Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
File: cA5JDhDqN72DSWKGM7WIVmHmegI.mft (raw, json)
Hash identifier: /FV+2mZsCijFSZNZxil0kyKdfFZZP4fuh+0hOwMB8Og=
Subject key identifier: CA:26:21:03:C2:12:1E:36:F3:48:CF:A3:51:51:0D:DA:36:0A:CA:13
Authority key identifier: 70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
Certificate issuer: /CN=700e490e10ea37bd8349628633b5885661e67a02
Certificate serial: 019655388B6EDDEDB42D1F5BE25B8CA54E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
Manifest number: 08
Signing time: Sun 20 Apr 2025 22:01:31 +0000
Manifest this update: Sun 20 Apr 2025 22:01:31 +0000
Manifest next update: Mon 21 Apr 2025 22:01:31 +0000
Files and hashes: 1: cA5JDhDqN72DSWKGM7WIVmHmegI.crl (hash: QzH5gJNtlu9xsBkhUwjcRBFVrvA4RaoRpj3zemPCP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:8b:6e:dd:ed:b4:2d:1f:5b:e2:5b:8c:a5:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700e490e10ea37bd8349628633b5885661e67a02
Validity
Not Before: Apr 20 22:01:31 2025 GMT
Not After : Apr 21 22:01:31 2025 GMT
Subject: CN=ca262103c2121e36f348cfa351510dda360aca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:77:49:48:69:f4:9a:ee:62:f0:98:68:37:
63:ff:ba:5d:16:f1:6f:43:4f:4a:6e:d8:1e:c1:47:
8e:16:05:83:6d:91:a2:fe:b2:da:33:ab:b8:94:21:
c6:b2:18:9e:c6:9c:1c:e7:0e:32:88:4e:8c:ca:0a:
35:6c:22:34:9f:66:0b:3f:e3:b5:86:7d:43:b2:f0:
9f:81:0b:41:d0:64:36:88:94:01:d0:f7:59:0c:22:
29:0c:d4:6d:de:92:45:83:48:3c:17:8a:5f:b2:11:
00:49:34:76:97:6c:01:88:7d:2a:0f:35:95:6d:76:
4d:b9:3e:d2:c9:b6:79:d3:6c:78:d8:bf:98:69:e2:
ea:eb:88:80:fc:01:d6:9e:bf:d2:c7:65:e4:5c:22:
0f:a4:7a:dc:56:eb:46:1c:1e:38:26:f4:6e:6a:2b:
4d:80:d3:72:e8:28:7f:3f:76:53:2f:0e:cb:94:99:
2a:03:f4:f5:ea:ad:55:b2:8b:05:3d:1f:56:b5:8d:
de:db:93:40:6f:4d:8f:87:43:05:37:3f:50:ea:0b:
85:11:c6:f5:69:de:eb:6a:2a:8b:3f:50:c4:a6:a8:
f4:45:a3:fb:1e:e0:60:aa:85:d6:38:30:67:63:f0:
f7:87:c0:60:7c:bc:0b:28:32:32:32:e3:2d:cb:7e:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:26:21:03:C2:12:1E:36:F3:48:CF:A3:51:51:0D:DA:36:0A:CA:13
X509v3 Authority Key Identifier:
keyid:70:0E:49:0E:10:EA:37:BD:83:49:62:86:33:B5:88:56:61:E6:7A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cA5JDhDqN72DSWKGM7WIVmHmegI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a80b6d-ccb7-44c2-b43f-ea6b0be5caee/1/cA5JDhDqN72DSWKGM7WIVmHmegI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:62:02:8e:13:ec:df:db:57:93:89:ed:0d:b7:b0:d1:86:22:
c1:74:39:e3:3d:21:b6:5e:0f:b5:76:bc:4e:bf:51:f7:ce:4d:
54:a1:24:09:9b:68:97:46:3d:08:d6:6e:6d:52:ab:f3:cc:0b:
3d:7d:fc:17:e7:08:36:60:02:ed:6f:89:41:6c:26:5e:5d:59:
d5:4b:37:d6:fe:eb:19:50:6e:8c:93:10:24:8b:a4:c2:1c:9f:
7f:a6:53:05:47:99:7a:8c:37:e4:12:04:04:d1:a1:d4:e3:ae:
47:5b:76:ed:5f:e7:59:97:a2:cf:d7:0b:c5:26:ed:18:01:90:
4f:e6:d4:1c:76:72:d2:e2:90:56:27:4e:f6:21:b8:28:ae:6a:
45:f7:ba:c2:b3:04:80:2b:7a:1a:55:06:43:da:d1:3a:07:c8:
cb:55:e9:2e:4c:d4:a1:10:24:bc:8c:6f:3c:da:22:0d:36:46:
94:f5:d1:ce:01:2f:f9:12:c2:f1:cd:8c:84:58:0b:56:51:86:
72:84:82:15:05:49:f0:b5:11:52:10:7b:64:8b:45:bf:40:32:
73:34:de:33:80:3b:c2:78:2a:6a:db:0d:47:66:35:30:f3:9d:
24:4d:6e:7a:c3:ad:f5:4b:4c:d5:7f:bd:3e:ae:46:e3:44:0b:
76:b4:f3:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVOItu3e20LR9b4luMpU5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGU0OTBlMTBlYTM3YmQ4MzQ5NjI4NjMzYjU4ODU2NjFl
NjdhMDIwHhcNMjUwNDIwMjIwMTMxWhcNMjUwNDIxMjIwMTMxWjAzMTEwLwYDVQQD
EyhjYTI2MjEwM2MyMTIxZTM2ZjM0OGNmYTM1MTUxMGRkYTM2MGFjYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK13SUhp9JruYvCYaDdj/7pdFvFv
Q09KbtgewUeOFgWDbZGi/rLaM6u4lCHGshiexpwc5w4yiE6Mygo1bCI0n2YLP+O1
hn1DsvCfgQtB0GQ2iJQB0PdZDCIpDNRt3pJFg0g8F4pfshEASTR2l2wBiH0qDzWV
bXZNuT7SybZ502x42L+YaeLq64iA/AHWnr/Sx2XkXCIPpHrcVutGHB44JvRuaitN
gNNy6Ch/P3ZTLw7LlJkqA/T16q1VsosFPR9WtY3e25NAb02Ph0MFNz9Q6guFEcb1
ad7raiqLP1DEpqj0RaP7HuBgqoXWODBnY/D3h8BgfLwLKDIyMuMty37T0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMomIQPCEh4280jPo1FRDdo2CsoTMB8GA1UdIwQY
MBaAFHAOSQ4Q6je9g0lihjO1iFZh5noCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2Yt
ZWE2YjBiZTVjYWVlLzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hODBiNmQtY2NiNy00NGMyLWI0M2YtZWE2YjBiZTVjYWVl
LzEvY0E1SkRoRHFONzJEU1dLR003V0lWbUhtZWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2ICjhPs
39tXk4ntDbew0YYiwXQ54z0htl4PtXa8Tr9R985NVKEkCZtol0Y9CNZubVKr88wL
PX38F+cINmAC7W+JQWwmXl1Z1Us31v7rGVBujJMQJIukwhyff6ZTBUeZeow35BIE
BNGh1OOuR1t27V/nWZeiz9cLxSbtGAGQT+bUHHZy0uKQVidO9iG4KK5qRfe6wrME
gCt6GlUGQ9rROgfIy1XpLkzUoRAkvIxvPNoiDTZGlPXRzgEv+RLC8c2MhFgLVlGG
coSCFQVJ8LURUhB7ZItFv0AyczTeM4A7wngqatsNR2Y1MPOdJE1uesOt9UtM1X+9
Pq5G40QLdrTzkA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:36:11 2025 by rpki-client