Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
File: 249r9UNKqjLT5fETsAxbsUAvZ_Y.mft (raw, json)
Hash identifier: I6jvjKL51qrTyolhGnpBWZrTqpVRUVo5GCJLQnqtQPQ=
Subject key identifier: 79:09:E5:89:1B:1B:C8:A4:47:F4:24:F1:6B:F3:33:B1:95:82:A9:BD
Authority key identifier: DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
Certificate issuer: /CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Certificate serial: 01965492C80CB7D694466672D76FFB85C49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
Manifest number: 05F2
Signing time: Sun 20 Apr 2025 19:00:27 +0000
Manifest this update: Sun 20 Apr 2025 19:00:27 +0000
Manifest next update: Mon 21 Apr 2025 19:00:27 +0000
Files and hashes: 1: 249r9UNKqjLT5fETsAxbsUAvZ_Y.crl (hash: KU6qT0Uaxc18dRCg4Nfn1sulxEXyWtPvwvnsl6v0U4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:c8:0c:b7:d6:94:46:66:72:d7:6f:fb:85:c4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8f6bf5434aaa32d3e5f113b00c5bb1402f67f6
Validity
Not Before: Apr 20 19:00:27 2025 GMT
Not After : Apr 21 19:00:27 2025 GMT
Subject: CN=7909e5891b1bc8a447f424f16bf333b19582a9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:cc:7a:c7:35:23:e3:02:80:fc:65:11:0d:
47:f1:ae:49:f7:c0:80:e8:8a:47:c5:2c:73:e7:3a:
0d:5c:5e:09:30:96:f4:0c:fe:55:7d:41:e3:8d:bf:
a5:47:df:65:be:cf:b1:8b:8c:38:9d:d5:aa:cf:00:
81:32:4a:18:ac:72:65:d2:15:e7:5e:11:ac:43:5c:
42:03:0a:ba:05:df:84:19:f8:bb:87:25:60:ba:45:
37:a8:e9:05:d8:7b:7c:fe:8a:64:55:af:d2:94:47:
dd:c9:5e:5f:39:33:46:8b:77:fe:98:1b:9b:3b:02:
2d:40:32:f0:35:d5:26:5f:b1:10:98:2f:05:fc:56:
37:58:35:c7:3f:ad:15:ba:4d:72:e3:24:4c:d6:d5:
8a:95:00:5f:71:07:34:8d:6c:d6:eb:bc:0d:b5:37:
b3:00:9d:f1:2d:d3:84:07:2d:fb:c9:9b:9f:14:8b:
ad:d8:c7:eb:94:b0:a1:41:6c:ad:55:86:bc:5e:07:
11:7d:27:91:19:cf:24:c7:ce:5e:80:ca:d3:7f:f3:
d2:65:ec:74:c3:79:2a:cd:61:28:66:10:24:04:c9:
83:db:f6:a2:80:88:ad:48:1b:1a:a0:c6:0c:1a:ef:
4f:29:9d:5f:01:dc:23:17:14:46:18:6a:3d:e1:f2:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:E5:89:1B:1B:C8:A4:47:F4:24:F1:6B:F3:33:B1:95:82:A9:BD
X509v3 Authority Key Identifier:
keyid:DB:8F:6B:F5:43:4A:AA:32:D3:E5:F1:13:B0:0C:5B:B1:40:2F:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/249r9UNKqjLT5fETsAxbsUAvZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/9f3394-6b7b-4ca0-9e21-d9796794c61c/1/249r9UNKqjLT5fETsAxbsUAvZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:0a:3a:99:79:b5:2b:b7:c1:52:55:ca:d7:96:fb:22:b4:
