Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
File: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft (raw, json)
Hash identifier: 6LMzvwLIHNM6mTGqp/Cun8bhVdNODhd1yvMx9jeVz4w=
Subject key identifier: 2D:21:76:5D:3A:C8:99:00:71:F6:BB:A1:5D:63:CB:16:3F:BA:6C:5C
Authority key identifier: 21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
Certificate issuer: /CN=218af26f9a36653f4d996719d4a410fe84af4861
Certificate serial: 0196545C47517E0E96487FF18B751F302195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
Manifest number: 03C2
Signing time: Sun 20 Apr 2025 18:00:55 +0000
Manifest this update: Sun 20 Apr 2025 18:00:55 +0000
Manifest next update: Mon 21 Apr 2025 18:00:55 +0000
Files and hashes: 1: 8aRFc9FMZuB39L9ezbDQe4rTWqI.roa (hash: d0kPdTmIfua7sOVHFgh6TKa6BfDr4mbqEziPITcO1vw=)
2: IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl (hash: KULSyupaAmdo3rHBfq349zAayqz0dfYnQzx4SySIKqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:47:51:7e:0e:96:48:7f:f1:8b:75:1f:30:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218af26f9a36653f4d996719d4a410fe84af4861
Validity
Not Before: Apr 20 18:00:55 2025 GMT
Not After : Apr 21 18:00:55 2025 GMT
Subject: CN=2d21765d3ac8990071f6bba15d63cb163fba6c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:c6:e4:c8:e1:c9:ad:bf:c3:01:82:b4:64:
32:99:56:1b:20:69:ec:92:21:13:28:bc:a7:b7:4c:
11:40:32:94:19:03:05:52:60:4c:7b:62:b5:21:99:
46:8d:a3:40:1e:a8:95:14:98:67:48:2e:b9:c2:91:
46:d1:39:b7:17:8c:73:c9:7f:05:8f:e5:bd:24:9e:
40:89:06:ea:48:51:db:3f:4c:0c:64:97:65:ec:3d:
93:78:f4:dd:b2:86:00:9e:cb:ca:b9:42:29:ea:1a:
1b:d0:b6:74:8f:ed:3a:3e:e9:73:af:24:d4:5a:d2:
8b:5c:55:d0:25:37:b4:14:1d:4e:17:85:91:da:3a:
9f:ce:63:04:34:f1:de:46:86:c8:17:f4:74:17:20:
d7:0f:21:ae:00:3d:54:dc:56:b9:63:8e:4a:22:62:
ba:73:37:f5:cc:7d:07:67:76:11:6f:17:d2:a3:49:
89:17:5e:c7:80:58:44:35:42:0e:cd:be:20:e9:f8:
47:71:6c:83:73:b4:cc:d8:fc:90:a9:dc:6f:01:a6:
73:a8:22:0d:56:e0:eb:bc:f9:65:32:2f:f4:1e:6d:
19:a0:b6:25:80:f8:24:41:10:b5:b6:8c:65:0f:76:
8b:40:e5:f4:cc:8e:0e:d8:d1:c2:e6:a1:a1:3d:90:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:21:76:5D:3A:C8:99:00:71:F6:BB:A1:5D:63:CB:16:3F:BA:6C:5C
X509v3 Authority Key Identifier:
keyid:21:8A:F2:6F:9A:36:65:3F:4D:99:67:19:D4:A4:10:FE:84:AF:48:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3e41d5-c7f1-4637-b930-184586602887/1/IYryb5o2ZT9NmWcZ1KQQ_oSvSGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3e:65:df:69:ef:1e:3d:bf:d1:24:83:e1:91:f3:68:b9:fb:
