Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
File: CPy8NByHQz0D5N1hW380UxZDRLM.mft (raw, json)
Hash identifier: R7UcCQHl0tkrcFm3C9gLP3L01K46C5FM6DWXoN0TTE0=
Subject key identifier: AA:4B:42:C6:FE:87:EA:51:E1:5F:A4:F4:BF:A3:83:25:EB:0B:9C:ED
Authority key identifier: 08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
Certificate issuer: /CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Certificate serial: 019643D60DB3C10738141F5FF107644C605A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 13:00:23 +0000
Manifest this update: Thu 17 Apr 2025 13:00:23 +0000
Manifest next update: Fri 18 Apr 2025 13:00:23 +0000
Files and hashes: 1: 5eRiGQx5boAqRAuznUmYz2xfqMQ.roa (hash: zDFWtpJ7+CfToiZs8AAMHmyitJykUodCcfEyyz3iDfc=)
2: CPy8NByHQz0D5N1hW380UxZDRLM.crl (hash: OkM/DRVfHl2HU2b4UBF0zt6P6Q+PUoU3u/ENXfCKiEo=)
3: FuRu0xLu2HvckUxx6CKawcRdyGM.roa (hash: X0KwYGhpxludEjFHlw9/03BXtRT7Yd1fekWuVBjCvVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:0d:b3:c1:07:38:14:1f:5f:f1:07:64:4c:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fcbc341c87433d03e4dd615b7f3453164344b3
Validity
Not Before: Apr 17 13:00:23 2025 GMT
Not After : Apr 18 13:00:23 2025 GMT
Subject: CN=aa4b42c6fe87ea51e15fa4f4bfa38325eb0b9ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:97:31:8a:49:71:b8:52:50:fb:28:d0:f2:
3f:8b:33:fd:67:3d:83:d2:32:22:01:e0:4d:2b:58:
80:d9:60:8b:81:54:b0:56:75:93:86:03:d3:1c:28:
6e:57:9e:9c:ed:b6:5a:54:23:ce:7c:18:a3:46:b5:
4c:7f:c6:33:0f:9b:11:e6:a6:bc:9f:6f:81:13:91:
06:4c:2c:d1:35:18:61:d0:15:b0:9c:ca:d9:b0:c1:
91:86:11:e5:3b:b4:06:91:39:11:1a:0f:a9:e2:1c:
1a:52:7d:68:ce:c4:26:01:e8:df:91:26:4f:a9:21:
22:57:7d:9b:76:76:f4:4c:c7:01:cd:00:cb:b6:e0:
ad:81:ef:5b:45:93:ac:3f:94:7d:82:ff:66:7a:e5:
dd:da:d6:ca:4f:72:4e:f7:e3:0e:98:14:89:8a:11:
3f:ed:92:20:26:92:85:66:27:5e:01:4c:0a:b4:a1:
3b:be:90:da:72:78:79:5c:b5:6b:00:5b:2a:d5:b9:
fa:f5:9a:7e:af:90:d4:bb:1a:eb:27:24:0f:e1:9e:
0b:67:6f:cb:f4:fd:04:83:4d:fe:1c:2b:87:4f:b2:
b3:f0:6f:36:e8:85:79:57:b6:4f:1e:c7:d0:d7:23:
8b:a3:e3:d9:b9:5e:34:c5:ad:a2:74:d1:bf:9f:3f:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4B:42:C6:FE:87:EA:51:E1:5F:A4:F4:BF:A3:83:25:EB:0B:9C:ED
X509v3 Authority Key Identifier:
keyid:08:FC:BC:34:1C:87:43:3D:03:E4:DD:61:5B:7F:34:53:16:43:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPy8NByHQz0D5N1hW380UxZDRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1ae7be-3484-4b12-8bf4-c100a986bc5c/1/CPy8NByHQz0D5N1hW380UxZDRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:26:e2:19:9e:bf:4d:29:14:1b:f7:b9:aa:1c:f8:a6:04:65:
