Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
File: IbgvyO2I-ZyrV9doAxdusnqfC_o.mft (raw, json)
Hash identifier: +rBNpuSSUHynVzrl1QLHuXRROc1En1mdbQYwTnfE8T4=
Subject key identifier: 77:15:30:3F:91:8C:83:77:A4:1C:58:30:1F:14:38:40:E6:B5:D0:5D
Authority key identifier: 21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
Certificate issuer: /CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Certificate serial: 01964D47456306A737C9D3D0F33A69B01937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
Manifest number: 0C86
Signing time: Sat 19 Apr 2025 09:00:38 +0000
Manifest this update: Sat 19 Apr 2025 09:00:38 +0000
Manifest next update: Sun 20 Apr 2025 09:00:38 +0000
Files and hashes: 1: IbgvyO2I-ZyrV9doAxdusnqfC_o.crl (hash: r/4+N5+9em2Wc5nidInwRJFENGZ+7UilSOxdmf0c4ZA=)
2: ItUhScrgPwKkKUyhqEMMP6UQG5o.roa (hash: gmpeHaOEVGgSYmwc/n6Xey1Y6I6lJR2qqLtWqmrTzmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:45:63:06:a7:37:c9:d3:d0:f3:3a:69:b0:19:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21b82fc8ed88f99cab57d76803176eb27a9f0bfa
Validity
Not Before: Apr 19 09:00:38 2025 GMT
Not After : Apr 20 09:00:38 2025 GMT
Subject: CN=7715303f918c8377a41c58301f143840e6b5d05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:51:e2:63:77:57:37:8d:00:fb:21:9c:cb:
dc:78:b9:db:cd:f2:87:7b:2d:96:92:bb:ef:da:83:
46:1f:77:25:2e:41:f0:92:8d:7f:0a:26:c1:c2:f8:
76:e8:35:5a:00:d5:59:21:34:ee:c7:c4:97:46:a3:
eb:39:57:67:63:67:ad:a8:e1:c1:8b:76:da:88:84:
d3:a9:85:3c:20:58:e3:ce:44:78:4a:79:9a:27:f0:
0a:df:5c:55:c3:02:45:8f:e5:17:7b:06:97:85:5e:
46:5a:4c:9a:df:72:b1:80:af:68:fd:18:bf:6c:3d:
7f:44:80:2b:b1:eb:2f:8b:3f:6b:d5:ba:e8:1c:76:
ae:a8:19:64:ea:ba:07:fe:24:8a:53:37:88:6a:10:
16:1b:40:31:21:f4:5c:bd:c6:f6:42:5b:43:dc:65:
bd:1a:7c:b6:3a:41:77:f5:93:34:da:f5:81:25:65:
e0:66:f0:87:b2:80:f9:4a:cf:0c:90:45:f9:5f:b8:
d7:25:12:29:66:76:af:0d:8d:64:18:30:3c:5e:e9:
cc:c2:44:e7:5f:98:69:64:a4:b8:19:26:8e:7b:af:
04:de:ec:24:40:2a:e4:40:57:3c:9e:57:bd:9c:c9:
db:fb:5b:73:d4:f2:8a:2f:02:57:d2:ca:a5:de:82:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:30:3F:91:8C:83:77:A4:1C:58:30:1F:14:38:40:E6:B5:D0:5D
X509v3 Authority Key Identifier:
keyid:21:B8:2F:C8:ED:88:F9:9C:AB:57:D7:68:03:17:6E:B2:7A:9F:0B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbgvyO2I-ZyrV9doAxdusnqfC_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab65f6-31be-4149-a6e3-ae5fa53b93b2/1/IbgvyO2I-ZyrV9doAxdusnqfC_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0c:95:0c:89:92:5c:bc:e0:3c:51:64:77:18:2f:8a:1a:1c:
