Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File: 31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier: FapQcOsPQXjroOOZqf+0oXK+2zAB+8ppadvavR+ydrU=
Subject key identifier: 42:59:AA:71:47:D6:AF:F8:B2:E6:16:BE:C2:24:0F:04:26:15:32:BD
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer: /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial: 01968322BD5BBD67447DDC625C61F06E39D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 20:00:14 +0000
Manifest this update: Tue 29 Apr 2025 20:00:14 +0000
Manifest next update: Wed 30 Apr 2025 20:00:14 +0000
Files and hashes: 1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: dA7UBGfE/SZLBn6PIsmG+Ir5Mp+UgoDMPMGzIKuKXiI=)
2: Cre1atzMDwt4GowPQslT1BJNz70.roa (hash: AgobKkjGt4zwBE8+8mA/MF95V2kw1GXZGBf2IpysMAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:bd:5b:bd:67:44:7d:dc:62:5c:61:f0:6e:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
Validity
Not Before: Apr 29 20:00:14 2025 GMT
Not After : Apr 30 20:00:14 2025 GMT
Subject: CN=4259aa7147d6aff8b2e616bec2240f04261532bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:bd:41:1b:d5:45:d5:58:1c:d3:6b:2e:d1:
5f:d1:26:06:fb:fa:6b:ed:25:af:f7:bb:5c:1e:16:
f4:55:af:53:82:db:3e:df:68:32:30:5c:e8:a7:27:
6f:06:09:d2:1f:0e:83:3a:55:a9:5d:13:41:5b:5f:
72:81:b3:ca:7e:8f:bc:30:f8:4c:ed:69:28:7b:4d:
18:68:3a:16:97:5f:6a:1c:75:9d:1c:33:34:b9:de:
44:3f:f1:a0:cd:62:95:70:6a:45:f6:13:e9:eb:6e:
9b:c1:11:a1:be:74:3f:7d:95:91:03:b7:49:f9:16:
9f:ea:0b:60:da:c0:00:d9:4e:86:36:6c:f0:f5:6c:
e5:5c:bc:4c:5c:f9:09:51:50:06:7b:6a:26:fd:95:
0b:80:c9:91:f3:24:d2:db:a9:60:d6:6d:93:a6:6b:
5b:f1:80:b4:2f:49:03:90:d7:b2:89:b5:5a:3c:64:
58:73:be:cf:4d:4d:5a:5b:85:0a:bf:97:38:3e:4f:
09:a9:85:83:88:7c:98:41:30:e6:1b:53:52:13:1e:
c9:1f:82:a8:c1:b1:b5:ae:73:72:2c:c9:6e:a2:3b:
6e:7f:9e:f7:f5:de:f5:5e:6d:ca:41:b3:a5:f3:bd:
c3:c0:6c:99:31:f8:1d:d5:c4:01:6f:4d:13:ba:2c:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:59:AA:71:47:D6:AF:F8:B2:E6:16:BE:C2:24:0F:04:26:15:32:BD
X509v3 Authority Key Identifier:
keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:81:28:bd:a9:bb:36:03:a0:4d:c1:2f:87:97:54:e1:49:9c:
1e:e9:44:15:ea:41:a7:ea:91:d1:87:49:b2:e5:c6:cb:e5:a6:
b7:5e:2d:cc:7b:11:90:a5:7e:8c:03:38:a6:81:46:57:a3:37:
8a:f6:a2:67:b9:5e:6a:09:6c:ae:bb:3d:df:ed:56:fe:de:e3:
83:d7:db:1e:4d:25:69:47:23:74:62:3a:80:21:7a:b6:e2:fb:
06:6c:0d:ab:27:a4:61:c8:46:d0:d9:f8:ad:fa:7b:69:ae:9b:
ac:54:11:c9:37:bd:52:24:52:91:9d:0e:3e:c6:6e:95:5c:97:
e7:79:b4:e9:2c:c4:71:dc:95:29:e3:f7:83:2e:15:be:0e:3d:
b2:cf:2b:e1:d8:bc:1e:4d:8d:4f:b8:9d:53:46:d8:5c:8d:47:
13:1c:2c:a5:71:09:8c:3d:2d:68:bd:f9:f9:f9:89:e6:1f:bb:
0a:3b:f6:51:de:59:d1:fa:f6:ac:60:64:56:fc:45:4a:9c:18:
d2:1a:ae:5d:d6:a6:f5:23:f7:b2:a4:12:ff:58:40:0f:fe:cb:
3d:4b:21:e8:4b:9c:58:4e:24:82:81:d0:24:49:b9:e2:65:7b:
7d:48:c7:3c:20:bf:b5:e8:c5:3d:d2:2e:66:8c:cd:3a:f7:0d:
9b:8a:1c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIr1bvWdEfdxiXGHwbjnUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTEyMDEwNjExZjkxYjE2Mjk2NzI4YTk0ZDFhNjY1YjRh
Yjc1NzAwHhcNMjUwNDI5MjAwMDE0WhcNMjUwNDMwMjAwMDE0WjAzMTEwLwYDVQQD
Eyg0MjU5YWE3MTQ3ZDZhZmY4YjJlNjE2YmVjMjI0MGYwNDI2MTUzMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJy9QRvVRdVYHNNrLtFf0SYG+/pr
7SWv97tcHhb0Va9Tgts+32gyMFzopydvBgnSHw6DOlWpXRNBW19ygbPKfo+8MPhM
7Wkoe00YaDoWl19qHHWdHDM0ud5EP/GgzWKVcGpF9hPp626bwRGhvnQ/fZWRA7dJ
+Raf6gtg2sAA2U6GNmzw9WzlXLxMXPkJUVAGe2om/ZULgMmR8yTS26lg1m2Tpmtb
8YC0L0kDkNeyibVaPGRYc77PTU1aW4UKv5c4Pk8JqYWDiHyYQTDmG1NSEx7JH4Ko
wbG1rnNyLMluojtuf5739d71Xm3KQbOl873DwGyZMfgd1cQBb00TuiwH0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJZqnFH1q/4suYWvsIkDwQmFTK9MB8GA1UdIwQY
MBaAFN9RIBBhH5GxYpZyipTRpmW0q3VwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWIt
YjA2MmU5NzI1YjFkLzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81MGY3ZTEtNmNiYy00ZjVhLWIyZWItYjA2MmU5NzI1YjFk
LzEvMzFFZ0VHRWZrYkZpbG5LS2xOR21aYlNyZFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYEovam7
NgOgTcEvh5dU4UmcHulEFepBp+qR0YdJsuXGy+Wmt14tzHsRkKV+jAM4poFGV6M3
ivaiZ7leaglsrrs93+1W/t7jg9fbHk0laUcjdGI6gCF6tuL7BmwNqyekYchG0Nn4
rfp7aa6brFQRyTe9UiRSkZ0OPsZulVyX53m06SzEcdyVKeP3gy4Vvg49ss8r4di8
Hk2NT7idU0bYXI1HExwspXEJjD0taL35+fmJ5h+7Cjv2Ud5Z0fr2rGBkVvxFSpwY
0hquXdam9SP3sqQS/1hAD/7LPUsh6EucWE4kgoHQJEm54mV7fUjHPCC/tejFPdIu
ZozNOvcNm4ocGQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:47:14 2025 by rpki-client