Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: 38yIRSN3F79Itxsi06lUdJUsloVXP7ZLLIMfi2L6QuI=
Subject key identifier: 27:61:4C:D0:C3:44:E2:0B:17:57:79:6F:46:C5:55:13:68:0F:CD:68
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0196146B1DF2DE32332AD3BBAE1CE1F0F4C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 04DD
Signing time: Tue 08 Apr 2025 08:01:26 +0000
Manifest this update: Tue 08 Apr 2025 08:01:26 +0000
Manifest next update: Wed 09 Apr 2025 08:01:26 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: H84JeNmc91rdlGw5ugO01rcf8BAyGiyG+Y7vvo5DLeU=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6b:1d:f2:de:32:33:2a:d3:bb:ae:1c:e1:f0:f4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Apr 8 08:01:26 2025 GMT
Not After : Apr 9 08:01:26 2025 GMT
Subject: CN=27614cd0c344e20b1757796f46c55513680fcd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:c6:39:6b:2a:f9:98:41:b8:d5:d3:04:38:
6d:81:98:89:c0:90:98:83:f2:03:ef:5c:d6:ee:45:
69:77:f0:93:a8:2d:24:db:e0:b9:fe:21:38:f4:1b:
ac:e0:17:1f:60:7a:15:26:ff:0d:b1:6f:bd:d5:18:
0e:9b:2a:c1:74:4f:93:7c:cb:5d:2d:91:10:f3:cc:
d7:02:df:f5:8b:76:d0:49:1f:41:d1:5f:1f:56:4c:
30:2c:44:ba:e9:52:74:99:83:92:e5:bf:e1:66:9d:
3a:2b:7d:35:68:a6:ed:39:97:33:8c:40:4c:19:7b:
ae:2f:2a:02:b1:66:31:5e:91:29:e8:0a:ad:36:6e:
d7:b8:28:bc:3f:b9:cc:ad:cc:f1:ea:ab:b9:e9:b7:
25:f1:df:4f:e9:00:6b:f3:31:e8:9f:8a:aa:1c:fd:
92:5b:6e:11:a5:f3:e7:09:d8:dc:30:73:b0:04:64:
f8:56:ee:22:14:80:57:14:64:5e:b6:0d:d5:83:df:
47:4a:22:bb:0c:8b:3e:48:c9:cc:f9:0a:1d:c8:42:
91:0c:33:8a:c8:b2:29:b7:47:45:14:94:33:bd:f6:
98:7e:e4:1e:15:e2:39:33:78:ee:cb:75:91:a5:13:
58:91:49:21:b5:55:11:02:83:8f:5a:4b:2b:6f:63:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:4C:D0:C3:44:E2:0B:17:57:79:6F:46:C5:55:13:68:0F:CD:68
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:44:85:54:95:bf:38:e7:7c:2f:8a:0b:cb:7a:06:e4:ed:bd:
44:bf:44:ad:75:e7:82:60:c0:34:a8:25:c2:e1:b9:5e:55:67:
4d:ab:b2:28:e3:97:0b:a1:62:e6:5f:73:df:b1:f2:9d:59:22:
a7:2b:e9:8f:6c:c3:25:11:0e:db:76:64:9b:ce:f6:b1:54:35:
58:c6:a7:fa:b0:60:5c:01:d2:c5:b6:9f:ff:69:8e:46:54:86:
66:be:d3:ca:c2:df:d6:85:d8:73:09:26:f2:f6:be:98:dd:23:
5e:23:d5:97:6a:92:43:88:6c:e4:7b:d1:ee:b7:7d:e3:c0:0f:
cd:db:33:6f:18:74:bf:c0:f5:05:45:6b:13:59:1e:3c:ba:de:
41:93:64:0f:0b:6a:03:ee:f9:f8:1a:72:be:a7:cf:ed:17:8a:
b8:b9:e5:28:7b:7c:2b:c6:63:06:9b:63:a8:de:8e:ff:2c:5a:
0e:ee:3f:2a:1c:d8:69:26:59:03:e0:8e:dc:81:e5:75:de:16:
5b:2e:f1:cd:e6:ff:6c:6c:2f:86:c3:dc:dd:ec:97:4d:1a:af:
83:43:c2:cb:4d:20:62:83:27:8c:af:0b:27:d0:18:f2:a0:76:
1f:77:ed:fa:78:f7:5f:a4:1f:be:5f:36:2d:18:a5:bf:8d:10:
4a:4b:2b:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYUax3y3jIzKtO7rhzh8PTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm
OTgxYTgwHhcNMjUwNDA4MDgwMTI2WhcNMjUwNDA5MDgwMTI2WjAzMTEwLwYDVQQD
EygyNzYxNGNkMGMzNDRlMjBiMTc1Nzc5NmY0NmM1NTUxMzY4MGZjZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zXGOWsq+ZhBuNXTBDhtgZiJwJCY
g/ID71zW7kVpd/CTqC0k2+C5/iE49Bus4BcfYHoVJv8NsW+91RgOmyrBdE+TfMtd
LZEQ88zXAt/1i3bQSR9B0V8fVkwwLES66VJ0mYOS5b/hZp06K301aKbtOZczjEBM
GXuuLyoCsWYxXpEp6AqtNm7XuCi8P7nMrczx6qu56bcl8d9P6QBr8zHon4qqHP2S
W24RpfPnCdjcMHOwBGT4Vu4iFIBXFGRetg3Vg99HSiK7DIs+SMnM+QodyEKRDDOK
yLIpt0dFFJQzvfaYfuQeFeI5M3juy3WRpRNYkUkhtVURAoOPWksrb2NyYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdhTNDDROILF1d5b0bFVRNoD81oMB8GA1UdIwQY
MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt
ZjA3YTIxOGUxY2M3LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3
LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATESFVJW/
OOd8L4oLy3oG5O29RL9ErXXngmDANKglwuG5XlVnTauyKOOXC6Fi5l9z37HynVki
pyvpj2zDJREO23Zkm872sVQ1WMan+rBgXAHSxbaf/2mORlSGZr7TysLf1oXYcwkm
8va+mN0jXiPVl2qSQ4hs5HvR7rd948APzdszbxh0v8D1BUVrE1kePLreQZNkDwtq
A+75+BpyvqfP7ReKuLnlKHt8K8ZjBptjqN6O/yxaDu4/KhzYaSZZA+CO3IHldd4W
Wy7xzeb/bGwvhsPc3eyXTRqvg0PCy00gYoMnjK8LJ9AY8qB2H3ft+nj3X6Qfvl82
LRilv40QSksroA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:58:20 2025 by rpki-client