Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
File: 9oUCGMB4Hne2SXXDTBalwSm3nrk.mft (raw, json)
Hash identifier: vFAp+ay9lIf9YXeyrKrlqW/m480kn6WepocX8hbeToY=
Subject key identifier: D1:10:83:15:3E:64:18:CF:AE:5F:B4:22:85:46:AC:14:79:8A:EF:79
Authority key identifier: F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
Certificate issuer: /CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Certificate serial: 0196591537A80A71C1F2996F823934671440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
Manifest number: 19
Signing time: Mon 21 Apr 2025 16:01:24 +0000
Manifest this update: Mon 21 Apr 2025 16:01:24 +0000
Manifest next update: Tue 22 Apr 2025 16:01:24 +0000
Files and hashes: 1: 9oUCGMB4Hne2SXXDTBalwSm3nrk.crl (hash: a8T06Xonk7sQrltpiL1Tc+wHEzfC55XEksK6BX+ZuUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:37:a8:0a:71:c1:f2:99:6f:82:39:34:67:14:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6850218c0781e77b64975c34c16a5c129b79eb9
Validity
Not Before: Apr 21 16:01:24 2025 GMT
Not After : Apr 22 16:01:24 2025 GMT
Subject: CN=d11083153e6418cfae5fb4228546ac14798aef79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:13:3e:e6:f7:ce:c5:e2:b5:df:e9:78:fc:
6c:21:f0:ed:ea:83:53:11:d6:4c:13:5e:d5:d6:9b:
c1:88:f2:c6:3a:13:6e:ad:9a:88:94:64:dc:52:1a:
f3:c8:18:b3:9a:12:ee:33:40:3a:11:ae:5e:44:9e:
79:99:81:45:68:45:f8:be:d5:29:fc:66:c7:94:8f:
cf:1e:67:83:0c:97:09:86:f0:7d:01:a5:53:70:53:
9b:03:30:9e:cf:4f:9a:e5:9c:19:1c:90:58:f9:f8:
70:9b:cc:da:ca:bf:a5:8d:de:0f:b6:a2:d3:1e:a3:
8c:43:e6:80:09:51:6d:02:e9:26:07:ac:d2:ec:fd:
b7:61:1b:a6:df:5c:f3:5f:fe:ff:22:91:24:a8:78:
50:97:83:55:62:a9:dd:34:1b:24:41:76:67:ed:93:
07:c6:05:1f:95:6a:da:9b:94:51:6d:22:9b:bf:c8:
16:65:c8:f2:33:dd:22:61:92:f2:0a:14:3d:6c:92:
3e:b1:43:d1:65:49:c7:4b:a9:4f:66:26:21:ca:26:
45:b5:da:13:20:f9:5b:55:40:54:86:b2:a4:86:ce:
4d:d7:1d:ed:7e:89:75:ab:04:25:8d:6a:34:3c:60:
d1:04:9f:7e:71:49:46:68:20:7d:b9:34:36:05:8b:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:10:83:15:3E:64:18:CF:AE:5F:B4:22:85:46:AC:14:79:8A:EF:79
X509v3 Authority Key Identifier:
keyid:F6:85:02:18:C0:78:1E:77:B6:49:75:C3:4C:16:A5:C1:29:B7:9E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oUCGMB4Hne2SXXDTBalwSm3nrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e62615-b7a1-480e-a39d-1ac382dd5c7e/1/9oUCGMB4Hne2SXXDTBalwSm3nrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e2:c0:cf:93:10:eb:6d:46:7d:71:07:a9:59:f2:5f:a5:09:
