Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File: PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier: Xj9vAMxSW2Pe1xGq03rIgKoyp/SGXl64OeYBESUXo3s=
Subject key identifier: C4:E9:4C:00:30:2D:C0:5D:B3:42:BD:8E:43:BC:B2:BA:99:EA:EB:83
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer: /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial: 01964FDA786CEFB7E052398DE7EBB8FE110E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 21:00:39 +0000
Manifest this update: Sat 19 Apr 2025 21:00:39 +0000
Manifest next update: Sun 20 Apr 2025 21:00:39 +0000
Files and hashes: 1: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: UJzaPgEtB4EzL4F3UJjaFpkJpbCk/+XV2yfGayUe+NM=)
2: ZGY0lWkEYWemqocgFCB9t9qlPGA.roa (hash: fiVljxbXsWOkY42tbBEX2UBc5QCY0m1ysP8nQ4McSh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:78:6c:ef:b7:e0:52:39:8d:e7:eb:b8:fe:11:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
Validity
Not Before: Apr 19 21:00:39 2025 GMT
Not After : Apr 20 21:00:39 2025 GMT
Subject: CN=c4e94c00302dc05db342bd8e43bcb2ba99eaeb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:3d:78:84:fa:ba:d1:65:6b:c5:b4:ab:3c:
19:7f:c2:92:97:6a:a8:71:ee:d3:72:56:f4:79:c5:
47:ec:fb:2b:71:90:10:b7:c3:7c:e2:f8:b0:2d:d9:
9e:c6:7b:b6:8d:34:84:15:6c:7a:2f:03:49:d7:90:
fc:9b:c4:c2:63:b6:82:9a:ce:69:92:fc:28:0d:8f:
c0:f3:bf:51:0e:b1:1b:eb:38:8c:93:e5:9e:95:71:
6e:9e:ca:a4:63:d2:3b:e3:9c:70:26:d1:61:1f:de:
d9:62:95:ab:8c:42:0e:90:85:e2:e4:db:97:42:e2:
57:2f:10:ff:ee:af:d1:4c:8b:fa:28:83:7f:68:ca:
20:fe:97:6d:72:9a:b7:8c:ac:75:ce:e6:f1:ec:f0:
88:ee:8d:c4:32:f6:00:03:d9:cc:18:41:ec:d8:ff:
2d:37:1e:dc:e0:ba:03:68:45:15:ba:ac:21:17:16:
57:cf:02:c9:61:4f:97:16:c6:34:08:b2:b3:d7:da:
c5:37:a9:13:13:13:bb:50:fd:ff:5f:06:3c:0a:02:
c0:12:3a:31:8e:ed:1b:3f:8f:98:54:50:63:ca:bf:
92:1d:fa:46:42:ee:d2:56:f0:cb:f3:80:25:2d:cc:
68:4d:a0:83:7f:c5:c8:bc:ca:e3:4c:ee:e3:cd:33:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E9:4C:00:30:2D:C0:5D:B3:42:BD:8E:43:BC:B2:BA:99:EA:EB:83
X509v3 Authority Key Identifier:
keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:e6:17:57:61:38:4e:d9:03:b2:50:19:3b:c8:86:9d:65:
e6:73:32:7d:8f:77:7d:38:26:3f:cf:11:c1:31:76:c7:51:28:
bd:5d:25:c8:6d:0a:ed:a2:19:fa:92:a0:15:66:4d:a9:5d:64:
43:7e:0d:3e:db:a3:5f:04:ea:46:98:bb:25:e0:c2:38:46:8c:
ec:67:42:c2:07:cc:e8:ca:f4:4c:a6:bf:7b:af:1f:e0:66:7c:
18:30:3b:e0:fd:f5:d3:0e:9c:e5:30:47:76:09:df:2a:97:15:
2e:35:36:e8:8e:21:17:83:bd:ae:65:5b:fd:d2:a9:14:82:21:
44:07:9e:f0:77:b2:7c:bc:c1:ff:c6:d8:a5:99:7d:06:88:15:
30:b3:7f:24:4f:43:de:eb:e9:b7:f9:6c:97:19:0f:13:75:80:
e5:41:bf:77:57:dc:96:16:a2:64:cf:f2:0d:c3:68:63:70:42:
ef:f0:a6:03:b0:97:2b:18:87:27:0f:39:c3:ca:f1:41:61:58:
21:a9:ca:00:f8:f9:81:fe:f4:c5:70:20:14:73:94:2d:61:d4:
0d:79:c7:a1:f1:cb:af:b5:4a:2c:6f:ed:2d:08:cc:d3:8e:64:
04:30:63:66:f6:55:45:b2:0d:81:27:57:cc:bf:44:c1:ea:ab:
d9:cb:63:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2nhs77fgUjmN5+u4/hEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMmEyNjdkY2UwNzIyMzhlOWMwNDUxNWU2N2ViOTkyNjcy
ZTM1MWIwHhcNMjUwNDE5MjEwMDM5WhcNMjUwNDIwMjEwMDM5WjAzMTEwLwYDVQQD
EyhjNGU5NGMwMDMwMmRjMDVkYjM0MmJkOGU0M2JjYjJiYTk5ZWFlYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmI9eIT6utFla8W0qzwZf8KSl2qo
ce7Tclb0ecVH7PsrcZAQt8N84viwLdmexnu2jTSEFWx6LwNJ15D8m8TCY7aCms5p
kvwoDY/A879RDrEb6ziMk+WelXFunsqkY9I745xwJtFhH97ZYpWrjEIOkIXi5NuX
QuJXLxD/7q/RTIv6KIN/aMog/pdtcpq3jKx1zubx7PCI7o3EMvYAA9nMGEHs2P8t
Nx7c4LoDaEUVuqwhFxZXzwLJYU+XFsY0CLKz19rFN6kTExO7UP3/XwY8CgLAEjox
ju0bP4+YVFBjyr+SHfpGQu7SVvDL84AlLcxoTaCDf8XIvMrjTO7jzTNSXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTpTAAwLcBds0K9jkO8srqZ6uuDMB8GA1UdIwQY
MBaAFDwqJn3OByI46cBFFeZ+uZJnLjUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYt
YTRiNmUzZDBkODMwLzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jZDZhN2ItMTU4MC00MTAyLTlhYTYtYTRiNmUzZDBkODMw
LzEvUENvbWZjNEhJampwd0VVVjVuNjVrbWN1TlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlnmF1dh
OE7ZA7JQGTvIhp1l5nMyfY93fTgmP88RwTF2x1EovV0lyG0K7aIZ+pKgFWZNqV1k
Q34NPtujXwTqRpi7JeDCOEaM7GdCwgfM6Mr0TKa/e68f4GZ8GDA74P310w6c5TBH
dgnfKpcVLjU26I4hF4O9rmVb/dKpFIIhRAee8HeyfLzB/8bYpZl9BogVMLN/JE9D
3uvpt/lslxkPE3WA5UG/d1fclhaiZM/yDcNoY3BC7/CmA7CXKxiHJw85w8rxQWFY
IanKAPj5gf70xXAgFHOULWHUDXnHofHLr7VKLG/tLQjM045kBDBjZvZVRbINgSdX
zL9Eweqr2ctjKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:46 2025 by rpki-client