Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: oxFtIBVDBN41Uyq+ZDHYHcV0bt/xpyTfrIQDJB94eKA=
Subject key identifier: C7:36:DA:62:C0:94:45:09:DD:A4:29:1D:70:DD:62:4D:A6:95:A7:80
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019658A68F82FEE77D69FB04421D23854305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 14:00:32 +0000
Manifest this update: Mon 21 Apr 2025 14:00:32 +0000
Manifest next update: Tue 22 Apr 2025 14:00:32 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: u07lskMOGoP5X3/vkMifk7HoqF2+h/tvIL4A1kbgmg4=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:8f:82:fe:e7:7d:69:fb:04:42:1d:23:85:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Apr 21 14:00:32 2025 GMT
Not After : Apr 22 14:00:32 2025 GMT
Subject: CN=c736da62c0944509dda4291d70dd624da695a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:8f:44:a7:ab:56:bf:b5:64:ac:33:98:34:
b2:ef:0e:5f:32:73:6a:30:94:a5:25:d8:9c:a4:31:
b4:a5:bf:92:7a:ca:e2:fb:65:cb:cf:8e:1c:62:c9:
5b:7d:40:16:cc:37:94:91:b9:24:16:fe:d9:06:4e:
da:30:8c:ce:4d:e9:ba:b2:be:79:ca:91:f5:39:e0:
f4:80:d8:bd:1c:3e:65:6c:7b:cf:74:fa:8a:4b:b1:
b7:ec:79:f5:fc:d0:6a:a3:18:ae:44:58:90:31:02:
df:27:91:cd:ff:55:49:90:e7:03:3e:c6:11:51:f7:
a4:bf:73:48:92:a9:88:d8:c9:2a:77:f5:70:a8:c7:
34:1f:ec:ae:45:61:8b:cc:2d:15:12:ef:a3:d2:f5:
ab:fd:a3:2e:48:29:a3:2f:78:01:82:e7:2a:28:26:
10:6b:12:af:8a:1e:ca:e9:0c:d5:63:8d:90:63:47:
ce:73:40:71:f8:1b:98:a2:82:34:43:f2:93:ae:9a:
c0:96:e8:7f:3c:c8:f3:ae:51:19:9c:5a:3a:49:cb:
c6:58:d9:28:7b:ff:aa:ef:3a:2c:92:4a:7e:86:42:
03:ae:26:4b:16:94:43:44:a8:30:c7:fb:f4:c3:0e:
29:dd:d2:5b:b4:b8:91:54:06:4f:0b:7f:f1:0b:02:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:DA:62:C0:94:45:09:DD:A4:29:1D:70:DD:62:4D:A6:95:A7:80
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:08:a4:30:11:7b:4f:ce:da:9c:8b:28:23:56:1d:84:df:92:
8a:05:8a:3a:67:07:93:bb:51:9f:84:b2:2b:3d:a6:40:a6:25:
e9:57:a2:44:4a:2e:c1:f3:a3:75:5d:33:cb:da:8d:05:16:23:
76:84:87:4c:13:4e:c2:b0:c1:8a:35:71:98:c3:7d:09:82:7d:
cf:3c:0a:82:b0:78:53:bd:96:84:c6:ee:70:90:51:2b:0d:dc:
82:15:27:12:66:5b:4f:49:6f:8f:8e:d5:f6:7c:11:c6:05:da:
1c:bf:62:11:05:de:2b:66:a0:ab:d7:37:40:39:da:e7:69:a0:
89:6e:68:c3:f6:3d:6e:ff:20:fe:b7:d9:4b:31:5f:cf:23:66:
27:c5:fe:32:4f:22:28:db:6b:c4:5e:c9:c4:22:61:64:75:fb:
a6:db:6f:37:a0:a7:e3:8a:64:3c:e5:b6:39:33:38:d2:52:b8:
7e:56:e3:f6:da:77:a4:e4:e3:8b:3d:90:51:29:a2:59:b1:ba:
cc:0c:98:72:5b:3e:52:61:fd:a6:e0:11:20:d0:6b:01:de:d2:
a7:45:b9:93:1d:de:18:f1:a5:49:ee:3a:95:9a:5d:6a:6e:aa:
07:02:92:45:40:66:cc:5e:5a:aa:2e:a4:3d:07:06:ce:8b:1c:
b1:d8:f5:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZYpo+C/ud9afsEQh0jhUMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMjNhZWI2YTVkOWEzNGI4MzYwNzc3Nzc3NmZiODc2NGZi
NzZmMDAwHhcNMjUwNDIxMTQwMDMyWhcNMjUwNDIyMTQwMDMyWjAzMTEwLwYDVQQD
EyhjNzM2ZGE2MmMwOTQ0NTA5ZGRhNDI5MWQ3MGRkNjI0ZGE2OTVhNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG2PRKerVr+1ZKwzmDSy7w5fMnNq
MJSlJdicpDG0pb+Sesri+2XLz44cYslbfUAWzDeUkbkkFv7ZBk7aMIzOTem6sr55
ypH1OeD0gNi9HD5lbHvPdPqKS7G37Hn1/NBqoxiuRFiQMQLfJ5HN/1VJkOcDPsYR
Ufekv3NIkqmI2Mkqd/VwqMc0H+yuRWGLzC0VEu+j0vWr/aMuSCmjL3gBgucqKCYQ
axKvih7K6QzVY42QY0fOc0Bx+BuYooI0Q/KTrprAluh/PMjzrlEZnFo6ScvGWNko
e/+q7zoskkp+hkIDriZLFpRDRKgwx/v0ww4p3dJbtLiRVAZPC3/xCwKCMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMc22mLAlEUJ3aQpHXDdYk2mlaeAMB8GA1UdIwQY
MBaAFPojrral2aNLg2B3d3dvuHZPt28AMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1pT3V0cVhabzB1RFlIZDNkMi00ZGstM2J3QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMvMzZlNmYwLWViMmMtNGNmOC04NTY1
LWIzNjNiYjZjYWEwMi8xLzEtaU91dHFYWm8wdURZSGQzZDItNGRrLTNid0EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzJjLzM2ZTZmMC1lYjJjLTRjZjgtODU2NS1iMzYzYmI2Y2Fh
MDIvMS8xLWlPdXRxWFpvMHVEWUhkM2QyLTRkay0zYndBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2gik
MBF7T87anIsoI1YdhN+SigWKOmcHk7tRn4SyKz2mQKYl6VeiREouwfOjdV0zy9qN
BRYjdoSHTBNOwrDBijVxmMN9CYJ9zzwKgrB4U72WhMbucJBRKw3cghUnEmZbT0lv
j47V9nwRxgXaHL9iEQXeK2agq9c3QDna52mgiW5ow/Y9bv8g/rfZSzFfzyNmJ8X+
Mk8iKNtrxF7JxCJhZHX7pttvN6Cn44pkPOW2OTM40lK4flbj9tp3pOTjiz2QUSmi
WbG6zAyYcls+UmH9puARINBrAd7Sp0W5kx3eGPGlSe46lZpdam6qBwKSRUBmzF5a
qi6kPQcGzoscsdj1Vw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:30 2025 by rpki-client