Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
File: IJ2ng837PLbZvILBktbXKrtKM20.mft (raw, json)
Hash identifier: cRU2EXBFQpvN49MUuQHTDE3KZBzsi9sNUVNBu8ISKek=
Subject key identifier: 21:3D:05:A1:87:06:8A:86:4B:16:6F:6D:6C:74:99:A3:46:E2:E0:7D
Authority key identifier: 20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
Certificate issuer: /CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Certificate serial: 01965500EC84228B5D033D3DD8D4B8E5EE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
Manifest number: 013F
Signing time: Sun 20 Apr 2025 21:00:45 +0000
Manifest this update: Sun 20 Apr 2025 21:00:45 +0000
Manifest next update: Mon 21 Apr 2025 21:00:45 +0000
Files and hashes: 1: 2n3afJDZ2VaAW1ICi9wuuluJH-s.roa (hash: n7gdmzqfRPjhPckkIN46JD6+pmnsuH8Fvwcad0thHWk=)
2: IJ2ng837PLbZvILBktbXKrtKM20.crl (hash: iGsfbtBoO8b3AMIbUZ81mm+RuirGQTMgTRVMqoPW5m8=)
3: fc650b5-Hy28l_7CM0InWSbhHHA.roa (hash: I0jfOZTYpGZasFE0U01uqVVs9byyAIXg5OzAj9nSBPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ec:84:22:8b:5d:03:3d:3d:d8:d4:b8:e5:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=209da783cdfb3cb6d9bc82c192d6d72abb4a336d
Validity
Not Before: Apr 20 21:00:45 2025 GMT
Not After : Apr 21 21:00:45 2025 GMT
Subject: CN=213d05a187068a864b166f6d6c7499a346e2e07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:af:19:26:c1:5c:c9:99:0f:5d:6b:1c:82:
d6:71:1a:15:bc:6e:6a:02:1e:ca:41:e5:63:71:6b:
8c:20:00:01:03:4a:43:b0:56:c1:41:1e:8f:f6:86:
37:9e:47:9d:e8:69:aa:10:77:ed:58:fc:1f:60:49:
8c:a3:ae:02:5b:5f:80:76:ec:e5:9b:f6:9b:8b:f6:
98:a5:0c:2e:de:de:07:71:54:24:e0:d9:3d:57:7d:
d7:a3:93:08:04:f6:54:1f:83:b4:69:30:ad:dd:c8:
88:5c:dc:03:14:52:94:72:8b:eb:6c:6e:82:dc:6b:
7d:fe:7b:0b:08:48:78:7b:0a:63:17:e5:64:a1:82:
ab:1c:b4:25:c4:c3:b3:11:d2:76:1d:88:6f:69:5a:
c5:01:ce:bd:b4:bd:10:ed:9b:81:d1:0b:46:97:78:
90:70:63:5c:0b:36:c6:fe:2d:78:a0:38:0b:0b:11:
da:a4:41:3d:ec:65:32:00:b4:88:77:2a:70:12:f2:
00:1c:04:91:ff:4a:bb:d6:fb:04:5c:3e:fe:ce:1f:
8c:c2:6c:35:5d:06:37:37:37:c8:9e:44:54:ee:5f:
87:56:23:bf:82:33:27:ea:ab:a5:6e:5e:b9:13:63:
9a:12:1a:da:23:69:ae:3c:22:aa:82:02:a4:7b:47:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:05:A1:87:06:8A:86:4B:16:6F:6D:6C:74:99:A3:46:E2:E0:7D
X509v3 Authority Key Identifier:
