Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier: fRHg+IDeHXB8j8zHKKUEV+UejYCBnaVbkMDH33KtVls=
Subject key identifier: 02:A2:9A:C7:0A:69:59:A5:A4:7F:1B:5D:A8:68:04:C6:2E:14:C5:6D
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial: 019657CB63B3F75CDC99FB3C6E35FFDB50C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 10:01:09 +0000
Manifest this update: Mon 21 Apr 2025 10:01:09 +0000
Manifest next update: Tue 22 Apr 2025 10:01:09 +0000
Files and hashes: 1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: dn1omJb+Ecj4czWdDMIFBJNFfILHK3s5Aw7jVdifDdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:63:b3:f7:5c:dc:99:fb:3c:6e:35:ff:db:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Validity
Not Before: Apr 21 10:01:09 2025 GMT
Not After : Apr 22 10:01:09 2025 GMT
Subject: CN=02a29ac70a6959a5a47f1b5da86804c62e14c56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:ce:e6:b6:8f:be:31:84:2e:96:72:7a:f6:
0a:a6:0e:7e:ee:3b:f2:7a:1d:74:ef:cf:f9:32:75:
46:df:dd:d7:9f:f2:d1:92:76:ac:42:fa:5c:18:58:
73:70:38:82:b6:fd:6a:dc:2e:16:ef:f1:de:c8:4a:
79:ce:ee:78:90:71:79:2f:fe:0a:41:37:31:3a:ac:
99:02:00:a0:f5:f6:96:e0:bb:6e:6b:bd:72:3f:d5:
32:8f:e8:0d:08:1f:c0:d2:27:49:1d:1c:88:8a:32:
27:8b:de:a6:09:42:1b:f8:8f:b1:c8:9c:3a:72:88:
9a:70:0c:a9:d7:05:31:2d:83:9c:6c:7c:c8:47:a5:
6f:ef:72:19:93:09:cc:8c:37:2b:58:24:ea:6a:2a:
32:66:2b:8a:24:ae:4f:46:2f:7e:64:a0:47:40:55:
f0:c7:b8:62:63:a0:dc:01:54:9e:6a:23:4a:41:59:
8a:8f:dd:18:ad:86:1c:bf:2c:59:df:bc:fd:58:14:
97:da:a3:2e:3e:93:46:45:92:ce:e9:dd:56:4e:6d:
9d:49:9b:38:58:04:f8:49:8f:2c:8d:22:bd:b7:e6:
55:30:ff:55:92:2d:f6:5e:a6:eb:84:e5:33:11:96:
ff:67:a1:53:b0:91:00:81:63:f7:6e:c3:4e:30:da:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:9A:C7:0A:69:59:A5:A4:7F:1B:5D:A8:68:04:C6:2E:14:C5:6D
X509v3 Authority Key Identifier:
keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7b:1f:55:b6:ab:c4:39:a8:3a:62:49:60:f2:0a:9f:1b:72:
97:e9:fe:59:82:5b:58:73:cb:cf:a5:d6:5f:52:af:aa:71:41:
bd:0e:a4:70:5f:56:86:f0:88:dd:52:4f:91:c8:e0:a7:60:d6:
5a:52:98:51:d1:81:49:23:1e:53:96:fc:07:9d:c1:a3:1c:da:
05:e9:70:22:fb:10:56:34:73:08:54:72:81:21:6e:08:cc:f3:
10:85:8a:86:8c:eb:95:95:cd:b1:a0:59:71:60:15:27:36:4d:
7c:cf:0f:f7:66:18:e9:41:56:d1:2b:d4:8d:4a:29:58:70:7e:
6e:ab:68:d5:02:4e:07:19:cf:86:4d:b4:a0:56:b1:46:0a:48:
80:af:54:f7:1b:26:d5:e7:af:f1:fc:ae:53:b7:99:28:75:96:
6a:e3:96:d9:57:dd:e8:f6:e2:3e:af:a6:de:c9:49:7c:f0:1f:
88:9e:c7:40:e5:b9:44:43:82:d6:a2:a3:ca:5e:bd:a2:5e:f0:
4a:81:88:5a:29:65:ff:31:0e:ae:ff:0f:2d:ab:fa:57:30:98:
60:b7:a8:0f:bc:34:9b:78:3c:16:12:9d:b5:b0:80:26:6a:8a:
82:e3:6e:d8:b0:e0:25:e2:38:72:15:15:a0:2e:32:ff:d7:d1:
d2:34:c9:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXy2Oz91zcmfs8bjX/21DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDNmZDAzYTVmMzRkOGQ1NmU5OTRjMmI3ZjEwY2E0OWEw
ZTAxNTQwHhcNMjUwNDIxMTAwMTA5WhcNMjUwNDIyMTAwMTA5WjAzMTEwLwYDVQQD
EygwMmEyOWFjNzBhNjk1OWE1YTQ3ZjFiNWRhODY4MDRjNjJlMTRjNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveDO5raPvjGELpZyevYKpg5+7jvy
eh1078/5MnVG393Xn/LRknasQvpcGFhzcDiCtv1q3C4W7/HeyEp5zu54kHF5L/4K
QTcxOqyZAgCg9faW4Ltua71yP9Uyj+gNCB/A0idJHRyIijIni96mCUIb+I+xyJw6
coiacAyp1wUxLYOcbHzIR6Vv73IZkwnMjDcrWCTqaioyZiuKJK5PRi9+ZKBHQFXw
x7hiY6DcAVSeaiNKQVmKj90YrYYcvyxZ37z9WBSX2qMuPpNGRZLO6d1WTm2dSZs4
WAT4SY8sjSK9t+ZVMP9Vki32XqbrhOUzEZb/Z6FTsJEAgWP3bsNOMNpIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKimscKaVmlpH8bXahoBMYuFMVtMB8GA1UdIwQY
MBaAFHcD/QOl802NVumUwrfxDKSaDgFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTIt
YWM2NzgxZTIzZTg3LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTItYWM2NzgxZTIzZTg3
LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHsfVbar
xDmoOmJJYPIKnxtyl+n+WYJbWHPLz6XWX1KvqnFBvQ6kcF9WhvCI3VJPkcjgp2DW
WlKYUdGBSSMeU5b8B53BoxzaBelwIvsQVjRzCFRygSFuCMzzEIWKhozrlZXNsaBZ
cWAVJzZNfM8P92YY6UFW0SvUjUopWHB+bqto1QJOBxnPhk20oFaxRgpIgK9U9xsm
1eev8fyuU7eZKHWWauOW2Vfd6PbiPq+m3slJfPAfiJ7HQOW5REOC1qKjyl69ol7w
SoGIWill/zEOrv8PLav6VzCYYLeoD7w0m3g8FhKdtbCAJmqKguNu2LDgJeI4chUV
oC4y/9fR0jTJDg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:04 2025 by rpki-client