d5:3e:00:33:5a:31:54:d1:f6:d6:80:b8:97:e2:00:bd:32:e7:
59:a3:b8:2d:8e:d1:df:43:c5:22:06:da:4c:53:7f:ee:9a:39:
e0:3b:89:3e:8e:0a:fa:4e:f4:a9:81:50:01:3f:4c:25:ea:f0:
15:aa:6f:c2:70:f9:9d:ee:09:cc:01:82:4a:f4:d7:f3:57:62:
39:ec:9b:0d:ef:08:a8:56:8f:f3:72:dd:8d:2f:dd:82:7a:3b:
e3:bd:cd:16:ca:9d:4d:9c:07:93:07:9c:c6:6d:cf:d5:3e:26:
37:11:5a:8b:85:35:6c:7b:7c:7d:97:ba:6d:94:b0:2c:36:b5:
90:01:1d:8b:02:46:9f:61:cd:3d:04:f4:83:23:a5:5d:d4:c1:
8e:78:ae:b5:ad:71:13:99:f2:e8:b4:11:25:b6:d6:b8:5f:19:
e8:92:5f:70:99:27:7a:2b:83:9a:13:f1:09:c1:01:35:43:6c:
56:1d:08:47:49:2a:81:6b:ef:bf:e8:0d:3d:67:d6:c5:7d:cd:
99:c4:a1:5b:cc:a9:68:3c:98:53:c0:69:a6:20:71:d3:51:11:
61:e2:b6:3d:47:35:6e:d6:6d:1a:80:e2:3e:de:eb:15:88:54:
cd:54:fa:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNR0VjBqc3ydPQ8zppsBk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYjgyZmM4ZWQ4OGY5OWNhYjU3ZDc2ODAzMTc2ZWIyN2E5
ZjBiZmEwHhcNMjUwNDE5MDkwMDM4WhcNMjUwNDIwMDkwMDM4WjAzMTEwLwYDVQQD
Eyg3NzE1MzAzZjkxOGM4Mzc3YTQxYzU4MzAxZjE0Mzg0MGU2YjVkMDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLlR4mN3VzeNAPshnMvceLnbzfKH
ey2Wkrvv2oNGH3clLkHwko1/CibBwvh26DVaANVZITTux8SXRqPrOVdnY2etqOHB
i3baiITTqYU8IFjjzkR4SnmaJ/AK31xVwwJFj+UXewaXhV5GWkya33KxgK9o/Ri/
bD1/RIArsesviz9r1broHHauqBlk6roH/iSKUzeIahAWG0AxIfRcvcb2QltD3GW9
Gny2OkF39ZM02vWBJWXgZvCHsoD5Ss8MkEX5X7jXJRIpZnavDY1kGDA8XunMwkTn
X5hpZKS4GSaOe68E3uwkQCrkQFc8nle9nMnb+1tz1PKKLwJX0sql3oLnQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcVMD+RjIN3pBxYMB8UOEDmtdBdMB8GA1UdIwQY
MBaAFCG4L8jtiPmcq1fXaAMXbrJ6nwv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMt
YWU1ZmE1M2I5M2IyLzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hYjY1ZjYtMzFiZS00MTQ5LWE2ZTMtYWU1ZmE1M2I5M2Iy
LzEvSWJndnlPMkktWnlyVjlkb0F4ZHVzbnFmQ19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgyVDImS
XLzgPFFkdxgvihoc1T4AM1oxVNH21oC4l+IAvTLnWaO4LY7R30PFIgbaTFN/7po5
4DuJPo4K+k70qYFQAT9MJerwFapvwnD5ne4JzAGCSvTX81diOeybDe8IqFaP83Ld
jS/dgno7473NFsqdTZwHkwecxm3P1T4mNxFai4U1bHt8fZe6bZSwLDa1kAEdiwJG
n2HNPQT0gyOlXdTBjniuta1xE5ny6LQRJbbWuF8Z6JJfcJkneiuDmhPxCcEBNUNs
Vh0IR0kqgWvvv+gNPWfWxX3NmcShW8ypaDyYU8BppiBx01ERYeK2PUc1btZtGoDi
Pt7rFYhUzVT6sA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:48 2025 by rpki-client