Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: QAD5UNaAcJ6ohbSmGfiAjSrjO4sZrhSEyivpeMLSSLQ=
Subject key identifier: 86:71:A7:1B:52:88:06:4F:71:C3:95:1A:B1:2C:33:85:5B:8B:FC:E7
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 019650484265267B5D9EC356C24C50A3277D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0909
Signing time: Sat 19 Apr 2025 23:00:34 +0000
Manifest this update: Sat 19 Apr 2025 23:00:34 +0000
Manifest next update: Sun 20 Apr 2025 23:00:34 +0000
Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: eZ3MijmEDr+XES3zx/t0CmGASb0nstT1TcUDiftf9/U=)
2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:42:65:26:7b:5d:9e:c3:56:c2:4c:50:a3:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Apr 19 23:00:34 2025 GMT
Not After : Apr 20 23:00:34 2025 GMT
Subject: CN=8671a71b5288064f71c3951ab12c33855b8bfce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a3:40:53:ed:3f:fa:bf:f5:8f:c2:73:38:f0:
e3:d9:ec:de:f9:1f:09:72:35:e4:a7:a3:04:9b:45:
4f:b1:a7:28:4e:2c:58:e7:2d:46:13:ff:a4:4e:d1:
b0:49:81:cd:ee:a0:1e:ca:47:1b:28:5c:f6:ee:3f:
14:af:ad:53:b0:07:a2:df:88:2f:00:ca:08:e1:57:
c5:8d:7c:f3:03:20:ea:b5:b6:f2:cc:31:a0:44:a9:
e7:36:32:76:e2:53:51:81:c3:32:e8:cf:b5:43:74:
2c:33:8f:e8:4d:e1:79:36:14:08:5f:b3:aa:4a:3b:
48:9d:05:ad:f3:35:29:ab:a7:ac:f9:44:9b:51:5a:
37:71:ce:39:a0:90:2b:c7:f1:55:83:8a:3f:51:7d:
13:7c:42:a9:d3:ec:3a:72:01:4a:a7:01:53:a2:35:
09:e9:1d:f3:55:26:2d:79:00:65:06:03:0a:26:ad:
35:c1:1d:de:48:bc:6c:76:e4:7a:0e:e2:d8:73:4a:
34:46:75:2c:e9:c6:61:c8:33:aa:07:66:ce:f6:44:
d3:64:33:86:5f:f8:48:30:01:4b:f8:46:8c:20:85:
7c:d9:43:82:7a:63:92:98:e7:ec:43:e3:fe:a6:80:
99:ab:cc:7b:b8:51:94:96:9a:fa:2b:3d:07:e6:d6:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:71:A7:1B:52:88:06:4F:71:C3:95:1A:B1:2C:33:85:5B:8B:FC:E7
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:91:98:5f:e0:9b:60:f2:ff:69:eb:99:06:79:34:ff:49:b8:
99:ca:77:0e:a6:b8:3a:3d:d1:cd:4f:ac:9e:d1:98:f2:39:60:
5e:bb:5d:b6:1e:47:f2:44:c3:53:5e:b6:4c:ab:da:fa:d3:1a:
6f:9d:70:c2:c7:00:60:61:49:6a:68:c9:50:ff:f0:8d:86:49:
6b:f3:63:e4:6c:23:61:eb:41:b8:55:18:fe:3e:f1:11:08:14:
bf:bd:9b:31:43:53:62:e5:46:39:b3:bc:48:da:68:f1:9f:d7:
bc:80:07:a1:04:c3:62:42:81:28:fe:37:65:87:4e:dc:5f:76:
a0:49:b5:1b:e5:50:23:7d:4e:04:4a:d8:5e:3b:9a:2e:08:7c:
24:33:f1:2f:44:d3:b9:2e:a4:01:f3:ca:ce:6e:3f:a9:7d:84:
67:7e:0d:e0:74:cc:c8:10:de:7e:f8:05:ae:e8:75:40:10:dd:
b8:0a:d5:54:63:13:87:8a:38:98:b4:7f:d5:51:50:eb:f9:6d:
60:ac:62:90:d4:f1:06:a8:13:67:a8:9e:91:85:93:ee:bd:a5:
cc:31:14:2c:6d:c8:d8:d9:65:29:d6:e0:85:38:9c:58:e2:a5:
7a:51:ff:92:1b:b6:9e:23:ae:d8:aa:af:58:39:8e:d6:7e:dc:
27:90:a9:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSEJlJntdnsNWwkxQoyd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew
OTA3YTYwHhcNMjUwNDE5MjMwMDM0WhcNMjUwNDIwMjMwMDM0WjAzMTEwLwYDVQQD
Eyg4NjcxYTcxYjUyODgwNjRmNzFjMzk1MWFiMTJjMzM4NTViOGJmY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aNAU+0/+r/1j8JzOPDj2eze+R8J
cjXkp6MEm0VPsacoTixY5y1GE/+kTtGwSYHN7qAeykcbKFz27j8Ur61TsAei34gv
AMoI4VfFjXzzAyDqtbbyzDGgRKnnNjJ24lNRgcMy6M+1Q3QsM4/oTeF5NhQIX7Oq
SjtInQWt8zUpq6es+USbUVo3cc45oJArx/FVg4o/UX0TfEKp0+w6cgFKpwFTojUJ
6R3zVSYteQBlBgMKJq01wR3eSLxsduR6DuLYc0o0RnUs6cZhyDOqB2bO9kTTZDOG
X/hIMAFL+EaMIIV82UOCemOSmOfsQ+P+poCZq8x7uFGUlpr6Kz0H5tbdvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZxpxtSiAZPccOVGrEsM4Vbi/znMB8GA1UdIwQY
MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt
MTBhY2EzMzEzMzg3LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3
LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZGYX+Cb
YPL/aeuZBnk0/0m4mcp3Dqa4Oj3RzU+sntGY8jlgXrtdth5H8kTDU162TKva+tMa
b51wwscAYGFJamjJUP/wjYZJa/Nj5GwjYetBuFUY/j7xEQgUv72bMUNTYuVGObO8
SNpo8Z/XvIAHoQTDYkKBKP43ZYdO3F92oEm1G+VQI31OBErYXjuaLgh8JDPxL0TT
uS6kAfPKzm4/qX2EZ34N4HTMyBDefvgFruh1QBDduArVVGMTh4o4mLR/1VFQ6/lt
YKxikNTxBqgTZ6iekYWT7r2lzDEULG3I2NllKdbghTicWOKlelH/khu2niOu2Kqv
WDmO1n7cJ5CpBQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:31 2025 by rpki-client