Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: JLWkIQoX6Zq0+fjbSUhG7rSvJUgazxqYuEyyC6szirI=
Subject key identifier: E7:6F:2E:68:0C:87:25:CB:9F:7C:73:0F:AF:72:5C:87:87:61:9C:2F
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 01965492DBCECE79AD132F28B317AB74C61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 19:00:32 +0000
Manifest this update: Sun 20 Apr 2025 19:00:32 +0000
Manifest next update: Mon 21 Apr 2025 19:00:32 +0000
Files and hashes: 1: 1fA5PORVd3jPdWz7xA5f_vnyxD0.roa (hash: ykI4OL9fWsgYZNYcziWcElBypDNzSjFchoDv23Mnzrs=)
2: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: Eb8WK6jy1vIsC26sbqHiCvYtbQ4+MBEJ9alkNJqSpWc=)
3: uy61Z_8RU66-jPuUHYoqaPIOhik.roa (hash: L9o3XCU/iUGm+BZYXWE1H2NgYx1sjgSieqKtDG+tWqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:db:ce:ce:79:ad:13:2f:28:b3:17:ab:74:c6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Apr 20 19:00:32 2025 GMT
Not After : Apr 21 19:00:32 2025 GMT
Subject: CN=e76f2e680c8725cb9f7c730faf725c8787619c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:ad:78:95:15:6b:0b:f8:5e:00:36:b0:b6:
44:76:83:ad:91:c2:42:f2:02:4f:f6:d6:26:4f:89:
45:55:cf:cd:e0:b1:88:dc:a2:c1:50:98:99:2d:fb:
0f:11:bb:99:66:1b:54:4a:d2:bd:f3:61:ef:dd:e9:
9b:64:39:35:56:e9:1c:c6:ba:e1:a5:ec:be:15:53:
e5:69:e0:8a:c4:2c:e6:1d:6b:c1:19:14:89:13:1d:
4c:d5:78:ed:bc:cf:ae:1c:0f:48:02:5d:38:a2:2a:
ab:8f:a3:83:03:ab:e3:93:75:89:1b:ee:42:aa:e2:
8c:0d:3c:ff:2b:ff:82:77:af:be:b9:46:4e:29:3e:
13:25:e5:cc:f3:63:6e:f7:20:6f:c0:bb:30:58:16:
65:12:a7:66:17:1c:39:35:11:9c:4f:12:c1:d9:a4:
cc:1f:3a:b5:0e:20:16:d5:18:66:6e:14:9e:e4:a7:
a9:33:35:d8:67:bb:64:aa:c8:f6:c4:e4:02:66:ba:
33:a9:c4:30:48:cd:85:4e:a8:35:37:a9:73:fe:27:
52:d2:76:d3:c2:b3:6f:3b:88:95:92:ae:3a:51:bb:
cb:45:c8:25:13:02:bf:00:35:b6:de:bc:7c:41:85:
7d:d8:ed:70:c1:fb:92:e8:99:33:30:9b:8e:03:f3:
3a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6F:2E:68:0C:87:25:CB:9F:7C:73:0F:AF:72:5C:87:87:61:9C:2F
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:16:1c:41:d4:b1:3f:5f:fb:b1:c6:fd:8c:5d:ad:0d:fd:dc:
d3:93:28:53:c7:3d:93:c0:7e:a3:d1:16:1c:28:64:ec:0e:dd:
a9:da:cb:03:cf:ff:5e:da:fe:f8:be:1b:12:e5:5c:f7:22:cb:
d8:c2:9d:a5:84:dc:1d:1c:c6:79:2b:72:a0:c2:3a:0e:f1:0f:
7b:fe:c2:d6:82:d8:32:3f:96:4e:a7:80:46:68:6a:c9:8d:37:
c0:d9:45:93:38:0b:30:a4:7e:28:de:9e:43:18:0e:3c:dc:9e:
a5:1d:c9:29:31:1b:07:67:96:43:f0:5f:c4:9c:2f:eb:89:5f:
dc:a1:19:cd:2b:88:2d:3d:4b:6a:9c:1a:c0:2d:f1:3a:39:33:
78:d7:f7:87:81:c9:f2:71:2f:92:dc:63:86:7f:55:b9:94:ae:
92:6a:52:7a:03:15:2a:43:00:5f:7f:04:bc:38:c2:30:02:0e:
be:b3:da:1d:05:68:3b:3b:4b:d2:14:33:c2:e7:93:9e:07:f0:
c9:5e:ca:fa:90:7d:18:89:ce:c5:5f:79:31:9b:49:94:66:fb:
87:22:64:bc:e6:7b:2e:b7:41:ae:8e:e3:3e:32:d4:2f:f4:aa:
b2:a6:d7:64:31:5c:2b:41:31:97:8d:f9:dc:2e:9c:9f:bb:d9:
e9:28:55:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUktvOznmtEy8osxerdMYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmQ3MjRlMjM5ZWZiN2YyZjdiZWE1MjZhOWUwYzVlN2Zj
ODliYmUwHhcNMjUwNDIwMTkwMDMyWhcNMjUwNDIxMTkwMDMyWjAzMTEwLwYDVQQD
EyhlNzZmMmU2ODBjODcyNWNiOWY3YzczMGZhZjcyNWM4Nzg3NjE5YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyouteJUVawv4XgA2sLZEdoOtkcJC
8gJP9tYmT4lFVc/N4LGI3KLBUJiZLfsPEbuZZhtUStK982Hv3embZDk1Vukcxrrh
pey+FVPlaeCKxCzmHWvBGRSJEx1M1XjtvM+uHA9IAl04oiqrj6ODA6vjk3WJG+5C
quKMDTz/K/+Cd6++uUZOKT4TJeXM82Nu9yBvwLswWBZlEqdmFxw5NRGcTxLB2aTM
Hzq1DiAW1RhmbhSe5KepMzXYZ7tkqsj2xOQCZrozqcQwSM2FTqg1N6lz/idS0nbT
wrNvO4iVkq46UbvLRcglEwK/ADW23rx8QYV92O1wwfuS6JkzMJuOA/M6swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdvLmgMhyXLn3xzD69yXIeHYZwvMB8GA1UdIwQY
MBaAFHNtck4jnvt/L3vqUmqeDF5/yJu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQt
MGJlYmZjYmRlMWYzLzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kZmMxMTAtNzkyNC00OWE5LTg1NjQtMGJlYmZjYmRlMWYz
LzEvYzIxeVRpT2UtMzh2ZS1wU2FwNE1Ybl9JbTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxYcQdSx
P1/7scb9jF2tDf3c05MoU8c9k8B+o9EWHChk7A7dqdrLA8//Xtr++L4bEuVc9yLL
2MKdpYTcHRzGeStyoMI6DvEPe/7C1oLYMj+WTqeARmhqyY03wNlFkzgLMKR+KN6e
QxgOPNyepR3JKTEbB2eWQ/BfxJwv64lf3KEZzSuILT1LapwawC3xOjkzeNf3h4HJ
8nEvktxjhn9VuZSukmpSegMVKkMAX38EvDjCMAIOvrPaHQVoOztL0hQzwueTngfw
yV7K+pB9GInOxV95MZtJlGb7hyJkvOZ7LrdBro7jPjLUL/SqsqbXZDFcK0Exl435
3C6cn7vZ6ShVeQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:31 2025 by rpki-client