Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: b302OhUp2+SboxMY2iDR5ShEAArNd5YYOHk+MsmFN04=
Subject key identifier: 9A:36:06:34:32:DA:7F:71:43:B8:07:2D:7B:BA:46:8D:A9:92:50:51
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 01964D7DD5AB303112EDC59F5B84D9CB6708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0856
Signing time: Sat 19 Apr 2025 10:00:14 +0000
Manifest this update: Sat 19 Apr 2025 10:00:14 +0000
Manifest next update: Sun 20 Apr 2025 10:00:14 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: Hd+xKVtT84PJMm7qLVW9Zf7fQERQ3Tv70FRH3NBbau0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7d:d5:ab:30:31:12:ed:c5:9f:5b:84:d9:cb:67:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Apr 19 10:00:14 2025 GMT
Not After : Apr 20 10:00:14 2025 GMT
Subject: CN=9a36063432da7f7143b8072d7bba468da9925051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:7f:bc:9e:79:c9:cc:1a:37:36:39:7c:1a:
73:30:d8:77:b3:02:01:82:f3:ff:d1:6c:d5:c5:95:
38:74:45:ea:2d:ef:3b:7a:c7:64:7e:a2:4a:b6:2f:
88:80:81:43:8b:87:cd:94:ba:28:70:51:17:06:58:
64:09:de:19:49:ce:c4:8d:8c:ea:dd:e7:3e:21:ba:
76:77:71:ab:1b:6e:61:aa:fb:ba:d9:bb:c1:38:58:
0c:14:1b:a6:d9:fe:ad:a8:53:e0:da:91:30:1d:f8:
4d:54:f3:5d:84:43:f7:00:93:dc:b5:71:87:40:4a:
de:5f:78:af:58:fd:60:b7:04:73:ec:0a:ff:5f:11:
30:8e:79:5b:9d:ff:79:13:b6:86:e0:29:3e:4c:8c:
4a:4d:d0:62:95:3d:c1:06:58:8e:a6:04:5c:57:e8:
6f:17:35:cc:50:b5:eb:ff:a6:32:2a:6d:ff:27:49:
b1:4d:2d:99:3a:39:9b:67:12:96:12:ad:75:dd:a8:
e9:45:44:d8:b9:2c:e6:80:f1:7f:dd:24:6b:8d:c9:
e5:0a:ae:f4:e4:48:ba:84:13:7a:06:e4:ae:e7:3c:
a7:7f:c9:07:d3:60:df:aa:e7:32:d7:61:67:a0:78:
fb:a6:30:0a:a0:d1:22:74:fe:fa:e2:df:58:53:52:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:06:34:32:DA:7F:71:43:B8:07:2D:7B:BA:46:8D:A9:92:50:51
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:a9:0c:20:c0:89:b2:73:c3:17:bd:4e:2a:ea:f7:73:8f:
59:8f:35:fa:a7:80:05:b7:1d:e1:50:cf:70:ec:ee:93:49:95:
44:eb:91:1c:45:fd:7d:07:a1:34:aa:d9:78:0c:14:5e:f0:0f:
4c:bd:4e:2a:58:e6:8b:06:6e:d9:da:b4:53:a0:75:71:3a:4d:
d8:6a:6e:7e:5a:e8:82:ad:04:97:c2:51:03:86:8a:bb:55:f3:
9b:1c:39:63:f5:c4:a4:16:fe:2c:fa:f7:f7:a6:20:3c:af:f6:
bc:5f:7f:4b:dc:82:41:ff:a0:52:48:2a:b3:0c:05:7d:3f:f6:
be:ff:8f:34:37:1e:19:64:1f:c3:bd:10:03:cb:45:13:eb:6c:
19:de:1b:22:1e:6d:f6:cf:c8:ed:ad:67:18:5f:5b:9f:68:24:
2b:05:27:47:6f:a8:a7:bb:c1:32:6b:c1:83:99:97:a2:ba:22:
1d:81:72:da:a3:99:12:86:90:0e:8b:aa:b4:bc:4d:05:7b:b3:
8c:a2:5f:78:93:98:2b:d0:0c:5c:9d:fc:65:ab:0a:dc:e3:83:
18:5e:6d:5c:12:2f:d9:a9:53:5e:dd:8c:61:c4:a5:74:15:3d:
27:6e:e6:b8:b2:0a:82:6e:8c:68:84:e6:58:90:67:71:0a:9a:
94:f4:53:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfdWrMDES7cWfW4TZy2cIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjUwNDE5MTAwMDE0WhcNMjUwNDIwMTAwMDE0WjAzMTEwLwYDVQQD
Eyg5YTM2MDYzNDMyZGE3ZjcxNDNiODA3MmQ3YmJhNDY4ZGE5OTI1MDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxh/vJ55ycwaNzY5fBpzMNh3swIB
gvP/0WzVxZU4dEXqLe87esdkfqJKti+IgIFDi4fNlLoocFEXBlhkCd4ZSc7EjYzq
3ec+Ibp2d3GrG25hqvu62bvBOFgMFBum2f6tqFPg2pEwHfhNVPNdhEP3AJPctXGH
QEreX3ivWP1gtwRz7Ar/XxEwjnlbnf95E7aG4Ck+TIxKTdBilT3BBliOpgRcV+hv
FzXMULXr/6YyKm3/J0mxTS2ZOjmbZxKWEq113ajpRUTYuSzmgPF/3SRrjcnlCq70
5Ei6hBN6BuSu5zynf8kH02Dfqucy12FnoHj7pjAKoNEidP764t9YU1LDcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo2BjQy2n9xQ7gHLXu6Ro2pklBRMB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLGpDCDA
ibJzwxe9Tirq93OPWY81+qeABbcd4VDPcOzuk0mVROuRHEX9fQehNKrZeAwUXvAP
TL1OKljmiwZu2dq0U6B1cTpN2Gpuflrogq0El8JRA4aKu1Xzmxw5Y/XEpBb+LPr3
96YgPK/2vF9/S9yCQf+gUkgqswwFfT/2vv+PNDceGWQfw70QA8tFE+tsGd4bIh5t
9s/I7a1nGF9bn2gkKwUnR2+op7vBMmvBg5mXoroiHYFy2qOZEoaQDouqtLxNBXuz
jKJfeJOYK9AMXJ38ZasK3OODGF5tXBIv2alTXt2MYcSldBU9J27muLIKgm6MaITm
WJBncQqalPRTAw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:12:10 2025 by rpki-client