Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: BUnQ1uyMb69t6AAiRrjtlzEd9a26kCNx0dgWkyID4sI=
Subject key identifier: DA:23:00:72:2E:CC:26:4C:C6:34:9D:7A:F5:F8:33:BD:76:96:DB:29
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 01958C60971B1F9967050B2B57B8980FD38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 0EC1
Signing time: Wed 12 Mar 2025 22:01:35 +0000
Manifest this update: Wed 12 Mar 2025 22:01:35 +0000
Manifest next update: Thu 13 Mar 2025 22:01:35 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: CZY4l4VHK/qFD4jYUMR1kejm6NJUeJuj/SVZPYtNRMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:97:1b:1f:99:67:05:0b:2b:57:b8:98:0f:d3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Mar 12 22:01:35 2025 GMT
Not After : Mar 13 22:01:35 2025 GMT
Subject: CN=da2300722ecc264cc6349d7af5f833bd7696db29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a9:0b:85:bb:6b:82:f8:a9:2d:d6:5c:c1:33:
3d:12:4d:95:15:a1:76:de:74:46:a1:86:6d:82:09:
a8:76:c1:b6:6e:bf:47:5d:de:74:aa:0c:9f:85:50:
50:f6:1d:3d:11:d4:5c:6e:62:c8:25:b8:28:e3:cf:
1f:17:d2:d5:ec:ac:5a:69:d9:2f:cb:55:b4:e6:8e:
f0:3e:8f:8a:2c:00:31:82:21:c6:db:65:6c:6c:9f:
5a:a1:f2:6a:4e:3c:34:29:9d:32:fb:38:6e:4b:6c:
06:4d:92:fc:6f:7a:51:9f:aa:2e:80:d2:72:6e:d0:
d3:fa:38:63:10:58:ad:2f:77:af:d9:56:ab:71:d8:
da:24:77:7f:9b:0d:f7:d5:17:8c:11:0b:69:89:89:
ef:a9:88:99:cd:6a:0b:ed:a6:72:3a:37:3b:27:eb:
37:f3:f9:04:9d:30:b8:71:87:57:39:aa:e3:0b:ed:
58:7b:3e:71:61:ca:0a:c2:20:2f:51:4f:f7:54:89:
1e:e0:ba:ad:4e:43:f3:87:a5:7d:06:2b:c7:91:fb:
27:14:24:85:73:25:df:bf:18:b0:a8:e8:66:f7:6f:
ca:38:85:8d:15:e3:4c:b6:be:a6:30:f7:ab:64:d4:
03:ca:f6:2f:76:0f:d6:c7:b8:aa:d7:4d:d3:56:60:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:23:00:72:2E:CC:26:4C:C6:34:9D:7A:F5:F8:33:BD:76:96:DB:29
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f5:58:42:26:b3:8c:6e:5c:ce:28:71:c0:aa:b4:fa:26:7a:
1d:ca:f2:9f:ce:48:76:69:75:e2:07:48:60:06:0c:85:93:2a:
49:92:d2:86:10:27:59:1b:00:77:06:a0:0e:78:31:3e:97:3d:
8e:12:ae:21:10:8e:f0:8b:41:13:f4:e4:cc:6f:b2:46:67:31:
04:89:e1:88:6d:c0:d2:7f:5d:5c:ee:6c:59:d6:f6:3c:d4:32:
28:f9:fc:85:1e:15:a5:ef:6d:83:f4:8f:38:6d:89:c9:82:01:
0c:fc:38:55:af:51:62:54:3c:0e:e7:90:13:c6:72:36:ab:29:
57:d3:e0:e3:3f:c5:b7:ec:16:d0:31:77:ee:40:a5:d5:1a:0d:
32:ac:19:bd:c9:88:c2:bd:ac:33:92:81:ac:45:29:e7:99:5a:
5a:89:a1:38:58:48:ed:37:c2:ef:ba:aa:4f:0c:00:34:c9:2c:
26:8f:a2:d9:5f:a7:b1:f6:bd:44:16:e5:14:30:fa:e6:11:c7:
a8:ff:c5:fe:61:01:00:43:76:cb:a4:6f:66:09:66:44:08:d4:
4d:af:c4:97:27:45:b5:1c:16:67:f1:47:85:02:65:ad:35:91:
31:b4:7a:8e:94:16:0e:af:48:4f:71:2d:6a:98:f6:39:91:6a:
03:f2:cb:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYJcbH5lnBQsrV7iYD9OMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTg4M2I1YjkyMzY3OGZhMDczMjFmMjVjMThmZjNhMjZj
MjUwZmIwHhcNMjUwMzEyMjIwMTM1WhcNMjUwMzEzMjIwMTM1WjAzMTEwLwYDVQQD
EyhkYTIzMDA3MjJlY2MyNjRjYzYzNDlkN2FmNWY4MzNiZDc2OTZkYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqkLhbtrgvipLdZcwTM9Ek2VFaF2
3nRGoYZtggmodsG2br9HXd50qgyfhVBQ9h09EdRcbmLIJbgo488fF9LV7Kxaadkv
y1W05o7wPo+KLAAxgiHG22VsbJ9aofJqTjw0KZ0y+zhuS2wGTZL8b3pRn6ougNJy
btDT+jhjEFitL3ev2VarcdjaJHd/mw331ReMEQtpiYnvqYiZzWoL7aZyOjc7J+s3
8/kEnTC4cYdXOarjC+1Yez5xYcoKwiAvUU/3VIke4LqtTkPzh6V9BivHkfsnFCSF
cyXfvxiwqOhm92/KOIWNFeNMtr6mMPerZNQDyvYvdg/Wx7iq103TVmArFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNojAHIuzCZMxjSdevX4M712ltspMB8GA1UdIwQY
MBaAFNTog7W5I2ePoHMh8lwY/zomwlD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUt
MmQzZWY5YjBhZDIzLzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMWI1OGEtY2MxYy00ODY1LTkzZGUtMmQzZWY5YjBhZDIz
LzEvMU9pRHRia2paNC1nY3lIeVhCal9PaWJDVVBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/VYQiaz
jG5czihxwKq0+iZ6Hcryn85Idml14gdIYAYMhZMqSZLShhAnWRsAdwagDngxPpc9
jhKuIRCO8ItBE/TkzG+yRmcxBInhiG3A0n9dXO5sWdb2PNQyKPn8hR4Vpe9tg/SP
OG2JyYIBDPw4Va9RYlQ8DueQE8ZyNqspV9Pg4z/Ft+wW0DF37kCl1RoNMqwZvcmI
wr2sM5KBrEUp55laWomhOFhI7TfC77qqTwwANMksJo+i2V+nsfa9RBblFDD65hHH
qP/F/mEBAEN2y6RvZglmRAjUTa/ElydFtRwWZ/FHhQJlrTWRMbR6jpQWDq9IT3Et
apj2OZFqA/LLfg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:43 2025 by rpki-client