Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: EEmIE8+1kkswyflDcefvqnWoR0Lytt8f0ZYeYf6BHVc=
Subject key identifier: 04:6C:B2:05:A5:E2:86:47:41:27:6C:1D:96:90:32:0F:80:95:1A:75
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01967A1F90239F854FADA3204EE0B95C5676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0D38
Signing time: Mon 28 Apr 2025 02:00:10 +0000
Manifest this update: Mon 28 Apr 2025 02:00:10 +0000
Manifest next update: Tue 29 Apr 2025 02:00:10 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: bsZL6WLbh4eU+1vtrmx9bVhR1HRwithYUypgbnQP/Cs=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:90:23:9f:85:4f:ad:a3:20:4e:e0:b9:5c:56:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Apr 28 02:00:10 2025 GMT
Not After : Apr 29 02:00:10 2025 GMT
Subject: CN=046cb205a5e2864741276c1d9690320f80951a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:5b:6f:15:16:4c:68:04:08:ae:b5:48:9d:
6e:65:d3:15:93:ec:80:6f:a7:cf:10:3f:2b:38:b7:
f2:85:7e:22:ea:8a:ab:1a:4a:f1:96:8c:e3:74:2c:
68:e4:88:9f:60:2f:70:65:13:f1:0c:01:8e:a6:08:
39:77:65:2c:c0:3d:bb:ad:4d:ce:b1:0f:1a:21:89:
4c:60:fa:83:03:6f:23:20:da:f8:b3:6d:87:40:10:
a9:69:ba:d5:46:ea:ab:04:64:6d:a9:15:7f:95:78:
f5:9a:1e:d4:16:d7:f7:51:e8:8d:52:f8:0a:0e:78:
93:97:60:13:18:dc:7c:bd:b8:45:da:cb:e8:ca:35:
9b:75:be:e9:ca:0f:97:83:87:4f:f9:b8:b2:7c:10:
90:9b:30:3e:56:a4:15:b1:18:d4:77:c9:54:a6:91:
01:ce:44:78:05:c8:76:a9:26:7a:34:b1:23:37:28:
55:d2:b2:3b:7c:f5:ca:de:ce:4b:70:9e:b7:97:31:
7b:11:21:e8:3e:59:73:9f:cf:25:f4:84:ef:66:f0:
e5:03:81:bb:85:b3:d3:9e:78:d6:e7:26:e9:89:f3:
3a:a5:35:cd:be:21:26:da:88:76:91:12:8a:18:dc:
3c:1b:ea:82:57:7b:6c:45:50:53:66:37:68:49:78:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:B2:05:A5:E2:86:47:41:27:6C:1D:96:90:32:0F:80:95:1A:75
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:27:25:83:23:41:c9:67:82:8d:f1:63:c1:3c:31:3d:1d:e7:
94:fb:17:3a:15:9d:f4:34:1f:7e:f2:0e:91:46:3c:06:c6:e6:
e8:68:d5:0f:6b:bb:cc:8a:52:29:3c:8d:e3:67:fb:37:99:41:
62:a9:f2:f5:2d:2a:03:16:25:5d:40:fb:f1:90:3a:a6:d6:09:
e0:af:99:d3:07:f1:f1:6d:10:64:cb:a0:88:c1:cc:dc:f2:53:
4b:d7:90:27:d6:c2:b5:81:ec:44:92:d5:6c:27:aa:2d:fb:20:
19:3e:a8:5f:1d:da:83:20:f9:ab:40:0c:b2:69:16:da:49:fe:
72:18:00:f3:c5:f3:42:9b:78:18:a2:b6:51:2b:3a:c0:54:32:
54:2e:41:ad:6b:50:fe:95:f6:92:d2:87:37:bd:00:02:b9:21:
2e:d8:c0:18:a8:6a:08:1e:c7:00:54:fa:48:c3:70:c8:ac:1b:
2f:35:cb:fc:a1:b6:53:71:10:66:d9:ba:a7:21:9f:c3:20:48:
8b:2b:86:50:cd:8e:27:c3:9d:2a:da:7f:2e:1a:bf:b9:e7:48:
f3:c2:b3:05:35:c5:4a:ca:52:88:b5:2e:26:f7:b4:4f:97:aa:
48:26:6d:66:70:c7:d8:70:83:7a:c9:7b:af:07:ed:05:04:16:
8e:34:a6:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H5Ajn4VPraMgTuC5XFZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjUwNDI4MDIwMDEwWhcNMjUwNDI5MDIwMDEwWjAzMTEwLwYDVQQD
EygwNDZjYjIwNWE1ZTI4NjQ3NDEyNzZjMWQ5NjkwMzIwZjgwOTUxYTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhpbbxUWTGgECK61SJ1uZdMVk+yA
b6fPED8rOLfyhX4i6oqrGkrxlozjdCxo5IifYC9wZRPxDAGOpgg5d2UswD27rU3O
sQ8aIYlMYPqDA28jINr4s22HQBCpabrVRuqrBGRtqRV/lXj1mh7UFtf3UeiNUvgK
DniTl2ATGNx8vbhF2svoyjWbdb7pyg+Xg4dP+biyfBCQmzA+VqQVsRjUd8lUppEB
zkR4Bch2qSZ6NLEjNyhV0rI7fPXK3s5LcJ63lzF7ESHoPllzn88l9ITvZvDlA4G7
hbPTnnjW5ybpifM6pTXNviEm2oh2kRKKGNw8G+qCV3tsRVBTZjdoSXiDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARssgWl4oZHQSdsHZaQMg+AlRp1MB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSclgyNB
yWeCjfFjwTwxPR3nlPsXOhWd9DQffvIOkUY8Bsbm6GjVD2u7zIpSKTyN42f7N5lB
Yqny9S0qAxYlXUD78ZA6ptYJ4K+Z0wfx8W0QZMugiMHM3PJTS9eQJ9bCtYHsRJLV
bCeqLfsgGT6oXx3agyD5q0AMsmkW2kn+chgA88XzQpt4GKK2USs6wFQyVC5BrWtQ
/pX2ktKHN70AArkhLtjAGKhqCB7HAFT6SMNwyKwbLzXL/KG2U3EQZtm6pyGfwyBI
iyuGUM2OJ8OdKtp/Lhq/uedI88KzBTXFSspSiLUuJve0T5eqSCZtZnDH2HCDesl7
rwftBQQWjjSm4w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 10:17:46 2025 by rpki-client