35:80:f3:99:fc:99:f4:f5:28:6c:4b:96:81:fa:1e:77:c4:73:
84:d8:84:e5:fa:9f:70:f1:09:90:bf:fb:29:ee:bb:61:a9:e1:
e0:4a:98:cb:08:d5:44:e2:94:20:0b:55:d1:31:33:e9:db:49:
d4:6c:d2:2f:6f:1e:40:28:74:34:ba:af:d0:01:d2:d6:27:99:
3c:8b:73:9c:50:f4:6b:b9:d1:16:a0:ac:27:03:f9:92:48:30:
9f:e2:2e:7d:9f:3f:0b:77:de:7b:22:34:62:4a:5b:34:14:ce:
5d:32:ef:71:e1:e9:a0:f6:4d:e8:6a:00:b2:3d:5f:8b:70:66:
29:9f:de:cd:a0:48:e5:27:4f:a5:cc:5b:88:a1:46:98:d2:0c:
aa:d8:3f:d1:f2:7c:5a:99:83:4c:1d:27:4a:9d:64:90:2c:b0:
ba:96:47:a8:95:41:76:03:d6:cc:74:d7:90:de:96:12:29:14:
de:22:f3:fc:40:32:e7:62:97:2d:b9:83:90:a0:47:32:5a:07:
5c:63:2f:36:1d:e1:94:9f:2e:78:85:39:a2:09:86:11:91:a7:
e7:93:00:a2:87:51:ab:60:30:9a:3d:9d:7a:18:b7:88:a4:a6:
96:46:12:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXEdRfg6WSH/xi3UfMCGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOGFmMjZmOWEzNjY1M2Y0ZDk5NjcxOWQ0YTQxMGZlODRh
ZjQ4NjEwHhcNMjUwNDIwMTgwMDU1WhcNMjUwNDIxMTgwMDU1WjAzMTEwLwYDVQQD
EygyZDIxNzY1ZDNhYzg5OTAwNzFmNmJiYTE1ZDYzY2IxNjNmYmE2YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQvG5Mjhya2/wwGCtGQymVYbIGns
kiETKLynt0wRQDKUGQMFUmBMe2K1IZlGjaNAHqiVFJhnSC65wpFG0Tm3F4xzyX8F
j+W9JJ5AiQbqSFHbP0wMZJdl7D2TePTdsoYAnsvKuUIp6hob0LZ0j+06PulzryTU
WtKLXFXQJTe0FB1OF4WR2jqfzmMENPHeRobIF/R0FyDXDyGuAD1U3Fa5Y45KImK6
czf1zH0HZ3YRbxfSo0mJF17HgFhENUIOzb4g6fhHcWyDc7TM2PyQqdxvAaZzqCIN
VuDrvPllMi/0Hm0ZoLYlgPgkQRC1toxlD3aLQOX0zI4O2NHC5qGhPZD/YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0hdl06yJkAcfa7oV1jyxY/umxcMB8GA1UdIwQY
MBaAFCGK8m+aNmU/TZlnGdSkEP6Er0hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAt
MTg0NTg2NjAyODg3LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zZTQxZDUtYzdmMS00NjM3LWI5MzAtMTg0NTg2NjAyODg3
LzEvSVlyeWI1bzJaVDlObVdjWjFLUVFfb1N2U0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANT5l32nv
Hj2/0SSD4ZHzaLn7NYDzmfyZ9PUobEuWgfoed8RzhNiE5fqfcPEJkL/7Ke67Yanh
4EqYywjVROKUIAtV0TEz6dtJ1GzSL28eQCh0NLqv0AHS1ieZPItznFD0a7nRFqCs
JwP5kkgwn+IufZ8/C3feeyI0YkpbNBTOXTLvceHpoPZN6GoAsj1fi3BmKZ/ezaBI
5SdPpcxbiKFGmNIMqtg/0fJ8WpmDTB0nSp1kkCywupZHqJVBdgPWzHTXkN6WEikU
3iLz/EAy52KXLbmDkKBHMloHXGMvNh3hlJ8ueIU5ogmGEZGn55MAoodRq2Awmj2d
ehi3iKSmlkYSEQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:34:52 2025 by rpki-client