Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File: RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier: UHv6An2UZETgOJyTPXmdHEtoGwcaIj/cSSHm+pf3f2w=
Subject key identifier: 2B:DD:27:6F:1F:80:92:8C:EF:F5:39:C5:89:A9:63:24:3B:2E:F2:C1
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer: /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial: 019677FB67C05D3CF6F55296A02ED79ECC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number: 05AE
Signing time: Sun 27 Apr 2025 16:01:26 +0000
Manifest this update: Sun 27 Apr 2025 16:01:26 +0000
Manifest next update: Mon 28 Apr 2025 16:01:26 +0000
Files and hashes: 1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: hPNnvFk+Nby8UkECn+WNob73vExDEHoaPMxL+r/ad10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:67:c0:5d:3c:f6:f5:52:96:a0:2e:d7:9e:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Validity
Not Before: Apr 27 16:01:26 2025 GMT
Not After : Apr 28 16:01:26 2025 GMT
Subject: CN=2bdd276f1f80928ceff539c589a963243b2ef2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:81:6c:b5:dd:95:b5:1b:14:36:37:1a:99:
74:73:c2:ff:25:37:cf:c1:65:a2:7d:f4:df:cb:82:
87:15:7b:e6:0e:c8:dd:db:52:b8:57:ce:42:71:43:
b8:fa:b0:98:95:8a:87:81:98:ec:67:80:c0:e9:ff:
bf:fb:db:0d:0a:61:ba:b0:d5:82:f2:9a:2f:ca:0b:
c0:e7:80:56:6b:25:1f:61:41:d2:bc:37:8c:72:57:
1c:04:f9:47:49:12:56:4b:88:f8:da:90:4b:ac:c1:
6f:2d:d1:16:ce:39:b7:8b:7f:5f:e5:02:bf:4a:9c:
e6:cc:66:28:eb:59:cf:65:9e:89:dc:b3:48:21:f9:
93:c7:ed:59:05:97:19:09:95:b2:bf:76:31:b3:86:
e3:e5:2d:f4:4b:5a:09:b8:ef:d0:c7:b6:75:ae:3e:
4a:a7:85:a9:8c:d4:c4:2e:c0:1e:d6:df:53:f5:b6:
6a:4d:9e:05:b1:70:90:48:dc:0a:df:22:d0:52:96:
89:fd:57:d5:cc:a4:ef:c9:26:fa:ff:5b:5f:e8:35:
ed:e2:e0:e5:84:84:17:14:59:92:1a:f9:1c:50:0b:
f5:c2:5b:6c:1b:7c:04:d8:f0:87:03:d4:eb:b3:26:
13:cf:d8:30:d5:87:0d:1d:22:cd:f3:c1:3c:15:d9:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:27:6F:1F:80:92:8C:EF:F5:39:C5:89:A9:63:24:3B:2E:F2:C1
X509v3 Authority Key Identifier:
keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2c:9c:71:2b:9c:5d:c9:36:f1:ae:a6:d3:c3:7a:31:4c:43:
de:86:7e:54:6e:00:12:fa:8c:3b:bb:a7:85:5d:7f:2a:c2:05:
27:af:b6:71:30:95:52:dd:28:62:4b:34:fd:a3:1d:57:70:05:
80:28:5f:7b:e3:c9:dc:da:83:0b:ca:14:8e:57:3a:e0:f9:56:
be:cf:2d:22:24:dd:0a:42:d3:ba:93:4d:46:f0:42:de:46:b5:
53:95:a9:ee:a6:f4:80:95:5d:fd:e6:f3:b1:ca:01:9f:e1:bc:
2a:91:d5:96:a1:de:35:26:9a:a6:a6:98:c1:b2:8a:05:f2:4c:
0e:bc:ba:3e:b4:ec:68:ce:27:53:6c:a9:e7:2d:32:8a:73:64:
3b:88:87:4a:e7:88:0b:6a:14:24:7e:8f:f6:81:e2:be:69:fc:
01:3a:6c:27:a6:0a:21:55:42:0f:e4:ad:80:c8:61:ed:57:1b:
08:8d:3b:d6:04:1a:50:e0:ac:e2:51:f0:69:a8:e5:5a:46:64:
ae:c5:56:20:b2:19:3c:d5:5d:66:05:aa:ba:d4:f0:6f:a1:89:
4f:2e:b5:17:ef:6c:71:98:e9:d5:01:9d:24:7e:fe:b8:75:04:
33:36:59:f5:a1:1f:de:36:51:8f:8e:5c:24:25:75:52:d3:84:
30:09:4b:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+2fAXTz29VKWoC7Xnsw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OTU3YzdlMjZhM2ZlNTJmMjdmZmJiYzQwZTg0Mjc2NDAx
NmIxMzEwHhcNMjUwNDI3MTYwMTI2WhcNMjUwNDI4MTYwMTI2WjAzMTEwLwYDVQQD
EygyYmRkMjc2ZjFmODA5MjhjZWZmNTM5YzU4OWE5NjMyNDNiMmVmMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6BbLXdlbUbFDY3Gpl0c8L/JTfP
wWWiffTfy4KHFXvmDsjd21K4V85CcUO4+rCYlYqHgZjsZ4DA6f+/+9sNCmG6sNWC
8povygvA54BWayUfYUHSvDeMclccBPlHSRJWS4j42pBLrMFvLdEWzjm3i39f5QK/
SpzmzGYo61nPZZ6J3LNIIfmTx+1ZBZcZCZWyv3Yxs4bj5S30S1oJuO/Qx7Z1rj5K
p4WpjNTELsAe1t9T9bZqTZ4FsXCQSNwK3yLQUpaJ/VfVzKTvySb6/1tf6DXt4uDl
hIQXFFmSGvkcUAv1wltsG3wE2PCHA9TrsyYTz9gw1YcNHSLN88E8FdlS1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvdJ28fgJKM7/U5xYmpYyQ7LvLBMB8GA1UdIwQY
MBaAFESVfH4mo/5S8n/7vEDoQnZAFrExMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkpWOGZpYWpfbEx5Zl91OFFPaENka0FXc1RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hNzc1MDItNWNlNS00ODA5LTkwZmMt
YTE2NjUwM2IzMjYyLzEvUkpWOGZpYWpfbEx5Zl91OFFPaENka0FXc1RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hNzc1MDItNWNlNS00ODA5LTkwZmMtYTE2NjUwM2IzMjYy
LzEvUkpWOGZpYWpfbEx5Zl91OFFPaENka0FXc1RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSyccSuc
Xck28a6m08N6MUxD3oZ+VG4AEvqMO7unhV1/KsIFJ6+2cTCVUt0oYks0/aMdV3AF
gChfe+PJ3NqDC8oUjlc64PlWvs8tIiTdCkLTupNNRvBC3ka1U5Wp7qb0gJVd/ebz
scoBn+G8KpHVlqHeNSaapqaYwbKKBfJMDry6PrTsaM4nU2yp5y0yinNkO4iHSueI
C2oUJH6P9oHivmn8ATpsJ6YKIVVCD+StgMhh7VcbCI071gQaUOCs4lHwaajlWkZk
rsVWILIZPNVdZgWqutTwb6GJTy61F+9scZjp1QGdJH7+uHUEMzZZ9aEf3jZRj45c
JCV1UtOEMAlL2Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:11:56 2025 by rpki-client