Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: suJaG8T7BHSwsqNKfAi4YqJ0gGwIAEEr7lYbXUtQ/Eo=
Subject key identifier: 06:31:A5:F1:D1:55:98:3F:28:1C:E1:80:44:9F:11:49:28:AA:67:B7
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 01959006131AFC812805C219CD3167E6C4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1494
Signing time: Thu 13 Mar 2025 15:01:12 +0000
Manifest this update: Thu 13 Mar 2025 15:01:12 +0000
Manifest next update: Fri 14 Mar 2025 15:01:12 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: +r0Zt0NLSmGYdzeoVuMME6bwgfhw91vjqGab+xQCZJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:13:1a:fc:81:28:05:c2:19:cd:31:67:e6:c4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Mar 13 15:01:12 2025 GMT
Not After : Mar 14 15:01:12 2025 GMT
Subject: CN=0631a5f1d155983f281ce180449f114928aa67b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:0c:b8:41:7f:ec:41:68:91:47:4a:7f:49:
0d:c3:31:49:d6:90:12:04:4b:92:da:ab:c3:57:78:
13:8b:34:f6:78:8b:1c:6a:ff:f5:df:f5:f5:32:d2:
2f:3b:41:f8:eb:0f:14:d2:bf:c7:06:b3:cd:26:f4:
be:61:0b:63:e2:75:a8:86:1e:41:64:17:e2:2d:fd:
c9:31:8a:75:69:09:ad:a5:ff:e2:1b:07:29:19:24:
40:73:9d:06:bd:a7:a0:97:1f:2d:72:7e:5d:02:fa:
21:4b:8e:1e:5d:4e:fb:0e:ea:a5:a7:c5:21:82:dd:
e0:69:1b:f6:d3:41:46:35:bd:ad:22:86:6a:8e:fe:
ab:dc:54:19:28:30:f4:82:4f:96:32:23:b5:70:09:
7a:b6:80:58:cf:8b:18:59:32:d3:65:a5:8b:10:f1:
0a:20:98:c4:40:fd:c2:64:a5:5f:bf:7b:46:bc:00:
37:a8:d9:78:89:19:5d:81:ce:d2:3b:04:78:86:73:
e8:2c:af:d7:75:d1:41:4f:d5:91:b2:69:99:19:e0:
38:68:33:9b:e1:42:56:3b:44:88:61:03:e9:d8:46:
78:ed:96:b3:ae:79:d2:1c:be:f2:a1:24:0a:e0:7a:
40:00:43:68:98:be:a2:ed:fe:dc:88:ae:4f:87:5c:
20:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:A5:F1:D1:55:98:3F:28:1C:E1:80:44:9F:11:49:28:AA:67:B7
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:f9:8e:3d:47:2b:6d:fa:f2:95:e2:2e:97:eb:06:dc:66:
aa:ab:dd:95:8d:a1:6c:64:fd:5f:dd:9f:2b:5f:bc:88:b0:28:
37:dd:34:e9:f1:30:89:22:40:83:0a:c4:24:10:2f:eb:ab:92:
06:17:ea:42:f3:1e:95:7a:06:f7:55:af:45:e6:1d:2e:60:ff:
e8:cf:bc:5b:b8:35:ee:78:b4:a6:64:fa:5d:6b:61:22:89:18:
fa:30:d2:42:c0:3b:f5:44:64:cc:1c:33:b3:2c:46:e6:0b:d6:
a1:ec:a0:a2:ef:0e:ad:8c:63:bf:ff:ef:07:eb:23:82:00:ed:
f7:99:e8:89:57:7e:00:16:5f:83:8d:56:18:cd:6b:b6:0c:52:
b0:d5:1a:ba:04:8d:1a:e8:35:96:9b:87:4a:28:f9:09:be:87:
81:13:63:b1:db:b3:f7:f7:d1:a0:70:f7:79:1f:0a:89:07:72:
30:17:bd:40:9d:71:33:39:93:f5:f3:0a:a9:47:66:d1:aa:9e:
35:47:2b:8a:b2:32:3c:65:23:7b:d4:f1:b6:c3:a4:9d:da:38:
8b:24:13:5b:c1:6c:b8:a4:f5:86:29:ed:59:5c:13:2d:1a:f8:
d4:4a:bb:87:5c:61:c4:47:4b:09:ec:8b:3e:e7:ee:07:ef:7c:
39:8e:f7:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBhMa/IEoBcIZzTFn5sS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2Q0NjYxM2QyMDI5NjI5Njc5YjJiMDRhMmY5Yzg2Y2Fi
Yzc0ZDUwHhcNMjUwMzEzMTUwMTEyWhcNMjUwMzE0MTUwMTEyWjAzMTEwLwYDVQQD
EygwNjMxYTVmMWQxNTU5ODNmMjgxY2UxODA0NDlmMTE0OTI4YWE2N2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEgMuEF/7EFokUdKf0kNwzFJ1pAS
BEuS2qvDV3gTizT2eIscav/13/X1MtIvO0H46w8U0r/HBrPNJvS+YQtj4nWohh5B
ZBfiLf3JMYp1aQmtpf/iGwcpGSRAc50Gvaeglx8tcn5dAvohS44eXU77Duqlp8Uh
gt3gaRv200FGNb2tIoZqjv6r3FQZKDD0gk+WMiO1cAl6toBYz4sYWTLTZaWLEPEK
IJjEQP3CZKVfv3tGvAA3qNl4iRldgc7SOwR4hnPoLK/XddFBT9WRsmmZGeA4aDOb
4UJWO0SIYQPp2EZ47ZazrnnSHL7yoSQK4HpAAENomL6i7f7ciK5Ph1wgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYxpfHRVZg/KBzhgESfEUkoqme3MB8GA1UdIwQY
MBaAFEs9RmE9IClilnmysEovnIbKvHTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAt
Yjk3OWU2NWJjMGQ2LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAtYjk3OWU2NWJjMGQ2
LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvf5jj1H
K2368pXiLpfrBtxmqqvdlY2hbGT9X92fK1+8iLAoN9006fEwiSJAgwrEJBAv66uS
BhfqQvMelXoG91WvReYdLmD/6M+8W7g17ni0pmT6XWthIokY+jDSQsA79URkzBwz
syxG5gvWoeygou8OrYxjv//vB+sjggDt95noiVd+ABZfg41WGM1rtgxSsNUaugSN
Gug1lpuHSij5Cb6HgRNjsduz9/fRoHD3eR8KiQdyMBe9QJ1xMzmT9fMKqUdm0aqe
NUcrirIyPGUje9TxtsOkndo4iyQTW8FsuKT1hintWVwTLRr41Eq7h1xhxEdLCeyL
PufuB+98OY738A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:15 2025 by rpki-client