Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
File: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft (raw, json)
Hash identifier: DGh/D4l1Xt2CkOstBArWiqytWTmAUVip9awrjEdhyg8=
Subject key identifier: AA:2D:3D:DE:46:DA:1A:91:DC:A5:73:74:F0:10:30:36:2D:23:54:0C
Authority key identifier: F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
Certificate issuer: /CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Certificate serial: 019648C5DD50B0A73E36179686D501B16792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
Manifest number: 0DCA
Signing time: Fri 18 Apr 2025 12:00:48 +0000
Manifest this update: Fri 18 Apr 2025 12:00:48 +0000
Manifest next update: Sat 19 Apr 2025 12:00:48 +0000
Files and hashes: 1: 1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl (hash: bPFBupX+F5Wgx68u5/hpaG9NObCE8iKS9KRSKVrEK1Q=)
2: OyzZxs_hVYKW1cYJmnARu5WD5PU.roa (hash: Mxe+uv54doiDC6rq1qVmsEa8Vr9FlHaFSsIh3iiGLqc=)
3: YpJ4HYND8zUWDrh84VOwJrCjN64.roa (hash: YH9M+YVc2VsTqAzLHq7oW1kqlXcbhCJ/cLoedv2bt3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:dd:50:b0:a7:3e:36:17:96:86:d5:01:b1:67:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f826ffe96cdc41efaa8bfb3125862d6594be9827
Validity
Not Before: Apr 18 12:00:48 2025 GMT
Not After : Apr 19 12:00:48 2025 GMT
Subject: CN=aa2d3dde46da1a91dca57374f01030362d23540c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:0a:1b:24:c0:70:5e:2a:be:47:22:1a:fb:
d0:92:36:76:40:0d:4a:15:ec:be:7c:c0:2a:1d:f2:
7d:4e:a3:a6:14:3c:1e:86:d5:47:d3:d1:e8:c8:1f:
34:87:42:25:5f:1a:84:70:3a:ef:af:06:7f:4f:6c:
39:c2:ca:1d:e2:40:7d:84:92:6f:6a:8a:de:a4:99:
aa:f6:04:c0:1c:ba:ff:a2:e1:09:36:2e:ef:93:ed:
2a:50:c0:3b:3b:dd:90:e1:c7:37:c4:61:97:51:15:
86:8e:23:ee:29:88:ac:28:05:d0:6f:94:85:24:52:
de:64:5c:c0:9c:74:8b:6d:9f:68:58:23:ae:fc:d1:
d4:2a:49:e3:39:97:d8:d3:bb:1c:92:82:16:89:5f:
c6:33:d4:b8:ea:25:85:29:9b:d0:c4:c8:65:dc:ca:
62:8b:2e:b6:2b:3e:a4:57:d6:60:f4:47:c5:6e:44:
44:44:4b:a7:9d:ef:3a:a7:f9:af:cb:27:d5:cc:0a:
e1:78:4e:e1:0e:f5:a4:4f:83:2c:e6:c9:d9:ae:2d:
13:a8:44:35:f3:30:8e:fc:35:ae:2a:ed:98:dd:97:
45:89:26:44:6d:1d:d3:bd:a6:4e:83:c4:c6:69:66:
3c:45:4d:18:f4:78:0b:a5:32:cb:e6:97:c5:b0:26:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:3D:DE:46:DA:1A:91:DC:A5:73:74:F0:10:30:36:2D:23:54:0C
X509v3 Authority Key Identifier:
keyid:F8:26:FF:E9:6C:DC:41:EF:AA:8B:FB:31:25:86:2D:65:94:BE:98:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6f6826-1aad-4c3c-bd91-cca37e2f2729/1/1-Cb_6WzcQe-qi_sxJYYtZZS-mCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:01:cc:3c:d0:2a:e6:1d:ec:4d:77:32:12:3e:33:00:5f:1b:
