Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
File: dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft (raw, json)
Hash identifier: EE8mo1B8/KGKO/s2dURE+vFs23DPLaA0NirKMLHWqw8=
Subject key identifier: 56:07:37:A6:EC:E6:58:25:9B:52:6B:20:D7:6B:1F:B3:B9:96:80:6B
Authority key identifier: 74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
Certificate issuer: /CN=74b975898d10f1a5052133e1e25036c6114d8876
Certificate serial: 01965CBA6F00BB32F2E30834AB35D5741851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
Manifest number: 119C
Signing time: Tue 22 Apr 2025 09:00:43 +0000
Manifest this update: Tue 22 Apr 2025 09:00:43 +0000
Manifest next update: Wed 23 Apr 2025 09:00:43 +0000
Files and hashes: 1: dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl (hash: naDSVrasjuvnEz1Oe7TdDhj1vqqK6E1wIUgNWmLzt/A=)
2: z_2rtoFCvPkDkADqibZPjoJmwkw.roa (hash: q/SzHtsnHuDBpVkpEWhHESnMoXOnwPbEJuDNiDhbwHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:6f:00:bb:32:f2:e3:08:34:ab:35:d5:74:18:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b975898d10f1a5052133e1e25036c6114d8876
Validity
Not Before: Apr 22 09:00:43 2025 GMT
Not After : Apr 23 09:00:43 2025 GMT
Subject: CN=560737a6ece658259b526b20d76b1fb3b996806b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:e7:fd:61:a9:4c:df:71:38:3c:37:35:4d:
79:cd:f8:b7:95:8d:d7:65:95:8c:a5:60:be:30:ad:
12:43:8c:57:be:5d:f4:18:58:d3:06:58:d5:86:64:
52:74:e1:9b:90:0f:01:5b:b2:d0:a1:1e:32:f5:1d:
88:69:d9:6e:c7:a0:a8:50:29:56:c1:bf:24:40:0b:
8c:68:8e:00:8e:c4:47:f7:fc:d3:59:68:29:61:d0:
e1:c7:97:9d:5e:e6:e8:a5:d9:63:76:e3:02:06:25:
48:a1:8a:98:1f:f0:b4:73:72:5a:b2:11:62:df:3c:
7d:78:d2:36:3f:94:47:7d:d3:f9:b4:d1:79:ea:e1:
7a:8a:ed:3f:0a:11:ab:46:63:30:3b:b0:39:b1:05:
9f:6f:95:72:82:64:ee:30:fe:66:23:98:1f:6f:2c:
ed:89:90:88:02:0f:76:5c:b0:0f:eb:e8:c0:44:ad:
b8:35:f5:4f:98:e2:8a:5c:91:4c:dd:98:d9:e0:21:
56:5a:c6:4c:93:6c:40:ed:42:ca:51:4c:2b:58:47:
99:d8:ae:9a:e1:68:f8:32:2f:46:d5:b6:07:a3:2a:
1a:56:b0:47:78:2d:bf:ad:dc:4e:ce:e8:a3:43:a2:
85:e2:29:56:00:c6:07:8a:2f:53:8b:37:90:f5:60:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:07:37:A6:EC:E6:58:25:9B:52:6B:20:D7:6B:1F:B3:B9:96:80:6B
X509v3 Authority Key Identifier:
keyid:74:B9:75:89:8D:10:F1:A5:05:21:33:E1:E2:50:36:C6:11:4D:88:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLl1iY0Q8aUFITPh4lA2xhFNiHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9dcd0e-f319-4403-b164-b7c872dd9675/1/dLl1iY0Q8aUFITPh4lA2xhFNiHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cb:92:2a:6e:3b:a4:80:0a:a9:38:ee:92:3d:90:22:c5:4e:
d2:d7:6d:4b:9d:1a:42:fa:a1:35:9a:3f:67:93:a3:0a:80:97:
09:36:1d:f1:da:1e:66:25:c0:c7:50:b3:46:f1:90:b8:02:1e:
35:be:eb:27:55:5d:38:a5:b9:e8:e8:d8:da:35:ab:7c:1c:aa:
20:cb:f8:31:e1:60:7b:a4:f6:fb:79:f0:0b:90:14:36:e4:bb:
a5:1f:60:84:66:6b:3c:03:1b:6d:73:0b:5c:f8:ae:f0:e1:0a:
62:92:75:d0:b6:03:f5:94:0c:c2:d3:ad:f3:22:ae:b2:18:6d:
22:a5:b4:42:38:52:c8:48:26:06:a4:a8:12:ff:6c:2a:6e:d7:
36:6f:a7:e9:2a:4d:4e:7c:93:59:26:a3:03:81:7f:84:25:47:
f4:4e:d4:e1:4f:bb:ee:3a:2e:88:af:80:57:6b:cc:c3:9d:0d:
9a:82:d2:21:f1:c9:cd:19:37:4d:52:32:3b:5f:71:12:66:c1:
c4:dd:57:48:6b:dc:1c:5d:cf:ee:d8:70:bd:4a:5f:a3:6f:60:
bd:d5:bf:18:43:ae:ab:2f:57:2f:12:a2:aa:2c:ea:78:66:5c:
80:36:86:08:bc:61:67:f6:be:af:90:6e:2f:05:87:4b:7d:e2:
3c:09:13:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcum8AuzLy4wg0qzXVdBhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0Yjk3NTg5OGQxMGYxYTUwNTIxMzNlMWUyNTAzNmM2MTE0
ZDg4NzYwHhcNMjUwNDIyMDkwMDQzWhcNMjUwNDIzMDkwMDQzWjAzMTEwLwYDVQQD
Eyg1NjA3MzdhNmVjZTY1ODI1OWI1MjZiMjBkNzZiMWZiM2I5OTY4MDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVjn/WGpTN9xODw3NU15zfi3lY3X
ZZWMpWC+MK0SQ4xXvl30GFjTBljVhmRSdOGbkA8BW7LQoR4y9R2Iadlux6CoUClW
wb8kQAuMaI4AjsRH9/zTWWgpYdDhx5edXubopdljduMCBiVIoYqYH/C0c3JashFi
3zx9eNI2P5RHfdP5tNF56uF6iu0/ChGrRmMwO7A5sQWfb5VygmTuMP5mI5gfbyzt
iZCIAg92XLAP6+jARK24NfVPmOKKXJFM3ZjZ4CFWWsZMk2xA7ULKUUwrWEeZ2K6a
4Wj4Mi9G1bYHoyoaVrBHeC2/rdxOzuijQ6KF4ilWAMYHii9TizeQ9WAMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYHN6bs5lglm1JrINdrH7O5loBrMB8GA1UdIwQY
MBaAFHS5dYmNEPGlBSEz4eJQNsYRTYh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExsMWlZMFE4YVVGSVRQaDRsQTJ4aEZOaUhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZGNkMGUtZjMxOS00NDAzLWIxNjQt
YjdjODcyZGQ5Njc1LzEvZExsMWlZMFE4YVVGSVRQaDRsQTJ4aEZOaUhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZGNkMGUtZjMxOS00NDAzLWIxNjQtYjdjODcyZGQ5Njc1
LzEvZExsMWlZMFE4YVVGSVRQaDRsQTJ4aEZOaUhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8uSKm47
pIAKqTjukj2QIsVO0tdtS50aQvqhNZo/Z5OjCoCXCTYd8doeZiXAx1CzRvGQuAIe
Nb7rJ1VdOKW56OjY2jWrfByqIMv4MeFge6T2+3nwC5AUNuS7pR9ghGZrPAMbbXML
XPiu8OEKYpJ10LYD9ZQMwtOt8yKushhtIqW0QjhSyEgmBqSoEv9sKm7XNm+n6SpN
TnyTWSajA4F/hCVH9E7U4U+77jouiK+AV2vMw50NmoLSIfHJzRk3TVIyO19xEmbB
xN1XSGvcHF3P7thwvUpfo29gvdW/GEOuqy9XLxKiqizqeGZcgDaGCLxhZ/a+r5Bu
LwWHS33iPAkT7A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:38:30 2025 by rpki-client