Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File: CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier: bG3Tr56WOnX8qdJqEFuOsvGZa3GHBfIcoq/Q7An6HiA=
Subject key identifier: E5:C1:71:C2:E1:5D:28:B8:5E:B8:20:98:9C:8A:39:13:26:B9:55:E6
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer: /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial: 0196586F82C198783A56111B387A56359EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number: 107F
Signing time: Mon 21 Apr 2025 13:00:24 +0000
Manifest this update: Mon 21 Apr 2025 13:00:24 +0000
Manifest next update: Tue 22 Apr 2025 13:00:24 +0000
Files and hashes: 1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: PxGCH+UejtBDr8FjG+bPmyHnKqqQeRU0fovgMNJaOzE=)
2: wkXSNgmrYa8rCdcuzp6T9kjqo9c.roa (hash: PKA5n5GL19/MWS8CZc9zMrpSRD9clDPEtJzbH91PkU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:82:c1:98:78:3a:56:11:1b:38:7a:56:35:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
Validity
Not Before: Apr 21 13:00:24 2025 GMT
Not After : Apr 22 13:00:24 2025 GMT
Subject: CN=e5c171c2e15d28b85eb820989c8a391326b955e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:35:06:8b:04:12:e4:d1:5c:94:cb:db:6c:
8e:65:91:fc:bd:51:4f:3a:96:38:03:0e:f1:7e:1f:
99:2c:b0:13:35:ce:f9:76:fb:14:f1:7a:d0:1e:b5:
6c:6b:7e:be:cf:7d:22:01:98:19:6a:db:77:44:fd:
f5:c9:37:c6:13:2a:72:4f:f1:a7:4b:bc:73:3e:75:
62:91:ec:fc:17:f5:43:2d:e6:6f:76:2a:c2:a7:56:
4c:e2:87:aa:1f:cf:10:10:45:30:59:15:6c:33:0c:
5a:ce:4f:c8:85:d7:01:09:47:a8:20:0e:1e:ed:94:
d3:b2:f4:7b:2d:1b:1e:a9:a7:b6:fc:88:6e:1a:2b:
4b:76:ab:84:40:65:96:a6:f1:65:bd:25:4e:31:24:
12:53:45:dd:81:a4:39:c8:71:c2:7d:27:59:8f:a4:
b0:a9:95:3e:ae:67:b9:f5:eb:3b:dc:65:31:18:ad:
0f:a4:9b:b8:5d:bc:e6:0e:8d:81:ce:8f:ed:ac:74:
17:3a:34:ca:9f:5b:b5:9c:75:7f:0d:22:e4:6d:19:
37:42:ae:ef:55:45:23:8a:db:43:3b:65:c7:b5:98:
b1:a0:3a:9e:f2:36:e8:97:00:20:a3:95:ac:d2:fb:
c4:a5:19:e9:00:d5:96:3d:87:dc:5e:15:19:59:04:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C1:71:C2:E1:5D:28:B8:5E:B8:20:98:9C:8A:39:13:26:B9:55:E6
X509v3 Authority Key Identifier:
keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:9a:61:25:89:c1:fe:cf:ff:7b:2c:95:e7:bf:47:54:4c:
75:25:ec:70:ba:47:77:16:01:19:8b:58:39:d4:73:c5:2a:99:
33:73:d8:d9:5d:90:4d:b6:a5:10:64:d2:68:00:19:b6:f2:6d:
ca:3b:30:b8:b2:d0:5d:15:74:d4:37:05:07:13:4f:6a:d9:80:
60:f0:35:98:40:2b:d8:f3:93:71:06:f6:e7:b9:52:e8:0f:30:
30:db:03:a1:dd:c1:c5:44:ab:d2:f8:8b:26:0a:ac:d8:30:db:
40:29:ab:d1:12:4e:f7:ae:d7:17:38:3c:35:b0:5a:cf:52:14:
2f:aa:60:9d:ee:82:65:5c:95:c0:79:58:15:72:4b:5e:55:e2:
63:ba:cf:46:ba:b9:1c:30:3e:52:1e:34:b0:9b:97:77:ce:ac:
96:f4:71:ce:38:5c:0c:d5:9c:ff:52:02:24:e1:03:c6:11:d0:
e4:6e:13:15:7c:4d:71:5c:32:00:6d:19:86:28:0a:53:fd:e1:
f0:97:ff:41:2c:62:89:44:a2:a9:81:ad:c3:a4:26:a2:6b:fa:
37:fe:69:81:4a:51:48:f6:f7:36:fd:d1:f7:6a:78:c2:1b:20:
87:cb:8b:09:20:5e:f8:f1:01:2f:4a:30:d0:12:8e:1b:ca:16:
40:32:eb:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb4LBmHg6VhEbOHpWNZ7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMjIwZGE5YjZlMjk1ODU1YjYyN2ZlYTYxMGUxY2I2MTY0
Njg5NGIwHhcNMjUwNDIxMTMwMDI0WhcNMjUwNDIyMTMwMDI0WjAzMTEwLwYDVQQD
EyhlNWMxNzFjMmUxNWQyOGI4NWViODIwOTg5YzhhMzkxMzI2Yjk1NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAs1BosEEuTRXJTL22yOZZH8vVFP
OpY4Aw7xfh+ZLLATNc75dvsU8XrQHrVsa36+z30iAZgZatt3RP31yTfGEypyT/Gn
S7xzPnVikez8F/VDLeZvdirCp1ZM4oeqH88QEEUwWRVsMwxazk/IhdcBCUeoIA4e
7ZTTsvR7LRseqae2/IhuGitLdquEQGWWpvFlvSVOMSQSU0XdgaQ5yHHCfSdZj6Sw
qZU+rme59es73GUxGK0PpJu4XbzmDo2Bzo/trHQXOjTKn1u1nHV/DSLkbRk3Qq7v
VUUjittDO2XHtZixoDqe8jbolwAgo5Ws0vvEpRnpANWWPYfcXhUZWQRN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXBccLhXSi4XrggmJyKORMmuVXmMB8GA1UdIwQY
MBaAFAoiDam24pWFW2J/6mEOHLYWRolLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEt
NjIxODgyOGVkODk2LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS85ODE4MzktOWRmYS00MmQzLWFjYjEtNjIxODgyOGVkODk2
LzEvQ2lJTnFiYmlsWVZiWW5fcVlRNGN0aFpHaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACI+aYSWJ
wf7P/3sslee/R1RMdSXscLpHdxYBGYtYOdRzxSqZM3PY2V2QTbalEGTSaAAZtvJt
yjswuLLQXRV01DcFBxNPatmAYPA1mEAr2POTcQb257lS6A8wMNsDod3BxUSr0viL
Jgqs2DDbQCmr0RJO967XFzg8NbBaz1IUL6pgne6CZVyVwHlYFXJLXlXiY7rPRrq5
HDA+Uh40sJuXd86slvRxzjhcDNWc/1ICJOEDxhHQ5G4TFXxNcVwyAG0ZhigKU/3h
8Jf/QSxiiUSiqYGtw6Qmomv6N/5pgUpRSPb3Nv3R92p4whsgh8uLCSBe+PEBL0ow
0BKOG8oWQDLrdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:21:22 2025 by rpki-client