Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier: 3fx+DhTprfPafoz6BDR00xlejUee6AfhjK23Uf+De3I=
Subject key identifier: B1:0E:87:7D:60:89:9D:2A:DC:D9:3E:F8:52:56:50:C5:16:97:64:A0
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial: 01965793F16BB26036B33C120392A8F6159D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number: 128C
Signing time: Mon 21 Apr 2025 09:00:35 +0000
Manifest this update: Mon 21 Apr 2025 09:00:35 +0000
Manifest next update: Tue 22 Apr 2025 09:00:35 +0000
Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: OW22Lw/wbl2xeTnsEn3vT+Rg/QKzr6WUftPVcs4fRUw=)
2: H8Hgbzgx0A7FcofaefkTfVc8Xz0.roa (hash: 1i3t+G4LlCk005AGKE/RTc337vB1zniPnJjKB0owze0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:f1:6b:b2:60:36:b3:3c:12:03:92:a8:f6:15:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
Validity
Not Before: Apr 21 09:00:35 2025 GMT
Not After : Apr 22 09:00:35 2025 GMT
Subject: CN=b10e877d60899d2adcd93ef8525650c5169764a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b9:2d:4c:5d:c0:da:4a:71:c2:23:3f:89:a1:
94:78:52:9d:d4:51:51:20:45:2c:50:56:0d:06:5a:
8b:de:14:04:6b:70:58:8a:ef:6f:83:ce:1e:b9:6f:
81:c0:05:53:a2:e0:f4:80:d7:30:ec:b6:f4:f1:24:
b8:1f:81:bf:b9:6f:12:a2:15:4a:c0:56:0b:31:b5:
69:0b:a8:ac:ee:3c:f5:43:2b:41:a6:d1:16:6e:a6:
bd:47:e1:1b:61:55:e9:42:e5:51:b4:8c:b4:90:e1:
f9:2d:0e:f4:5d:cc:d9:84:78:f2:5b:a4:0a:22:db:
b6:f4:71:91:de:13:6d:a2:7d:f3:08:47:35:9e:68:
c0:6c:e6:aa:a4:8c:a1:07:e6:8e:d6:42:ef:46:77:
22:86:4e:64:a8:58:80:0f:55:a7:79:8c:17:c2:91:
ec:03:03:dc:8b:33:cf:d0:f4:51:2a:77:de:dd:dc:
7c:29:8c:0c:0a:f2:9d:28:e1:a0:09:f2:f0:5f:a7:
76:17:5a:68:7f:82:ab:99:0c:2c:dd:ee:38:d5:68:
da:4b:14:25:8f:a4:6b:de:8c:fc:c6:96:ee:cf:52:
a6:34:03:e5:f5:58:36:f1:86:c8:b3:6a:19:1c:6f:
e8:98:2a:3c:67:37:8f:f5:8b:31:6c:c9:75:5a:f1:
24:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0E:87:7D:60:89:9D:2A:DC:D9:3E:F8:52:56:50:C5:16:97:64:A0
X509v3 Authority Key Identifier:
keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:3b:f8:c8:4a:b3:cc:ec:e7:ac:5e:bc:18:47:0e:c6:86:c9:
9a:b7:6a:1c:f7:29:3c:6f:d7:42:27:fa:8f:d7:57:2e:31:35:
fa:99:12:b8:33:de:87:77:a7:6c:be:94:da:60:b9:d2:e9:ae:
df:1d:e4:78:bf:5d:2d:33:df:c3:29:1b:1a:eb:59:a2:67:f7:
4a:f0:57:48:2e:b4:1a:7a:e8:2f:fc:e4:ea:41:55:83:a3:7f:
00:80:5d:c5:a6:28:7b:9d:2c:2c:92:8f:bb:aa:de:4c:52:72:
b1:fb:ca:32:a8:49:f5:27:f0:f7:02:4a:af:ba:dc:9c:e5:60:
ae:0b:7f:2a:90:7c:9a:b9:cd:e0:31:f2:93:4e:a7:43:05:df:
8b:17:69:df:e9:fe:45:19:4e:24:e7:a2:cd:11:e0:b0:f1:a4:
f8:b4:ee:20:af:b4:bc:69:01:ea:c1:22:ca:f9:59:26:42:7e:
28:8e:b6:fe:9c:b7:1c:4d:0b:21:b5:73:8d:de:0c:8e:b8:ec:
f1:6f:72:9e:bc:f5:84:bc:70:5f:90:04:75:6a:9d:6b:cd:d8:
82:43:09:9d:c4:92:34:4f:af:a7:c8:85:55:13:a7:18:1c:3a:
58:66:e2:84:f8:eb:28:b1:35:87:74:c2:ee:9a:c5:c7:1a:06:
23:3f:c8:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXk/FrsmA2szwSA5Ko9hWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3
N2ZkMTkwHhcNMjUwNDIxMDkwMDM1WhcNMjUwNDIyMDkwMDM1WjAzMTEwLwYDVQQD
EyhiMTBlODc3ZDYwODk5ZDJhZGNkOTNlZjg1MjU2NTBjNTE2OTc2NGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bktTF3A2kpxwiM/iaGUeFKd1FFR
IEUsUFYNBlqL3hQEa3BYiu9vg84euW+BwAVTouD0gNcw7Lb08SS4H4G/uW8SohVK
wFYLMbVpC6is7jz1QytBptEWbqa9R+EbYVXpQuVRtIy0kOH5LQ70XczZhHjyW6QK
Itu29HGR3hNton3zCEc1nmjAbOaqpIyhB+aO1kLvRncihk5kqFiAD1WneYwXwpHs
AwPcizPP0PRRKnfe3dx8KYwMCvKdKOGgCfLwX6d2F1pof4KrmQws3e441WjaSxQl
j6Rr3oz8xpbuz1KmNAPl9Vg28YbIs2oZHG/omCo8ZzeP9YsxbMl1WvEkwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEOh31giZ0q3Nk++FJWUMUWl2SgMB8GA1UdIwQY
MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt
NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl
LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzv4yEqz
zOznrF68GEcOxobJmrdqHPcpPG/XQif6j9dXLjE1+pkSuDPeh3enbL6U2mC50umu
3x3keL9dLTPfwykbGutZomf3SvBXSC60GnroL/zk6kFVg6N/AIBdxaYoe50sLJKP
u6reTFJysfvKMqhJ9Sfw9wJKr7rcnOVgrgt/KpB8mrnN4DHyk06nQwXfixdp3+n+
RRlOJOeizRHgsPGk+LTuIK+0vGkB6sEiyvlZJkJ+KI62/py3HE0LIbVzjd4Mjrjs
8W9ynrz1hLxwX5AEdWqda83YgkMJncSSNE+vp8iFVROnGBw6WGbihPjrKLE1h3TC
7prFxxoGIz/Iew==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:42 2025 by rpki-client