72:6b:4c:df:d8:cb:69:18:6c:08:c2:8c:e5:50:76:60:f6:60:
a2:21:15:83:e3:07:6d:5e:df:7b:9f:e5:fd:e3:22:dc:b6:f9:
5e:b9:45:65:0c:f9:25:67:3b:60:f6:aa:6e:22:7a:04:1f:44:
dd:6c:ea:78:61:1a:ad:7f:b1:5b:04:b6:8b:c2:53:6c:6c:c8:
51:d5:34:47:da:0f:b8:32:a4:5a:fc:dc:ab:0c:fd:de:6a:60:
48:06:23:2b:00:98:8b:c9:24:73:e9:98:1f:0e:f6:13:3f:3b:
72:c2:e1:fa:87:4d:7f:4e:f8:c8:69:38:84:ca:b6:44:02:2f:
d1:6c:d3:aa:1c:73:dd:d1:61:53:97:34:85:af:61:9a:f6:06:
c1:b1:59:91:76:46:f5:20:e2:1d:ed:09:80:ba:e3:87:74:9d:
42:a0:73:1e:da:9d:be:6b:82:95:02:fd:4b:56:af:a6:e4:4a:
80:1f:d2:18:ed:6c:76:66:96:c2:16:78:48:48:93:22:5c:1e:
6a:16:07:a0:67:67:a1:05:4c:84:84:89:b6:33:47:52:67:cf:
16:d5:53:47:28:6c:e8:47:22:b2:d2:77:54:84:cc:89:f7:5c:
68:82:a7:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFTeoCnHB8plvgjk0ZxRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODUwMjE4YzA3ODFlNzdiNjQ5NzVjMzRjMTZhNWMxMjli
NzllYjkwHhcNMjUwNDIxMTYwMTI0WhcNMjUwNDIyMTYwMTI0WjAzMTEwLwYDVQQD
EyhkMTEwODMxNTNlNjQxOGNmYWU1ZmI0MjI4NTQ2YWMxNDc5OGFlZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2oTPub3zsXitd/pePxsIfDt6oNT
EdZME17V1pvBiPLGOhNurZqIlGTcUhrzyBizmhLuM0A6Ea5eRJ55mYFFaEX4vtUp
/GbHlI/PHmeDDJcJhvB9AaVTcFObAzCez0+a5ZwZHJBY+fhwm8zayr+ljd4PtqLT
HqOMQ+aACVFtAukmB6zS7P23YRum31zzX/7/IpEkqHhQl4NVYqndNBskQXZn7ZMH
xgUflWram5RRbSKbv8gWZcjyM90iYZLyChQ9bJI+sUPRZUnHS6lPZiYhyiZFtdoT
IPlbVUBUhrKkhs5N1x3tfol1qwQljWo0PGDRBJ9+cUlGaCB9uTQ2BYvElQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEQgxU+ZBjPrl+0IoVGrBR5iu95MB8GA1UdIwQY
MBaAFPaFAhjAeB53tkl1w0wWpcEpt565MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9VQ0dNQjRIbmUyU1hYRFRCYWx3U20zbnJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lNjI2MTUtYjdhMS00ODBlLWEzOWQt
MWFjMzgyZGQ1YzdlLzEvOW9VQ0dNQjRIbmUyU1hYRFRCYWx3U20zbnJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lNjI2MTUtYjdhMS00ODBlLWEzOWQtMWFjMzgyZGQ1Yzdl
LzEvOW9VQ0dNQjRIbmUyU1hYRFRCYWx3U20zbnJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeLAz5MQ
621GfXEHqVnyX6UJcmtM39jLaRhsCMKM5VB2YPZgoiEVg+MHbV7fe5/l/eMi3Lb5
XrlFZQz5JWc7YPaqbiJ6BB9E3WzqeGEarX+xWwS2i8JTbGzIUdU0R9oPuDKkWvzc
qwz93mpgSAYjKwCYi8kkc+mYHw72Ez87csLh+odNf074yGk4hMq2RAIv0WzTqhxz
3dFhU5c0ha9hmvYGwbFZkXZG9SDiHe0JgLrjh3SdQqBzHtqdvmuClQL9S1avpuRK
gB/SGO1sdmaWwhZ4SEiTIlweahYHoGdnoQVMhISJtjNHUmfPFtVTRyhs6EcistJ3
VITMifdcaIKnPw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:01 2025 by rpki-client