Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: +4d7tCTEDG0ay0TMecNPUwG/SxUqdUUVu8CQNnj3ErA=
Subject key identifier: D7:9B:5D:24:0F:E7:F8:30:DE:95:0B:0E:2D:34:94:61:4A:A9:F5:5A
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 0196526DA58692326237712FBB11B349E4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 08EB
Signing time: Sun 20 Apr 2025 09:00:39 +0000
Manifest this update: Sun 20 Apr 2025 09:00:39 +0000
Manifest next update: Mon 21 Apr 2025 09:00:39 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: dp6lqs/AwYwcDQXolqYwXHCPHsakPJ1M2Pz/RLBB36k=)
2: dgAEK4wIhzdNcfF05upWmZfXZZk.roa (hash: U/vt5a1C9rZX//TwbwJI8SM4gcB/oWBETRm681WJLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:a5:86:92:32:62:37:71:2f:bb:11:b3:49:e4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Apr 20 09:00:39 2025 GMT
Not After : Apr 21 09:00:39 2025 GMT
Subject: CN=d79b5d240fe7f830de950b0e2d3494614aa9f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:f0:4e:93:e6:9f:c7:7f:28:58:d7:70:09:
57:6a:7a:c5:8a:74:59:96:a3:55:d4:80:0a:c5:07:
ab:68:6f:74:e9:ba:12:7e:c4:bc:39:69:08:24:27:
4b:ff:5b:bb:a9:f7:0c:e3:38:91:8f:80:d3:c7:2f:
5a:1f:f7:6d:4c:86:00:6c:f3:a9:ff:bd:b4:d3:44:
6b:72:e3:69:49:21:a8:88:17:92:c1:37:32:10:29:
aa:2d:8d:35:28:31:c7:4a:00:d9:18:23:3a:bd:6c:
d5:cb:25:21:62:05:ed:12:0c:f9:2e:ab:35:50:86:
0a:52:70:56:1b:51:60:cc:b6:91:d0:f3:a0:fd:50:
ca:ad:b3:89:8e:ce:17:2b:68:7b:35:cc:ab:88:e2:
5f:f8:06:aa:84:d9:30:9a:33:4f:64:dc:30:d9:30:
d0:d6:78:40:5f:82:43:89:85:c3:42:36:b2:e6:26:
ad:a0:db:55:04:78:90:83:65:c4:90:44:89:d0:fd:
f0:20:9b:d0:b7:e5:88:9a:2b:a0:3d:68:bc:e7:10:
f7:9e:32:5a:73:b5:b6:37:96:36:59:95:8b:ac:f2:
d4:c2:e8:67:3e:28:e0:7f:c9:76:18:cc:17:b2:42:
1e:9b:31:60:c0:db:d2:6a:f5:89:76:a0:fd:2d:77:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:5D:24:0F:E7:F8:30:DE:95:0B:0E:2D:34:94:61:4A:A9:F5:5A
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9b:9d:55:78:d9:63:58:4c:11:fc:38:ac:3a:2c:a6:00:06:
2e:16:48:d4:19:93:4a:a8:01:f6:54:64:04:fe:c6:9b:e1:4f:
b8:cd:88:a3:d2:7e:01:85:c0:06:59:63:b2:65:b7:2d:6b:17:
e7:db:c5:f7:ff:6b:8c:b9:ed:42:38:a2:14:d2:fc:ae:2e:f3:
9a:c3:60:79:8f:4e:26:de:c8:8a:86:c7:22:2f:d4:02:35:98:
67:71:a8:df:04:b1:b7:13:7e:99:48:e4:c4:86:34:6c:81:fe:
e2:2c:a1:d1:4f:54:df:58:4d:a2:cc:66:4a:31:09:5f:40:6b:
ca:23:d0:3a:01:1e:75:16:4d:21:19:a4:78:a6:9e:a7:da:d6:
09:fd:4c:90:10:e1:27:c9:3c:e8:3e:ff:4d:85:26:85:ed:e1:
66:3d:9e:56:68:2c:a8:12:b0:a0:e1:55:c4:fb:d9:29:a5:56:
c8:af:4d:98:86:92:70:4d:f1:dc:ab:1e:84:6c:9a:31:23:73:
ca:f6:c7:12:81:ad:07:55:83:89:bd:ee:01:b0:8e:2e:76:cd:
2d:12:c1:d5:d3:d5:d9:d6:3a:85:b1:c7:ec:be:5f:16:ce:f3:
ef:96:4d:e8:2c:cd:07:13:5f:69:ef:95:6a:95:5e:f6:9d:65:
83:b1:6a:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbaWGkjJiN3EvuxGzSeSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2N2IzOTRjZjhhNDA1MWMxNjdkNDY4YmM3Yjg5MmE3MWRl
ZTRkMDMwHhcNMjUwNDIwMDkwMDM5WhcNMjUwNDIxMDkwMDM5WjAzMTEwLwYDVQQD
EyhkNzliNWQyNDBmZTdmODMwZGU5NTBiMGUyZDM0OTQ2MTRhYTlmNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT7wTpPmn8d/KFjXcAlXanrFinRZ
lqNV1IAKxQeraG906boSfsS8OWkIJCdL/1u7qfcM4ziRj4DTxy9aH/dtTIYAbPOp
/72000RrcuNpSSGoiBeSwTcyECmqLY01KDHHSgDZGCM6vWzVyyUhYgXtEgz5Lqs1
UIYKUnBWG1FgzLaR0POg/VDKrbOJjs4XK2h7NcyriOJf+AaqhNkwmjNPZNww2TDQ
1nhAX4JDiYXDQjay5iatoNtVBHiQg2XEkESJ0P3wIJvQt+WImiugPWi85xD3njJa
c7W2N5Y2WZWLrPLUwuhnPijgf8l2GMwXskIemzFgwNvSavWJdqD9LXdwkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNebXSQP5/gw3pULDi00lGFKqfVaMB8GA1UdIwQY
MBaAFEZ7OUz4pAUcFn1Gi8e4kqcd7k0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQt
MGYwMWI1NjA2NTdjLzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWM4MDUtZjYwYy00NDJjLWFjNWQtMGYwMWI1NjA2NTdj
LzEvUm5zNVRQaWtCUndXZlVhTHg3aVNweDN1VFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJudVXjZ
Y1hMEfw4rDospgAGLhZI1BmTSqgB9lRkBP7Gm+FPuM2Io9J+AYXABlljsmW3LWsX
59vF9/9rjLntQjiiFNL8ri7zmsNgeY9OJt7IiobHIi/UAjWYZ3Go3wSxtxN+mUjk
xIY0bIH+4iyh0U9U31hNosxmSjEJX0BryiPQOgEedRZNIRmkeKaep9rWCf1MkBDh
J8k86D7/TYUmhe3hZj2eVmgsqBKwoOFVxPvZKaVWyK9NmIaScE3x3KsehGyaMSNz
yvbHEoGtB1WDib3uAbCOLnbNLRLB1dPV2dY6hbHH7L5fFs7z75ZN6CzNBxNfae+V
apVe9p1lg7FqxA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:18 2025 by rpki-client