Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
File: ISvg6nHPQ34I798_55jq-YQTHEY.mft (raw, json)
Hash identifier: rDSqwpN8LYhxpKv0kDFXUycvLed2knG/SaT636rGA14=
Subject key identifier: 4B:44:64:EC:CF:1F:02:3B:D4:67:4F:26:7B:13:6A:86:08:F3:12:90
Authority key identifier: 21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
Certificate issuer: /CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Certificate serial: 01965EA89335E12EE9669EEBD17EAA3D6F93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
Manifest number: 1508
Signing time: Tue 22 Apr 2025 18:00:28 +0000
Manifest this update: Tue 22 Apr 2025 18:00:28 +0000
Manifest next update: Wed 23 Apr 2025 18:00:28 +0000
Files and hashes: 1: ISvg6nHPQ34I798_55jq-YQTHEY.crl (hash: ZvgwjDHMAhFaO7bdzY+EFoBqbSzPZ9erWxoXdfzq1AU=)
2: KtlxuE_8Rk2uPH3RNNTJz5tQ-98.roa (hash: Zkhu8f8yjf/QHqOQXe12PGw2OKR9LJM6Q4zyvvvVxD8=)
3: isGPTkBcxk2AKZ3pqWNrimW3LHo.roa (hash: Y2V5pd0IY6biUxiXA3E5dpmuRX9YWawCufz2noSbIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 18:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:93:35:e1:2e:e9:66:9e:eb:d1:7e:aa:3d:6f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212be0ea71cf437e08efdf3fe798eaf984131c46
Validity
Not Before: Apr 22 18:00:28 2025 GMT
Not After : Apr 23 18:00:28 2025 GMT
Subject: CN=4b4464eccf1f023bd4674f267b136a8608f31290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:39:f0:02:68:46:83:94:ff:de:2c:86:8d:
16:48:1d:e5:05:d1:99:56:61:58:28:92:13:63:2b:
b7:05:a2:a1:d7:5e:b8:f7:fd:b5:b5:08:58:7a:b3:
79:9d:df:61:9e:a6:29:89:bc:2a:2b:bd:ce:29:2f:
1f:38:da:f5:1d:86:97:19:2c:5c:7b:c2:47:84:be:
32:d4:6e:0e:04:b6:62:3a:b0:3e:41:d3:14:11:a0:
6b:73:d9:72:3d:43:bf:c6:12:35:78:09:31:0f:d6:
c5:1e:df:fd:8d:2e:6c:f6:ab:18:a1:3b:9f:9b:5c:
d3:d8:48:dc:92:1f:9d:87:0e:4e:fc:1f:b5:d1:ad:
7d:d1:0b:35:61:db:53:1b:15:ee:d4:0e:16:1a:97:
48:93:98:b5:e1:5a:29:2c:b0:ff:ea:11:b7:8e:b9:
36:90:64:27:cb:ce:76:68:7f:6b:f0:0e:e6:25:80:
61:70:9f:a7:e5:82:e8:e4:20:4a:81:c7:ac:7d:a1:
a3:96:48:ce:34:f0:26:04:47:c6:34:21:fb:3d:b3:
89:6f:1d:54:6b:95:ed:60:08:e9:9c:b1:a2:b2:69:
86:13:79:a7:ef:f5:ea:78:c6:e9:62:9c:5e:d3:66:
02:42:00:13:75:87:c2:64:9d:d4:e6:72:9e:fe:a5:
dd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:44:64:EC:CF:1F:02:3B:D4:67:4F:26:7B:13:6A:86:08:F3:12:90
X509v3 Authority Key Identifier:
keyid:21:2B:E0:EA:71:CF:43:7E:08:EF:DF:3F:E7:98:EA:F9:84:13:1C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISvg6nHPQ34I798_55jq-YQTHEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1babfc-79e6-45df-8c40-72568f06fe10/1/ISvg6nHPQ34I798_55jq-YQTHEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0c:8f:f6:fe:40:e4:17:ca:ce:94:d1:ea:b4:6e:5a:43:b4:
12:fb:c7:ba:cd:d3:cc:d2:b6:35:08:22:34:13:13:e5:55:91:
71:08:fe:d6:37:e4:d5:a6:42:27:0e:3b:f6:e7:ee:92:a9:27:
44:f3:ee:bb:1f:ed:c9:d6:c4:ac:31:a8:47:ab:84:a2:e9:93:
26:96:1c:e4:ce:4b:48:65:6f:cc:f7:fa:75:aa:21:64:99:66:
85:c0:74:c7:6d:3c:dc:cf:61:49:87:56:da:8a:a0:86:6d:9e:
01:a0:22:f2:d2:a7:92:0d:33:e6:c9:78:35:00:dd:c1:45:94:
9e:0f:a2:85:bb:a4:10:11:b1:da:f1:74:6c:94:56:47:5d:f0:
1f:74:00:42:25:f6:78:31:3c:a7:ce:a7:97:ff:5f:cc:44:da:
22:72:3e:28:a0:e7:72:93:fa:92:f1:2b:1f:06:b2:e1:20:f3:
90:31:c5:51:d7:53:b5:95:92:b5:16:65:4e:09:d7:cc:4f:19:
60:6b:c6:db:aa:c1:80:ed:54:82:b1:72:a5:17:18:44:d7:9a:
2a:2b:3d:82:9c:d6:ca:2d:7e:d6:99:1f:8e:34:b2:6f:58:0c:
ea:95:de:b7:d6:6a:29:f4:0c:5a:0e:b5:21:94:37:ed:d7:68:
24:7c:70:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZeqJM14S7pZp7r0X6qPW+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMmJlMGVhNzFjZjQzN2UwOGVmZGYzZmU3OThlYWY5ODQx
MzFjNDYwHhcNMjUwNDIyMTgwMDI4WhcNMjUwNDIzMTgwMDI4WjAzMTEwLwYDVQQD
Eyg0YjQ0NjRlY2NmMWYwMjNiZDQ2NzRmMjY3YjEzNmE4NjA4ZjMxMjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg458AJoRoOU/94sho0WSB3lBdGZ
VmFYKJITYyu3BaKh11649/21tQhYerN5nd9hnqYpibwqK73OKS8fONr1HYaXGSxc
e8JHhL4y1G4OBLZiOrA+QdMUEaBrc9lyPUO/xhI1eAkxD9bFHt/9jS5s9qsYoTuf
m1zT2Ejckh+dhw5O/B+10a190Qs1YdtTGxXu1A4WGpdIk5i14VopLLD/6hG3jrk2
kGQny852aH9r8A7mJYBhcJ+n5YLo5CBKgcesfaGjlkjONPAmBEfGNCH7PbOJbx1U
a5XtYAjpnLGismmGE3mn7/XqeMbpYpxe02YCQgATdYfCZJ3U5nKe/qXdMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtEZOzPHwI71GdPJnsTaoYI8xKQMB8GA1UdIwQY
MBaAFCEr4Opxz0N+CO/fP+eY6vmEExxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAt
NzI1NjhmMDZmZTEwLzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYmFiZmMtNzllNi00NWRmLThjNDAtNzI1NjhmMDZmZTEw
LzEvSVN2ZzZuSFBRMzRJNzk4XzU1anEtWVFUSEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgyP9v5A
5BfKzpTR6rRuWkO0EvvHus3TzNK2NQgiNBMT5VWRcQj+1jfk1aZCJw479ufukqkn
RPPuux/tydbErDGoR6uEoumTJpYc5M5LSGVvzPf6daohZJlmhcB0x2083M9hSYdW
2oqghm2eAaAi8tKnkg0z5sl4NQDdwUWUng+ihbukEBGx2vF0bJRWR13wH3QAQiX2
eDE8p86nl/9fzETaInI+KKDncpP6kvErHway4SDzkDHFUddTtZWStRZlTgnXzE8Z
YGvG26rBgO1UgrFypRcYRNeaKis9gpzWyi1+1pkfjjSyb1gM6pXet9ZqKfQMWg61
IZQ37ddoJHxwpw==
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:32:51 2025 by rpki-client