Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
File: 31kIP69fArumaAmhoicuryboo3g.mft (raw, json)
Hash identifier: g2XpDqu1pkIDnYRAX7g/LSJhJuBTdh/MiJz9i5IuFhA=
Subject key identifier: 73:A5:90:EB:E7:CA:B8:8E:F5:6E:BD:D2:15:B5:BE:99:A9:2E:21:49
Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Certificate serial: 0196512419B202C593B55528296FAABEFF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 03:00:42 +0000
Manifest this update: Sun 20 Apr 2025 03:00:42 +0000
Manifest next update: Mon 21 Apr 2025 03:00:42 +0000
Files and hashes: 1: 31kIP69fArumaAmhoicuryboo3g.crl (hash: +P0DUCo56HjqwCSx8Ra1mkHvaZlpJRbkGgClSZpK+BQ=)
2: YDfV9I6rtYOjYpm5Z092WUOvRZo.roa (hash: VUQya+NPZIcq+b1ZPCIIi30pk5o/2ydd0KrRwzAFiDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:24:19:b2:02:c5:93:b5:55:28:29:6f:aa:be:ff:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Validity
Not Before: Apr 20 03:00:42 2025 GMT
Not After : Apr 21 03:00:42 2025 GMT
Subject: CN=73a590ebe7cab88ef56ebdd215b5be99a92e2149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:cb:16:c6:99:9e:bd:ea:06:00:99:83:37:
9b:7e:c2:b4:b8:25:00:42:e4:f7:94:3e:aa:b7:d8:
93:be:bc:33:53:98:de:c6:58:53:4e:90:b3:21:dc:
e1:c6:a9:15:66:e7:3a:a2:b3:95:17:5c:04:85:83:
61:17:37:83:a0:37:7d:49:ba:6c:1f:45:be:b1:43:
a4:04:21:78:fc:bf:06:ef:75:77:7a:63:0a:de:cb:
14:3a:23:96:6a:f2:08:e8:26:fc:6b:a4:b5:c4:c3:
65:eb:5a:bd:88:a6:8b:31:03:1e:cb:ab:57:44:bc:
99:51:a8:ee:0f:f1:2a:2a:96:58:cf:2e:a1:40:1d:
79:77:87:65:fa:c1:fa:e9:c6:f4:f0:d7:94:04:25:
7e:48:b3:70:e0:8f:a3:e1:b9:9e:61:09:dd:a8:f9:
d6:83:08:33:9a:5b:73:6e:4d:41:79:4f:be:d7:04:
63:43:b2:6d:4f:b6:8e:30:58:3b:46:34:5c:a6:5f:
da:37:76:68:07:7e:d8:72:a7:bc:9c:df:c0:9b:ee:
7a:ba:e8:6c:d3:0e:af:18:ba:8f:f5:5c:a6:5c:a6:
06:da:8e:c6:cb:2b:7e:57:77:e0:0f:6f:97:42:f6:
ab:71:6f:02:b9:29:f7:86:c1:92:0e:55:0a:01:9e:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A5:90:EB:E7:CA:B8:8E:F5:6E:BD:D2:15:B5:BE:99:A9:2E:21:49
X509v3 Authority Key Identifier:
keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:0a:22:18:22:0a:36:1c:83:b9:a8:c3:46:2d:b2:d7:e9:
a8:e3:8d:51:c9:7c:bb:80:46:b1:57:48:6f:a1:8a:4e:66:a1:
c8:c2:43:98:2c:87:30:38:8b:28:4d:74:32:72:bf:72:6a:72:
9a:76:79:a4:5d:65:08:91:94:40:35:11:a7:15:f8:7c:65:0e:
a1:fb:f2:d5:b0:2f:a5:83:eb:92:8c:80:2f:cb:a8:68:82:98:
cf:e8:c2:93:6d:4f:9a:e1:93:01:e0:10:71:0f:4a:36:39:a9:
cb:7b:26:76:f4:66:0a:c5:3a:d1:71:fe:92:70:73:6b:9b:4f:
4e:2e:e6:81:91:0d:32:72:f1:37:80:80:19:f2:03:ee:44:0c:
8a:73:56:5e:88:e5:8e:9d:b9:45:95:98:6b:09:c8:f9:6b:c5:
57:cf:be:50:22:a9:d2:80:a6:79:d4:07:51:dc:81:51:6e:ab:
d6:a8:b0:65:c9:e8:5b:a5:6e:3e:5c:10:db:67:c5:bb:47:2c:
5e:30:49:27:06:53:68:e3:b2:cd:e5:79:89:f2:20:ab:49:de:
17:35:36:97:f7:71:a0:55:56:b0:51:7e:a7:9d:79:15:87:e3:
73:27:ee:58:3b:29:88:f3:70:7a:64:ec:b3:2d:5c:e8:5c:7e:
22:5d:f1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRJBmyAsWTtVUoKW+qvv81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTkwODNmYWY1ZjAyYmJhNjY4MDlhMWEyMjcyZWFmMjZl
OGEzNzgwHhcNMjUwNDIwMDMwMDQyWhcNMjUwNDIxMDMwMDQyWjAzMTEwLwYDVQQD
Eyg3M2E1OTBlYmU3Y2FiODhlZjU2ZWJkZDIxNWI1YmU5OWE5MmUyMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLzLFsaZnr3qBgCZgzebfsK0uCUA
QuT3lD6qt9iTvrwzU5jexlhTTpCzIdzhxqkVZuc6orOVF1wEhYNhFzeDoDd9Sbps
H0W+sUOkBCF4/L8G73V3emMK3ssUOiOWavII6Cb8a6S1xMNl61q9iKaLMQMey6tX
RLyZUajuD/EqKpZYzy6hQB15d4dl+sH66cb08NeUBCV+SLNw4I+j4bmeYQndqPnW
gwgzmltzbk1BeU++1wRjQ7JtT7aOMFg7RjRcpl/aN3ZoB37Ycqe8nN/Am+56uuhs
0w6vGLqP9VymXKYG2o7Gyyt+V3fgD2+XQvarcW8CuSn3hsGSDlUKAZ6dWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOlkOvnyriO9W690hW1vpmpLiFJMB8GA1UdIwQY
MBaAFN9ZCD+vXwK7pmgJoaInLq8m6KN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUt
NTk2ZmRiYjBlZGQ5LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUtNTk2ZmRiYjBlZGQ5
LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzoKIhgi
CjYcg7mow0YtstfpqOONUcl8u4BGsVdIb6GKTmahyMJDmCyHMDiLKE10MnK/cmpy
mnZ5pF1lCJGUQDURpxX4fGUOofvy1bAvpYPrkoyAL8uoaIKYz+jCk21PmuGTAeAQ
cQ9KNjmpy3smdvRmCsU60XH+knBza5tPTi7mgZENMnLxN4CAGfID7kQMinNWXojl
jp25RZWYawnI+WvFV8++UCKp0oCmedQHUdyBUW6r1qiwZcnoW6VuPlwQ22fFu0cs
XjBJJwZTaOOyzeV5ifIgq0neFzU2l/dxoFVWsFF+p515FYfjcyfuWDspiPNwemTs
sy1c6Fx+Il3xyw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:03 2025 by rpki-client