Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
File: sLQvCUy6l0wfrsa97BVg9mOHiRE.mft (raw, json)
Hash identifier: qrA2gb17CjUGiG1e35B+1uCw8dWVtvKWaiGaCbE8hjQ=
Subject key identifier: 7D:23:30:6A:FC:9F:94:52:41:18:C6:6F:77:55:0E:7A:AC:A3:43:87
Authority key identifier: B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
Certificate issuer: /CN=b0b42f094cba974c1faec6bdec1560f663878911
Certificate serial: 01965349E60E9978B636151EB28585A5E077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
Manifest number: 118E
Signing time: Sun 20 Apr 2025 13:01:13 +0000
Manifest this update: Sun 20 Apr 2025 13:01:13 +0000
Manifest next update: Mon 21 Apr 2025 13:01:13 +0000
Files and hashes: 1: sLQvCUy6l0wfrsa97BVg9mOHiRE.crl (hash: 9PNUzh0+e7XtrZztzS1Qw/0rkTmB6aiV/oG+FsjgblA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:e6:0e:99:78:b6:36:15:1e:b2:85:85:a5:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b42f094cba974c1faec6bdec1560f663878911
Validity
Not Before: Apr 20 13:01:13 2025 GMT
Not After : Apr 21 13:01:13 2025 GMT
Subject: CN=7d23306afc9f94524118c66f77550e7aaca34387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:de:bb:48:b5:ed:ef:58:53:61:b9:c7:2f:
65:76:1b:1a:2b:fa:6b:2b:f4:0d:cc:ea:ea:db:fb:
86:2b:14:b8:d3:57:ba:c7:18:d1:88:13:56:ff:37:
06:d5:bc:0e:c6:ce:ec:c1:5c:9e:20:8a:f1:2d:54:
4c:38:09:ec:14:cb:2e:c1:da:8c:1f:5c:8a:a6:22:
61:b3:60:d5:c1:ee:7a:20:d1:ee:cd:c4:1d:18:f9:
51:f7:b8:87:65:be:9f:72:7a:21:bb:05:00:eb:16:
a0:15:ba:1e:df:62:5a:f0:11:02:63:e0:e0:70:21:
b7:43:2a:e7:60:1f:09:28:82:b9:b0:27:d3:4e:9b:
15:98:44:d1:7a:98:58:03:1f:67:7e:ae:da:b4:af:
b6:35:11:cb:6f:e5:d1:27:2d:94:e5:81:d1:90:92:
a7:df:41:ba:00:49:24:13:d2:f1:26:06:34:11:75:
cb:ea:77:88:92:e5:c5:40:a8:db:d5:3c:d2:c4:9f:
e3:9a:9d:ae:72:f8:23:95:85:4e:06:e5:bf:0e:44:
e5:99:69:2d:5b:52:7e:cd:f4:cf:a4:64:cb:1d:3d:
b9:7e:58:b7:35:20:70:70:3c:83:3a:c3:03:4a:bf:
6d:8f:7e:53:8c:4b:71:ac:70:71:53:3f:01:49:1c:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:23:30:6A:FC:9F:94:52:41:18:C6:6F:77:55:0E:7A:AC:A3:43:87
X509v3 Authority Key Identifier:
keyid:B0:B4:2F:09:4C:BA:97:4C:1F:AE:C6:BD:EC:15:60:F6:63:87:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLQvCUy6l0wfrsa97BVg9mOHiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1a07b0-9976-4d55-b722-a2a11a0a6d74/1/sLQvCUy6l0wfrsa97BVg9mOHiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:e4:ea:9e:05:1f:3d:f4:9e:f8:46:bb:c9:ed:fc:64:8a:
