Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier: 4nTjfAnekVvRln5oMQASU0zy0WAOgI500ivbgxrlr1Q=
Subject key identifier: D4:A8:CC:30:45:A9:2C:E6:50:B4:7C:6D:49:4E:98:FF:79:D9:B0:C7
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial: 0196808F8B616A9645C2245D700590DFA078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number: 0289
Signing time: Tue 29 Apr 2025 08:00:13 +0000
Manifest this update: Tue 29 Apr 2025 08:00:13 +0000
Manifest next update: Wed 30 Apr 2025 08:00:13 +0000
Files and hashes: 1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: 6OPGqjUU33LQw1GcmhYX+fRt01SUErORhbfa41sUyBM=)
2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:8b:61:6a:96:45:c2:24:5d:70:05:90:df:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Validity
Not Before: Apr 29 08:00:13 2025 GMT
Not After : Apr 30 08:00:13 2025 GMT
Subject: CN=d4a8cc3045a92ce650b47c6d494e98ff79d9b0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:45:b2:22:2c:e9:99:6a:1c:e1:d7:56:44:
cd:a4:05:10:92:57:f8:e9:86:80:47:0a:68:c2:77:
03:b4:38:81:dd:b5:0c:c4:aa:88:ed:54:d8:a5:48:
5d:52:4e:96:ba:f5:1f:cc:8d:a1:db:6e:b2:12:ab:
f9:a0:15:42:ae:0b:e6:3b:ff:19:27:0f:dd:25:06:
ef:1e:c4:fd:30:ad:aa:44:82:a8:33:f3:a2:5f:c7:
6b:a4:d8:7f:38:81:6c:0f:cd:bb:95:f4:82:77:74:
91:eb:15:e2:ad:48:6a:e3:b5:d8:cd:69:26:d5:12:
ab:d2:78:10:f5:c1:01:c1:b2:03:cc:81:b7:04:77:
db:18:5e:bd:4e:2e:cd:cc:52:02:f1:55:0f:65:46:
3d:5d:00:63:89:07:ec:20:6b:03:a9:b6:a4:04:f7:
68:a6:44:4c:c0:6d:b2:bf:aa:31:93:35:39:2c:b8:
5a:9a:d8:99:71:7e:e0:20:10:3b:4b:d2:da:4e:fb:
da:01:2b:0e:ae:c0:71:4c:eb:3d:2e:aa:e1:8a:b6:
97:8b:c8:25:2d:f6:fb:05:9a:75:f1:ff:2a:7a:54:
c6:2e:99:54:49:5a:b0:17:7e:b2:0b:fa:13:71:e3:
68:2e:be:f7:03:bf:08:0b:95:c3:6d:9e:b1:a2:49:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A8:CC:30:45:A9:2C:E6:50:B4:7C:6D:49:4E:98:FF:79:D9:B0:C7
X509v3 Authority Key Identifier:
keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9a:17:3e:f0:c7:c4:c0:d6:61:ea:db:b1:de:20:13:03:b5:
3f:58:b0:f7:e6:23:60:a2:61:30:e3:83:a8:a4:69:b8:9c:a4:
f7:b8:9f:a3:2f:72:b0:99:4d:bc:d0:a6:12:b6:0d:23:a9:a8:
37:a4:06:2e:57:b8:cf:fa:80:27:5d:ec:d9:5c:63:63:06:fd:
f8:b6:fc:73:8c:c0:81:4e:52:04:99:79:93:10:4c:ae:99:54:
42:79:7d:30:2b:92:87:19:ed:63:4b:fe:ea:01:84:72:29:5c:
33:89:0b:89:05:ec:b5:f2:3e:17:89:cc:3a:14:48:93:15:1d:
32:12:35:05:57:68:7f:26:e4:00:7c:32:aa:78:22:27:4a:b5:
25:15:bc:22:b1:d6:70:be:3e:9d:f8:bb:90:dc:e6:a6:3b:f8:
22:e8:57:ce:f6:8b:44:a2:2d:9e:76:84:89:a2:d0:94:11:9c:
2e:59:1c:a7:af:bc:27:51:b3:95:8c:14:53:18:83:98:59:9c:
08:5a:27:f6:84:9f:f3:0b:22:33:4a:9b:c6:7e:76:21:4a:d3:
d7:af:ac:63:2c:70:5d:d9:f8:f5:34:d5:80:ea:1f:04:55:7d:
f5:53:05:ec:b2:60:7b:c7:a0:f2:3b:03:7a:f6:64:cf:fc:62:
cf:da:37:09
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZaAj4thapZFwiRdcAWQ36B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj
MjJkYmMwHhcNMjUwNDI5MDgwMDEzWhcNMjUwNDMwMDgwMDEzWjAzMTEwLwYDVQQD
EyhkNGE4Y2MzMDQ1YTkyY2U2NTBiNDdjNmQ0OTRlOThmZjc5ZDliMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrdFsiIs6ZlqHOHXVkTNpAUQklf4
6YaARwpowncDtDiB3bUMxKqI7VTYpUhdUk6WuvUfzI2h226yEqv5oBVCrgvmO/8Z
Jw/dJQbvHsT9MK2qRIKoM/OiX8drpNh/OIFsD827lfSCd3SR6xXirUhq47XYzWkm
1RKr0ngQ9cEBwbIDzIG3BHfbGF69Ti7NzFIC8VUPZUY9XQBjiQfsIGsDqbakBPdo
pkRMwG2yv6oxkzU5LLhamtiZcX7gIBA7S9LaTvvaASsOrsBxTOs9LqrhiraXi8gl
Lfb7BZp18f8qelTGLplUSVqwF36yC/oTceNoLr73A78IC5XDbZ6xokk/fwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNSozDBFqSzmULR8bUlOmP952bDHMB8GA1UdIwQY
MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl
LTk0NGNkOTJjMGMwZi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q1LzUzNmYwYi05Zjc5LTRkNTYtYWY4ZS05NDRjZDkyYzBj
MGYvMS8xLTJwY2Z1dTQxWWp5X3lMSGRjSEJvVVRDTGJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5oX
PvDHxMDWYerbsd4gEwO1P1iw9+YjYKJhMOODqKRpuJyk97ifoy9ysJlNvNCmErYN
I6moN6QGLle4z/qAJ13s2VxjYwb9+Lb8c4zAgU5SBJl5kxBMrplUQnl9MCuShxnt
Y0v+6gGEcilcM4kLiQXstfI+F4nMOhRIkxUdMhI1BVdofybkAHwyqngiJ0q1JRW8
IrHWcL4+nfi7kNzmpjv4IuhXzvaLRKItnnaEiaLQlBGcLlkcp6+8J1GzlYwUUxiD
mFmcCFon9oSf8wsiM0qbxn52IUrT16+sYyxwXdn49TTVgOofBFV99VMF7LJge8eg
8jsDevZkz/xiz9o3CQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:38:02 2025 by rpki-client