Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier: BaMd2B92XEeUVq0w/2yqFpRk2E3u87bo+I/rJaPYDaw=
Subject key identifier: F7:6C:03:A0:29:7C:02:35:86:1A:4D:6B:A2:5D:1E:8E:40:A2:AE:19
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer: /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial: 01963DD4133DD12531D5F9B66466217331EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number: 01D3
Signing time: Wed 16 Apr 2025 09:00:30 +0000
Manifest this update: Wed 16 Apr 2025 09:00:30 +0000
Manifest next update: Thu 17 Apr 2025 09:00:30 +0000
Files and hashes: 1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: kKDFlhn7wDrSCHg4ApGw6Y1LnEktClhgSlkWrDjA8fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:13:3d:d1:25:31:d5:f9:b6:64:66:21:73:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Validity
Not Before: Apr 16 09:00:30 2025 GMT
Not After : Apr 17 09:00:30 2025 GMT
Subject: CN=f76c03a0297c0235861a4d6ba25d1e8e40a2ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:8e:2d:f1:06:2a:8f:98:0e:73:f6:5f:19:
6a:cb:4f:fb:3b:06:15:da:ed:d1:5b:c5:03:5d:82:
8c:a2:9c:69:3e:2d:cf:2e:45:81:f7:28:05:cc:c2:
46:9b:93:ad:45:9b:f4:20:41:e2:92:03:a1:ab:2d:
70:ee:29:91:35:c9:9b:f7:b5:83:53:d6:77:b3:68:
f2:9d:df:77:94:5c:2a:b8:fb:f6:c7:5d:fa:72:4b:
dd:51:2f:95:b5:31:b1:d7:af:b7:a7:33:31:2e:38:
d2:17:c7:c9:0e:9f:57:df:a5:7b:df:fb:3a:72:48:
83:93:9c:9f:49:aa:93:a8:e0:ae:4a:76:7d:47:d5:
64:94:8a:dd:56:a1:ef:0f:42:f1:40:47:95:25:be:
38:68:b9:10:a2:89:e9:92:01:7f:a4:3d:45:0a:fd:
4b:d9:5f:27:4c:3d:65:e6:ea:e1:8a:2c:4b:ab:fc:
7f:7e:f3:5a:59:2f:8f:29:e6:8d:c3:55:c1:11:42:
46:2b:50:83:46:fe:d0:48:e6:bf:54:d6:12:7a:34:
2f:2e:30:2f:ed:a3:8b:6e:22:4b:3d:8c:75:52:57:
40:e2:54:24:2e:da:08:5c:0a:a7:2a:c0:ba:00:1c:
d8:38:94:db:13:b0:fd:f2:e9:eb:1c:e4:24:46:6e:
83:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6C:03:A0:29:7C:02:35:86:1A:4D:6B:A2:5D:1E:8E:40:A2:AE:19
X509v3 Authority Key Identifier:
keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ff:c9:95:8f:39:f7:6c:c3:da:15:9b:d4:8b:55:2c:4c:15:
e4:bc:4d:a7:7f:a5:4e:97:95:c9:29:2d:f8:6b:3b:b1:ca:cf:
62:2c:5b:1a:58:88:ad:a6:e4:ba:a7:6b:96:d2:06:a6:69:cc:
e5:27:00:41:a7:75:ae:3f:e5:b3:43:b8:d1:9b:1f:f1:16:01:
76:da:16:7f:a7:2e:a4:fc:63:d1:3f:1a:38:25:88:d0:d3:9d:
c0:8e:72:9b:3c:41:69:f4:cf:e8:99:2e:9d:f0:fe:32:6f:d7:
ad:b9:63:95:43:3a:de:f7:58:95:7f:20:5a:f0:4b:d7:da:4a:
04:9d:85:3b:d8:9b:42:2f:a0:20:7f:7a:3c:95:1d:40:0b:be:
4d:1b:4e:8b:b8:4c:f2:44:b3:63:bd:7c:08:de:23:ff:5a:f3:
76:b9:0e:fd:13:ba:92:9a:1f:5c:bf:7f:89:ff:86:5a:59:91:
db:5f:4f:ae:fa:02:02:d0:a0:2a:43:2a:85:73:62:d8:86:45:
69:57:ce:5d:56:41:ab:7c:89:88:42:5d:a6:dc:de:51:14:aa:
c7:32:46:5b:96:ea:6a:77:d2:93:f9:88:07:68:27:c9:7d:a5:
7f:69:ca:eb:6a:03:7f:6d:f8:15:84:2b:88:93:4a:cc:51:42:
fa:c8:ca:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY91BM90SUx1fm2ZGYhczHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MmRkY2IzNTA3ODI2N2Y0ZjM3NTJlNWI0Y2NjNjVhNjYz
YTYzZTcwHhcNMjUwNDE2MDkwMDMwWhcNMjUwNDE3MDkwMDMwWjAzMTEwLwYDVQQD
EyhmNzZjMDNhMDI5N2MwMjM1ODYxYTRkNmJhMjVkMWU4ZTQwYTJhZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnWOLfEGKo+YDnP2Xxlqy0/7OwYV
2u3RW8UDXYKMopxpPi3PLkWB9ygFzMJGm5OtRZv0IEHikgOhqy1w7imRNcmb97WD
U9Z3s2jynd93lFwquPv2x136ckvdUS+VtTGx16+3pzMxLjjSF8fJDp9X36V73/s6
ckiDk5yfSaqTqOCuSnZ9R9VklIrdVqHvD0LxQEeVJb44aLkQoonpkgF/pD1FCv1L
2V8nTD1l5urhiixLq/x/fvNaWS+PKeaNw1XBEUJGK1CDRv7QSOa/VNYSejQvLjAv
7aOLbiJLPYx1UldA4lQkLtoIXAqnKsC6ABzYOJTbE7D98unrHOQkRm6DHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdsA6ApfAI1hhpNa6JdHo5Aoq4ZMB8GA1UdIwQY
MBaAFJUt3LNQeCZ/TzdS5bTMxlpmOmPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjIt
YTRjMWJiY2I4Yzk3LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jNTliNjEtOTExNS00MTVmLTgxZjItYTRjMWJiY2I4Yzk3
LzEvbFMzY3MxQjRKbjlQTjFMbHRNekdXbVk2WS1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANv/JlY85
92zD2hWb1ItVLEwV5LxNp3+lTpeVySkt+Gs7scrPYixbGliIrabkuqdrltIGpmnM
5ScAQad1rj/ls0O40Zsf8RYBdtoWf6cupPxj0T8aOCWI0NOdwI5ymzxBafTP6Jku
nfD+Mm/XrbljlUM63vdYlX8gWvBL19pKBJ2FO9ibQi+gIH96PJUdQAu+TRtOi7hM
8kSzY718CN4j/1rzdrkO/RO6kpofXL9/if+GWlmR219PrvoCAtCgKkMqhXNi2IZF
aVfOXVZBq3yJiEJdptzeURSqxzJGW5bqanfSk/mIB2gnyX2lf2nK62oDf234FYQr
iJNKzFFC+sjKGA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:28:03 2025 by rpki-client