22:4c:3c:11:b0:fe:c5:56:28:18:e9:90:80:15:f7:3a:6d:9c:
14:97:f5:df:39:3c:5f:44:9e:3c:ec:b3:1d:70:06:a8:b9:ad:
3f:0c:74:cb:56:c9:93:00:54:e0:58:2c:96:e9:f8:d7:b3:31:
26:9b:4f:4b:f7:df:b0:1e:5c:46:d2:d6:2d:32:29:ce:35:f5:
27:fc:1b:be:16:b6:3c:48:13:25:84:ae:33:ba:73:4e:66:0a:
52:e5:88:a9:19:e4:ea:00:df:8c:1c:ee:a7:ec:1d:17:6d:d5:
af:cc:7c:72:ac:4c:6f:76:4f:18:8d:d9:8a:4c:0e:60:34:bb:
05:67:42:e5:22:46:c1:3d:a1:d5:26:65:98:b8:0c:bf:ab:58:
21:38:0d:84:85:39:38:96:ac:4b:41:75:23:25:02:7f:f4:60:
be:b7:96:dc:0d:dc:b9:02:be:cf:dd:dd:25:1d:45:60:f6:95:
c7:25:e1:27:05:32:5c:d6:57:8a:54:46:38:e2:ac:1d:a4:77:
81:21:54:b0:1b:7b:9c:ef:98:cc:cb:61:b4:13:e2:8d:80:f0:
19:4e:fd:50:aa:e9:12:47:9d:f3:df:84:80:e5:5d:91:a9:70:
29:42:4b:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSeYOmXi2NhUesoWFpeB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjQyZjA5NGNiYTk3NGMxZmFlYzZiZGVjMTU2MGY2NjM4
Nzg5MTEwHhcNMjUwNDIwMTMwMTEzWhcNMjUwNDIxMTMwMTEzWjAzMTEwLwYDVQQD
Eyg3ZDIzMzA2YWZjOWY5NDUyNDExOGM2NmY3NzU1MGU3YWFjYTM0Mzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd3eu0i17e9YU2G5xy9ldhsaK/pr
K/QNzOrq2/uGKxS401e6xxjRiBNW/zcG1bwOxs7swVyeIIrxLVRMOAnsFMsuwdqM
H1yKpiJhs2DVwe56INHuzcQdGPlR97iHZb6fcnohuwUA6xagFboe32Ja8BECY+Dg
cCG3QyrnYB8JKIK5sCfTTpsVmETRephYAx9nfq7atK+2NRHLb+XRJy2U5YHRkJKn
30G6AEkkE9LxJgY0EXXL6neIkuXFQKjb1TzSxJ/jmp2ucvgjlYVOBuW/DkTlmWkt
W1J+zfTPpGTLHT25fli3NSBwcDyDOsMDSr9tj35TjEtxrHBxUz8BSRyLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0jMGr8n5RSQRjGb3dVDnqso0OHMB8GA1UdIwQY
MBaAFLC0LwlMupdMH67GvewVYPZjh4kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYTA3YjAtOTk3Ni00ZDU1LWI3MjIt
YTJhMTFhMGE2ZDc0LzEvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYTA3YjAtOTk3Ni00ZDU1LWI3MjItYTJhMTFhMGE2ZDc0
LzEvc0xRdkNVeTZsMHdmcnNhOTdCVmc5bU9IaVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhzk6p4F
Hz30nvhGu8nt/GSKIkw8EbD+xVYoGOmQgBX3Om2cFJf13zk8X0SePOyzHXAGqLmt
Pwx0y1bJkwBU4Fgslun417MxJptPS/ffsB5cRtLWLTIpzjX1J/wbvha2PEgTJYSu
M7pzTmYKUuWIqRnk6gDfjBzup+wdF23Vr8x8cqxMb3ZPGI3ZikwOYDS7BWdC5SJG
wT2h1SZlmLgMv6tYITgNhIU5OJasS0F1IyUCf/RgvreW3A3cuQK+z93dJR1FYPaV
xyXhJwUyXNZXilRGOOKsHaR3gSFUsBt7nO+YzMthtBPijYDwGU79UKrpEked89+E
gOVdkalwKUJLIQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:16:39 2025 by rpki-client