmI0NTc1YzA5ZDJjM2FiNDUyOWE0NjdjNmZjOWE2YTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniHn0xwGzsxY/kaLl/58PhKZe9KH
qbTKw+J02WcmVIR7mzTLDBXFnZ9FLgBdMvvCGbPeQnzPlmphiWO8DP9Il14UzvwT
GKAeTbAZ7JO4kT/9pvGFh7i6+kqMfg8Xtp7NQYXYc0oGK6HV/hCTUiN0XyHS5b9g
9+WHmV3D9Gt6QCwPACRHFASL1oswnhOxRFeLcv6xfApF5RooR5pF53/WkcDVkgc4
WQzIAJ4FOjXWSwGA5cNIUtilc17jVpXR1DNGfhm3wjgUUpGN9O2xf3Uig2Zd5SZK
fNExNLNNHhPeal2BydgXXVqAHvBUg0r7YhC1vmuyXMDXsfyNBYz9v4U6XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNClQK0V1wJ0sOrRSmkZ8b8mmopMB8GA1UdIwQY
MBaAFOPNZXoSBTLfM95Q/hrCs2IKxK5PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQt
MGY5NTZjYWY4MDNjLzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83NzI0NzYtYTI4My00NjU2LWE2MTQtMGY5NTZjYWY4MDNj
LzEvNDgxbGVoSUZNdDh6M2xELUdzS3pZZ3JFcms4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkSj2dcD
kZchCjch5AEfutBi4hq5Cpdz6wLWRZzJRCxEsQS9eSgrlUZ7lj8fhDW9jQ6fAbdq
5EWYoBIK39ngX/MPQ1wsWC/vhbZeEHSy4Qna4uoLucu31onbuNvv7DTAEw+xt84C
bpuekEhRlkn3nEb4k42jxH1wqmpOBp6wBRYtuoIeq7RB2c5fESew4RxhRwE6zRmc
GTeIrQgMlngA8KrobgD+K0XBJtHwSY0it7rV7R+OVMw86/OMY/g1kzbyqtX7fx4B
b+avMbN9nc1WsR7twFd5COrrDIqmwMsBCp1ESr6LDpFfpvGPpJmb425HnxIFOaMX
WuO1y54dD6Wpbw==
-----END CERTIFICATE-----
Generated at Fri May 2 01:01:55 2025 by rpki-client