Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: qOm9y8v2AqtXFcasylngrP4Krd7VNRQAFqMOMb5el8k=
Subject key identifier: 05:82:0D:32:39:B2:53:41:E3:BA:B8:EF:BF:4B:FA:99:73:DE:C1:F3
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 01965BDE94C251A4BEBDCC5C11644EB1A4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0BD3
Signing time: Tue 22 Apr 2025 05:00:35 +0000
Manifest this update: Tue 22 Apr 2025 05:00:35 +0000
Manifest next update: Wed 23 Apr 2025 05:00:35 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: ncp41yl+88HFKVYrvoOktmw7cYhO1NDXwPkL9L4ja9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:de:94:c2:51:a4:be:bd:cc:5c:11:64:4e:b1:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Apr 22 05:00:35 2025 GMT
Not After : Apr 23 05:00:35 2025 GMT
Subject: CN=05820d3239b25341e3bab8efbf4bfa9973dec1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:10:1e:fa:a9:a2:ed:e4:c5:1d:c4:44:ca:
0a:f0:11:c2:49:66:4d:f7:37:55:c2:c2:87:8b:0f:
20:0d:30:55:55:9c:fc:7a:51:22:41:32:18:d4:f8:
bf:84:ba:c1:44:d0:8c:64:59:ee:a8:c7:06:86:27:
d7:71:57:d0:63:11:18:26:c1:82:0f:cb:a8:ad:8e:
1f:e4:59:f4:3f:25:29:7a:1a:07:0b:a8:fc:37:7c:
1d:e0:b9:86:36:e8:5c:fa:d8:96:05:e5:07:e8:09:
a3:85:d7:98:dc:53:d2:13:89:57:8e:53:cf:26:f6:
25:58:e8:c1:6f:f6:ac:c0:0f:a2:ea:af:86:44:61:
f7:5a:be:54:cb:76:d7:10:cf:d3:9e:fc:a1:ad:1c:
bf:e7:1f:3a:b4:22:5f:4d:18:fe:3b:c8:0e:0d:87:
ca:d7:37:d3:39:7d:9a:2d:94:6f:e9:91:bb:a7:97:
9a:4f:50:d8:14:d6:8d:b6:13:62:b6:08:db:89:9d:
65:e2:62:32:ef:dc:e7:df:9c:6f:08:ec:d6:31:f8:
9c:08:d6:2e:34:08:75:da:4a:e4:51:df:17:16:e0:
df:76:a5:10:cd:25:39:ab:80:c3:0b:b7:82:a8:95:
7d:b1:54:98:4e:cd:fe:1e:d7:6a:98:bd:52:2b:37:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:0D:32:39:B2:53:41:E3:BA:B8:EF:BF:4B:FA:99:73:DE:C1:F3
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1c:ad:ee:97:a5:49:a3:eb:36:0b:ea:dc:03:6c:69:1f:3b:
3b:30:3e:f9:75:66:04:16:9c:97:fc:61:aa:4b:8e:f0:61:02:
02:dd:3a:df:0c:6f:4d:0a:89:06:4c:c3:48:d1:22:8a:6f:27:
eb:dd:b3:2d:70:06:39:ce:3e:e7:d0:26:c7:6d:48:b2:9a:20:
ea:72:af:9d:5a:7c:e6:dd:bf:4e:33:3d:c0:41:94:e9:5d:61:
e9:33:d2:9d:79:b9:9a:87:58:be:ec:3b:ec:97:70:03:c9:a4:
cd:7c:25:5f:76:2d:50:b6:a6:92:02:77:00:a7:30:31:a2:9d:
78:d3:35:8a:3d:74:ea:ad:64:85:75:43:92:ff:aa:73:a3:8c:
4a:7b:a5:62:4a:db:03:36:a7:88:30:47:2e:0d:62:17:41:b7:
52:23:7f:1f:2d:09:32:8b:3e:3f:9b:28:9f:05:c7:a7:5f:b5:
cb:fa:73:c5:f0:06:0c:c9:3d:6b:68:11:2d:87:8c:25:ae:9b:
1e:d4:73:9d:07:63:e4:7f:a2:bd:e4:2d:64:26:e1:43:22:84:
13:07:e4:dc:91:f5:c2:0b:62:06:84:6f:ce:93:ef:c7:02:68:
44:24:c2:11:12:7e:59:0f:e8:57:30:df:6f:ca:a5:36:bc:d1:
29:06:c3:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZb3pTCUaS+vcxcEWROsaSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3
MTczMGUwHhcNMjUwNDIyMDUwMDM1WhcNMjUwNDIzMDUwMDM1WjAzMTEwLwYDVQQD
EygwNTgyMGQzMjM5YjI1MzQxZTNiYWI4ZWZiZjRiZmE5OTczZGVjMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEQHvqpou3kxR3ERMoK8BHCSWZN
9zdVwsKHiw8gDTBVVZz8elEiQTIY1Pi/hLrBRNCMZFnuqMcGhifXcVfQYxEYJsGC
D8uorY4f5Fn0PyUpehoHC6j8N3wd4LmGNuhc+tiWBeUH6AmjhdeY3FPSE4lXjlPP
JvYlWOjBb/aswA+i6q+GRGH3Wr5Uy3bXEM/TnvyhrRy/5x86tCJfTRj+O8gODYfK
1zfTOX2aLZRv6ZG7p5eaT1DYFNaNthNitgjbiZ1l4mIy79zn35xvCOzWMficCNYu
NAh12krkUd8XFuDfdqUQzSU5q4DDC7eCqJV9sVSYTs3+HtdqmL1SKzf8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWCDTI5slNB47q4779L+plz3sHzMB8GA1UdIwQY
MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt
ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3
LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxyt7pel
SaPrNgvq3ANsaR87OzA++XVmBBacl/xhqkuO8GECAt063wxvTQqJBkzDSNEiim8n
692zLXAGOc4+59Amx21Ispog6nKvnVp85t2/TjM9wEGU6V1h6TPSnXm5modYvuw7
7JdwA8mkzXwlX3YtULamkgJ3AKcwMaKdeNM1ij106q1khXVDkv+qc6OMSnulYkrb
AzaniDBHLg1iF0G3UiN/Hy0JMos+P5sonwXHp1+1y/pzxfAGDMk9a2gRLYeMJa6b
HtRznQdj5H+iveQtZCbhQyKEEwfk3JH1wgtiBoRvzpPvxwJoRCTCERJ+WQ/oVzDf
b8qlNrzRKQbDHQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:43 2025 by rpki-client