keyid:20:9D:A7:83:CD:FB:3C:B6:D9:BC:82:C1:92:D6:D7:2A:BB:4A:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJ2ng837PLbZvILBktbXKrtKM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5d59c6-f089-4530-a097-28461be89740/1/IJ2ng837PLbZvILBktbXKrtKM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:06:82:30:5f:fc:17:a1:8e:44:1f:36:e1:3b:ed:79:bb:
4b:ed:d3:74:8c:29:70:8a:b5:8f:51:b8:cb:44:05:9e:5b:37:
7a:f8:a4:e5:54:70:de:58:9b:8b:d8:40:c1:29:ab:dd:95:a3:
4a:71:8e:c7:c8:94:ba:fe:ca:4e:2d:71:ec:26:5f:22:72:08:
de:c6:19:b9:50:2b:19:ea:58:d5:4f:0d:6e:b5:22:07:b8:b1:
32:b2:f0:ca:e1:fa:d0:c8:a4:51:5a:f9:31:fa:e1:01:15:f3:
ea:bc:58:8b:49:ea:c6:65:c4:c2:25:58:31:61:e7:2f:b9:95:
54:51:41:f2:e6:c1:08:97:8b:a4:68:82:74:6a:bf:a9:c9:78:
2b:09:04:cc:4d:35:3e:ae:40:6e:8e:5f:be:60:4c:f7:58:33:
0e:ed:ca:75:a6:e1:4e:24:97:5f:37:09:47:ff:31:ac:98:f1:
f5:e8:8a:ba:81:b0:30:92:4e:9b:d8:5a:c4:71:ea:9b:55:e4:
10:ea:69:32:0b:a5:af:2f:c4:2c:72:3e:8e:6d:79:95:13:c7:
33:cc:8d:65:a6:0b:da:fa:29:5b:03:cf:da:cd:f9:ca:22:1d:
fb:44:2e:48:29:59:3b:59:8b:91:3c:f5:a2:f3:fb:6a:35:04:
8b:1b:a7:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAOyEIotdAz092NS45e6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOWRhNzgzY2RmYjNjYjZkOWJjODJjMTkyZDZkNzJhYmI0
YTMzNmQwHhcNMjUwNDIwMjEwMDQ1WhcNMjUwNDIxMjEwMDQ1WjAzMTEwLwYDVQQD
EygyMTNkMDVhMTg3MDY4YTg2NGIxNjZmNmQ2Yzc0OTlhMzQ2ZTJlMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxmvGSbBXMmZD11rHILWcRoVvG5q
Ah7KQeVjcWuMIAABA0pDsFbBQR6P9oY3nked6GmqEHftWPwfYEmMo64CW1+Aduzl
m/abi/aYpQwu3t4HcVQk4Nk9V33Xo5MIBPZUH4O0aTCt3ciIXNwDFFKUcovrbG6C
3Gt9/nsLCEh4ewpjF+VkoYKrHLQlxMOzEdJ2HYhvaVrFAc69tL0Q7ZuB0QtGl3iQ
cGNcCzbG/i14oDgLCxHapEE97GUyALSIdypwEvIAHASR/0q71vsEXD7+zh+Mwmw1
XQY3NzfInkRU7l+HViO/gjMn6qulbl65E2OaEhraI2muPCKqggKke0fb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCE9BaGHBoqGSxZvbWx0maNG4uB9MB8GA1UdIwQY
MBaAFCCdp4PN+zy22byCwZLW1yq7SjNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTct
Mjg0NjFiZTg5NzQwLzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS81ZDU5YzYtZjA4OS00NTMwLWEwOTctMjg0NjFiZTg5NzQw
LzEvSUoybmc4MzdQTGJadklMQmt0YlhLcnRLTTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltwGgjBf
/BehjkQfNuE77Xm7S+3TdIwpcIq1j1G4y0QFnls3evik5VRw3libi9hAwSmr3ZWj
SnGOx8iUuv7KTi1x7CZfInII3sYZuVArGepY1U8NbrUiB7ixMrLwyuH60MikUVr5
MfrhARXz6rxYi0nqxmXEwiVYMWHnL7mVVFFB8ubBCJeLpGiCdGq/qcl4KwkEzE01
Pq5Abo5fvmBM91gzDu3KdabhTiSXXzcJR/8xrJjx9eiKuoGwMJJOm9haxHHqm1Xk
EOppMgulry/ELHI+jm15lRPHM8yNZaYL2vopWwPP2s35yiId+0QuSClZO1mLkTz1
ovP7ajUEixunEw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:18:10 2025 by rpki-client