Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
File: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft (raw, json)
Hash identifier: D2zCLec5ARDCnnnGptFEDlZ9pC4N4NrTM7QzOOiSLmY=
Subject key identifier: 15:4B:25:58:8A:22:8E:7F:36:60:1E:FA:92:7A:DC:BC:2D:85:54:C2
Authority key identifier: D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
Certificate issuer: /CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Certificate serial: 019655A5985CEB072985969BF08264F8C205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
Manifest number: 1235
Signing time: Mon 21 Apr 2025 00:00:37 +0000
Manifest this update: Mon 21 Apr 2025 00:00:37 +0000
Manifest next update: Tue 22 Apr 2025 00:00:37 +0000
Files and hashes: 1: 0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl (hash: N26DivnBWl8IUnrw5M8rlQGpeS3YJD9lL1CaN1s1//Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:98:5c:eb:07:29:85:96:9b:f0:82:64:f8:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d170d4dde23a92166a67bb13f60bc70b667d8695
Validity
Not Before: Apr 21 00:00:37 2025 GMT
Not After : Apr 22 00:00:37 2025 GMT
Subject: CN=154b25588a228e7f36601efa927adcbc2d8554c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cc:7c:30:a9:b7:ce:bb:83:4d:50:c7:92:df:
bc:d2:4b:6b:1a:33:b1:b7:c4:62:3a:fa:fe:63:4b:
4c:32:bf:07:8e:76:a7:28:73:9a:9b:a9:ea:23:e2:
fe:90:04:67:ee:12:e4:db:94:f0:81:78:e5:69:b7:
13:cd:a7:db:47:c6:d7:92:96:23:33:dd:90:65:60:
39:a9:94:e3:16:4d:b0:43:a7:06:65:fa:95:73:18:
39:46:14:4d:c4:6f:bb:4a:a5:e8:4f:70:1d:50:1a:
a7:9e:03:01:8e:0f:8d:da:c9:f4:71:87:17:3e:60:
28:12:47:09:ce:0e:0e:36:58:3b:6b:f9:91:a4:30:
ba:2b:fc:9d:51:2a:e5:61:3e:17:31:ca:d1:2c:2a:
42:2b:1e:2b:0b:00:4f:b6:b7:1f:9b:f8:81:6f:7c:
ed:f2:af:40:58:73:e8:32:f9:e0:e9:cc:ae:09:71:
dd:49:00:09:27:56:8c:f4:a9:63:4e:85:53:a5:c6:
68:77:d7:b0:5f:be:56:29:50:90:8a:de:23:7d:ec:
a7:2c:94:78:e0:fb:de:a5:5f:63:6a:bb:5c:09:e0:
e6:ee:97:c7:1c:98:c5:96:ec:8b:c2:23:cc:87:dd:
c3:d6:4f:cb:af:81:ef:a4:7c:86:c8:26:30:00:a6:
75:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4B:25:58:8A:22:8E:7F:36:60:1E:FA:92:7A:DC:BC:2D:85:54:C2
X509v3 Authority Key Identifier:
keyid:D1:70:D4:DD:E2:3A:92:16:6A:67:BB:13:F6:0B:C7:0B:66:7D:86:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/56a6ec-37be-4368-9434-7a5714f8e6da/1/0XDU3eI6khZqZ7sT9gvHC2Z9hpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9b:ef:ba:90:86:f7:9a:e3:bf:05:22:91:13:1d:ac:c7:b5:
09:6c:fb:b6:c5:70:ee:99:b0:29:71:72:67:6b:f7:b6:e1:c4:
cb:40:56:e6:dc:40:7c:55:bf:d4:ec:77:99:fb:57:ea:f6:a9:
9d:96:ef:07:e8:4b:d6:33:dc:39:2a:c3:9d:c7:0d:5a:ae:cc:
0e:ab:f4:ec:1e:ac:44:93:70:ef:71:55:44:1a:84:72:f7:e4:
13:93:3d:b3:e3:ba:af:9c:1f:be:a9:1b:d7:64:3a:f0:79:ec:
02:56:f3:28:f5:e9:73:72:81:35:00:1b:35:dc:0f:f4:1b:c1:
e2:39:52:fe:9a:dc:98:6e:51:e2:90:83:b5:a3:36:76:2f:d5:
75:06:9b:79:9b:e0:be:9b:f5:88:57:f7:27:7d:39:19:f2:e9:
be:b8:63:47:da:48:aa:ec:29:43:19:cf:91:8c:50:c7:67:3d:
c0:85:67:6c:f1:09:78:f5:8f:bd:42:8a:62:b2:8b:36:4f:3e:
d0:af:9e:98:5f:b2:8b:3e:25:44:ac:85:d7:26:27:5e:18:98:
3a:00:d6:8a:53:a4:66:a9:e4:d0:a3:48:b9:31:11:17:89:8b:
2e:de:34:dd:c1:ed:30:0f:0d:5b:db:d7:54:bb:14:29:97:9f:
d4:bd:58:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpZhc6wcphZab8IJk+MIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNzBkNGRkZTIzYTkyMTY2YTY3YmIxM2Y2MGJjNzBiNjY3
ZDg2OTUwHhcNMjUwNDIxMDAwMDM3WhcNMjUwNDIyMDAwMDM3WjAzMTEwLwYDVQQD
EygxNTRiMjU1ODhhMjI4ZTdmMzY2MDFlZmE5MjdhZGNiYzJkODU1NGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsx8MKm3zruDTVDHkt+80ktrGjOx
t8RiOvr+Y0tMMr8HjnanKHOam6nqI+L+kARn7hLk25TwgXjlabcTzafbR8bXkpYj
M92QZWA5qZTjFk2wQ6cGZfqVcxg5RhRNxG+7SqXoT3AdUBqnngMBjg+N2sn0cYcX
PmAoEkcJzg4ONlg7a/mRpDC6K/ydUSrlYT4XMcrRLCpCKx4rCwBPtrcfm/iBb3zt
8q9AWHPoMvng6cyuCXHdSQAJJ1aM9KljToVTpcZod9ewX75WKVCQit4jfeynLJR4
4PvepV9jartcCeDm7pfHHJjFluyLwiPMh93D1k/Lr4HvpHyGyCYwAKZ1vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVLJViKIo5/NmAe+pJ63LwthVTCMB8GA1UdIwQY
MBaAFNFw1N3iOpIWame7E/YLxwtmfYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQt
N2E1NzE0ZjhlNmRhLzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81NmE2ZWMtMzdiZS00MzY4LTk0MzQtN2E1NzE0ZjhlNmRh
LzEvMFhEVTNlSTZraFpxWjdzVDlndkhDMlo5aHBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5vvupCG
95rjvwUikRMdrMe1CWz7tsVw7pmwKXFyZ2v3tuHEy0BW5txAfFW/1Ox3mftX6vap
nZbvB+hL1jPcOSrDnccNWq7MDqv07B6sRJNw73FVRBqEcvfkE5M9s+O6r5wfvqkb
12Q68HnsAlbzKPXpc3KBNQAbNdwP9BvB4jlS/prcmG5R4pCDtaM2di/VdQabeZvg
vpv1iFf3J305GfLpvrhjR9pIquwpQxnPkYxQx2c9wIVnbPEJePWPvUKKYrKLNk8+
0K+emF+yiz4lRKyF1yYnXhiYOgDWilOkZqnk0KNIuTERF4mLLt403cHtMA8NW9vX
VLsUKZef1L1YWA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:59:57 2025 by rpki-client