f9:1e:3b:98:60:82:16:37:2a:d5:20:62:78:4a:21:26:6c:9d:
08:7d:fa:69:e2:ec:78:fa:da:e0:19:25:80:f1:db:06:1c:46:
ef:64:bf:05:30:cf:a5:65:02:fd:18:a6:d5:53:d0:5d:db:fb:
3a:4c:a9:62:6d:e8:61:1c:ec:d4:e3:f3:2b:86:3d:79:c5:2f:
f8:c1:08:f5:e8:30:b6:1a:e9:c0:57:c4:2b:8b:ce:d7:28:f5:
d0:03:4c:62:a1:9e:f8:2a:db:bc:6d:47:08:77:5e:f8:c3:d1:
c2:21:c6:cf:85:e3:e4:72:1f:cd:3b:38:28:23:f9:cb:0a:17:
67:a4:03:9f:77:df:ad:0e:1a:2f:9d:49:7e:d3:83:4a:8f:65:
b4:4a:5c:09:cd:80:4e:55:80:f3:fc:85:e1:82:1e:4c:e2:e8:
13:2a:72:1b:66:32:1c:0e:8f:73:99:ac:cf:b9:b6:9c:c2:67:
65:60:5f:84:42:9b:4f:92:d2:9f:20:85:8d:1a:f4:a1:1c:5a:
7f:e2:5b:2a:76:0b:53:98:35:34:1a:75:63:da:48:f9:93:52:
57:c2:b0:e5:d3:99:3b:0f:3b:f8:fa:1b:95:22:2b:15:22:e3:
f5:c5:16:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1g2zwQc4FB9f8QdkTGBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNiYzM0MWM4NzQzM2QwM2U0ZGQ2MTViN2YzNDUzMTY0
MzQ0YjMwHhcNMjUwNDE3MTMwMDIzWhcNMjUwNDE4MTMwMDIzWjAzMTEwLwYDVQQD
EyhhYTRiNDJjNmZlODdlYTUxZTE1ZmE0ZjRiZmEzODMyNWViMGI5Y2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6XMYpJcbhSUPso0PI/izP9Zz2D
0jIiAeBNK1iA2WCLgVSwVnWThgPTHChuV56c7bZaVCPOfBijRrVMf8YzD5sR5qa8
n2+BE5EGTCzRNRhh0BWwnMrZsMGRhhHlO7QGkTkRGg+p4hwaUn1ozsQmAejfkSZP
qSEiV32bdnb0TMcBzQDLtuCtge9bRZOsP5R9gv9meuXd2tbKT3JO9+MOmBSJihE/
7ZIgJpKFZideAUwKtKE7vpDacnh5XLVrAFsq1bn69Zp+r5DUuxrrJyQP4Z4LZ2/L
9P0Eg03+HCuHT7Kz8G826IV5V7ZPHsfQ1yOLo+PZuV40xa2idNG/nz+8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpLQsb+h+pR4V+k9L+jgyXrC5ztMB8GA1UdIwQY
MBaAFAj8vDQch0M9A+TdYVt/NFMWQ0SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQt
YzEwMGE5ODZiYzVjLzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWU3YmUtMzQ4NC00YjEyLThiZjQtYzEwMGE5ODZiYzVj
LzEvQ1B5OE5CeUhRejBENU4xaFczODBVeFpEUkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKybiGZ6/
TSkUG/e5qhz4pgRl+R47mGCCFjcq1SBieEohJmydCH36aeLsePra4BklgPHbBhxG
72S/BTDPpWUC/Rim1VPQXdv7OkypYm3oYRzs1OPzK4Y9ecUv+MEI9egwthrpwFfE
K4vO1yj10ANMYqGe+CrbvG1HCHde+MPRwiHGz4Xj5HIfzTs4KCP5ywoXZ6QDn3ff
rQ4aL51JftODSo9ltEpcCc2ATlWA8/yF4YIeTOLoEypyG2YyHA6Pc5msz7m2nMJn
ZWBfhEKbT5LSnyCFjRr0oRxaf+JbKnYLU5g1NBp1Y9pI+ZNSV8Kw5dOZOw87+Pob
lSIrFSLj9cUWXA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:56:12 2025 by rpki-client