Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: cnCvoY8zWAWsh5oEDPZHKOwhSBLb3Hp+49DAtSfYX1g=
Subject key identifier: 1E:94:71:51:7A:58:64:37:76:DF:F7:EB:5A:A8:E5:B2:92:A1:94:3D
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 019659B99D023404E53623A85339BFB36D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 03F2
Signing time: Mon 21 Apr 2025 19:00:58 +0000
Manifest this update: Mon 21 Apr 2025 19:00:58 +0000
Manifest next update: Tue 22 Apr 2025 19:00:58 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: bdk31gZZshstPgrShAy1YyA/z/tI2FzElNJz5Fntm5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:9d:02:34:04:e5:36:23:a8:53:39:bf:b3:6d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Apr 21 19:00:58 2025 GMT
Not After : Apr 22 19:00:58 2025 GMT
Subject: CN=1e9471517a58643776dff7eb5aa8e5b292a1943d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:e7:bf:e5:46:62:56:da:fd:64:08:e0:00:
2a:24:1c:46:8c:fc:fe:84:11:bf:4a:ac:86:e6:58:
b1:7c:b4:9f:f6:c8:94:7c:38:fc:9a:c3:9e:37:e1:
85:c0:dd:98:de:ad:05:34:e4:18:bd:e4:7b:e7:79:
04:a8:f3:d9:f5:21:bb:80:3f:38:36:b1:2f:02:4e:
94:fe:3a:00:3f:85:80:ca:f5:e5:40:4a:16:f7:e7:
05:d1:24:0f:d1:e2:b2:09:8d:19:b9:2b:9f:3a:cc:
73:bf:03:1b:31:9f:d2:d7:f5:e3:2b:90:91:af:e9:
ea:51:2b:c2:ad:25:c1:ca:0c:ff:19:81:82:55:8a:
78:54:db:06:af:86:79:a1:e6:fb:24:80:fb:63:cb:
c7:6f:e5:fb:50:64:e2:1e:09:ef:eb:71:c8:6c:9a:
87:ce:be:ab:66:9b:51:8c:b0:55:e9:83:37:0f:7e:
7e:c5:e7:12:5e:52:56:d2:b3:f8:8a:f0:68:d2:0f:
aa:ee:20:54:a4:9e:26:49:1e:3c:41:f4:03:3f:7f:
82:27:1f:70:dd:32:e1:3f:e7:59:64:59:9d:8b:71:
be:69:84:19:81:51:ff:5d:76:14:d7:6b:f3:62:dd:
a5:33:30:9f:af:76:d2:e9:fe:ae:70:f6:5c:e5:76:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:94:71:51:7A:58:64:37:76:DF:F7:EB:5A:A8:E5:B2:92:A1:94:3D
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:dc:84:e3:1c:6e:5b:27:6c:5f:0a:0c:87:42:59:cd:39:17:
45:e6:be:a7:af:07:20:a2:2c:0d:f2:b7:83:29:88:c2:10:3a:
91:5b:76:38:a9:8a:89:43:ee:4c:bb:89:14:e7:6e:3b:d3:f6:
97:09:bf:96:39:e5:e5:43:33:c0:78:64:91:d4:b5:56:00:4c:
5a:3d:64:21:16:d5:87:61:5b:4d:c0:32:24:47:54:9f:2d:7b:
ba:a5:c8:75:2f:2e:17:19:4e:b8:da:d0:f5:1e:28:ee:cd:a9:
11:68:70:00:e3:60:e2:e0:ec:a4:01:71:67:87:17:dc:45:88:
6e:11:62:3a:17:18:89:c8:dd:50:84:9a:01:aa:61:c8:b2:b3:
1c:3c:fa:4f:9b:8d:cc:51:f5:00:d0:e6:61:98:ba:c7:92:43:
d8:f2:d3:f4:57:24:d8:74:c0:4a:9b:e0:a9:7e:74:e1:e2:9f:
58:ff:d8:47:b9:8e:31:78:7b:b5:75:9e:13:81:92:ef:0d:d8:
8f:bb:52:16:21:14:81:c4:62:9e:85:7c:13:59:f2:d3:75:c7:
1e:b2:e0:43:52:26:21:62:b8:ab:bf:22:0b:91:cd:e3:95:a8:
a4:e8:42:8f:c2:03:d9:83:ad:f5:9a:90:e7:e6:34:39:2e:39:
5d:2d:08:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuZ0CNATlNiOoUzm/s20KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYWI4OTQ3YTg2MDFmNGJhMWE4NWJkMWMwN2IzZjM4NGY3
OTYxMWQwHhcNMjUwNDIxMTkwMDU4WhcNMjUwNDIyMTkwMDU4WjAzMTEwLwYDVQQD
EygxZTk0NzE1MTdhNTg2NDM3NzZkZmY3ZWI1YWE4ZTViMjkyYTE5NDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBDnv+VGYlba/WQI4AAqJBxGjPz+
hBG/SqyG5lixfLSf9siUfDj8msOeN+GFwN2Y3q0FNOQYveR753kEqPPZ9SG7gD84
NrEvAk6U/joAP4WAyvXlQEoW9+cF0SQP0eKyCY0ZuSufOsxzvwMbMZ/S1/XjK5CR
r+nqUSvCrSXBygz/GYGCVYp4VNsGr4Z5oeb7JID7Y8vHb+X7UGTiHgnv63HIbJqH
zr6rZptRjLBV6YM3D35+xecSXlJW0rP4ivBo0g+q7iBUpJ4mSR48QfQDP3+CJx9w
3TLhP+dZZFmdi3G+aYQZgVH/XXYU12vzYt2lMzCfr3bS6f6ucPZc5XahjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6UcVF6WGQ3dt/361qo5bKSoZQ9MB8GA1UdIwQY
MBaAFNGriUeoYB9Loahb0cB7PzhPeWEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEt
NDNjYzkwMTE3YWFjLzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MThlMzYtZTBjMy00MjhhLWFmZDEtNDNjYzkwMTE3YWFj
LzEvMGF1SlI2aGdIMHVocUZ2UndIc19PRTk1WVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdyE4xxu
WydsXwoMh0JZzTkXRea+p68HIKIsDfK3gymIwhA6kVt2OKmKiUPuTLuJFOduO9P2
lwm/ljnl5UMzwHhkkdS1VgBMWj1kIRbVh2FbTcAyJEdUny17uqXIdS8uFxlOuNrQ
9R4o7s2pEWhwAONg4uDspAFxZ4cX3EWIbhFiOhcYicjdUISaAaphyLKzHDz6T5uN
zFH1ANDmYZi6x5JD2PLT9Fck2HTASpvgqX504eKfWP/YR7mOMXh7tXWeE4GS7w3Y
j7tSFiEUgcRinoV8E1ny03XHHrLgQ1ImIWK4q78iC5HN45WopOhCj8ID2YOt9ZqQ
5+Y0OS45XS0IBA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:46:05 2025 by rpki-client