Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: hrBsyXPBfXjNaHtE3xT2XwX+UXgUlC890sFtGZg3K5E=
Subject key identifier: 71:71:01:48:FF:C7:36:6E:63:5F:22:02:74:30:57:17:C2:AF:81:EA
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 019653B6F78E37516172C45C13B99F65C8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 15:00:21 +0000
Manifest this update: Sun 20 Apr 2025 15:00:21 +0000
Manifest next update: Mon 21 Apr 2025 15:00:21 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: AJOtTXjOpc2vi4FWZvCOwdT21W4At8M9YfKy/hno9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:f7:8e:37:51:61:72:c4:5c:13:b9:9f:65:c8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Apr 20 15:00:21 2025 GMT
Not After : Apr 21 15:00:21 2025 GMT
Subject: CN=71710148ffc7366e635f220274305717c2af81ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:aa:ee:f6:50:27:d3:bb:7e:cd:09:ba:36:
70:e0:94:a2:8b:53:fd:40:8e:9d:60:1f:a2:8b:54:
96:fa:16:cd:46:8f:84:c3:7f:dd:3c:56:c4:59:03:
84:6b:f2:2b:99:73:34:ed:f7:b5:6c:a9:85:90:28:
4f:38:db:10:82:df:dd:67:de:6a:05:7a:77:24:5b:
bd:65:4e:61:41:ce:26:a5:12:41:87:d3:a1:b5:bc:
56:06:40:3e:7f:03:10:c0:17:ab:f7:2e:2d:6f:b8:
4e:7c:a8:fd:e6:5c:85:c3:b2:eb:1b:85:b4:98:30:
64:44:8b:0b:95:90:45:0a:cd:91:82:ab:e4:a6:99:
75:0e:c4:05:b0:f0:65:2b:61:79:f1:7c:14:1f:b8:
f9:db:8b:34:b4:73:e2:50:8e:2a:21:99:ad:f1:d3:
37:86:1a:35:f2:36:8a:9e:da:f2:1a:7e:ba:68:ff:
15:07:75:40:92:9d:b8:a9:eb:b0:62:5c:e8:aa:4e:
e1:ba:26:e3:cc:8d:9a:34:d4:20:16:d7:73:4d:b5:
9c:81:f6:95:d7:cc:91:a8:0f:72:14:b0:d2:23:03:
68:d5:f1:2d:7d:ff:99:f2:d3:83:12:28:88:8c:3c:
26:6a:2b:6f:6f:05:df:35:40:2f:01:52:7c:b2:76:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:71:01:48:FF:C7:36:6E:63:5F:22:02:74:30:57:17:C2:AF:81:EA
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:80:66:c7:42:54:99:b9:ad:01:8e:f5:46:1d:6f:48:e8:81:
95:de:07:ad:71:9b:0e:73:8a:e4:7e:c3:7c:4d:8b:6c:a7:76:
7f:51:a8:25:5e:be:f2:3f:64:a8:9b:e3:7d:ac:c7:16:60:f8:
6f:51:46:67:b1:c8:8b:4c:86:33:f4:30:9f:ed:68:28:f4:4d:
c5:df:ee:28:19:83:a0:dd:af:b8:61:5b:92:31:ba:bb:40:5b:
cb:d1:39:64:42:5c:12:f6:11:a6:ca:52:dc:0c:fa:c8:df:b8:
19:9c:81:8d:df:ec:02:11:3c:be:6a:19:6c:34:57:3a:78:9a:
9d:8d:eb:f2:cf:27:05:82:61:c3:15:da:fd:c5:2e:f0:c8:f9:
e1:dd:2a:5a:4e:2b:98:56:93:da:ce:58:3b:a0:fd:e3:cb:01:
8d:25:7a:ca:12:15:5d:7c:8a:ff:95:03:ac:e6:26:a4:5f:e4:
80:a5:54:4a:de:2b:8d:4a:d1:7c:d0:a2:05:ca:6a:fd:2e:6f:
52:d1:99:0a:8e:40:c2:10:63:5e:8f:53:72:3d:33:32:bd:fb:
f6:2c:e8:12:fc:eb:95:8a:3f:69:a1:81:03:08:b3:b1:d4:8b:
f4:df:23:f4:0c:83:e6:1b:d5:d4:72:6b:c4:e8:4a:42:01:2a:
bc:17:6a:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtveON1FhcsRcE7mfZcjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZDYyZDE2NjZjNWM0ZDE5MjE4MzUzMTU4NGFmZDcyYmVk
MDg0ODUwHhcNMjUwNDIwMTUwMDIxWhcNMjUwNDIxMTUwMDIxWjAzMTEwLwYDVQQD
Eyg3MTcxMDE0OGZmYzczNjZlNjM1ZjIyMDI3NDMwNTcxN2MyYWY4MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYOq7vZQJ9O7fs0JujZw4JSii1P9
QI6dYB+ii1SW+hbNRo+Ew3/dPFbEWQOEa/IrmXM07fe1bKmFkChPONsQgt/dZ95q
BXp3JFu9ZU5hQc4mpRJBh9OhtbxWBkA+fwMQwBer9y4tb7hOfKj95lyFw7LrG4W0
mDBkRIsLlZBFCs2Rgqvkppl1DsQFsPBlK2F58XwUH7j524s0tHPiUI4qIZmt8dM3
hho18jaKntryGn66aP8VB3VAkp24qeuwYlzoqk7huibjzI2aNNQgFtdzTbWcgfaV
18yRqA9yFLDSIwNo1fEtff+Z8tODEiiIjDwmaitvbwXfNUAvAVJ8snZyxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHFxAUj/xzZuY18iAnQwVxfCr4HqMB8GA1UdIwQY
MBaAFLDWLRZmxcTRkhg1MVhK/XK+0ISFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjkt
NGZhNTNiZjBlMTU1LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iNGFhNjMtNDI1OS00NGU2LWFjMjktNGZhNTNiZjBlMTU1
LzEvc05ZdEZtYkZ4TkdTR0RVeFdFcjljcjdRaElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIBmx0JU
mbmtAY71Rh1vSOiBld4HrXGbDnOK5H7DfE2LbKd2f1GoJV6+8j9kqJvjfazHFmD4
b1FGZ7HIi0yGM/Qwn+1oKPRNxd/uKBmDoN2vuGFbkjG6u0Bby9E5ZEJcEvYRpspS
3Az6yN+4GZyBjd/sAhE8vmoZbDRXOnianY3r8s8nBYJhwxXa/cUu8Mj54d0qWk4r
mFaT2s5YO6D948sBjSV6yhIVXXyK/5UDrOYmpF/kgKVUSt4rjUrRfNCiBcpq/S5v
UtGZCo5AwhBjXo9Tcj0zMr379izoEvzrlYo/aaGBAwizsdSL9N8j9AyD5hvV1HJr
xOhKQgEqvBdqGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:11:16 2025 by rpki-client