Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
File: iKslD4208gR6QBWFwmTzjA4ih_4.mft (raw, json)
Hash identifier: 7+IVcMD6EsKwsnOTyR6gmqbOsdfMh5d6NJINB8UQ8LI=
Subject key identifier: 18:FA:77:08:2A:1E:E4:8F:A5:AE:D6:76:00:09:B3:C3:04:6B:13:71
Authority key identifier: 88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
Certificate issuer: /CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Certificate serial: 01965BDED62C631E9C5FB939A84512E50771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
Manifest number: 132E
Signing time: Tue 22 Apr 2025 05:00:52 +0000
Manifest this update: Tue 22 Apr 2025 05:00:52 +0000
Manifest next update: Wed 23 Apr 2025 05:00:52 +0000
Files and hashes: 1: iKslD4208gR6QBWFwmTzjA4ih_4.crl (hash: ke7nVvFZ0a71MIHZbyg9hOh+aPKbSva68OZZZEXPtmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:d6:2c:63:1e:9c:5f:b9:39:a8:45:12:e5:07:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ab250f8db4f2047a401585c264f38c0e2287fe
Validity
Not Before: Apr 22 05:00:52 2025 GMT
Not After : Apr 23 05:00:52 2025 GMT
Subject: CN=18fa77082a1ee48fa5aed6760009b3c3046b1371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:0f:f6:69:cd:94:b8:a3:aa:95:d3:6b:48:
1e:78:92:ca:f3:b5:08:75:e7:58:c6:9b:c8:85:1c:
4e:57:f5:2d:59:7f:13:88:fc:7c:15:b2:f0:1a:4a:
c8:f6:ce:ee:d9:64:77:56:d8:66:4d:7a:d4:fe:93:
a9:bb:1a:62:39:61:a1:53:e9:de:04:48:b7:76:db:
dc:58:3a:10:5c:1f:7e:61:fd:de:87:be:90:0f:5f:
b9:d7:75:d1:59:27:24:17:cd:b4:05:c9:38:7b:03:
76:ad:25:99:64:af:9b:d7:f7:44:4f:ac:0d:80:68:
22:53:91:36:b5:dd:41:07:e0:90:8d:9c:db:85:4d:
77:7d:75:0d:50:f7:43:44:15:25:f0:0b:ae:39:b5:
e7:23:43:aa:b3:71:26:e0:68:2e:ef:89:c0:fd:7c:
61:8e:b9:ed:55:d1:b2:50:8e:86:05:a9:2e:42:44:
26:24:12:4a:f0:36:2a:1b:87:9d:d2:18:5d:bc:a4:
9a:e1:43:d5:cc:74:78:1d:fa:84:67:8e:89:f2:65:
0a:7f:75:29:0d:2e:67:85:63:4d:18:b5:0a:5e:e7:
d8:a2:28:c0:65:92:b9:1f:62:e3:66:e0:c0:cd:c8:
da:0c:d3:11:30:a1:8d:70:d2:33:69:c8:ea:3c:79:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FA:77:08:2A:1E:E4:8F:A5:AE:D6:76:00:09:B3:C3:04:6B:13:71
X509v3 Authority Key Identifier:
keyid:88:AB:25:0F:8D:B4:F2:04:7A:40:15:85:C2:64:F3:8C:0E:22:87:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKslD4208gR6QBWFwmTzjA4ih_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/39adc9-db28-4b1e-bf6e-a08bf2c43460/1/iKslD4208gR6QBWFwmTzjA4ih_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ab:b6:a6:ff:0c:07:5d:fa:c8:01:37:8b:18:fd:5e:6c:d1:
2a:81:69:18:07:8d:43:8c:01:b3:e7:bd:3d:14:ae:3f:bc:83:
c5:04:f9:3d:6d:4b:56:2d:65:da:4e:29:16:74:88:a8:7d:a6:
64:3e:5b:ca:37:2a:81:0e:28:a5:9d:8d:a3:1a:ad:43:0c:25:
d7:f1:5b:db:5d:4b:94:9a:c2:65:dc:aa:41:ff:91:2c:ab:8d:
2f:6e:84:7f:1b:0a:f4:a9:6f:9e:1b:7d:c9:81:9f:60:5e:42:
78:a0:01:21:aa:7c:7f:90:46:d4:68:c5:6d:ee:95:32:04:e9:
12:eb:7b:78:b9:ee:18:91:3a:a4:1b:ad:d0:89:43:cf:0d:bd:
9d:21:a3:30:53:71:b1:0e:81:46:b9:2d:d0:26:f4:b9:4f:3e:
ed:a3:c5:dd:90:96:6d:cb:51:d8:f1:67:ef:8b:af:f1:f2:11:
e1:cd:db:6b:cb:fb:c1:8f:ad:f0:2e:28:c2:69:9d:f0:3a:cf:
32:59:3b:56:0a:46:10:54:c9:48:e1:27:fc:a9:80:87:40:8a:
2c:5f:c5:0b:eb:4c:14:0a:3f:d5:f3:fa:13:34:38:5e:1d:d4:
81:91:a3:2e:a4:dd:3a:90:6b:af:d2:3a:74:95:7b:67:ce:fd:
69:1d:29:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3tYsYx6cX7k5qEUS5QdxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWIyNTBmOGRiNGYyMDQ3YTQwMTU4NWMyNjRmMzhjMGUy
Mjg3ZmUwHhcNMjUwNDIyMDUwMDUyWhcNMjUwNDIzMDUwMDUyWjAzMTEwLwYDVQQD
EygxOGZhNzcwODJhMWVlNDhmYTVhZWQ2NzYwMDA5YjNjMzA0NmIxMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOAP9mnNlLijqpXTa0geeJLK87UI
dedYxpvIhRxOV/UtWX8TiPx8FbLwGkrI9s7u2WR3VthmTXrU/pOpuxpiOWGhU+ne
BEi3dtvcWDoQXB9+Yf3eh76QD1+513XRWSckF820Bck4ewN2rSWZZK+b1/dET6wN
gGgiU5E2td1BB+CQjZzbhU13fXUNUPdDRBUl8AuuObXnI0Oqs3Em4Ggu74nA/Xxh
jrntVdGyUI6GBakuQkQmJBJK8DYqG4ed0hhdvKSa4UPVzHR4HfqEZ46J8mUKf3Up
DS5nhWNNGLUKXufYoijAZZK5H2LjZuDAzcjaDNMRMKGNcNIzacjqPHmLqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj6dwgqHuSPpa7WdgAJs8MEaxNxMB8GA1UdIwQY
MBaAFIirJQ+NtPIEekAVhcJk84wOIof+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUt
YTA4YmYyYzQzNDYwLzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zOWFkYzktZGIyOC00YjFlLWJmNmUtYTA4YmYyYzQzNDYw
LzEvaUtzbEQ0MjA4Z1I2UUJXRndtVHpqQTRpaF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6u2pv8M
B136yAE3ixj9XmzRKoFpGAeNQ4wBs+e9PRSuP7yDxQT5PW1LVi1l2k4pFnSIqH2m
ZD5byjcqgQ4opZ2NoxqtQwwl1/Fb211LlJrCZdyqQf+RLKuNL26EfxsK9Klvnht9
yYGfYF5CeKABIap8f5BG1GjFbe6VMgTpEut7eLnuGJE6pBut0IlDzw29nSGjMFNx
sQ6BRrkt0Cb0uU8+7aPF3ZCWbctR2PFn74uv8fIR4c3ba8v7wY+t8C4owmmd8DrP
Mlk7VgpGEFTJSOEn/KmAh0CKLF/FC+tMFAo/1fP6EzQ4Xh3UgZGjLqTdOpBrr9I6
dJV7Z879aR0pUA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:16 2025 by rpki-client