Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
File: c7lkn2pvtixtzQzowN8WVcEjZDQ.mft (raw, json)
Hash identifier: iTzE4upzufVLoVRvTrvI8A8aYVZtNF8CgjFLLmMF2ms=
Subject key identifier: 8A:7E:BD:0E:9C:22:D7:32:BF:B4:52:97:2D:77:92:6C:03:6E:CF:DD
Authority key identifier: 73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
Certificate issuer: /CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Certificate serial: 01964F6C9DDA2157DBB7F5A55F16F2626303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
Manifest number: 05AC
Signing time: Sat 19 Apr 2025 19:00:40 +0000
Manifest this update: Sat 19 Apr 2025 19:00:40 +0000
Manifest next update: Sun 20 Apr 2025 19:00:40 +0000
Files and hashes: 1: c7lkn2pvtixtzQzowN8WVcEjZDQ.crl (hash: zIzjd/YGCqLfht59iNUFAATSKMZgDCKCiKOoQoCf9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:9d:da:21:57:db:b7:f5:a5:5f:16:f2:62:63:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b9649f6a6fb62c6dcd0ce8c0df1655c1236434
Validity
Not Before: Apr 19 19:00:40 2025 GMT
Not After : Apr 20 19:00:40 2025 GMT
Subject: CN=8a7ebd0e9c22d732bfb452972d77926c036ecfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b5:ad:0e:21:c0:eb:30:ad:e5:34:65:15:ad:
fa:87:4d:ca:68:11:75:ef:95:02:ea:fb:b2:16:d6:
eb:68:eb:fd:1a:0d:14:a6:1d:06:74:d2:6e:6d:73:
83:28:eb:78:c2:92:6f:35:ee:dc:cd:39:d7:bd:b3:
09:9e:96:92:7b:87:da:47:cf:3e:04:92:43:03:4c:
86:ea:58:47:21:98:2b:3b:59:ba:52:a6:4b:fa:1a:
97:ff:e2:91:2e:aa:d4:22:e5:c0:df:64:9f:e8:03:
59:28:87:c8:92:bc:60:61:19:ae:ca:b0:6b:ef:18:
2d:92:3c:57:68:b0:ce:2c:85:2f:26:c3:f8:d9:38:
62:c9:6f:9f:bb:fb:87:e4:ea:fb:04:54:02:a4:b5:
1d:ba:e1:1c:63:32:13:c1:20:0a:87:90:d1:1f:fe:
2b:cd:2a:f5:1f:aa:07:0a:b0:51:3d:74:5b:46:34:
46:da:17:29:63:e4:15:0e:32:24:5c:96:98:cf:e8:
9a:d0:d6:35:5d:78:4f:63:3a:04:31:17:c9:b3:21:
c4:c4:b3:75:ce:16:97:21:72:9d:15:10:a0:ca:24:
28:e3:05:5c:74:51:0a:0d:ce:73:86:b9:8e:df:39:
6b:91:a1:80:3e:42:88:62:7c:17:a3:51:be:61:8d:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:BD:0E:9C:22:D7:32:BF:B4:52:97:2D:77:92:6C:03:6E:CF:DD
X509v3 Authority Key Identifier:
keyid:73:B9:64:9F:6A:6F:B6:2C:6D:CD:0C:E8:C0:DF:16:55:C1:23:64:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7lkn2pvtixtzQzowN8WVcEjZDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8af89c-3ae4-4742-b0ab-7e138df61057/1/c7lkn2pvtixtzQzowN8WVcEjZDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:76:70:75:c0:e8:e2:0f:13:33:2b:55:9a:75:66:ea:0d:da:
46:ac:26:74:8a:9d:18:6c:e2:57:0e:a1:bd:d4:9e:d3:aa:24:
6f:85:e1:41:97:f0:83:ce:c4:c1:34:23:19:14:be:0e:c5:63:
9e:91:86:e5:d0:36:93:5e:ab:cf:7d:bd:1c:f2:ab:b3:87:56:
ae:7a:51:55:a5:c2:91:1e:ae:39:de:e1:86:a6:00:ca:fd:a7:
6f:78:29:53:b4:17:0f:bb:7f:11:02:50:09:0b:a6:2a:95:01:
51:cc:31:bc:aa:86:3a:4e:c9:93:0c:c4:df:9e:04:66:7f:b3:
dc:78:50:4e:fb:3b:4d:1e:ed:81:43:70:a9:63:a5:d0:66:08:
39:88:4d:cb:11:6e:d4:f7:1a:f1:32:2f:29:7b:88:9e:47:0f:
76:b6:92:46:d7:eb:f5:44:ef:fd:8c:e4:a7:fe:8b:97:dd:94:
10:7a:1b:c9:14:a2:51:f9:d4:2e:9a:74:2b:6d:33:5c:b4:a5:
09:01:6c:6d:72:32:3e:2f:bf:43:02:08:e2:0b:c2:25:db:9f:
35:e6:66:47:6b:92:df:3f:a7:c7:67:02:51:3a:e0:07:f5:02:
15:43:42:83:7f:9e:ae:6e:ae:89:4a:f4:f6:ce:b4:be:33:0d:
d0:1c:03:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbJ3aIVfbt/WlXxbyYmMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYjk2NDlmNmE2ZmI2MmM2ZGNkMGNlOGMwZGYxNjU1YzEy
MzY0MzQwHhcNMjUwNDE5MTkwMDQwWhcNMjUwNDIwMTkwMDQwWjAzMTEwLwYDVQQD
Eyg4YTdlYmQwZTljMjJkNzMyYmZiNDUyOTcyZDc3OTI2YzAzNmVjZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLWtDiHA6zCt5TRlFa36h03KaBF1
75UC6vuyFtbraOv9Gg0Uph0GdNJubXODKOt4wpJvNe7czTnXvbMJnpaSe4faR88+
BJJDA0yG6lhHIZgrO1m6UqZL+hqX/+KRLqrUIuXA32Sf6ANZKIfIkrxgYRmuyrBr
7xgtkjxXaLDOLIUvJsP42ThiyW+fu/uH5Or7BFQCpLUduuEcYzITwSAKh5DRH/4r
zSr1H6oHCrBRPXRbRjRG2hcpY+QVDjIkXJaYz+ia0NY1XXhPYzoEMRfJsyHExLN1
zhaXIXKdFRCgyiQo4wVcdFEKDc5zhrmO3zlrkaGAPkKIYnwXo1G+YY0nDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIp+vQ6cItcyv7RSly13kmwDbs/dMB8GA1UdIwQY
MBaAFHO5ZJ9qb7Ysbc0M6MDfFlXBI2Q0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWIt
N2UxMzhkZjYxMDU3LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84YWY4OWMtM2FlNC00NzQyLWIwYWItN2UxMzhkZjYxMDU3
LzEvYzdsa24ycHZ0aXh0elF6b3dOOFdWY0VqWkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHZwdcDo
4g8TMytVmnVm6g3aRqwmdIqdGGziVw6hvdSe06okb4XhQZfwg87EwTQjGRS+DsVj
npGG5dA2k16rz329HPKrs4dWrnpRVaXCkR6uOd7hhqYAyv2nb3gpU7QXD7t/EQJQ
CQumKpUBUcwxvKqGOk7JkwzE354EZn+z3HhQTvs7TR7tgUNwqWOl0GYIOYhNyxFu
1Pca8TIvKXuInkcPdraSRtfr9UTv/Yzkp/6Ll92UEHobyRSiUfnULpp0K20zXLSl
CQFsbXIyPi+/QwII4gvCJdufNeZmR2uS3z+nx2cCUTrgB/UCFUNCg3+erm6uiUr0
9s60vjMN0BwDIg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:33 2025 by rpki-client