Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File: RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier: f5OPCpGYSIu2/bANDd+ylxDuG6hffAA3lp/ku49MpS4=
Subject key identifier: 61:53:72:74:99:E2:70:32:43:09:3C:B4:35:97:68:E1:9A:40:7B:D0
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer: /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial: 019655DCBADB9C2716F8A89CF58CE38D1A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number: 0FAE
Signing time: Mon 21 Apr 2025 01:00:51 +0000
Manifest this update: Mon 21 Apr 2025 01:00:51 +0000
Manifest next update: Tue 22 Apr 2025 01:00:51 +0000
Files and hashes: 1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: eWrl/ujrjw0DVuiokRLklMTZNdFLyWCyTUvmIMbCpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ba:db:9c:27:16:f8:a8:9c:f5:8c:e3:8d:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
Validity
Not Before: Apr 21 01:00:51 2025 GMT
Not After : Apr 22 01:00:51 2025 GMT
Subject: CN=6153727499e2703243093cb4359768e19a407bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:4f:fa:30:c2:53:41:17:61:aa:f7:ef:5c:
a4:28:43:3f:19:d5:f6:82:46:4a:24:e7:70:00:0a:
c4:7a:f8:6a:97:f4:e9:0b:01:3e:15:af:52:f9:14:
8c:bf:84:f4:0f:34:6c:9b:39:a1:9c:7d:28:c0:9e:
79:8b:d4:b9:19:c4:28:64:37:5b:93:97:5c:7f:56:
09:9d:26:9f:9e:23:39:1a:ec:62:0b:87:53:b0:e4:
2d:4a:5e:37:bb:66:9d:71:30:83:83:5e:71:ee:5e:
19:79:c8:c5:1b:0b:3d:c7:7e:1f:b3:19:de:1d:be:
49:8f:83:1c:10:19:b9:36:68:39:ec:a7:2b:33:92:
71:9c:a1:9d:a0:1c:58:10:2f:a9:cc:1c:01:fb:4d:
4d:7a:14:2d:ab:ee:59:04:49:58:a8:47:d7:2e:76:
17:a0:41:02:ae:74:d1:61:1c:e8:50:2a:92:38:91:
80:15:f8:43:0a:c0:13:fa:32:a8:0a:f1:9c:7a:e6:
4e:dd:1e:25:b6:c9:24:41:0c:bc:c9:aa:78:8f:28:
37:92:ea:4a:25:51:c1:5a:69:c4:0f:d8:f8:66:a3:
29:c6:df:e0:1a:53:9b:4b:c2:b1:51:53:1b:cf:05:
1d:21:e4:c5:79:cf:92:3f:ae:bd:df:09:95:73:ed:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:72:74:99:E2:70:32:43:09:3C:B4:35:97:68:E1:9A:40:7B:D0
X509v3 Authority Key Identifier:
keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b1:31:9d:36:6d:51:5e:d5:43:5a:4c:98:74:2e:8d:69:f9:
1c:95:a4:7a:26:3b:6b:b0:c4:58:52:36:98:19:8d:f2:ed:9a:
e5:89:a5:74:bc:16:66:ae:5c:6a:ec:b7:5d:06:ed:eb:2f:e5:
7e:6c:b1:71:cd:82:8d:47:a6:6f:ca:7d:9e:5a:7a:ef:11:75:
6c:c3:2f:80:b4:d5:2e:9d:71:a3:f8:dd:80:b5:81:fc:c8:3a:
0f:78:ef:91:8a:3e:47:06:83:32:ef:ba:c7:e2:6b:e4:87:c2:
be:56:a4:11:48:0a:28:01:71:9c:52:14:e4:8f:b7:2b:e5:22:
27:71:b6:a1:82:39:1d:bd:30:2f:da:12:d3:45:95:eb:bd:bd:
1e:07:78:a3:5a:8f:0f:13:a1:9c:da:fa:c5:70:e9:2e:79:2c:
b7:f7:79:0e:7a:89:cd:36:eb:d6:7c:e2:e8:db:1c:04:a2:4f:
d8:42:19:63:17:35:73:da:82:af:d4:e1:1d:f2:b9:48:a3:c3:
6e:cd:e7:42:1c:8d:36:97:d8:b9:10:6b:b1:81:d5:db:4b:a6:
4c:17:7e:b0:95:6e:21:41:12:4a:d1:b3:d7:a5:f3:ae:cc:61:
35:e3:7e:2e:72:b9:e0:71:78:26:f1:ff:ea:6b:6c:e4:b0:f4:
a6:d3:21:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3LrbnCcW+Kic9YzjjRqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0Y2FkYWI5MWE2Yjc5YTMyMTYxODgwN2M2Nzg5YjJiMWM5
ODIzNzgwHhcNMjUwNDIxMDEwMDUxWhcNMjUwNDIyMDEwMDUxWjAzMTEwLwYDVQQD
Eyg2MTUzNzI3NDk5ZTI3MDMyNDMwOTNjYjQzNTk3NjhlMTlhNDA3YmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyFP+jDCU0EXYar371ykKEM/GdX2
gkZKJOdwAArEevhql/TpCwE+Fa9S+RSMv4T0DzRsmzmhnH0owJ55i9S5GcQoZDdb
k5dcf1YJnSafniM5GuxiC4dTsOQtSl43u2adcTCDg15x7l4ZecjFGws9x34fsxne
Hb5Jj4McEBm5Nmg57KcrM5JxnKGdoBxYEC+pzBwB+01NehQtq+5ZBElYqEfXLnYX
oEECrnTRYRzoUCqSOJGAFfhDCsAT+jKoCvGceuZO3R4ltskkQQy8yap4jyg3kupK
JVHBWmnED9j4ZqMpxt/gGlObS8KxUVMbzwUdIeTFec+SP6693wmVc+0JwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFTcnSZ4nAyQwk8tDWXaOGaQHvQMB8GA1UdIwQY
MBaAFETK2rkaa3mjIWGIB8Z4myscmCN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNWUzNTAtYzlhMC00NjM0LThjOWIt
YjhkOWU5YjQwNzRlLzEvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kNWUzNTAtYzlhMC00NjM0LThjOWItYjhkOWU5YjQwNzRl
LzEvUk1yYXVScHJlYU1oWVlnSHhuaWJLeHlZSTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7ExnTZt
UV7VQ1pMmHQujWn5HJWkeiY7a7DEWFI2mBmN8u2a5YmldLwWZq5cauy3XQbt6y/l
fmyxcc2CjUemb8p9nlp67xF1bMMvgLTVLp1xo/jdgLWB/Mg6D3jvkYo+RwaDMu+6
x+Jr5IfCvlakEUgKKAFxnFIU5I+3K+UiJ3G2oYI5Hb0wL9oS00WV6729Hgd4o1qP
DxOhnNr6xXDpLnkst/d5DnqJzTbr1nzi6NscBKJP2EIZYxc1c9qCr9ThHfK5SKPD
bs3nQhyNNpfYuRBrsYHV20umTBd+sJVuIUESStGz16XzrsxhNeN+LnK54HF4JvH/
6mts5LD0ptMhow==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:39 2025 by rpki-client