Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: R0ia/C1JE/bY74F0iOOp6tnyifFpOHZv6R6nQ1Gfqzw=
Subject key identifier: 25:84:EE:9E:C2:5E:AC:A2:03:0D:DB:4A:67:C0:30:C9:F7:54:CB:96
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 01964CD9278E03E414A160390A2C3D6D57E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 07:00:21 +0000
Manifest this update: Sat 19 Apr 2025 07:00:21 +0000
Manifest next update: Sun 20 Apr 2025 07:00:21 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: Hp/bP2NYUIboE/vQATxEtt2zGHbxiI7ccEq2kpoMps4=)
2: fB3zFlody1nthwMkhJVJflJzOIE.roa (hash: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=)
3: t7D4JJSP5z-u6M9bmWKtD19PybY.roa (hash: hgEfba4+416hOF8d8xJM4ix7obkJ8g22r+oy5Y4pB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:27:8e:03:e4:14:a1:60:39:0a:2c:3d:6d:57:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Apr 19 07:00:21 2025 GMT
Not After : Apr 20 07:00:21 2025 GMT
Subject: CN=2584ee9ec25eaca2030ddb4a67c030c9f754cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:b2:ad:3f:2a:a1:eb:d3:a5:3a:83:bd:9c:
68:38:bc:4c:b0:c8:c2:9e:42:b2:75:01:2c:0c:c4:
9c:92:d3:c5:71:5f:20:e8:05:e4:f5:03:0d:d3:a2:
06:95:fd:19:be:bc:ea:5c:e7:dc:25:3e:d7:e0:45:
df:16:14:4d:22:39:7d:3e:a9:bd:76:df:32:5d:2d:
e5:51:59:a7:89:88:6e:72:ac:89:34:b5:19:f8:d7:
0f:7a:3d:88:93:2d:bb:3f:df:b1:37:01:37:f6:e3:
e9:ba:b2:d1:19:45:45:bf:7b:87:21:e1:39:27:bb:
1c:88:f5:db:ca:4b:04:da:f5:0f:ac:8d:5e:d3:50:
8a:0f:1a:53:01:07:2b:30:18:ab:3c:a2:50:db:8f:
64:30:e0:53:e6:8a:17:60:99:b1:e8:07:83:96:09:
07:fd:76:1e:99:70:76:fb:60:d3:87:b3:f1:8f:4b:
86:9a:88:b0:3a:52:b5:43:a2:59:a3:03:d3:45:8a:
49:cd:cd:82:f8:7d:94:cf:3c:59:7d:25:56:47:f9:
32:4e:5b:f5:13:58:ec:d2:8e:eb:90:22:47:41:ac:
98:fc:d7:0f:be:aa:8f:74:c0:a4:fa:47:8d:a3:88:
e2:45:88:74:ff:ce:10:53:60:df:76:74:96:e3:84:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:EE:9E:C2:5E:AC:A2:03:0D:DB:4A:67:C0:30:C9:F7:54:CB:96
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:9b:69:a8:4f:58:ad:ba:0f:57:25:e8:ee:a2:24:17:2d:40:
89:dd:7f:45:0d:54:45:95:34:71:4d:e0:89:89:b1:35:08:67:
f4:0a:41:9e:bc:31:5c:99:6f:93:0b:c1:f4:a7:6f:c1:8e:15:
d3:7d:ae:51:36:1d:e5:85:3d:39:9e:a1:be:32:35:87:0c:63:
b5:9c:d6:57:1a:56:7a:f7:4e:e6:08:ed:ee:09:35:66:df:64:
8a:94:76:c1:11:56:9b:1d:a8:d6:bc:29:e4:28:43:91:25:56:
bf:a2:bf:b5:9a:2c:cb:a3:c3:69:01:89:9e:a3:0c:4b:72:d5:
7b:85:e7:59:c9:df:00:15:4a:ff:3d:8f:14:ee:87:7b:4b:9a:
bf:c2:44:56:0e:dd:66:88:34:6e:9d:5b:27:4d:49:73:31:97:
96:96:7f:04:3d:d1:82:29:cd:16:e0:61:b4:01:7c:3a:a5:4a:
17:1c:c4:27:0d:7b:c0:ea:1c:b8:3a:b0:76:f6:95:ea:3c:6a:
65:e6:3f:e9:50:14:84:83:84:0a:df:9d:d0:d0:2f:3e:64:59:
f7:d9:6d:bf:a2:7a:d2:f5:88:61:26:2f:61:21:0a:57:b0:ae:
3e:83:9a:83:3c:0a:b1:a9:a0:7a:ae:dd:46:a7:ec:e1:b0:64:
52:55:ea:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZM2SeOA+QUoWA5Ciw9bVfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjUwNDE5MDcwMDIxWhcNMjUwNDIwMDcwMDIxWjAzMTEwLwYDVQQD
EygyNTg0ZWU5ZWMyNWVhY2EyMDMwZGRiNGE2N2MwMzBjOWY3NTRjYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmyrT8qoevTpTqDvZxoOLxMsMjC
nkKydQEsDMScktPFcV8g6AXk9QMN06IGlf0ZvrzqXOfcJT7X4EXfFhRNIjl9Pqm9
dt8yXS3lUVmniYhucqyJNLUZ+NcPej2Iky27P9+xNwE39uPpurLRGUVFv3uHIeE5
J7sciPXbyksE2vUPrI1e01CKDxpTAQcrMBirPKJQ249kMOBT5ooXYJmx6AeDlgkH
/XYemXB2+2DTh7Pxj0uGmoiwOlK1Q6JZowPTRYpJzc2C+H2UzzxZfSVWR/kyTlv1
E1js0o7rkCJHQayY/NcPvqqPdMCk+keNo4jiRYh0/84QU2DfdnSW44T1AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWE7p7CXqyiAw3bSmfAMMn3VMuWMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJtpqE9Y
rboPVyXo7qIkFy1Aid1/RQ1URZU0cU3giYmxNQhn9ApBnrwxXJlvkwvB9KdvwY4V
032uUTYd5YU9OZ6hvjI1hwxjtZzWVxpWevdO5gjt7gk1Zt9kipR2wRFWmx2o1rwp
5ChDkSVWv6K/tZosy6PDaQGJnqMMS3LVe4XnWcnfABVK/z2PFO6He0uav8JEVg7d
Zog0bp1bJ01JczGXlpZ/BD3RginNFuBhtAF8OqVKFxzEJw17wOocuDqwdvaV6jxq
ZeY/6VAUhIOECt+d0NAvPmRZ99ltv6J60vWIYSYvYSEKV7CuPoOagzwKsamgeq7d
Rqfs4bBkUlXqCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:04:05 2025 by rpki-client