Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier: W5ZOr5n6mXrbDLORTfZfhAstBhrPbBPY+3NQ1yQR9CY=
Subject key identifier: E5:7A:C0:8E:B9:89:C1:6D:E4:83:93:3B:DB:46:96:89:AD:60:D5:4C
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer: /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial: 0195900620D4757B787D9548B69FF594F99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number: 0291
Signing time: Thu 13 Mar 2025 15:01:15 +0000
Manifest this update: Thu 13 Mar 2025 15:01:15 +0000
Manifest next update: Fri 14 Mar 2025 15:01:15 +0000
Files and hashes: 1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: ufs1G4nDmQJYyvDY9wF+RzOkkNzdKtTeKORSvlsV6IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:20:d4:75:7b:78:7d:95:48:b6:9f:f5:94:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Validity
Not Before: Mar 13 15:01:15 2025 GMT
Not After : Mar 14 15:01:15 2025 GMT
Subject: CN=e57ac08eb989c16de483933bdb469689ad60d54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:6c:db:0b:6d:f3:fd:c1:af:33:fd:57:4f:
2a:b2:e8:53:57:18:ca:5e:1b:54:0f:a6:34:9a:0f:
ae:65:56:cb:9a:99:18:b2:b7:5c:84:a6:0a:bc:8f:
11:bf:77:7d:c4:53:b6:a5:1d:7e:31:06:51:d4:6b:
ff:15:9b:03:c4:de:34:ed:2b:ea:51:b3:d2:a2:6c:
d3:bc:b1:88:3a:a2:4d:de:be:b5:92:3b:f4:12:bb:
3a:57:8e:12:ba:14:e1:09:8c:82:d4:cb:a6:85:3b:
07:01:ac:df:cf:60:79:f4:77:1a:36:dd:22:22:24:
45:0a:a9:db:d0:f8:69:bb:1a:a7:d3:8e:90:4e:ba:
66:a9:57:b1:9d:c1:aa:c5:8c:38:93:ee:34:1b:74:
21:b2:15:b5:f4:d2:5b:a5:0c:a7:2a:38:a9:cf:ca:
92:a4:d0:b1:52:69:f8:bb:44:a6:de:48:03:57:f5:
ff:ab:9b:b4:aa:6a:5d:0c:d7:f3:9e:f9:13:f7:77:
5f:d4:b6:94:0a:82:b1:ce:d5:4b:7b:09:08:45:a1:
d4:e3:46:d5:a7:ba:16:f6:ab:6d:81:e0:40:f0:3d:
4f:45:2a:1a:ff:65:43:b3:92:fe:a2:77:e4:ff:0c:
54:24:0d:05:df:31:0f:0b:44:18:d0:9f:a6:69:5c:
56:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:C0:8E:B9:89:C1:6D:E4:83:93:3B:DB:46:96:89:AD:60:D5:4C
X509v3 Authority Key Identifier:
keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ec:66:e1:61:9b:1a:fb:df:4f:39:a3:5e:cb:bc:17:0b:c9:
4f:7e:d9:f5:5e:bd:16:75:ab:24:c3:b0:b1:c0:d7:6e:43:e6:
79:93:d7:e7:d9:01:c5:93:a4:4b:ac:a7:97:44:bc:6d:dd:a4:
bf:87:8c:3a:1a:83:15:63:3d:0c:89:5b:e4:81:4d:50:f6:5e:
e2:17:da:11:78:b8:8c:c6:50:79:fe:0d:93:9c:68:7e:73:db:
76:db:5a:60:93:0a:42:8a:93:30:b9:97:e1:a2:40:19:b3:e7:
fe:a9:ac:47:45:62:26:36:2b:96:54:b5:2c:37:a5:e3:2b:5e:
19:c4:d9:1e:3d:e3:fa:ee:3f:19:9e:50:f3:04:ba:e0:83:63:
39:81:04:22:54:fc:67:11:b6:99:55:f6:1c:ef:b7:51:0c:66:
2b:77:a4:79:76:37:fb:c9:2c:0e:85:c1:10:d2:5e:aa:ab:d4:
7c:a4:a3:36:f8:ac:60:78:d4:43:3f:84:04:84:17:41:8e:19:
a0:6c:77:12:8e:1d:87:82:5a:75:6d:ed:39:09:dd:8e:89:68:
b3:4c:de:6c:d6:57:1d:34:6d:55:ca:a4:2a:3c:dc:d7:21:1b:
0d:0a:6e:83:52:de:fc:f0:8c:c3:e0:ff:ff:45:a0:b2:59:8f:
36:2e:4e:2b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZWQBiDUdXt4fZVItp/1lPmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTYxYzJkNDk3Mzg5NzAwMGU1NmFjYjNjODQzZjIwMzRh
YTU2YTAwHhcNMjUwMzEzMTUwMTE1WhcNMjUwMzE0MTUwMTE1WjAzMTEwLwYDVQQD
EyhlNTdhYzA4ZWI5ODljMTZkZTQ4MzkzM2JkYjQ2OTY4OWFkNjBkNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5ts2wtt8/3BrzP9V08qsuhTVxjK
XhtUD6Y0mg+uZVbLmpkYsrdchKYKvI8Rv3d9xFO2pR1+MQZR1Gv/FZsDxN407Svq
UbPSomzTvLGIOqJN3r61kjv0Ers6V44SuhThCYyC1MumhTsHAazfz2B59HcaNt0i
IiRFCqnb0Phpuxqn046QTrpmqVexncGqxYw4k+40G3QhshW19NJbpQynKjipz8qS
pNCxUmn4u0Sm3kgDV/X/q5u0qmpdDNfznvkT93df1LaUCoKxztVLewkIRaHU40bV
p7oW9qttgeBA8D1PRSoa/2VDs5L+onfk/wxUJA0F3zEPC0QY0J+maVxWFQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOV6wI65icFt5IOTO9tGlomtYNVMMB8GA1UdIwQY
MBaAFPimHC1Jc4lwAOVqyzyEPyA0qlagMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LWWNMVWx6aVhBQTVXckxQSVFfSURTcVZxQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMTVhMDY3LTY5MTYtNDM4NS1hMjky
LTI3ODJlY2VlMGU5Mi8xLzEtS1ljTFVsemlYQUE1V3JMUElRX0lEU3FWcUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA2LzE1YTA2Ny02OTE2LTQzODUtYTI5Mi0yNzgyZWNlZTBl
OTIvMS8xLUtZY0xVbHppWEFBNVdyTFBJUV9JRFNxVnFBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuxm
4WGbGvvfTzmjXsu8FwvJT37Z9V69FnWrJMOwscDXbkPmeZPX59kBxZOkS6ynl0S8
bd2kv4eMOhqDFWM9DIlb5IFNUPZe4hfaEXi4jMZQef4Nk5xofnPbdttaYJMKQoqT
MLmX4aJAGbPn/qmsR0ViJjYrllS1LDel4yteGcTZHj3j+u4/GZ5Q8wS64INjOYEE
IlT8ZxG2mVX2HO+3UQxmK3ekeXY3+8ksDoXBENJeqqvUfKSjNvisYHjUQz+EBIQX
QY4ZoGx3Eo4dh4JadW3tOQndjolos0zebNZXHTRtVcqkKjzc1yEbDQpug1Le/PCM
w+D//0WgslmPNi5OKw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:15:55 2025 by rpki-client