Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
File: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft (raw, json)
Hash identifier: +zlCq7cThlQDDSFb6BMdCsMVVHEaflX+Z3sPWXaGwSQ=
Subject key identifier: BA:A3:77:3D:3F:40:16:17:F8:45:5B:4D:FD:05:C5:48:13:F3:A0:25
Authority key identifier: 63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
Certificate issuer: /CN=636b027bfab91aa4719a80efe021246137428bda
Certificate serial: 0196568142C3B2219B7A27A56BA9EB87FC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
Manifest number: 129E
Signing time: Mon 21 Apr 2025 04:00:33 +0000
Manifest this update: Mon 21 Apr 2025 04:00:33 +0000
Manifest next update: Tue 22 Apr 2025 04:00:33 +0000
Files and hashes: 1: Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl (hash: TmH5FLkpn04vpg9KCOv29H0BhM07fStrVaXSB0fUaRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:42:c3:b2:21:9b:7a:27:a5:6b:a9:eb:87:fc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=636b027bfab91aa4719a80efe021246137428bda
Validity
Not Before: Apr 21 04:00:33 2025 GMT
Not After : Apr 22 04:00:33 2025 GMT
Subject: CN=baa3773d3f401617f8455b4dfd05c54813f3a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:23:b8:21:00:61:ba:6f:22:c3:6d:af:75:
46:86:7f:c3:24:d3:c4:2f:09:95:51:25:a1:4f:c6:
4f:7c:25:5e:8c:dc:7e:7f:2b:78:67:83:ad:16:1a:
3f:8f:51:6b:8b:e2:5d:f4:4d:bd:39:05:9c:f6:66:
d0:be:99:ae:55:1f:69:14:45:17:80:f6:49:dc:0f:
b5:87:d1:1a:ae:39:01:f5:42:f8:49:b8:ec:85:f3:
ee:f7:3d:45:3f:93:35:29:dc:59:15:9e:f5:41:b8:
ba:6e:96:49:9e:79:49:f8:99:6c:0d:91:9c:2f:9c:
80:4f:12:04:36:ba:3e:bf:eb:d2:93:2a:ae:f0:b6:
52:e5:3e:e9:75:46:b9:1d:28:ca:66:8d:ff:61:2f:
e2:c6:33:da:b5:d3:ec:30:57:a5:ef:43:fb:0f:05:
e4:90:b5:b4:63:6e:04:05:c8:9a:bf:f8:04:4b:23:
d5:3d:97:8e:9c:b0:cd:cf:b2:3b:b4:e4:fa:b8:ae:
65:19:a1:4f:94:f0:83:2d:84:ce:22:93:61:de:5d:
73:a0:99:56:8c:d9:9d:3b:73:14:d9:65:1f:c3:ca:
6b:63:2a:ad:c4:52:ec:ea:dd:0b:63:09:7a:3e:de:
57:47:d5:c7:73:3e:2a:4d:86:c7:b8:e5:5f:87:87:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:77:3D:3F:40:16:17:F8:45:5B:4D:FD:05:C5:48:13:F3:A0:25
X509v3 Authority Key Identifier:
keyid:63:6B:02:7B:FA:B9:1A:A4:71:9A:80:EF:E0:21:24:61:37:42:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a0cdd8-092d-43bb-a2a8-880c2e4faa6e/1/Y2sCe_q5GqRxmoDv4CEkYTdCi9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1f:c7:77:6a:e6:9b:75:de:4a:43:91:61:7a:20:1b:11:3c:
a9:1f:82:43:ef:ac:2d:ba:2b:d9:e2:0e:02:2d:5c:7b:49:0e:
62:41:3a:75:55:6d:1c:91:55:7c:e7:7a:be:3d:ab:47:dc:73:
86:b7:54:80:81:32:6d:89:0e:fb:09:e1:1b:ee:a4:2f:df:2a:
35:77:74:38:a8:a3:b3:3a:5a:79:f0:96:45:63:82:27:dd:68:
70:1e:6e:e4:45:d0:92:e7:0f:28:21:c8:e0:4a:92:53:0c:40:
1d:59:f8:17:0e:b1:f8:8e:98:ad:1e:70:67:d1:d7:bf:62:54:
58:1c:b3:70:e3:7d:f9:5d:a8:96:c7:38:53:69:eb:cd:ae:b0:
7c:bd:48:98:40:7d:17:66:e6:bf:0e:22:ee:de:88:54:e2:fa:
60:fe:32:5b:17:ca:51:1a:b0:a0:a1:03:3b:0c:63:3b:e3:dc:
e0:ce:92:6f:2d:3a:19:20:41:5d:b1:52:4d:de:77:b7:67:b1:
66:7b:30:c2:43:54:a5:40:de:df:ac:f4:54:29:09:bc:e9:47:
a5:3d:79:a9:2e:a0:0f:b1:03:df:2f:e1:21:56:d9:5b:3b:5c:
51:88:17:78:64:3d:fa:c4:fc:88:9f:c7:39:8f:22:50:c4:ae:
da:ae:8e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWgULDsiGbeiela6nrh/wNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNmIwMjdiZmFiOTFhYTQ3MTlhODBlZmUwMjEyNDYxMzc0
MjhiZGEwHhcNMjUwNDIxMDQwMDMzWhcNMjUwNDIyMDQwMDMzWjAzMTEwLwYDVQQD
EyhiYWEzNzczZDNmNDAxNjE3Zjg0NTViNGRmZDA1YzU0ODEzZjNhMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJkjuCEAYbpvIsNtr3VGhn/DJNPE
LwmVUSWhT8ZPfCVejNx+fyt4Z4OtFho/j1Fri+Jd9E29OQWc9mbQvpmuVR9pFEUX
gPZJ3A+1h9EarjkB9UL4SbjshfPu9z1FP5M1KdxZFZ71Qbi6bpZJnnlJ+JlsDZGc
L5yATxIENro+v+vSkyqu8LZS5T7pdUa5HSjKZo3/YS/ixjPatdPsMFel70P7DwXk
kLW0Y24EBciav/gESyPVPZeOnLDNz7I7tOT6uK5lGaFPlPCDLYTOIpNh3l1zoJlW
jNmdO3MU2WUfw8prYyqtxFLs6t0LYwl6Pt5XR9XHcz4qTYbHuOVfh4cxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqjdz0/QBYX+EVbTf0FxUgT86AlMB8GA1UdIwQY
MBaAFGNrAnv6uRqkcZqA7+AhJGE3QovaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTJzQ2VfcTVHcVJ4bW9EdjRDRWtZVGRDaTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hMGNkZDgtMDkyZC00M2JiLWEyYTgt
ODgwYzJlNGZhYTZlLzEvWTJzQ2VfcTVHcVJ4bW9EdjRDRWtZVGRDaTlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hMGNkZDgtMDkyZC00M2JiLWEyYTgtODgwYzJlNGZhYTZl
LzEvWTJzQ2VfcTVHcVJ4bW9EdjRDRWtZVGRDaTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUx/Hd2rm
m3XeSkORYXogGxE8qR+CQ++sLbor2eIOAi1ce0kOYkE6dVVtHJFVfOd6vj2rR9xz
hrdUgIEybYkO+wnhG+6kL98qNXd0OKijszpaefCWRWOCJ91ocB5u5EXQkucPKCHI
4EqSUwxAHVn4Fw6x+I6YrR5wZ9HXv2JUWByzcON9+V2olsc4U2nrza6wfL1ImEB9
F2bmvw4i7t6IVOL6YP4yWxfKURqwoKEDOwxjO+Pc4M6Sby06GSBBXbFSTd53t2ex
ZnswwkNUpUDe36z0VCkJvOlHpT15qS6gD7ED3y/hIVbZWztcUYgXeGQ9+sT8iJ/H
OY8iUMSu2q6Omg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:10 2025 by rpki-client