Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: xE6ykZ0rsa+goi8ukXkjrbBij85s7nyrVNL1/Z5hiCY=
Subject key identifier: 46:40:FC:42:B0:BA:95:A5:0A:AA:27:DC:07:1D:E0:85:12:F7:F4:44
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 01965F8432E48EC89DF6E52739C14700B98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0182
Signing time: Tue 22 Apr 2025 22:00:21 +0000
Manifest this update: Tue 22 Apr 2025 22:00:21 +0000
Manifest next update: Wed 23 Apr 2025 22:00:21 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: Ah/dagG5Z+TlyzqM6C7ANfIG9AsPYYWQP6wLQw4zKWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:32:e4:8e:c8:9d:f6:e5:27:39:c1:47:00:b9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Apr 22 22:00:21 2025 GMT
Not After : Apr 23 22:00:21 2025 GMT
Subject: CN=4640fc42b0ba95a50aaa27dc071de08512f7f444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:54:85:de:98:a6:85:f8:2d:e6:2e:51:09:
91:99:e3:4b:93:6e:1d:e1:57:5f:9e:4f:86:35:78:
0d:75:9f:ff:0a:e4:5b:e9:8b:2c:03:5c:d8:e8:7b:
ae:5d:e0:77:d6:48:11:6f:8c:e1:b6:96:8d:20:36:
b4:d4:1b:e6:a9:04:96:ea:82:e7:61:78:98:4a:ac:
e3:9c:68:b3:f1:ce:21:bd:38:c3:f0:7f:9d:7a:da:
75:27:f6:b4:fb:fa:96:cd:13:67:74:db:59:60:6d:
1e:ca:f5:79:a8:a6:29:02:35:18:c1:cf:3c:65:f4:
17:e7:45:48:7b:9e:84:1c:fd:c7:2b:ef:a1:ce:f6:
3f:eb:a7:52:7c:51:2e:23:4d:d9:fd:02:84:0f:ae:
ff:4f:de:0e:96:0e:55:88:1b:c7:70:2d:28:ec:78:
08:18:87:08:a0:3c:5d:13:40:cc:3b:b1:83:1a:63:
06:91:f3:1c:23:74:c2:cc:c6:a8:e1:a4:5d:1a:cb:
3c:24:1f:e6:06:b3:ef:ac:72:46:a6:23:18:fd:a7:
52:ad:b0:cd:ab:db:f6:0d:d6:54:9b:9d:d0:db:3a:
18:d6:68:6f:29:01:40:28:61:cb:a6:1a:ae:f8:b2:
2e:63:4a:73:53:89:03:d9:d0:60:26:02:94:48:6c:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:40:FC:42:B0:BA:95:A5:0A:AA:27:DC:07:1D:E0:85:12:F7:F4:44
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ac:05:46:7d:6a:9a:17:05:b7:90:b2:44:85:20:fe:dc:70:
36:7c:f8:73:a4:f0:62:0c:2c:37:93:2e:84:69:f0:cb:3f:bd:
b8:70:76:85:dc:d6:f8:4f:75:47:3f:fd:5f:ef:96:a9:b8:32:
f5:df:18:7d:09:78:55:b9:4a:a8:98:eb:af:4d:9e:d8:4f:96:
7b:5e:0a:ec:d0:e5:73:bf:01:3f:65:6b:c4:ed:5b:72:61:92:
87:93:38:81:6b:ce:e7:9a:a6:a0:c9:bd:88:4d:90:45:13:2e:
24:94:2f:34:0e:38:29:a2:17:8a:24:08:8d:69:24:e2:15:b8:
79:42:e6:c5:98:41:c5:64:74:df:a2:ab:19:65:d1:60:81:13:
17:36:a5:d1:46:47:68:7c:74:0b:73:7d:55:b7:e0:89:c1:bd:
ad:af:57:65:7d:69:67:05:86:b3:29:e3:bc:35:d6:1e:eb:14:
10:78:82:54:5b:94:8e:93:e3:80:ee:a1:c0:5c:f8:24:a5:a0:
d9:da:04:31:95:3c:81:52:aa:e8:e6:38:41:fd:a9:59:59:53:
34:30:1c:29:d2:03:ca:5d:7c:c7:89:c7:5b:b0:ed:68:2a:c7:
c6:ac:d5:51:0f:06:76:24:3f:13:ee:0d:1c:15:b0:d5:a3:fe:
db:fb:d6:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZfhDLkjsid9uUnOcFHALmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGRjYjFjYTFkNDY4YmMwNDQ3MGYxZGI0YTQ2ZWNmNWI4
Mjc4NDgwHhcNMjUwNDIyMjIwMDIxWhcNMjUwNDIzMjIwMDIxWjAzMTEwLwYDVQQD
Eyg0NjQwZmM0MmIwYmE5NWE1MGFhYTI3ZGMwNzFkZTA4NTEyZjdmNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIBUhd6YpoX4LeYuUQmRmeNLk24d
4Vdfnk+GNXgNdZ//CuRb6YssA1zY6HuuXeB31kgRb4zhtpaNIDa01BvmqQSW6oLn
YXiYSqzjnGiz8c4hvTjD8H+detp1J/a0+/qWzRNndNtZYG0eyvV5qKYpAjUYwc88
ZfQX50VIe56EHP3HK++hzvY/66dSfFEuI03Z/QKED67/T94Olg5ViBvHcC0o7HgI
GIcIoDxdE0DMO7GDGmMGkfMcI3TCzMao4aRdGss8JB/mBrPvrHJGpiMY/adSrbDN
q9v2DdZUm53Q2zoY1mhvKQFAKGHLphqu+LIuY0pzU4kD2dBgJgKUSGwqOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZA/EKwupWlCqon3Acd4IUS9/REMB8GA1UdIwQY
MBaAFPBNyxyh1Gi8BEcPHbSkbs9bgnhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEt
ZGI1MTYwZWU3NGU3LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNTZiMWItNGIxMC00MWRjLTlmZmEtZGI1MTYwZWU3NGU3
LzEvOEUzTEhLSFVhTHdFUnc4ZHRLUnV6MXVDZUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqwFRn1q
mhcFt5CyRIUg/txwNnz4c6TwYgwsN5MuhGnwyz+9uHB2hdzW+E91Rz/9X++Wqbgy
9d8YfQl4VblKqJjrr02e2E+We14K7NDlc78BP2VrxO1bcmGSh5M4gWvO55qmoMm9
iE2QRRMuJJQvNA44KaIXiiQIjWkk4hW4eULmxZhBxWR036KrGWXRYIETFzal0UZH
aHx0C3N9VbfgicG9ra9XZX1pZwWGsynjvDXWHusUEHiCVFuUjpPjgO6hwFz4JKWg
2doEMZU8gVKq6OY4Qf2pWVlTNDAcKdIDyl18x4nHW7DtaCrHxqzVUQ8GdiQ/E+4N
HBWw1aP+2/vWLg==
-----END CERTIFICATE-----
Generated at Wed Apr 23 07:59:21 2025 by rpki-client