f6:cc:1e:4d:fb:7f:ed:ac:9d:7f:55:fc:da:6a:a3:20:42:73:
de:20:c8:33:5d:01:41:0f:ef:27:a9:b7:10:c9:18:d9:82:e1:
09:d9:fe:13:b8:7c:5a:9c:95:7b:f4:e7:e3:21:1b:ec:38:52:
9c:e9:7a:7e:81:2c:a7:5f:46:4e:8f:fe:4e:db:aa:9d:76:16:
fb:4f:d8:5d:78:0a:14:9a:12:45:1c:7b:3b:be:a2:b9:d6:a6:
04:66:b7:51:35:f1:76:f1:1c:99:0d:22:6b:a7:68:21:29:ed:
b3:00:fb:3b:11:47:12:d8:bc:a6:26:a6:24:42:5a:10:9f:05:
16:46:c8:ab:12:69:0c:4b:28:63:d9:c4:71:ec:8e:98:e7:7c:
94:62:92:13:1e:40:07:cc:a0:b6:e8:45:53:89:84:7d:72:6c:
85:d2:a1:d7:58:fa:0d:e0:38:a2:58:85:94:e9:ce:d2:80:eb:
69:cb:74:49:08:1e:eb:14:c2:53:6d:eb:f2:3f:c6:c0:49:59:
a3:7a:5e:f5:99:02:94:2d:80:00:af:1c:6e:4f:2d:2d:db:ba:
69:11:fc:f7:6a:ee:4a:0f:d1:d9:c6:dc:62:6a:f7:25:c9:ed:
76:62:87:67
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZZIxd1QsKc+NheWhtUBsWeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MjZmZmU5NmNkYzQxZWZhYThiZmIzMTI1ODYyZDY1OTRi
ZTk4MjcwHhcNMjUwNDE4MTIwMDQ4WhcNMjUwNDE5MTIwMDQ4WjAzMTEwLwYDVQQD
EyhhYTJkM2RkZTQ2ZGExYTkxZGNhNTczNzRmMDEwMzAzNjJkMjM1NDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvYKGyTAcF4qvkciGvvQkjZ2QA1K
Fey+fMAqHfJ9TqOmFDwehtVH09HoyB80h0IlXxqEcDrvrwZ/T2w5wsod4kB9hJJv
aorepJmq9gTAHLr/ouEJNi7vk+0qUMA7O92Q4cc3xGGXURWGjiPuKYisKAXQb5SF
JFLeZFzAnHSLbZ9oWCOu/NHUKknjOZfY07sckoIWiV/GM9S46iWFKZvQxMhl3Mpi
iy62Kz6kV9Zg9EfFbkREREunne86p/mvyyfVzArheE7hDvWkT4Ms5snZri0TqEQ1
8zCO/DWuKu2Y3ZdFiSZEbR3TvaZOg8TGaWY8RU0Y9HgLpTLL5pfFsCYY8wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKotPd5G2hqR3KVzdPAQMDYtI1QMMB8GA1UdIwQY
MBaAFPgm/+ls3EHvqov7MSWGLWWUvpgnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1DYl82V3pjUWUtcWlfc3hKWVl0WlpTLW1DYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjIvNmY2ODI2LTFhYWQtNGMzYy1iZDkx
LWNjYTM3ZTJmMjcyOS8xLzEtQ2JfNld6Y1FlLXFpX3N4SllZdFpaUy1tQ2MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2IyLzZmNjgyNi0xYWFkLTRjM2MtYmQ5MS1jY2EzN2UyZjI3
MjkvMS8xLUNiXzZXemNRZS1xaV9zeEpZWXRaWlMtbUNjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgHM
PNAq5h3sTXcyEj4zAF8b9sweTft/7aydf1X82mqjIEJz3iDIM10BQQ/vJ6m3EMkY
2YLhCdn+E7h8WpyVe/Tn4yEb7DhSnOl6foEsp19GTo/+TtuqnXYW+0/YXXgKFJoS
RRx7O76iudamBGa3UTXxdvEcmQ0ia6doISntswD7OxFHEti8piamJEJaEJ8FFkbI
qxJpDEsoY9nEceyOmOd8lGKSEx5AB8ygtuhFU4mEfXJshdKh11j6DeA4oliFlOnO
0oDract0SQge6xTCU23r8j/GwElZo3pe9ZkClC2AAK8cbk8tLdu6aRH892ruSg/R
2cbcYmr3JcntdmKHZw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:32 2025 by rpki-client