Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: 5sm+MccDUathHTpOZgalGD+f6Qm4pUz5w6KmpuuFqtU=
Subject key identifier: 4C:E5:4F:E9:27:48:E2:A1:55:30:BB:76:A8:AA:CB:BE:C5:67:D8:65
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 01965DCD9F96D3BAEFC6F7139B6CC065CC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 14:01:18 +0000
Manifest this update: Tue 22 Apr 2025 14:01:18 +0000
Manifest next update: Wed 23 Apr 2025 14:01:18 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: /Vz0fWMr2JHu6lhFkmIZL17tr6Bz6TpJq2HmkI1OHrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:cd:9f:96:d3:ba:ef:c6:f7:13:9b:6c:c0:65:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Apr 22 14:01:18 2025 GMT
Not After : Apr 23 14:01:18 2025 GMT
Subject: CN=4ce54fe92748e2a15530bb76a8aacbbec567d865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:b7:f8:d2:fa:b9:3e:d3:4a:ad:2b:77:3c:
c0:f4:7b:17:1c:42:6b:28:65:c2:1d:b9:ac:de:5e:
56:57:3f:c5:b5:41:f6:9e:62:2b:db:f1:f4:cc:6e:
57:a5:d8:ac:18:61:11:f7:a9:b5:a1:b1:4c:b6:f1:
34:d0:67:78:ef:b4:81:b2:39:50:2b:b2:fd:15:36:
39:85:7a:63:5f:f9:14:26:0c:ee:ef:a2:7f:18:93:
ec:ec:2e:d4:31:36:1a:ea:c7:b5:30:bb:d9:3e:eb:
40:f1:38:f6:ae:54:42:ef:ea:4b:f7:5c:03:6e:bb:
4f:52:0f:a2:fe:c7:05:a6:3f:04:55:b5:1a:09:cc:
a5:40:1a:6c:ca:04:64:24:05:dc:2b:7c:6d:28:cf:
4c:53:91:31:91:44:77:4c:88:77:66:0d:60:09:1b:
15:d1:fd:ff:ab:e4:9c:2e:26:32:c8:e5:1b:c4:f1:
4b:37:4b:c2:63:53:e8:a4:b8:ff:ca:d8:18:cf:99:
b7:3a:30:0e:28:a0:54:67:1c:de:d7:cc:e9:9a:9f:
2a:a7:27:f7:85:d8:14:47:8d:df:8f:31:32:73:8e:
63:f5:e7:98:57:77:02:71:87:19:43:61:95:3f:85:
d2:57:b9:18:02:77:b9:1e:7d:0c:00:1b:60:a5:91:
20:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:4F:E9:27:48:E2:A1:55:30:BB:76:A8:AA:CB:BE:C5:67:D8:65
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:1b:49:b6:38:2b:2a:f4:14:cb:d4:e1:7b:cf:47:07:01:
66:36:99:ce:ac:af:ba:6c:8c:55:a6:30:12:0d:b1:08:4d:bd:
b6:c3:3d:31:a5:88:67:89:bf:f8:a0:c9:b4:a5:3d:55:28:32:
af:4c:41:e1:d1:ee:c8:48:e7:b7:d7:74:e5:e8:94:5c:ea:92:
d2:0b:06:18:18:8e:fa:87:ad:83:8a:39:25:c9:0e:6e:01:c7:
64:84:fc:b0:ad:a0:d4:fc:a2:2f:7f:be:e4:ab:93:f4:65:9d:
ac:cb:1f:ab:45:d3:8b:7a:89:4b:2a:db:48:33:84:00:0f:f4:
23:8d:f4:16:77:16:92:31:d2:a8:9f:9e:97:aa:b5:5e:c4:32:
ae:ba:59:31:bd:1d:5a:b1:23:eb:2b:56:ed:82:7b:16:16:89:
21:b1:f4:e8:56:66:30:cd:1d:19:90:f1:c2:4d:eb:84:e8:04:
ee:f0:64:03:c7:5e:c5:9f:56:4d:e0:4b:88:b7:81:d2:ef:61:
25:4d:1e:01:61:e7:11:a7:64:c1:28:99:01:7f:45:c3:29:07:
1f:06:f8:01:d0:bd:60:f2:32:cd:e5:34:c5:a9:4f:b3:b0:83:
4b:32:3f:9c:3b:0b:8d:5d:0b:2a:68:80:fc:1e:c7:b7:f8:5e:
af:9a:fc:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZdzZ+W07rvxvcTm2zAZcwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmVhZjU5YTJiZmYzY2FiMTE4NzExODk0NDc4YmI5ZWZm
OTNiODUwHhcNMjUwNDIyMTQwMTE4WhcNMjUwNDIzMTQwMTE4WjAzMTEwLwYDVQQD
Eyg0Y2U1NGZlOTI3NDhlMmExNTUzMGJiNzZhOGFhY2JiZWM1NjdkODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K23+NL6uT7TSq0rdzzA9HsXHEJr
KGXCHbms3l5WVz/FtUH2nmIr2/H0zG5XpdisGGER96m1obFMtvE00Gd477SBsjlQ
K7L9FTY5hXpjX/kUJgzu76J/GJPs7C7UMTYa6se1MLvZPutA8Tj2rlRC7+pL91wD
brtPUg+i/scFpj8EVbUaCcylQBpsygRkJAXcK3xtKM9MU5ExkUR3TIh3Zg1gCRsV
0f3/q+ScLiYyyOUbxPFLN0vCY1PopLj/ytgYz5m3OjAOKKBUZxze18zpmp8qpyf3
hdgUR43fjzEyc45j9eeYV3cCcYcZQ2GVP4XSV7kYAne5Hn0MABtgpZEg2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzlT+knSOKhVTC7dqiqy77FZ9hlMB8GA1UdIwQY
MBaAFCEur1miv/PKsRhxGJRHi7nv+TuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yOGY2YWMtZjgwNS00YzkxLWI0ZWEt
MTk0ODg3YmRhNDIzLzEvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yOGY2YWMtZjgwNS00YzkxLWI0ZWEtMTk0ODg3YmRhNDIz
LzEvSVM2dldhS184OHF4R0hFWWxFZUx1ZV81TzRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNMbSbY4
Kyr0FMvU4XvPRwcBZjaZzqyvumyMVaYwEg2xCE29tsM9MaWIZ4m/+KDJtKU9VSgy
r0xB4dHuyEjnt9d05eiUXOqS0gsGGBiO+oetg4o5JckObgHHZIT8sK2g1PyiL3++
5KuT9GWdrMsfq0XTi3qJSyrbSDOEAA/0I430FncWkjHSqJ+el6q1XsQyrrpZMb0d
WrEj6ytW7YJ7FhaJIbH06FZmMM0dGZDxwk3rhOgE7vBkA8dexZ9WTeBLiLeB0u9h
JU0eAWHnEadkwSiZAX9FwykHHwb4AdC9YPIyzeU0xalPs7CDSzI/nDsLjV0LKmiA
/B7Ht/her5r8mw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 19:20:48 2025 by rpki-client