Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: gTQT0GdB2bKF1JohaOS9n3V+jcygWXu0dGP6LrXe7xM=
Subject key identifier: 00:A3:96:8A:66:2A:0D:23:7A:DE:90:E9:D6:11:E1:D9:0F:62:D5:1F
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019653EE8CD1607DA94E76F9F9C4313A08FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0183
Signing time: Sun 20 Apr 2025 16:01:04 +0000
Manifest this update: Sun 20 Apr 2025 16:01:04 +0000
Manifest next update: Mon 21 Apr 2025 16:01:04 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: as74/Me7/v5gEr+kE8+wqdJgT3ErXwA5Ka85lLxq038=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:8c:d1:60:7d:a9:4e:76:f9:f9:c4:31:3a:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Apr 20 16:01:04 2025 GMT
Not After : Apr 21 16:01:04 2025 GMT
Subject: CN=00a3968a662a0d237ade90e9d611e1d90f62d51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5f:42:62:e6:ea:3b:ed:6b:bf:d2:8f:92:a3:
7b:65:65:50:2a:7e:3e:e4:b5:e7:c3:70:23:8e:25:
51:5f:be:28:52:69:3b:03:1f:e3:a9:e2:8b:ab:ce:
5a:50:3e:d6:39:6f:3a:19:d2:63:1e:06:fb:21:9b:
38:84:20:3f:09:c5:2e:73:b1:33:fb:df:6f:c0:27:
bc:df:4d:3e:6f:61:70:10:66:48:ae:c3:a1:e5:cd:
16:3c:74:d2:4c:38:05:f5:88:8c:95:0d:55:c9:71:
dd:87:40:73:04:35:8e:d8:0f:95:e1:fd:6e:0a:0e:
a7:e0:2c:2d:b0:d2:e7:56:5e:09:36:7f:2b:2b:4b:
9a:92:3f:90:40:d5:67:ac:c1:a4:9b:2e:10:6f:89:
a6:46:be:07:51:4a:89:8e:6c:7d:fd:50:0e:0d:87:
d2:e3:50:d3:02:e5:3e:e4:d4:63:13:77:67:66:8b:
7c:f8:40:0f:7c:1a:6a:7b:40:af:17:d7:21:c0:82:
e2:38:c0:f5:48:a2:72:89:f6:cd:71:00:66:22:9e:
c4:65:1f:a4:6c:c0:c0:25:e8:43:ba:b7:a4:a2:23:
bc:57:1c:ba:bd:99:c0:5d:4d:5b:d3:12:64:be:a6:
51:5c:f8:99:b6:e3:a0:04:35:a8:bf:b6:5f:bf:11:
84:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:96:8A:66:2A:0D:23:7A:DE:90:E9:D6:11:E1:D9:0F:62:D5:1F
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:95:77:0e:ec:de:93:54:b9:e3:af:1e:cc:98:4d:13:28:a8:
6d:ea:ee:be:a4:81:b8:98:34:2e:6a:e3:9a:c4:4c:8b:f4:f8:
84:26:73:cf:6f:c1:cc:97:68:dc:03:2a:0a:ec:f2:fa:8f:7c:
5e:20:eb:ce:88:6e:d0:74:2c:5a:a5:7e:37:1e:9d:ae:92:10:
83:3a:2e:d9:8a:5a:b6:fa:94:89:9d:c2:93:87:e3:e4:b9:ed:
3a:d9:aa:2b:86:25:55:4c:6f:39:9d:0c:52:fc:b9:2b:18:65:
c5:49:93:10:7f:2f:88:78:e5:81:f7:cb:bb:98:5e:34:c3:5d:
d3:59:68:02:de:4b:87:54:95:17:1a:53:ed:3e:d1:d0:57:15:
ce:55:4e:ab:00:d3:d9:bf:a4:6d:be:41:a0:d1:5d:e5:8b:37:
51:c4:4f:bf:f1:9b:fb:00:15:8c:84:25:6f:6d:dd:e4:a8:08:
e8:4b:7c:40:9d:2f:77:12:7b:cb:70:fc:97:82:db:d4:19:88:
c6:5a:01:9e:95:fc:2d:08:ee:84:b9:10:82:cc:50:70:6d:79:
fa:14:db:7c:e9:79:15:55:18:80:7e:ae:14:4a:57:2f:83:b6:
b0:24:22:37:4c:09:51:a4:57:bb:5a:39:1e:34:25:97:6a:0d:
e8:0c:bd:04
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZT7ozRYH2pTnb5+cQxOgj9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjY0N2RmMjE4ZTJjNmYzZmQxY2Y1NDlkMjdkZjRlNTBj
ZDZkYjAwHhcNMjUwNDIwMTYwMTA0WhcNMjUwNDIxMTYwMTA0WjAzMTEwLwYDVQQD
EygwMGEzOTY4YTY2MmEwZDIzN2FkZTkwZTlkNjExZTFkOTBmNjJkNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF9CYubqO+1rv9KPkqN7ZWVQKn4+
5LXnw3AjjiVRX74oUmk7Ax/jqeKLq85aUD7WOW86GdJjHgb7IZs4hCA/CcUuc7Ez
+99vwCe8300+b2FwEGZIrsOh5c0WPHTSTDgF9YiMlQ1VyXHdh0BzBDWO2A+V4f1u
Cg6n4CwtsNLnVl4JNn8rK0uakj+QQNVnrMGkmy4Qb4mmRr4HUUqJjmx9/VAODYfS
41DTAuU+5NRjE3dnZot8+EAPfBpqe0CvF9chwILiOMD1SKJyifbNcQBmIp7EZR+k
bMDAJehDurekoiO8Vxy6vZnAXU1b0xJkvqZRXPiZtuOgBDWov7ZfvxGE7QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFACjlopmKg0jet6Q6dYR4dkPYtUfMB8GA1UdIwQY
MBaAFPr2R98hjixvP9HPVJ0n305QzW2wMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12WkgzeUdPTEc4XzBjOVVuU2ZmVGxETmJiQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTQvNDVhNTcyLWI4MDgtNDBmNS04YjI1
LWRkY2ExNTNhMjBhYi8xLzEtdlpIM3lHT0xHOF8wYzlVblNmZlRsRE5iYkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE0LzQ1YTU3Mi1iODA4LTQwZjUtOGIyNS1kZGNhMTUzYTIw
YWIvMS8xLXZaSDN5R09MRzhfMGM5VW5TZmZUbEROYmJBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5V3
Duzek1S5468ezJhNEyioberuvqSBuJg0LmrjmsRMi/T4hCZzz2/BzJdo3AMqCuzy
+o98XiDrzohu0HQsWqV+Nx6drpIQgzou2YpatvqUiZ3Ck4fj5LntOtmqK4YlVUxv
OZ0MUvy5KxhlxUmTEH8viHjlgffLu5heNMNd01loAt5Lh1SVFxpT7T7R0FcVzlVO
qwDT2b+kbb5BoNFd5Ys3UcRPv/Gb+wAVjIQlb23d5KgI6Et8QJ0vdxJ7y3D8l4Lb
1BmIxloBnpX8LQjuhLkQgsxQcG15+hTbfOl5FVUYgH6uFEpXL4O2sCQiN0wJUaRX
u1o5HjQll2oN6Ay9BA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:52 2025 by rpki-client