Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
File: SLo3AWkdKSivrTobVzWib0yZz_Y.mft (raw, json)
Hash identifier: WQzSHefN4kqqi+dKXgL5Sj6sR0u6aVfpCE+MqFQCUn0=
Subject key identifier: AF:92:E1:03:C4:6E:98:4E:09:80:13:5F:D0:70:6F:F7:5E:DE:AC:98
Authority key identifier: 48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
Certificate issuer: /CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Certificate serial: 019613218AE7989223AD783A4CA33D1BE681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
Manifest number: 13EB
Signing time: Tue 08 Apr 2025 02:01:27 +0000
Manifest this update: Tue 08 Apr 2025 02:01:27 +0000
Manifest next update: Wed 09 Apr 2025 02:01:27 +0000
Files and hashes: 1: 2p_ZO09LakS0A7u5Qz0wGibD5fU.roa (hash: dieDhkHaU+F1D9ZZPlcY6giEpQMREkK77VG8/1P3jjc=)
2: SLo3AWkdKSivrTobVzWib0yZz_Y.crl (hash: mrtEM56JC+HZCBVxDdW0kZ4Ad1CIGHySqfd/p+HN6cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:21:8a:e7:98:92:23:ad:78:3a:4c:a3:3d:1b:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ba3701691d2928afad3a1b5735a26f4c99cff6
Validity
Not Before: Apr 8 02:01:27 2025 GMT
Not After : Apr 9 02:01:27 2025 GMT
Subject: CN=af92e103c46e984e0980135fd0706ff75edeac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:20:c1:c5:bc:55:fe:16:5b:5a:46:cf:6a:
00:bc:51:90:e3:94:71:4f:e3:21:66:ba:5e:1a:6a:
53:2f:50:cd:d2:02:f7:6e:4d:d6:97:fa:6c:97:d6:
d1:13:d6:29:d4:ac:dc:41:c3:89:74:62:0b:81:69:
82:d5:44:8f:f0:20:ea:2c:0f:b9:4b:92:c2:06:ee:
ea:b6:65:1e:c2:9c:7e:bf:b5:2c:c6:c3:c3:8f:67:
2d:19:92:c6:7d:6f:84:23:cc:a5:9d:af:b8:00:61:
09:cc:6b:61:f9:f3:92:0e:24:0b:8e:7d:74:ac:4b:
af:90:3f:ce:ac:b6:09:c2:b7:10:78:5a:df:ee:98:
e8:ff:ae:7e:41:ff:dc:85:c2:68:7d:9f:33:89:af:
0c:58:40:86:b3:6d:ac:fe:2e:57:03:ad:9c:6e:58:
68:34:59:d8:95:8a:78:bc:98:7d:22:94:f1:a2:c7:
11:8a:2c:97:7f:e7:d7:d7:c9:e1:7d:4b:4e:e6:b9:
e4:9a:58:a3:dc:fa:1a:f5:ac:a7:95:0e:36:12:36:
22:bc:de:5e:c4:8b:c1:23:00:2a:9f:7d:38:80:f1:
9e:be:03:c4:17:f9:01:b0:dd:35:b8:c4:be:e5:4c:
eb:08:a9:82:95:7e:a4:2a:52:26:72:03:71:ff:77:
af:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:E1:03:C4:6E:98:4E:09:80:13:5F:D0:70:6F:F7:5E:DE:AC:98
X509v3 Authority Key Identifier:
keyid:48:BA:37:01:69:1D:29:28:AF:AD:3A:1B:57:35:A2:6F:4C:99:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLo3AWkdKSivrTobVzWib0yZz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7a8781-e363-46e4-97ed-e3e8151a8760/1/SLo3AWkdKSivrTobVzWib0yZz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:49:95:f1:9e:01:4b:db:88:99:59:3a:c2:d5:01:3d:77:b3:
