Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json)
Hash identifier: VmuuHXsGNUkxrb2XxZMSxuiMubQEmZ9OpZ5ZZ83QyH4=
Subject key identifier: DA:45:5B:D8:05:DB:95:33:C2:96:3D:8D:3A:EF:FC:1C:C1:21:A8:DF
Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Certificate serial: 019648C5DF1EE73726B6680B4EE2B520F26A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
Manifest number: 09BF
Signing time: Fri 18 Apr 2025 12:00:49 +0000
Manifest this update: Fri 18 Apr 2025 12:00:49 +0000
Manifest next update: Sat 19 Apr 2025 12:00:49 +0000
Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: XkG55nlmkC0GP7osKo5UAzVu19oUStOgCbuDm9TcV8k=)
2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:df:1e:e7:37:26:b6:68:0b:4e:e2:b5:20:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69
Validity
Not Before: Apr 18 12:00:49 2025 GMT
Not After : Apr 19 12:00:49 2025 GMT
Subject: CN=da455bd805db9533c2963d8d3aeffc1cc121a8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:36:1d:3b:99:25:4b:a4:1e:31:9b:95:e3:
95:6c:08:1c:50:62:91:f1:ce:1c:2a:4e:ca:c0:de:
1c:ef:09:41:11:af:c7:4c:44:70:e6:36:6d:2c:b7:
01:49:66:c2:2a:f7:a3:66:fb:d8:22:57:76:51:d6:
04:af:e1:dd:20:1d:64:e1:d8:d0:e1:03:0a:57:28:
97:a8:d9:53:7e:94:a3:28:25:df:37:d6:af:a3:4f:
45:83:66:10:6d:39:70:9d:72:72:70:8a:a0:47:04:
81:c2:9b:6c:52:51:24:b7:fc:e6:1a:3f:6a:49:0b:
fb:aa:83:05:0a:9f:c2:03:83:4c:ff:fc:aa:0a:e1:
66:b0:75:c5:46:42:eb:83:d2:0e:09:e9:72:b6:81:
74:c7:40:79:36:07:e7:b1:ff:80:d4:fc:4f:72:26:
47:4e:b8:d9:f6:c4:78:84:ce:12:0f:ff:58:8a:d5:
b8:ce:af:ba:1d:72:01:6c:40:db:71:79:ed:19:ad:
27:a1:c2:22:e0:59:e4:0d:97:d1:11:1c:a9:1c:26:
5d:9e:78:ed:5e:3f:b0:9a:db:97:8c:a3:f8:cc:e2:
83:24:60:3a:11:0e:3a:bb:21:6f:07:2a:92:12:5f:
84:0c:da:d0:32:df:86:74:85:42:82:d1:cb:e9:2b:
e4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:45:5B:D8:05:DB:95:33:C2:96:3D:8D:3A:EF:FC:1C:C1:21:A8:DF
X509v3 Authority Key Identifier:
keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d2:fc:05:c4:e0:db:5e:7b:c1:11:27:48:72:5b:80:3a:ad:
1e:9d:be:b0:f9:6c:bb:88:cc:35:5d:38:8c:e0:2d:ae:45:54:
4f:4c:6e:f8:15:3b:b1:4c:e7:00:03:a8:2b:46:6e:25:47:3a:
62:ea:56:a9:af:63:7b:c8:31:99:e0:7b:45:81:7e:d0:ff:4f:
d3:ae:52:ce:b1:1b:43:e3:38:df:4f:0b:97:3b:86:23:e1:86:
44:76:33:3b:6c:5e:64:f1:c9:ff:15:d6:f3:62:bf:b3:78:b4:
97:8e:ca:59:6c:3b:83:b2:c6:34:7f:e3:8d:e6:86:3d:de:6c:
40:af:00:eb:22:ed:8d:2f:02:71:8c:33:04:37:36:15:93:74:
4f:6a:56:d0:8f:d0:f6:bd:d5:b5:ec:e9:c3:3d:6e:09:6f:0d:
64:5a:a6:41:77:b1:1c:f7:c8:6c:d4:26:ae:81:83:d5:e6:8e:
79:00:2b:f1:a5:f0:92:66:8d:31:9c:d5:33:bd:17:73:d0:d8:
0e:0e:c5:df:8d:9a:19:7b:ea:bd:9f:c9:35:9f:f3:d9:3f:19:
0c:0f:b9:e2:83:2e:a3:fc:a3:ce:ea:b5:ed:f2:57:34:46:71:
08:d4:f3:e9:09:9f:dc:d5:fb:78:04:7b:74:49:d4:79:7d:56:
63:aa:41:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZIxd8e5zcmtmgLTuK1IPJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2N2Q1NGQ4Y2I2YTgzMDljNTEyNjA1NjU3YzI1NjNlM2Ex
YWFhNjkwHhcNMjUwNDE4MTIwMDQ5WhcNMjUwNDE5MTIwMDQ5WjAzMTEwLwYDVQQD
EyhkYTQ1NWJkODA1ZGI5NTMzYzI5NjNkOGQzYWVmZmMxY2MxMjFhOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYY2HTuZJUukHjGbleOVbAgcUGKR
8c4cKk7KwN4c7wlBEa/HTERw5jZtLLcBSWbCKvejZvvYIld2UdYEr+HdIB1k4djQ
4QMKVyiXqNlTfpSjKCXfN9avo09Fg2YQbTlwnXJycIqgRwSBwptsUlEkt/zmGj9q
SQv7qoMFCp/CA4NM//yqCuFmsHXFRkLrg9IOCelytoF0x0B5Ngfnsf+A1PxPciZH
TrjZ9sR4hM4SD/9YitW4zq+6HXIBbEDbcXntGa0nocIi4FnkDZfRERypHCZdnnjt
Xj+wmtuXjKP4zOKDJGA6EQ46uyFvByqSEl+EDNrQMt+GdIVCgtHL6SvkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpFW9gF25UzwpY9jTrv/BzBIajfMB8GA1UdIwQY
MBaAFBZ9VNjLaoMJxRJgVlfCVj46GqppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEt
N2UzOGRiZDU2NjRmLzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEtN2UzOGRiZDU2NjRm
LzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadL8BcTg
2157wREnSHJbgDqtHp2+sPlsu4jMNV04jOAtrkVUT0xu+BU7sUznAAOoK0ZuJUc6
YupWqa9je8gxmeB7RYF+0P9P065SzrEbQ+M4308LlzuGI+GGRHYzO2xeZPHJ/xXW
82K/s3i0l47KWWw7g7LGNH/jjeaGPd5sQK8A6yLtjS8CcYwzBDc2FZN0T2pW0I/Q
9r3Vtezpwz1uCW8NZFqmQXexHPfIbNQmroGD1eaOeQAr8aXwkmaNMZzVM70Xc9DY
Dg7F342aGXvqvZ/JNZ/z2T8ZDA+54oMuo/yjzuq17fJXNEZxCNTz6Qmf3NX7eAR7
dEnUeX1WY6pBAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:42:07 2025 by rpki-client