Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: W+y+Vdn7EKqnN4ADohPrWbZCWA2Y4mHw0LyUDPuJiVQ=
Subject key identifier: 61:26:0C:44:D1:45:D4:FE:34:57:5E:A0:68:CC:F0:36:CE:42:2A:EF
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019677FA91DBA7A3AD84714379ACAE8784C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 16:00:32 +0000
Manifest this update: Sun 27 Apr 2025 16:00:32 +0000
Manifest next update: Mon 28 Apr 2025 16:00:32 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: 0l/9bp7Ax96AWElZ1873MgnyXPL3A4bKQm9CR0cAkmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fa:91:db:a7:a3:ad:84:71:43:79:ac:ae:87:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Apr 27 16:00:32 2025 GMT
Not After : Apr 28 16:00:32 2025 GMT
Subject: CN=61260c44d145d4fe34575ea068ccf036ce422aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:77:07:ac:d8:34:6a:05:01:aa:f9:aa:97:
c8:06:49:10:50:9b:b1:8c:4f:68:73:86:4e:3d:58:
17:e4:ac:88:ee:ba:c3:fe:d4:56:b0:e0:ae:be:f5:
94:0b:e2:c4:49:51:2a:4a:f3:33:11:c3:55:dd:7c:
0b:8d:f0:88:41:8e:63:42:ef:c9:08:32:dc:11:72:
d4:47:09:10:94:f9:f2:ba:d7:eb:8a:54:5c:05:39:
40:27:76:8e:07:f6:80:85:c0:d6:e7:c2:65:ff:b7:
a1:e6:ec:11:f7:13:4b:e5:93:50:ac:43:72:43:93:
3e:0f:f3:7d:53:5f:8d:4b:66:ae:ab:4e:ab:d9:ee:
38:8c:84:5e:d3:f6:3b:bd:c3:96:28:7c:09:f6:85:
75:b1:39:91:50:8c:41:ae:f9:0b:2e:44:a4:7a:42:
4d:ea:6b:94:d8:b6:03:55:d3:5c:28:d3:40:ed:f5:
c2:c2:fe:77:7d:40:7f:da:14:cd:3c:4e:97:95:47:
5d:b1:c7:76:28:77:99:fd:35:ed:df:03:57:4a:e6:
ac:e9:3b:ac:a2:c8:ba:49:67:f8:55:39:1a:f1:46:
7f:95:06:cb:5c:4f:ba:5d:ba:45:d3:35:78:25:a5:
39:f7:4d:6a:09:10:9c:3e:99:d6:c8:35:f4:f6:ff:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:26:0C:44:D1:45:D4:FE:34:57:5E:A0:68:CC:F0:36:CE:42:2A:EF
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:71:b2:a4:66:ac:7f:af:f8:5f:cb:7b:64:0f:77:3a:be:
75:77:66:07:78:a8:5d:86:d0:cd:b6:09:df:c8:b5:e8:22:3c:
89:9b:5c:e1:6f:aa:ec:e6:df:2b:51:0e:50:44:6f:ea:4f:61:
59:0c:98:c5:45:72:e2:af:68:5a:3c:09:aa:7b:6c:a8:e1:dc:
bb:e1:96:4f:4a:c9:65:15:e5:a7:e6:54:e1:cd:ab:e0:44:28:
87:f4:1f:09:41:90:cc:30:dd:65:89:ed:6f:35:e0:c9:0f:2d:
4c:1a:dc:c9:12:90:ad:73:14:02:79:a5:e6:7e:74:5c:9d:23:
e2:34:8b:ba:b8:5f:af:e3:5c:8d:19:21:5f:fa:be:9f:6a:6c:
66:a0:b4:ad:1c:6c:dc:23:ce:c5:94:20:bf:a3:be:0e:a0:6b:
b4:04:1c:17:6d:72:87:2b:b1:52:b0:df:95:92:ed:ed:99:26:
4b:a7:13:70:54:65:28:6d:d2:f4:1e:de:8c:45:3d:0e:87:b2:
f3:a4:03:f0:2a:26:67:74:b5:7c:7b:d0:30:f2:17:bb:78:93:
d2:01:75:fb:75:7d:a4:6b:11:f3:d5:6f:7e:4d:99:bf:ca:f3:
db:4f:1c:5e:cf:9b:67:1d:d2:c0:55:86:b0:aa:81:f5:63:10:
57:38:74:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+pHbp6OthHFDeayuh4TFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODRhOWRiZTYzMTBkN2JmYWU4MzhiYTIyZmEwNDcxMjZi
NTU0NTgwHhcNMjUwNDI3MTYwMDMyWhcNMjUwNDI4MTYwMDMyWjAzMTEwLwYDVQQD
Eyg2MTI2MGM0NGQxNDVkNGZlMzQ1NzVlYTA2OGNjZjAzNmNlNDIyYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jd3B6zYNGoFAar5qpfIBkkQUJux
jE9oc4ZOPVgX5KyI7rrD/tRWsOCuvvWUC+LESVEqSvMzEcNV3XwLjfCIQY5jQu/J
CDLcEXLURwkQlPnyutfrilRcBTlAJ3aOB/aAhcDW58Jl/7eh5uwR9xNL5ZNQrENy
Q5M+D/N9U1+NS2auq06r2e44jIRe0/Y7vcOWKHwJ9oV1sTmRUIxBrvkLLkSkekJN
6muU2LYDVdNcKNNA7fXCwv53fUB/2hTNPE6XlUddscd2KHeZ/TXt3wNXSuas6Tus
osi6SWf4VTka8UZ/lQbLXE+6XbpF0zV4JaU5901qCRCcPpnWyDX09v95VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEmDETRRdT+NFdeoGjM8DbOQirvMB8GA1UdIwQY
MBaAFAuEqdvmMQ17+ug4uiL6BHEmtVRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTkt
YTg1ZGRlMjE0NWVhLzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNzYzM2YtMjQxNy00ZTAzLTk0YTktYTg1ZGRlMjE0NWVh
LzEvQzRTcDItWXhEWHY2NkRpNkl2b0VjU2ExVkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAJxsqRm
rH+v+F/Le2QPdzq+dXdmB3ioXYbQzbYJ38i16CI8iZtc4W+q7ObfK1EOUERv6k9h
WQyYxUVy4q9oWjwJqntsqOHcu+GWT0rJZRXlp+ZU4c2r4EQoh/QfCUGQzDDdZYnt
bzXgyQ8tTBrcyRKQrXMUAnml5n50XJ0j4jSLurhfr+NcjRkhX/q+n2psZqC0rRxs
3CPOxZQgv6O+DqBrtAQcF21yhyuxUrDflZLt7ZkmS6cTcFRlKG3S9B7ejEU9Doey
86QD8ComZ3S1fHvQMPIXu3iT0gF1+3V9pGsR89Vvfk2Zv8rz208cXs+bZx3SwFWG
sKqB9WMQVzh0Ig==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:03 2025 by rpki-client