5a:72:b6:50:9b:7a:3a:80:d9:87:28:5f:fe:33:25:71:8d:91:
76:f4:05:98:ac:db:6f:d9:e6:0d:59:ed:5b:94:f6:40:58:81:
2c:b2:db:a2:4d:f2:2f:29:d8:4e:d5:79:4f:6b:b8:e6:79:26:
7c:e1:82:e9:23:8a:55:b9:4c:1e:2f:d6:c9:af:ff:84:e6:95:
cc:a0:34:b3:89:9b:b9:ab:67:44:b6:94:5f:75:6e:49:d2:de:
79:1f:81:9c:78:15:27:03:e4:c6:63:c7:ca:8d:a3:c0:70:55:
9c:ee:ae:7c:6a:c9:5d:93:d5:39:15:d5:5b:d3:bc:33:d7:89:
b9:16:4f:af:45:b3:69:2d:f0:e8:15:9d:c8:c5:0e:8e:94:60:
35:a5:ac:fe:91:f7:15:3e:ec:65:1a:83:91:f3:44:ec:ab:40:
22:90:68:82:a9:ec:7d:60:2c:56:01:0c:41:10:d4:3b:d7:f7:
fa:20:c3:86:73:bd:56:b7:1a:50:9c:b9:d7:30:d1:8e:0f:3d:
bf:64:ed:41:ba:e4:9a:0b:9d:87:c4:7a:9a:e0:07:f2:69:a4:
34:66:fb:9b:de:76:a1:83:a7:ab:4b:3a:07:ac:6c:bc:67:a9:
62:c1:ae:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTIYrnmJIjrXg6TKM9G+aBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4YmEzNzAxNjkxZDI5MjhhZmFkM2ExYjU3MzVhMjZmNGM5
OWNmZjYwHhcNMjUwNDA4MDIwMTI3WhcNMjUwNDA5MDIwMTI3WjAzMTEwLwYDVQQD
EyhhZjkyZTEwM2M0NmU5ODRlMDk4MDEzNWZkMDcwNmZmNzVlZGVhYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv50gwcW8Vf4WW1pGz2oAvFGQ45Rx
T+MhZrpeGmpTL1DN0gL3bk3Wl/psl9bRE9Yp1KzcQcOJdGILgWmC1USP8CDqLA+5
S5LCBu7qtmUewpx+v7UsxsPDj2ctGZLGfW+EI8ylna+4AGEJzGth+fOSDiQLjn10
rEuvkD/OrLYJwrcQeFrf7pjo/65+Qf/chcJofZ8zia8MWECGs22s/i5XA62cblho
NFnYlYp4vJh9IpTxoscRiiyXf+fX18nhfUtO5rnkmlij3Poa9aynlQ42EjYivN5e
xIvBIwAqn304gPGevgPEF/kBsN01uMS+5UzrCKmClX6kKlImcgNx/3ev5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+S4QPEbphOCYATX9Bwb/de3qyYMB8GA1UdIwQY
MBaAFEi6NwFpHSkor606G1c1om9Mmc/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQt
ZTNlODE1MWE4NzYwLzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83YTg3ODEtZTM2My00NmU0LTk3ZWQtZTNlODE1MWE4NzYw
LzEvU0xvM0FXa2RLU2l2clRvYlZ6V2liMHlael9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0mV8Z4B
S9uImVk6wtUBPXezWnK2UJt6OoDZhyhf/jMlcY2RdvQFmKzbb9nmDVntW5T2QFiB
LLLbok3yLynYTtV5T2u45nkmfOGC6SOKVblMHi/Wya//hOaVzKA0s4mbuatnRLaU
X3VuSdLeeR+BnHgVJwPkxmPHyo2jwHBVnO6ufGrJXZPVORXVW9O8M9eJuRZPr0Wz
aS3w6BWdyMUOjpRgNaWs/pH3FT7sZRqDkfNE7KtAIpBogqnsfWAsVgEMQRDUO9f3
+iDDhnO9VrcaUJy51zDRjg89v2TtQbrkmgudh8R6muAH8mmkNGb7m952oYOnq0s6
B6xsvGepYsGukg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:39 2025 by rpki-client