Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json)
Hash identifier: Xd+iv7QKa9Q6UEXV/2L8sK3T4s5xnZv9hhNvZGlecWE=
Subject key identifier: 32:04:29:40:E0:02:2E:A9:82:28:FB:0C:74:C9:FC:6B:C7:6B:9A:DC
Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Certificate serial: 01964C3474D9DD7C5CB07766D3B851488C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
Manifest number: 03C4
Signing time: Sat 19 Apr 2025 04:00:28 +0000
Manifest this update: Sat 19 Apr 2025 04:00:28 +0000
Manifest next update: Sun 20 Apr 2025 04:00:28 +0000
Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: NYAnfv1TEt0Zr70DTMxUXLWV7awmK8ODj67qFgGq06g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:74:d9:dd:7c:5c:b0:77:66:d3:b8:51:48:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f
Validity
Not Before: Apr 19 04:00:28 2025 GMT
Not After : Apr 20 04:00:28 2025 GMT
Subject: CN=32042940e0022ea98228fb0c74c9fc6bc76b9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:ff:36:ba:8b:a6:d0:1a:65:8a:56:54:17:
1d:85:87:96:c1:b1:63:02:8d:a5:86:28:71:b2:b5:
72:c9:ae:b9:52:f6:dc:86:57:1b:69:85:dd:37:72:
47:30:ce:dd:ff:eb:bc:b8:bb:d5:f5:96:ad:9a:0a:
4e:10:12:74:eb:a3:a3:42:ac:63:5c:f1:8f:a5:f7:
15:78:39:5f:c8:2d:93:ba:e8:5f:6c:32:52:63:90:
d5:34:36:e1:59:11:a1:e3:da:69:bd:00:6c:a5:5b:
56:aa:c2:24:66:06:14:95:eb:25:16:db:97:72:70:
fd:50:72:06:3e:13:29:b5:ac:5a:58:34:63:22:ee:
c5:5a:49:4c:66:92:5a:0e:97:a8:d2:17:7a:5c:23:
d7:88:8a:7e:65:3c:17:69:36:08:76:ac:93:7d:3d:
91:de:b4:bb:7c:c2:55:01:24:1b:13:ac:b9:97:7a:
10:41:07:23:09:30:8d:83:7e:26:c4:a8:b7:d3:56:
8d:e3:2a:e6:82:05:0f:03:ed:4b:ec:e5:65:cc:d9:
64:fb:12:0b:b9:66:2c:ea:b1:a2:74:41:b6:df:ae:
39:ea:ab:7b:f0:98:b1:57:80:0a:e4:05:a3:9a:5e:
d1:19:6c:65:b3:dd:9f:f1:bb:e2:8e:0e:20:d3:47:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:29:40:E0:02:2E:A9:82:28:FB:0C:74:C9:FC:6B:C7:6B:9A:DC
X509v3 Authority Key Identifier:
keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:56:cc:a4:bd:4e:43:3e:59:7b:aa:af:d0:a5:07:c5:11:
96:00:38:fd:d8:c2:75:4a:76:0d:ca:54:8f:83:b4:3e:6f:e8:
44:90:4e:e4:ba:2c:d0:96:6c:4e:80:96:76:8e:43:50:a5:88:
62:28:b3:d9:be:74:fe:e9:0b:7c:80:32:2d:52:db:f5:5a:42:
6b:77:27:0a:93:5c:5f:12:ae:45:2a:5e:12:90:84:6e:49:cf:
14:f7:4d:7c:ea:5a:0e:00:fe:be:5b:20:4a:a4:6e:e9:22:ae:
74:50:2e:24:d4:79:86:f9:66:fb:3b:8c:80:fd:87:2f:b6:25:
d3:58:36:7e:b7:27:f0:99:81:27:6a:dd:51:f4:ce:37:a9:ff:
b8:b7:b0:1b:42:39:2f:26:db:32:a1:c6:0d:cb:a3:61:77:3c:
60:b9:7a:b6:58:23:39:c9:74:f1:ac:31:dc:a4:d5:c2:05:6e:
65:07:25:65:94:4b:10:6a:15:67:e9:7a:e0:bc:ab:e8:a6:ac:
aa:51:a7:82:43:95:9e:01:d4:d6:e5:f7:da:92:ec:af:48:f1:
7b:29:70:ea:fb:8b:e0:ba:d5:8b:ce:90:83:b3:b8:d7:03:2c:
c2:24:a5:f0:b3:cf:f2:e9:6c:e3:ef:74:0b:a0:99:2d:f6:cf:
e4:b6:98:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNHTZ3XxcsHdm07hRSIxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWExZTMyYmJlNjc5YTk3NmZjNjFhNjAzZWRjZDZhNTQw
NzJiOGYwHhcNMjUwNDE5MDQwMDI4WhcNMjUwNDIwMDQwMDI4WjAzMTEwLwYDVQQD
EygzMjA0Mjk0MGUwMDIyZWE5ODIyOGZiMGM3NGM5ZmM2YmM3NmI5YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4P/NrqLptAaZYpWVBcdhYeWwbFj
Ao2lhihxsrVyya65UvbchlcbaYXdN3JHMM7d/+u8uLvV9ZatmgpOEBJ066OjQqxj
XPGPpfcVeDlfyC2TuuhfbDJSY5DVNDbhWRGh49ppvQBspVtWqsIkZgYUleslFtuX
cnD9UHIGPhMptaxaWDRjIu7FWklMZpJaDpeo0hd6XCPXiIp+ZTwXaTYIdqyTfT2R
3rS7fMJVASQbE6y5l3oQQQcjCTCNg34mxKi301aN4yrmggUPA+1L7OVlzNlk+xIL
uWYs6rGidEG236456qt78JixV4AK5AWjml7RGWxls92f8bvijg4g00eSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIEKUDgAi6pgij7DHTJ/GvHa5rcMB8GA1UdIwQY
MBaAFBdaHjK75nmpdvxhpgPtzWpUByuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEt
NGY5MGFiNmMyNjJjLzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEtNGY5MGFiNmMyNjJj
LzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUpWzKS9
TkM+WXuqr9ClB8URlgA4/djCdUp2DcpUj4O0Pm/oRJBO5Los0JZsToCWdo5DUKWI
Yiiz2b50/ukLfIAyLVLb9VpCa3cnCpNcXxKuRSpeEpCEbknPFPdNfOpaDgD+vlsg
SqRu6SKudFAuJNR5hvlm+zuMgP2HL7Yl01g2frcn8JmBJ2rdUfTON6n/uLewG0I5
LybbMqHGDcujYXc8YLl6tlgjOcl08awx3KTVwgVuZQclZZRLEGoVZ+l64Lyr6Kas
qlGngkOVngHU1uX32pLsr0jxeylw6vuL4LrVi86Qg7O41wMswiSl8LPP8uls4+90
C6CZLfbP5LaY6g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:31:14 2025 by rpki-client