Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File: kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier: /Cq8jPJOTAm/7PxyhQDuvo6vc+igQYnnTM3I4FateLA=
Subject key identifier: 2B:00:A1:D6:7E:C5:3E:57:85:F4:EA:9B:42:75:06:86:BD:95:BA:DE
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer: /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial: 019653492CE596B177609054359FEEE7355B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number: 129D
Signing time: Sun 20 Apr 2025 13:00:26 +0000
Manifest this update: Sun 20 Apr 2025 13:00:26 +0000
Manifest next update: Mon 21 Apr 2025 13:00:26 +0000
Files and hashes: 1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: EcnJSebQjZWpjjTOv6B7IF6KFBcjfQk6+20vE7uYVoE=)
2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:2c:e5:96:b1:77:60:90:54:35:9f:ee:e7:35:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Validity
Not Before: Apr 20 13:00:26 2025 GMT
Not After : Apr 21 13:00:26 2025 GMT
Subject: CN=2b00a1d67ec53e5785f4ea9b42750686bd95bade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:86:05:76:7d:c3:59:12:f5:fd:8d:81:e3:
6d:77:1a:1c:c2:37:da:b2:4e:30:1f:b2:0b:0b:09:
5f:81:84:31:bc:49:9e:8a:73:57:bb:44:bb:08:50:
7c:31:67:8d:f2:f4:47:4b:85:03:13:1e:51:d0:a7:
32:2e:91:9e:8f:50:78:38:6b:b8:a9:e0:1d:fa:67:
07:25:d0:cc:aa:76:5b:7b:6e:99:be:56:4e:bc:6f:
c7:b1:a5:9e:18:c2:6b:ef:f0:c7:55:e3:dc:98:3f:
3d:d0:86:75:46:d0:d7:eb:f0:5c:c7:fa:d3:73:17:
bd:f7:78:75:70:41:58:7b:5c:73:37:fa:36:d3:de:
b8:3c:40:18:e8:f7:41:34:cc:3f:6c:69:32:8c:71:
be:1c:11:3f:99:fc:4d:1b:19:68:a4:fc:88:8b:d5:
80:08:06:16:44:c1:aa:2b:31:47:e8:b2:e2:d5:4d:
34:53:38:71:f3:7b:48:8a:97:ce:83:bd:15:d6:2e:
c5:69:f0:eb:e0:10:19:f7:35:bd:42:41:54:45:69:
88:10:68:b7:39:b2:1e:45:a3:ce:51:7a:eb:b1:52:
11:53:32:2e:12:1a:6b:23:e7:f7:e0:64:87:20:96:
ca:da:ee:e7:1d:f3:ea:de:18:4f:9f:6e:43:56:e6:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:00:A1:D6:7E:C5:3E:57:85:F4:EA:9B:42:75:06:86:BD:95:BA:DE
X509v3 Authority Key Identifier:
keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:5b:ff:09:0c:d4:84:0c:19:00:00:95:8e:90:af:5c:dd:
e6:83:33:bd:0d:54:b8:a2:b6:0e:94:1a:cc:f3:10:ff:28:e8:
78:f0:d6:e8:86:cc:ca:41:fe:b7:d1:87:77:e9:b0:bd:25:b5:
e6:2a:1e:24:78:08:1c:86:7f:83:c3:72:8e:17:ee:1a:90:14:
e3:d1:2a:b5:e8:1b:19:9e:72:35:0c:84:0e:5f:1d:4b:60:c0:
49:64:20:b4:03:d2:92:b4:a8:2c:07:52:93:7a:18:6c:84:c1:
a8:d7:44:40:fe:93:e7:4f:94:9c:2c:19:39:59:87:28:d7:52:
3a:da:0b:20:26:eb:c4:50:02:9d:07:3c:c2:b0:fc:b6:f2:88:
25:2e:bb:9b:25:40:2e:20:1c:76:eb:1a:d5:66:30:b6:9d:ff:
53:90:71:ff:9d:13:94:ce:d6:9b:ec:51:4b:77:42:90:db:7e:
6b:59:40:0e:5d:f6:81:60:a3:90:b8:e0:38:32:eb:44:0e:95:
2e:e9:05:0c:0b:db:f9:a7:64:25:7a:1a:be:3f:ed:53:65:e5:
ae:5e:1b:03:45:13:63:53:73:db:6e:e1:85:19:e1:d2:94:b8:
6c:2a:12:ee:53:c9:57:61:11:49:c8:90:67:99:8a:31:a1:fe:
f6:f9:72:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSSzllrF3YJBUNZ/u5zVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOGQ2ZTNkY2YyNThhZTI2YjBjZmE2ZmZkZWY0NjdjNTRi
YjdkOWYwHhcNMjUwNDIwMTMwMDI2WhcNMjUwNDIxMTMwMDI2WjAzMTEwLwYDVQQD
EygyYjAwYTFkNjdlYzUzZTU3ODVmNGVhOWI0Mjc1MDY4NmJkOTViYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8KGBXZ9w1kS9f2NgeNtdxocwjfa
sk4wH7ILCwlfgYQxvEmeinNXu0S7CFB8MWeN8vRHS4UDEx5R0KcyLpGej1B4OGu4
qeAd+mcHJdDMqnZbe26ZvlZOvG/HsaWeGMJr7/DHVePcmD890IZ1RtDX6/Bcx/rT
cxe993h1cEFYe1xzN/o20964PEAY6PdBNMw/bGkyjHG+HBE/mfxNGxlopPyIi9WA
CAYWRMGqKzFH6LLi1U00Uzhx83tIipfOg70V1i7FafDr4BAZ9zW9QkFURWmIEGi3
ObIeRaPOUXrrsVIRUzIuEhprI+f34GSHIJbK2u7nHfPq3hhPn25DVub6IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsAodZ+xT5XhfTqm0J1Boa9lbreMB8GA1UdIwQY
MBaAFJCNbj3PJYriawz6b/3vRnxUu32fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUt
ZWQ2MTE0Yzc5ZGFlLzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi85NmMxZGUtYzFmZC00OWM1LTllZTUtZWQ2MTE0Yzc5ZGFl
LzEva0kxdVBjOGxpdUpyRFBwdl9lOUdmRlM3Zlo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyZb/wkM
1IQMGQAAlY6Qr1zd5oMzvQ1UuKK2DpQazPMQ/yjoePDW6IbMykH+t9GHd+mwvSW1
5ioeJHgIHIZ/g8NyjhfuGpAU49EqtegbGZ5yNQyEDl8dS2DASWQgtAPSkrSoLAdS
k3oYbITBqNdEQP6T50+UnCwZOVmHKNdSOtoLICbrxFACnQc8wrD8tvKIJS67myVA
LiAcdusa1WYwtp3/U5Bx/50TlM7Wm+xRS3dCkNt+a1lADl32gWCjkLjgODLrRA6V
LukFDAvb+adkJXoavj/tU2Xlrl4bA0UTY1Nz227hhRnh0pS4bCoS7lPJV2ERSciQ
Z5mKMaH+9vlyeA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:36 2025 by rpki-client