Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: MJUBJfZms02gyrrfIMopy8+onBVftOgLs7v/kHsXl9k=
Subject key identifier: 44:CC:BD:31:FF:53:94:85:46:1F:6C:FF:0C:CE:0C:0D:5A:B9:E8:0D
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 01965838F87FC7DF021AE4376E5AB58F47B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0903
Signing time: Mon 21 Apr 2025 12:00:50 +0000
Manifest this update: Mon 21 Apr 2025 12:00:50 +0000
Manifest next update: Tue 22 Apr 2025 12:00:50 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: L0LqcCjYwi61qImX14ZhGPe8nAgD5SCfFmqKfc8GLGY=)
2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:f8:7f:c7:df:02:1a:e4:37:6e:5a:b5:8f:47:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Apr 21 12:00:50 2025 GMT
Not After : Apr 22 12:00:50 2025 GMT
Subject: CN=44ccbd31ff539485461f6cff0cce0c0d5ab9e80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:f4:4b:e5:c3:89:01:64:ae:d0:8b:9a:c3:
ff:7c:73:bc:4d:af:d9:f1:6d:97:86:c8:11:33:1c:
d9:6e:46:3f:fd:ac:1d:19:e6:c2:4f:d3:e8:c9:27:
d9:b4:3e:13:8c:86:02:28:a6:7c:3a:bd:d7:1b:df:
fe:ef:4e:59:9c:cb:ab:54:17:e9:00:93:f2:ed:87:
92:19:d2:0a:c0:07:cf:ec:e9:51:0b:f1:a0:f8:c9:
1f:9b:cd:31:a0:f8:f5:9b:51:6b:49:bd:b0:5f:4a:
d3:e4:dc:f2:b4:23:7c:93:e7:1e:67:28:4e:63:45:
7b:36:2c:9e:1c:c7:46:b9:4f:73:4e:53:4d:6e:d8:
bc:de:a8:57:da:48:38:2a:e4:02:57:39:72:2a:81:
be:95:d1:c5:42:a4:38:d4:ab:97:0f:1b:1c:a1:fa:
f6:c8:dd:1a:20:c4:92:b4:98:b5:de:12:86:c8:d3:
91:6c:5b:70:91:17:46:2d:8b:a2:cd:cf:19:77:08:
a8:46:c3:78:b0:3a:23:ab:fe:f1:98:fa:97:3e:23:
89:77:b9:0c:27:e2:33:6e:c4:21:2b:be:3c:0d:79:
78:5c:04:8a:66:dd:44:8b:01:12:84:f6:60:1c:f8:
86:35:73:db:f0:14:80:a0:46:de:91:9f:f1:3e:60:
78:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:BD:31:FF:53:94:85:46:1F:6C:FF:0C:CE:0C:0D:5A:B9:E8:0D
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:95:67:1a:5c:18:c1:92:5c:f2:bd:a5:7e:3b:dd:c8:63:fc:
15:e1:00:d6:ae:50:df:f2:a7:13:26:52:b4:b0:df:58:e7:e1:
b5:17:76:ba:a2:6f:50:4c:83:4f:71:36:34:04:fd:15:cb:a8:
de:32:4e:00:3a:e3:49:6f:98:b6:b9:d1:5c:80:a3:60:7c:5b:
eb:14:48:25:53:ed:05:2b:45:c2:4d:f4:ed:80:9b:f5:6d:62:
02:fd:1a:7f:fb:04:8f:9c:5a:98:13:ea:d3:3f:16:09:2a:3f:
2d:b5:ba:72:77:16:3c:0b:58:62:9e:c9:46:22:fe:3a:b9:2c:
9b:76:d1:ba:24:f9:fc:a9:1f:97:2d:c1:ce:95:a8:6c:fa:93:
b4:3e:bb:63:78:7a:83:09:16:a9:53:29:e9:6e:40:06:ab:a6:
f9:a3:1c:5b:a9:18:9c:2f:f3:9d:2b:8b:72:a9:f4:ee:11:17:
4a:b1:bf:87:64:f6:18:58:92:2c:89:5d:f6:71:20:06:34:b1:
d7:21:73:0a:fc:60:75:fc:c0:0c:ed:1f:11:d4:ba:c4:6d:50:
f4:76:ce:21:14:d5:a2:db:63:b2:ff:89:06:d3:77:a5:08:98:
18:25:35:6f:65:c4:55:28:0b:0f:18:b4:a3:b8:f1:cc:9a:5e:
d7:f5:91:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOPh/x98CGuQ3blq1j0ezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh
YTU5YzcwHhcNMjUwNDIxMTIwMDUwWhcNMjUwNDIyMTIwMDUwWjAzMTEwLwYDVQQD
Eyg0NGNjYmQzMWZmNTM5NDg1NDYxZjZjZmYwY2NlMGMwZDVhYjllODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5v0S+XDiQFkrtCLmsP/fHO8Ta/Z
8W2XhsgRMxzZbkY//awdGebCT9PoySfZtD4TjIYCKKZ8Or3XG9/+705ZnMurVBfp
AJPy7YeSGdIKwAfP7OlRC/Gg+Mkfm80xoPj1m1FrSb2wX0rT5NzytCN8k+ceZyhO
Y0V7NiyeHMdGuU9zTlNNbti83qhX2kg4KuQCVzlyKoG+ldHFQqQ41KuXDxscofr2
yN0aIMSStJi13hKGyNORbFtwkRdGLYuizc8ZdwioRsN4sDojq/7xmPqXPiOJd7kM
J+IzbsQhK748DXl4XASKZt1EiwEShPZgHPiGNXPb8BSAoEbekZ/xPmB4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETMvTH/U5SFRh9s/wzODA1auegNMB8GA1UdIwQY
MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt
MGRlZDA2ZTQwYTc1LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1
LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwJVnGlwY
wZJc8r2lfjvdyGP8FeEA1q5Q3/KnEyZStLDfWOfhtRd2uqJvUEyDT3E2NAT9Fcuo
3jJOADrjSW+YtrnRXICjYHxb6xRIJVPtBStFwk307YCb9W1iAv0af/sEj5xamBPq
0z8WCSo/LbW6cncWPAtYYp7JRiL+Orksm3bRuiT5/Kkfly3BzpWobPqTtD67Y3h6
gwkWqVMp6W5ABqum+aMcW6kYnC/znSuLcqn07hEXSrG/h2T2GFiSLIld9nEgBjSx
1yFzCvxgdfzADO0fEdS6xG1Q9HbOIRTVottjsv+JBtN3pQiYGCU1b2XEVSgLDxi0
o7jxzJpe1/WR2A==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:02 2025 by rpki-client