Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: ZfV9RmFRSAB8fAqrnw6Kh2CH1u76LM9CVSNgDoH0ZJk=
Subject key identifier: FD:0D:F9:FF:89:14:0E:5F:F2:89:59:16:0A:EE:A4:B1:D1:83:FD:BF
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 0195790FB99AB70381F74913A2EED18DE2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 121D
Signing time: Sun 09 Mar 2025 04:00:28 +0000
Manifest this update: Sun 09 Mar 2025 04:00:28 +0000
Manifest next update: Mon 10 Mar 2025 04:00:28 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: i2ZWF99dp0GfgsLSqM8GaA/HkwhtTP2Mj2kD6/oer3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:0f:b9:9a:b7:03:81:f7:49:13:a2:ee:d1:8d:e2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: Mar 9 04:00:28 2025 GMT
Not After : Mar 10 04:00:28 2025 GMT
Subject: CN=fd0df9ff89140e5ff28959160aeea4b1d183fdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:e5:08:01:50:45:1d:25:6d:b9:73:f2:59:
15:05:07:33:6d:0a:81:c5:cf:05:84:96:96:70:12:
cc:0c:3a:f2:00:90:7a:46:f2:ef:c2:4c:9c:f8:17:
97:6d:90:b3:71:74:5d:59:eb:fa:15:10:c0:03:7c:
b8:a6:46:8f:cb:0e:80:07:9c:96:17:97:86:96:e1:
23:4a:c0:d7:3d:8e:fd:30:de:bb:63:66:38:92:ba:
10:c5:32:97:51:32:c2:8e:a3:3f:f8:e7:68:a7:a1:
a0:4e:ea:7f:96:1e:c8:ec:cd:8e:93:67:13:e9:d6:
9c:95:e1:b5:eb:9d:c5:aa:f5:48:fc:e4:69:7f:bd:
26:f7:f5:ab:a7:ec:76:60:5c:00:67:4a:17:dd:54:
d0:a3:e2:5b:fb:f4:a1:e0:68:6a:ed:32:0f:88:1f:
6f:19:3d:c3:0b:12:4c:72:27:c0:98:a3:f4:43:5a:
9a:9b:7b:66:7a:4e:2c:bb:32:c5:b9:8f:56:05:e8:
97:12:c2:c0:94:f7:54:df:9c:27:73:a7:92:36:ee:
13:8b:f2:62:99:3f:62:dc:d5:6b:54:c3:1c:e4:f8:
dc:49:78:ad:1f:5e:00:b8:5c:f7:bb:bb:95:90:8a:
5a:1c:5f:0a:7b:12:12:f0:9e:e9:50:99:4f:5b:56:
6c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0D:F9:FF:89:14:0E:5F:F2:89:59:16:0A:EE:A4:B1:D1:83:FD:BF
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a8:14:3d:52:ae:b5:83:55:26:02:9c:74:b0:8d:44:a9:3d:
bc:2c:ec:75:d2:d5:3b:a3:88:d9:1a:0d:5f:fc:72:31:de:e1:
f4:e4:86:f8:a3:15:a2:fe:f8:a0:b7:ec:93:3a:b1:8f:7d:2c:
b5:6f:a4:38:13:94:de:c6:c9:7a:60:03:e5:f5:3f:fc:7f:9f:
52:48:fe:70:ce:e6:e0:1c:35:c4:5c:2c:66:46:f4:81:8a:8a:
49:91:33:fe:fb:ee:fa:a8:24:7d:06:6b:d8:ec:be:77:41:6e:
8d:6b:e3:2d:0e:3f:fe:2f:56:f8:61:7f:75:df:80:2b:78:27:
31:06:10:9b:9d:49:90:d0:e6:40:eb:ad:7f:c1:4e:15:a9:38:
f9:ea:10:34:8d:5a:f9:c4:7c:7e:ee:89:98:e4:5f:ba:f8:83:
02:98:40:4b:1f:69:dc:b6:fd:a6:64:f5:bf:1f:3c:a3:8e:56:
fb:50:57:f8:fc:90:90:73:1a:52:60:64:9a:16:2c:b9:cf:e1:
e1:f6:82:63:b2:c3:21:67:9c:cb:3f:ab:39:68:9f:eb:19:dc:
3c:9f:07:67:8c:25:ca:71:80:d0:3f:7b:ad:9c:ff:27:93:2b:
10:13:57:71:70:27:62:a0:7a:e2:ce:ce:d1:c5:7b:c4:f5:d1:
93:d0:3e:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV5D7matwOB90kTou7RjeL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODJjMzI3OTVmMDRhNDMyMDljNjhjZDcwZWFkMjQ4OTQ1
OTkyZjgwHhcNMjUwMzA5MDQwMDI4WhcNMjUwMzEwMDQwMDI4WjAzMTEwLwYDVQQD
EyhmZDBkZjlmZjg5MTQwZTVmZjI4OTU5MTYwYWVlYTRiMWQxODNmZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VnlCAFQRR0lbblz8lkVBQczbQqB
xc8FhJaWcBLMDDryAJB6RvLvwkyc+BeXbZCzcXRdWev6FRDAA3y4pkaPyw6AB5yW
F5eGluEjSsDXPY79MN67Y2Y4kroQxTKXUTLCjqM/+Odop6GgTup/lh7I7M2Ok2cT
6dacleG1653FqvVI/ORpf70m9/Wrp+x2YFwAZ0oX3VTQo+Jb+/Sh4Ghq7TIPiB9v
GT3DCxJMcifAmKP0Q1qam3tmek4suzLFuY9WBeiXEsLAlPdU35wnc6eSNu4Ti/Ji
mT9i3NVrVMMc5PjcSXitH14AuFz3u7uVkIpaHF8KexIS8J7pUJlPW1ZsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0N+f+JFA5f8olZFgrupLHRg/2/MB8GA1UdIwQY
MBaAFFaCwyeV8EpDIJxozXDq0kiUWZL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYt
OWVhYTc2OWU1YzYyLzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYtOWVhYTc2OWU1YzYy
LzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvagUPVKu
tYNVJgKcdLCNRKk9vCzsddLVO6OI2RoNX/xyMd7h9OSG+KMVov74oLfskzqxj30s
tW+kOBOU3sbJemAD5fU//H+fUkj+cM7m4Bw1xFwsZkb0gYqKSZEz/vvu+qgkfQZr
2Oy+d0FujWvjLQ4//i9W+GF/dd+AK3gnMQYQm51JkNDmQOutf8FOFak4+eoQNI1a
+cR8fu6JmORfuviDAphASx9p3Lb9pmT1vx88o45W+1BX+PyQkHMaUmBkmhYsuc/h
4faCY7LDIWecyz+rOWif6xncPJ8HZ4wlynGA0D97rZz/J5MrEBNXcXAnYqB64s7O
0cV7xPXRk9A+MQ==
-----END CERTIFICATE-----
Generated at Sun Mar 9 11:43:15 2025 by rpki-client