Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
File: ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft (raw, json)
Hash identifier: knREhgdutibkmfHDcwzKqaQpryKvglne7o+GomdemxE=
Subject key identifier: 94:1F:B1:40:F3:F6:5B:9B:D9:51:1D:66:F5:E6:C0:12:9A:59:57:04
Authority key identifier: AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
Certificate issuer: /CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Certificate serial: 01964E90E06BCE6EC3CAAEA172A732EF26B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
Manifest number: 0908
Signing time: Sat 19 Apr 2025 15:00:39 +0000
Manifest this update: Sat 19 Apr 2025 15:00:39 +0000
Manifest next update: Sun 20 Apr 2025 15:00:39 +0000
Files and hashes: 1: 6f9DfsZDUzdPo3_6eNoeG4QK_-I.roa (hash: 4tclq8R1V/fdbnM4AvEGc3ZJVkHqia0uVMOBrni8yPk=)
2: ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl (hash: S4N1UKNXiAJiDKLs1R+tio8WfWNrutDGYsD/aV4ZA2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:e0:6b:ce:6e:c3:ca:ae:a1:72:a7:32:ef:26:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af21dd2f772a5bb47925c28bb5d16cd930f206b1
Validity
Not Before: Apr 19 15:00:39 2025 GMT
Not After : Apr 20 15:00:39 2025 GMT
Subject: CN=941fb140f3f65b9bd9511d66f5e6c0129a595704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5f:1e:09:fb:f9:20:4c:5d:b6:29:af:43:19:
61:46:02:84:05:6f:f4:b2:fa:bd:1c:84:cf:58:7d:
6e:a0:23:27:b6:eb:96:b5:88:22:df:b5:68:b5:7c:
f2:c2:14:35:36:6a:04:19:9c:e0:30:81:4a:7a:8c:
7d:d1:24:e0:a9:4e:32:e9:bf:93:9e:50:2a:34:ba:
29:73:80:93:ce:ba:41:22:7c:78:4f:45:84:3c:04:
49:02:62:5a:19:95:fc:64:50:31:64:f1:56:b9:1c:
ed:b7:16:4b:a0:b0:be:11:8c:49:42:2b:17:9b:78:
68:24:1d:ff:b3:79:dc:75:be:50:58:cf:26:82:b4:
64:2b:2b:98:d0:03:82:70:94:dd:79:1c:0f:c9:cf:
1d:ae:9d:4f:32:40:09:6f:e8:c5:a1:b7:bc:bb:3a:
6e:77:c6:fa:cb:d8:cd:0a:76:0f:54:60:f0:61:55:
3e:3d:69:aa:33:1e:86:d5:67:13:13:8e:2d:b2:81:
e8:54:73:07:e5:6d:89:75:35:f4:ca:33:92:cc:9e:
0c:44:31:a0:67:85:14:87:98:b2:94:dd:f2:f9:db:
04:bf:d6:8e:2b:03:96:50:f6:c2:67:bc:06:95:8c:
6a:e5:92:37:b4:08:28:a7:83:b6:22:f5:70:53:07:
46:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1F:B1:40:F3:F6:5B:9B:D9:51:1D:66:F5:E6:C0:12:9A:59:57:04
X509v3 Authority Key Identifier:
keyid:AF:21:DD:2F:77:2A:5B:B4:79:25:C2:8B:B5:D1:6C:D9:30:F2:06:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryHdL3cqW7R5JcKLtdFs2TDyBrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/07badd-ff3f-4886-abf1-552e51542d4d/1/ryHdL3cqW7R5JcKLtdFs2TDyBrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:10:ae:97:76:9e:33:5e:d0:aa:43:9f:58:48:08:f4:9f:58:
