Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: xtUmslWhruhZOwdw1mQkZ7FeDJmjYWXq4iTMuGdu/GQ=
Subject key identifier: 6B:4D:BF:09:64:8A:BA:4F:D2:5E:61:9A:5A:53:8D:8D:03:76:AD:03
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019611A15EF84D63110284D4E82A8E303AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 19:01:50 +0000
Manifest this update: Mon 07 Apr 2025 19:01:50 +0000
Manifest next update: Tue 08 Apr 2025 19:01:50 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: UbMrRWhZ3f/ttFwtWZuK9NdoZbYXcM31EjkaJhFamvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:5e:f8:4d:63:11:02:84:d4:e8:2a:8e:30:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Apr 7 19:01:50 2025 GMT
Not After : Apr 8 19:01:50 2025 GMT
Subject: CN=6b4dbf09648aba4fd25e619a5a538d8d0376ad03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:9b:e5:af:cf:22:e6:d5:9e:83:b2:fe:e0:
49:89:a6:45:30:ba:29:14:c6:d9:f8:41:ae:9d:67:
1c:16:e6:ff:ca:6b:78:c0:21:a3:90:e2:1a:8e:90:
66:98:49:9b:aa:eb:48:dc:d7:25:d0:51:ae:87:ee:
de:e1:0f:dc:77:d5:58:82:de:fc:66:bb:7d:6e:fb:
52:b6:01:56:35:f0:e3:6f:d7:7b:10:e1:7b:21:49:
39:34:d6:9e:cc:9b:ba:ca:6b:46:f5:52:71:5d:4a:
3f:f0:06:ff:5b:38:34:b4:a5:fb:08:64:05:cc:cc:
66:cd:2e:ae:a7:62:06:75:90:a4:ca:32:81:56:a6:
24:4f:cc:7e:3b:94:ac:1b:a9:16:99:38:cf:bb:52:
cb:c8:f5:80:01:62:cc:54:de:bf:17:74:ca:b7:1a:
1a:c8:7d:70:a6:f4:19:98:1a:7f:eb:25:58:2c:ad:
25:7a:a1:60:f8:25:84:f1:4a:1c:22:fa:12:4c:5b:
e5:87:d8:3f:c2:15:f6:f6:f2:53:23:8c:73:02:69:
b1:04:32:64:54:c9:5f:6f:8a:ee:52:4c:8c:28:d0:
de:5a:16:c6:fe:14:91:93:a6:64:a3:c5:e7:e0:2c:
18:01:4a:7d:66:80:df:3b:e4:5a:fe:99:fd:b0:b0:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:BF:09:64:8A:BA:4F:D2:5E:61:9A:5A:53:8D:8D:03:76:AD:03
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:26:fd:99:40:2b:09:03:10:71:5c:26:8a:7f:13:7e:1f:c7:
4b:4e:26:2b:a1:e9:45:52:17:96:60:75:51:7f:3d:f9:3b:bc:
7e:01:c0:2e:8a:f4:92:5b:10:96:07:64:f3:52:5a:0d:47:cc:
14:25:ef:52:52:a3:c3:7b:45:3d:38:a9:a9:2a:74:d8:e4:28:
81:e5:ea:18:8e:a2:37:ea:fa:2b:ce:e7:dc:91:95:16:2b:a3:
0f:48:09:93:f7:3a:35:73:88:c5:f4:dc:27:85:8d:0a:cf:74:
89:21:16:36:e7:0c:14:ef:d5:36:55:a1:34:3f:92:75:6b:01:
04:62:84:90:82:dc:7c:79:25:56:eb:d9:e2:85:80:5e:e2:37:
41:bf:45:4a:f3:ce:02:ea:80:85:75:f6:a2:86:9c:dd:81:15:
ad:0d:c6:c1:01:de:b8:3f:a1:af:50:51:ed:86:bb:c6:b0:49:
2d:e2:22:36:6a:13:09:0c:ad:9c:8c:53:7f:6f:cc:31:0d:6e:
05:d8:fa:8f:bb:21:9f:89:9b:fc:d0:80:82:7e:92:12:aa:67:
a2:8a:a2:c1:2a:59:b0:c2:f9:4a:36:b9:aa:79:40:48:ed:ad:
f2:43:2a:8b:dd:cc:ba:e4:d3:47:dd:fe:b2:0d:7e:c2:c6:6e:
80:87:7d:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoV74TWMRAoTU6CqOMDqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjUwNDA3MTkwMTUwWhcNMjUwNDA4MTkwMTUwWjAzMTEwLwYDVQQD
Eyg2YjRkYmYwOTY0OGFiYTRmZDI1ZTYxOWE1YTUzOGQ4ZDAzNzZhZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKb5a/PIubVnoOy/uBJiaZFMLop
FMbZ+EGunWccFub/ymt4wCGjkOIajpBmmEmbqutI3Ncl0FGuh+7e4Q/cd9VYgt78
Zrt9bvtStgFWNfDjb9d7EOF7IUk5NNaezJu6ymtG9VJxXUo/8Ab/Wzg0tKX7CGQF
zMxmzS6up2IGdZCkyjKBVqYkT8x+O5SsG6kWmTjPu1LLyPWAAWLMVN6/F3TKtxoa
yH1wpvQZmBp/6yVYLK0leqFg+CWE8UocIvoSTFvlh9g/whX29vJTI4xzAmmxBDJk
VMlfb4ruUkyMKNDeWhbG/hSRk6Zko8Xn4CwYAUp9ZoDfO+Ra/pn9sLBm2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtNvwlkirpP0l5hmlpTjY0Ddq0DMB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCb9mUAr
CQMQcVwmin8Tfh/HS04mK6HpRVIXlmB1UX89+Tu8fgHALor0klsQlgdk81JaDUfM
FCXvUlKjw3tFPTipqSp02OQogeXqGI6iN+r6K87n3JGVFiujD0gJk/c6NXOIxfTc
J4WNCs90iSEWNucMFO/VNlWhND+SdWsBBGKEkILcfHklVuvZ4oWAXuI3Qb9FSvPO
AuqAhXX2ooac3YEVrQ3GwQHeuD+hr1BR7Ya7xrBJLeIiNmoTCQytnIxTf2/MMQ1u
Bdj6j7shn4mb/NCAgn6SEqpnooqiwSpZsML5Sja5qnlASO2t8kMqi93MuuTTR93+
sg1+wsZugId95A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:20 2025 by rpki-client