15:d5:f1:c9:02:35:e7:08:cd:6d:2d:70:76:7f:f6:7c:69:e3:
ae:a0:bb:fd:d4:6c:28:7f:93:98:b2:b3:90:59:cf:ff:2d:8e:
34:fc:1e:f8:1d:08:ad:29:84:23:e6:fd:62:bb:aa:18:8c:d9:
f1:d9:eb:4b:94:dd:27:0f:a3:f3:ac:36:f7:31:8d:82:cd:50:
e5:b7:31:56:b8:44:5e:23:82:e8:d0:c2:2e:92:77:9f:b2:74:
f4:9f:0b:3a:5d:44:5a:e6:8e:7c:bc:a4:a6:8e:83:db:b5:38:
c2:f2:b6:08:4c:49:9b:8e:07:e0:c7:f3:c4:fd:ee:dd:59:af:
0d:aa:63:ee:47:26:2a:19:43:26:b9:03:df:b9:08:1e:a6:d9:
0f:12:a7:d4:80:5e:af:8a:01:a5:9e:e8:6a:86:f8:fc:3c:d6:
56:44:fd:4e:88:eb:31:20:0c:d4:f0:94:23:7e:8c:ab:4e:bb:
53:73:48:8e:7f:e5:bc:91:23:45:65:e3:2b:13:66:09:18:63:
40:96:fe:39:fe:9f:4f:ca:f7:e0:57:32:c8:80:4d:f1:df:40:
f2:3d:e5:32:1c:91:f5:90:ea:88:7b:f4:e4:c1:6a:b3:64:dc:
10:f6:30:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUksgMt9aURmZy12/7hcSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGY2YmY1NDM0YWFhMzJkM2U1ZjExM2IwMGM1YmIxNDAy
ZjY3ZjYwHhcNMjUwNDIwMTkwMDI3WhcNMjUwNDIxMTkwMDI3WjAzMTEwLwYDVQQD
Eyg3OTA5ZTU4OTFiMWJjOGE0NDdmNDI0ZjE2YmYzMzNiMTk1ODJhOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvMesc1I+MCgPxlEQ1H8a5J98CA
6IpHxSxz5zoNXF4JMJb0DP5VfUHjjb+lR99lvs+xi4w4ndWqzwCBMkoYrHJl0hXn
XhGsQ1xCAwq6Bd+EGfi7hyVgukU3qOkF2Ht8/opkVa/SlEfdyV5fOTNGi3f+mBub
OwItQDLwNdUmX7EQmC8F/FY3WDXHP60Vuk1y4yRM1tWKlQBfcQc0jWzW67wNtTez
AJ3xLdOEBy37yZufFIut2MfrlLChQWytVYa8XgcRfSeRGc8kx85egMrTf/PSZex0
w3kqzWEoZhAkBMmD2/aigIitSBsaoMYMGu9PKZ1fAdwjFxRGGGo94fL9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkJ5YkbG8ikR/Qk8WvzM7GVgqm9MB8GA1UdIwQY
MBaAFNuPa/VDSqoy0+XxE7AMW7FAL2f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEt
ZDk3OTY3OTRjNjFjLzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85ZjMzOTQtNmI3Yi00Y2EwLTllMjEtZDk3OTY3OTRjNjFj
LzEvMjQ5cjlVTktxakxUNWZFVHNBeGJzVUF2Wl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBwKOpl5
tSu3wVJVyteW+yK0FdXxyQI15wjNbS1wdn/2fGnjrqC7/dRsKH+TmLKzkFnP/y2O
NPwe+B0IrSmEI+b9YruqGIzZ8dnrS5TdJw+j86w29zGNgs1Q5bcxVrhEXiOC6NDC
LpJ3n7J09J8LOl1EWuaOfLykpo6D27U4wvK2CExJm44H4MfzxP3u3VmvDapj7kcm
KhlDJrkD37kIHqbZDxKn1IBer4oBpZ7oaob4/DzWVkT9TojrMSAM1PCUI36Mq067
U3NIjn/lvJEjRWXjKxNmCRhjQJb+Of6fT8r34FcyyIBN8d9A8j3lMhyR9ZDqiHv0
5MFqs2TcEPYwhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:09:01 2025 by rpki-client