aa:6e:27:02:6c:11:de:18:7a:93:db:f1:56:d5:a8:a3:b7:52:
be:0b:74:89:d2:22:e8:c4:6f:5b:10:e2:d4:7d:89:eb:e7:20:
41:dd:e1:e4:00:fd:96:45:cd:81:47:95:2b:07:d5:ea:82:db:
25:80:66:67:49:fb:2e:f4:65:f0:16:36:a7:be:95:da:d3:b1:
92:39:2c:21:ec:da:8b:2c:10:0c:29:a9:63:6d:78:35:b3:83:
33:a7:0f:9f:8d:8c:f1:fd:e9:b5:90:bb:70:12:01:91:e4:3e:
7d:6e:fd:16:a7:35:cc:24:f1:cb:e7:f7:0e:e2:51:3e:07:e3:
26:63:a9:6c:bb:21:43:7f:f9:fc:1d:3b:0a:00:6c:9d:37:0b:
b0:22:30:5a:0e:ab:27:b5:00:07:f4:07:52:26:57:07:bd:06:
60:31:07:6f:88:9f:30:af:aa:35:60:82:6e:52:5e:ab:f0:19:
20:92:97:50:61:65:4d:b4:49:39:f1:bd:82:f0:f5:45:ec:dd:
3d:2e:07:1f:94:65:c0:91:5f:5e:0d:78:21:4c:0e:b4:f2:30:
49:6d:bf:6c:0a:bb:4e:f8:db:be:07:e9:f4:76:f4:0c:3f:aa:
48:37:33:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOkOBrzm7Dyq6hcqcy7ya2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMjFkZDJmNzcyYTViYjQ3OTI1YzI4YmI1ZDE2Y2Q5MzBm
MjA2YjEwHhcNMjUwNDE5MTUwMDM5WhcNMjUwNDIwMTUwMDM5WjAzMTEwLwYDVQQD
Eyg5NDFmYjE0MGYzZjY1YjliZDk1MTFkNjZmNWU2YzAxMjlhNTk1NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V8eCfv5IExdtimvQxlhRgKEBW/0
svq9HITPWH1uoCMntuuWtYgi37VotXzywhQ1NmoEGZzgMIFKeox90STgqU4y6b+T
nlAqNLopc4CTzrpBInx4T0WEPARJAmJaGZX8ZFAxZPFWuRzttxZLoLC+EYxJQisX
m3hoJB3/s3ncdb5QWM8mgrRkKyuY0AOCcJTdeRwPyc8drp1PMkAJb+jFobe8uzpu
d8b6y9jNCnYPVGDwYVU+PWmqMx6G1WcTE44tsoHoVHMH5W2JdTX0yjOSzJ4MRDGg
Z4UUh5iylN3y+dsEv9aOKwOWUPbCZ7wGlYxq5ZI3tAgop4O2IvVwUwdGgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQfsUDz9lub2VEdZvXmwBKaWVcEMB8GA1UdIwQY
MBaAFK8h3S93Klu0eSXCi7XRbNkw8gaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEt
NTUyZTUxNTQyZDRkLzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wN2JhZGQtZmYzZi00ODg2LWFiZjEtNTUyZTUxNTQyZDRk
LzEvcnlIZEwzY3FXN1I1SmNLTHRkRnMyVER5QnJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhCul3ae
M17QqkOfWEgI9J9Yqm4nAmwR3hh6k9vxVtWoo7dSvgt0idIi6MRvWxDi1H2J6+cg
Qd3h5AD9lkXNgUeVKwfV6oLbJYBmZ0n7LvRl8BY2p76V2tOxkjksIezaiywQDCmp
Y214NbODM6cPn42M8f3ptZC7cBIBkeQ+fW79Fqc1zCTxy+f3DuJRPgfjJmOpbLsh
Q3/5/B07CgBsnTcLsCIwWg6rJ7UAB/QHUiZXB70GYDEHb4ifMK+qNWCCblJeq/AZ
IJKXUGFlTbRJOfG9gvD1RezdPS4HH5RlwJFfXg14IUwOtPIwSW2/bAq7Tvjbvgfp
9Hb0DD+qSDczaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:27:12 2025 by rpki-client