Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: R/Hk0WCvChiZmLNwz5OksuQAhOpMENQOKdJ6ibJ+lyY=
Subject key identifier: F6:48:C8:94:95:9B:04:8C:99:BE:1C:2C:17:BA:08:91:74:5B:1D:0C
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 01965349031E60A4612FCC9362638BC76A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 107D
Signing time: Sun 20 Apr 2025 13:00:15 +0000
Manifest this update: Sun 20 Apr 2025 13:00:15 +0000
Manifest next update: Mon 21 Apr 2025 13:00:15 +0000
Files and hashes: 1: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: refAU9l90MMng1Fzo1K3AzWemmEAXpQNk9tzORXV5Q4=)
2: g2AkX7o9HPLfXDUc9lLxF0hd7Tw.roa (hash: GtbK3C6ImbkCxUfm64Bkm+DP0kf7OaLjUPRMxP6pI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:03:1e:60:a4:61:2f:cc:93:62:63:8b:c7:6a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Apr 20 13:00:15 2025 GMT
Not After : Apr 21 13:00:15 2025 GMT
Subject: CN=f648c894959b048c99be1c2c17ba0891745b1d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:1e:40:d6:c6:5e:f2:20:d7:ee:be:f0:81:
f8:38:3d:93:c9:87:2d:bf:61:7d:95:7c:bb:7a:46:
f2:3d:35:56:ba:4f:c8:bc:1d:f7:d3:60:bd:a4:19:
e5:8a:21:dd:91:3b:50:1b:e1:d6:0e:d6:1e:2d:5b:
c0:84:84:73:e8:60:9f:72:dc:1f:bd:c3:43:df:ba:
f9:f5:69:6d:b1:05:43:ef:b7:a1:82:24:08:85:5a:
c0:66:63:77:ec:ac:d5:f1:60:4b:6c:e0:22:ed:c8:
98:53:fa:99:0d:ca:a6:9c:59:f4:9a:9f:d6:7d:33:
14:0c:a2:df:3d:3b:a1:ce:e2:9e:17:e8:e5:44:6f:
23:e4:f2:dd:d8:df:57:e4:b6:bb:d8:60:b0:c8:00:
b6:16:76:7f:4b:02:de:19:2a:93:c5:b2:20:3e:63:
3c:5c:36:54:73:16:a8:50:e2:06:cb:01:57:b2:91:
62:f1:14:a8:2a:13:e9:96:2a:88:b4:d7:8f:b8:eb:
05:2a:47:a8:6b:49:f5:91:15:90:61:a5:18:8b:44:
9a:ab:c9:f3:3e:18:5b:ea:0d:0f:59:32:18:55:5a:
00:71:fc:e0:fc:8f:28:ab:66:48:eb:42:c9:5c:01:
a8:95:3d:aa:10:ee:52:b0:62:8a:1f:4f:85:4b:db:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:C8:94:95:9B:04:8C:99:BE:1C:2C:17:BA:08:91:74:5B:1D:0C
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:35:35:3b:aa:02:52:ee:97:07:21:19:3c:0a:c5:a8:d9:c9:
99:7b:47:30:1e:a0:e5:12:19:f4:8d:22:df:d5:01:0b:e1:24:
55:ad:43:7f:ec:f3:cf:bd:58:42:af:c2:cb:55:57:16:a0:65:
fe:e4:4a:ac:f5:ba:74:7c:88:f4:cc:aa:df:d0:a7:8c:63:c6:
5a:e4:67:96:ef:dc:da:f6:ed:67:99:a5:42:3f:ed:02:63:1e:
fa:6e:a1:3a:f5:24:6a:e4:76:0e:67:ed:74:a0:50:c3:b2:85:
0c:1d:09:a6:d1:70:6f:36:bf:cb:c0:a7:e9:e3:f4:71:fc:59:
f6:4c:96:4d:f0:21:29:89:36:79:16:0c:30:73:d0:d9:a6:94:
1e:06:14:24:5f:6b:0b:fd:ad:5b:2d:72:11:bc:74:b9:b3:c6:
cf:37:41:80:3a:5e:68:95:40:a8:26:d6:66:4a:c0:71:26:6b:
9d:61:05:1a:bf:c5:bc:8b:29:4e:57:b1:69:3a:aa:8a:bf:42:
a7:36:f9:85:46:ff:87:92:ea:2b:b5:22:01:0a:0f:95:1d:c6:
3b:58:90:f9:d9:1e:ee:9d:7e:71:57:b6:9e:af:51:b3:a6:76:
60:a3:5c:03:bc:88:3f:06:c1:ed:a5:9c:fc:42:9a:a8:8c:6e:
ca:4f:f5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSQMeYKRhL8yTYmOLx2ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz
OGI1OTAwHhcNMjUwNDIwMTMwMDE1WhcNMjUwNDIxMTMwMDE1WjAzMTEwLwYDVQQD
EyhmNjQ4Yzg5NDk1OWIwNDhjOTliZTFjMmMxN2JhMDg5MTc0NWIxZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO8eQNbGXvIg1+6+8IH4OD2TyYct
v2F9lXy7ekbyPTVWuk/IvB3302C9pBnliiHdkTtQG+HWDtYeLVvAhIRz6GCfctwf
vcND37r59WltsQVD77ehgiQIhVrAZmN37KzV8WBLbOAi7ciYU/qZDcqmnFn0mp/W
fTMUDKLfPTuhzuKeF+jlRG8j5PLd2N9X5La72GCwyAC2FnZ/SwLeGSqTxbIgPmM8
XDZUcxaoUOIGywFXspFi8RSoKhPpliqItNePuOsFKkeoa0n1kRWQYaUYi0Saq8nz
Phhb6g0PWTIYVVoAcfzg/I8oq2ZI60LJXAGolT2qEO5SsGKKH0+FS9uDiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZIyJSVmwSMmb4cLBe6CJF0Wx0MMB8GA1UdIwQY
MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt
MTI1ZWVkZjhkOWYxLzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx
LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzU1O6oC
Uu6XByEZPArFqNnJmXtHMB6g5RIZ9I0i39UBC+EkVa1Df+zzz71YQq/Cy1VXFqBl
/uRKrPW6dHyI9Myq39CnjGPGWuRnlu/c2vbtZ5mlQj/tAmMe+m6hOvUkauR2Dmft
dKBQw7KFDB0JptFwbza/y8Cn6eP0cfxZ9kyWTfAhKYk2eRYMMHPQ2aaUHgYUJF9r
C/2tWy1yEbx0ubPGzzdBgDpeaJVAqCbWZkrAcSZrnWEFGr/FvIspTlexaTqqir9C
pzb5hUb/h5LqK7UiAQoPlR3GO1iQ+dke7p1+cVe2nq9Rs6Z2YKNcA7yIPwbB7aWc
/EKaqIxuyk/1lQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:26 2025 by rpki-client