Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: FcY9Jd6ODNzAaGTYdYyi0fn7ri4nMAeQR4lcE0rRbEQ=
Subject key identifier: 27:89:84:5B:6C:D0:6E:7F:85:1B:15:B5:FB:C6:81:B5:C1:E7:0F:F9
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 01964A0FCAE4127BD15DFBAE128A792C98B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0AD2
Signing time: Fri 18 Apr 2025 18:01:10 +0000
Manifest this update: Fri 18 Apr 2025 18:01:10 +0000
Manifest next update: Sat 19 Apr 2025 18:01:10 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: fzHMi5VBpjpZJwxZHYX4/D4302xi6Vh4XE7CeHTEnmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:ca:e4:12:7b:d1:5d:fb:ae:12:8a:79:2c:98:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Apr 18 18:01:10 2025 GMT
Not After : Apr 19 18:01:10 2025 GMT
Subject: CN=2789845b6cd06e7f851b15b5fbc681b5c1e70ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:7f:45:ec:e8:8b:90:13:f8:38:62:f1:a4:
7b:9a:ff:39:f9:6c:bb:97:3d:53:02:ff:ae:c3:e3:
cb:d6:ab:70:80:ab:e3:73:9f:59:f6:be:48:87:b3:
6e:8c:1b:ec:e2:00:db:8b:8c:32:64:64:fb:11:9f:
8e:3b:74:e2:ed:f6:90:51:b9:18:ac:87:c1:0c:df:
91:5e:89:78:8b:a8:9d:fe:bb:65:9b:ea:d1:de:12:
ca:cf:3e:f2:7c:6d:f5:b1:01:91:37:5f:31:8f:96:
1a:61:b0:42:c3:49:5c:d1:5b:de:23:aa:eb:69:e6:
fc:37:e9:fe:e7:e3:ea:de:00:77:a2:a1:1e:1e:bc:
62:00:ca:96:76:9b:69:c0:91:7c:1c:8b:6f:27:79:
4d:92:42:67:91:71:71:50:23:ba:f0:1d:13:77:aa:
4f:ec:51:ce:08:60:f8:35:ce:28:55:97:1b:e0:fa:
2d:42:c6:dc:9b:43:14:89:e7:dc:7f:09:e7:b3:92:
70:16:95:a5:fd:85:c2:07:4f:14:0f:7c:e8:65:8d:
68:5f:21:ec:9c:9b:95:c6:16:4f:79:c7:85:82:40:
6d:24:66:6f:12:83:79:c4:73:ec:56:10:3e:7c:58:
2e:48:7b:f7:ef:f3:d3:0d:ce:15:5a:02:b9:af:3d:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:84:5B:6C:D0:6E:7F:85:1B:15:B5:FB:C6:81:B5:C1:E7:0F:F9
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:20:38:8d:a2:bf:c5:ef:eb:d6:2f:45:ca:1e:45:d1:51:0f:
68:51:2f:f3:5f:2b:8f:f4:88:3a:bf:0e:64:6d:b7:67:1d:a0:
9e:4f:00:47:3a:40:e7:0e:8d:83:cc:df:95:56:48:96:39:a5:
7c:f9:4c:1a:2e:07:7d:9a:20:46:7a:b5:68:1a:71:ed:03:c1:
87:87:d6:a8:0f:59:c1:60:9e:6f:68:44:bc:9b:79:27:6f:e5:
22:eb:74:b9:56:52:fa:a4:08:a3:e2:ea:95:05:c2:2b:10:93:
c3:e5:83:5f:f1:cb:c1:25:af:a7:7d:a2:08:51:b2:c6:e0:e2:
a0:63:0b:04:70:22:de:ed:1f:05:a7:d6:fe:c7:2b:da:9b:b3:
69:ea:04:c2:a5:f3:37:28:28:25:f0:77:32:51:26:ea:57:36:
db:77:2e:10:ef:39:ba:85:8f:ee:19:0c:1c:6d:ae:ab:56:e2:
7b:2c:2a:4d:d7:07:96:d3:d1:0c:53:cc:f2:7e:e4:a4:08:02:
0d:5a:64:0b:c0:3a:75:aa:fe:64:18:98:59:26:f0:ab:3d:d6:
26:61:b7:af:2b:42:e7:ec:4b:1c:57:04:fd:33:33:42:3c:37:
30:e5:cd:3a:e2:84:40:d5:ec:71:c4:13:60:f5:fe:6f:87:82:
49:bf:be:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKD8rkEnvRXfuuEop5LJi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj
NzExMDQwHhcNMjUwNDE4MTgwMTEwWhcNMjUwNDE5MTgwMTEwWjAzMTEwLwYDVQQD
EygyNzg5ODQ1YjZjZDA2ZTdmODUxYjE1YjVmYmM2ODFiNWMxZTcwZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbZ/Rezoi5AT+Dhi8aR7mv85+Wy7
lz1TAv+uw+PL1qtwgKvjc59Z9r5Ih7NujBvs4gDbi4wyZGT7EZ+OO3Ti7faQUbkY
rIfBDN+RXol4i6id/rtlm+rR3hLKzz7yfG31sQGRN18xj5YaYbBCw0lc0VveI6rr
aeb8N+n+5+Pq3gB3oqEeHrxiAMqWdptpwJF8HItvJ3lNkkJnkXFxUCO68B0Td6pP
7FHOCGD4Nc4oVZcb4PotQsbcm0MUiefcfwnns5JwFpWl/YXCB08UD3zoZY1oXyHs
nJuVxhZPeceFgkBtJGZvEoN5xHPsVhA+fFguSHv37/PTDc4VWgK5rz3MtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeJhFts0G5/hRsVtfvGgbXB5w/5MB8GA1UdIwQY
MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt
NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj
LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSA4jaK/
xe/r1i9Fyh5F0VEPaFEv818rj/SIOr8OZG23Zx2gnk8ARzpA5w6Ng8zflVZIljml
fPlMGi4HfZogRnq1aBpx7QPBh4fWqA9ZwWCeb2hEvJt5J2/lIut0uVZS+qQIo+Lq
lQXCKxCTw+WDX/HLwSWvp32iCFGyxuDioGMLBHAi3u0fBafW/scr2puzaeoEwqXz
NygoJfB3MlEm6lc223cuEO85uoWP7hkMHG2uq1bieywqTdcHltPRDFPM8n7kpAgC
DVpkC8A6dar+ZBiYWSbwqz3WJmG3rytC5+xLHFcE/TMzQjw3MOXNOuKEQNXsccQT
YPX+b4eCSb++Fg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:51:47 2025 by rpki-client