Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File: 06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier: nGD+5pQF3IfpFJgSTTm4qDdnmq4whtZtMRjaX2GTI54=
Subject key identifier: D1:08:B5:57:F3:A9:C9:1E:DC:2F:75:71:B1:A8:45:5D:A5:08:0B:98
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 01964D7EF0F665CB00649CD873CBAA7C5828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number: 01B8
Signing time: Sat 19 Apr 2025 10:01:26 +0000
Manifest this update: Sat 19 Apr 2025 10:01:26 +0000
Manifest next update: Sun 20 Apr 2025 10:01:26 +0000
Files and hashes: 1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: KYa2tw0+Bs7dhl0N/sGezIsnEZ3x3e0jQZFXasyqfSQ=)
2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f0:f6:65:cb:00:64:9c:d8:73:cb:aa:7c:58:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Apr 19 10:01:26 2025 GMT
Not After : Apr 20 10:01:26 2025 GMT
Subject: CN=d108b557f3a9c91edc2f7571b1a8455da5080b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:34:18:1c:6f:bf:39:5d:46:28:8a:f1:e9:
03:aa:50:c3:10:96:3f:05:fa:0a:e8:c8:a4:ef:3e:
28:ae:88:d7:19:c0:bd:41:dd:40:4f:aa:80:eb:71:
f1:0a:f3:33:50:ae:6a:be:ef:13:0f:44:08:ce:5d:
31:08:8c:c6:0e:ba:e6:c8:9b:92:c4:ef:ba:98:af:
ef:b4:20:b5:8e:30:b4:ce:8f:b3:15:65:3f:18:45:
6f:28:9c:78:ce:15:65:84:55:e5:17:ea:cf:1f:7c:
3b:28:ce:fc:80:18:23:36:25:e2:70:a1:90:a6:c2:
7e:18:e0:3c:e7:34:3b:38:9d:f6:69:10:2f:96:2c:
b1:09:31:60:15:84:69:8e:0c:f0:b2:d0:54:eb:df:
8f:34:55:e5:2b:ee:ce:61:11:ed:50:fa:a1:b5:8e:
b8:fe:dc:7d:7d:a2:bb:23:78:48:92:b3:99:a0:6c:
4c:ff:ec:b4:17:8a:a5:ee:e2:16:87:3f:b1:d0:bc:
a8:3f:a3:ec:4d:4e:6b:26:63:dc:00:ab:71:b4:77:
98:94:1a:31:2a:85:f4:fd:ab:3e:ee:20:23:bd:2a:
ee:0a:57:89:cd:4e:0e:4c:8b:d8:4f:da:85:fd:82:
1e:f7:51:09:51:f9:d3:97:e1:8b:94:48:db:b1:53:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:08:B5:57:F3:A9:C9:1E:DC:2F:75:71:B1:A8:45:5D:A5:08:0B:98
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:66:d8:9f:6b:30:a5:3d:ce:be:c8:79:a1:0a:87:bd:b5:
0f:e5:b6:93:8f:5d:1b:9c:69:16:1e:5e:0b:1b:4c:d9:b8:c4:
dc:12:71:9d:f7:a1:16:45:3a:70:87:25:31:6a:47:56:f6:11:
ef:85:6b:9d:c1:15:8f:9e:1a:16:74:ff:8c:85:da:0b:d9:0f:
6d:61:a5:55:f6:2e:93:c3:6a:0c:51:09:35:f5:ea:6b:45:e8:
40:d3:ee:fc:c9:76:43:4e:bc:ee:29:68:b0:73:c2:24:8e:eb:
1a:05:6c:a2:93:09:e2:06:d8:16:52:85:e2:79:a5:ba:84:96:
4c:18:4e:40:9f:75:c3:e7:5f:f8:b1:b5:57:4d:09:6d:a9:a1:
09:a0:97:d1:01:bc:1a:f9:14:73:23:95:44:70:c0:d7:bb:83:
52:fa:19:ef:33:7a:15:fb:60:ba:04:38:d0:c0:6e:de:c0:7e:
50:e9:8b:37:2e:c0:8c:97:ae:e0:fd:47:80:47:b5:d1:f3:8c:
17:03:99:6c:55:8c:31:13:39:0d:8a:b9:bf:d9:1e:dd:9d:8a:
10:bc:89:ab:52:66:1c:25:e4:7b:36:88:37:07:15:12:8e:bc:
46:65:75:fc:58:e7:4a:eb:1b:cd:2d:cb:00:3a:c2:da:c4:57:
ae:a2:79:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfvD2ZcsAZJzYc8uqfFgoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWM1MGUwNDU4MjI4MjMxNzZlNDc4MzJkZWM4ZjIxMWI3
NGYwMTMwHhcNMjUwNDE5MTAwMTI2WhcNMjUwNDIwMTAwMTI2WjAzMTEwLwYDVQQD
EyhkMTA4YjU1N2YzYTljOTFlZGMyZjc1NzFiMWE4NDU1ZGE1MDgwYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2U0GBxvvzldRiiK8ekDqlDDEJY/
BfoK6Mik7z4orojXGcC9Qd1AT6qA63HxCvMzUK5qvu8TD0QIzl0xCIzGDrrmyJuS
xO+6mK/vtCC1jjC0zo+zFWU/GEVvKJx4zhVlhFXlF+rPH3w7KM78gBgjNiXicKGQ
psJ+GOA85zQ7OJ32aRAvliyxCTFgFYRpjgzwstBU69+PNFXlK+7OYRHtUPqhtY64
/tx9faK7I3hIkrOZoGxM/+y0F4ql7uIWhz+x0LyoP6PsTU5rJmPcAKtxtHeYlBox
KoX0/as+7iAjvSruCleJzU4OTIvYT9qF/YIe91EJUfnTl+GLlEjbsVN+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEItVfzqcke3C91cbGoRV2lCAuYMB8GA1UdIwQY
MBaAFNOsUOBFgigjF25Hgy3sjyEbdPATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUt
NTQ4ZDMwMmNjZWRiLzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mOTZjOWMtNzcyZC00YjA1LWE4OWUtNTQ4ZDMwMmNjZWRi
LzEvMDZ4UTRFV0NLQ01YYmtlRExleVBJUnQwOEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwJm2J9r
MKU9zr7IeaEKh721D+W2k49dG5xpFh5eCxtM2bjE3BJxnfehFkU6cIclMWpHVvYR
74VrncEVj54aFnT/jIXaC9kPbWGlVfYuk8NqDFEJNfXqa0XoQNPu/Ml2Q0687ilo
sHPCJI7rGgVsopMJ4gbYFlKF4nmluoSWTBhOQJ91w+df+LG1V00JbamhCaCX0QG8
GvkUcyOVRHDA17uDUvoZ7zN6FftgugQ40MBu3sB+UOmLNy7AjJeu4P1HgEe10fOM
FwOZbFWMMRM5DYq5v9ke3Z2KELyJq1JmHCXkezaINwcVEo68RmV1/FjnSusbzS3L
ADrC2sRXrqJ5Sg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:19 2025 by rpki-client