Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
File: k61uOZkaLowJwa3lO-WV-LipQl4.mft (raw, json)
Hash identifier: 5bHAFheGI5dSKk3PzZbAPnw9WldSA6H8EeXc0Xi7lcE=
Subject key identifier: AE:E8:BB:4A:40:36:51:7E:D0:A7:2A:36:12:13:34:4F:39:21:87:BD
Authority key identifier: 93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
Certificate issuer: /CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Certificate serial: 01958F611CD428659A98FD41DAC4782AAC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
Manifest number: 0299
Signing time: Thu 13 Mar 2025 12:01:00 +0000
Manifest this update: Thu 13 Mar 2025 12:01:00 +0000
Manifest next update: Fri 14 Mar 2025 12:01:00 +0000
Files and hashes: 1: 6ignIb5OCDRZa9htQBKWaTGmU9o.roa (hash: zSgV1vtphKXfQn8b1eScbKSqpXfajJgXTewaQSsjXpw=)
2: k61uOZkaLowJwa3lO-WV-LipQl4.crl (hash: f3yb2/lbj1laxtuCBhUQtTDAoabmLJYzaQPQ9Bwkopw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:1c:d4:28:65:9a:98:fd:41:da:c4:78:2a:ac:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ad6e39991a2e8c09c1ade53be595f8b8a9425e
Validity
Not Before: Mar 13 12:01:00 2025 GMT
Not After : Mar 14 12:01:00 2025 GMT
Subject: CN=aee8bb4a4036517ed0a72a361213344f392187bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:4f:dc:80:2c:0b:4b:07:90:d2:2d:30:24:
3a:e4:2f:b6:a7:99:e2:87:58:e2:45:5c:70:70:a9:
01:4c:25:7d:9a:39:f6:b5:b1:1d:15:c5:bf:96:c4:
64:2c:b7:7d:34:11:1d:eb:d4:fc:36:30:4d:f7:19:
29:8b:c1:db:bc:08:f4:93:45:da:60:f8:87:7a:87:
fd:a4:f0:8e:52:0e:9f:64:32:9d:6e:e4:ef:ac:d0:
0f:5d:f7:85:42:10:f4:ff:29:00:3f:c8:9f:2d:f0:
54:db:64:a0:c9:e2:2a:48:9b:51:83:a7:e8:19:50:
59:cb:dc:18:22:89:ad:0b:f3:9b:87:86:b2:7e:36:
16:fb:a8:a3:b6:5f:e2:d2:3c:d4:31:15:f4:c0:bf:
59:53:57:e4:3c:15:aa:d5:72:d0:75:1f:07:d1:13:
a6:af:0b:aa:cc:64:28:be:d7:8c:73:f4:88:9b:e6:
25:7d:54:db:de:d6:13:ff:1b:95:87:f8:bf:21:27:
72:46:58:b4:7a:15:ed:79:c1:06:ab:09:1a:cc:78:
1d:56:65:1d:18:9f:6a:bf:52:cf:00:cf:fb:b7:de:
d5:06:f4:a0:30:be:f6:5c:9e:de:33:1c:99:c2:46:
c9:14:b6:9d:ac:60:ec:a5:3d:30:d9:fb:30:49:82:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:BB:4A:40:36:51:7E:D0:A7:2A:36:12:13:34:4F:39:21:87:BD
X509v3 Authority Key Identifier:
keyid:93:AD:6E:39:99:1A:2E:8C:09:C1:AD:E5:3B:E5:95:F8:B8:A9:42:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k61uOZkaLowJwa3lO-WV-LipQl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1d4994-cfe3-46df-b02d-f776c92207b7/1/k61uOZkaLowJwa3lO-WV-LipQl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:7d:ae:49:7c:c5:ba:dc:83:70:52:72:8f:97:2c:5d:39:
b2:73:5d:75:61:00:5b:53:82:1e:a1:f0:0c:e8:06:e2:b6:24:
6d:15:45:a7:61:64:53:5e:e0:fb:ba:26:b6:f6:c5:a0:bd:e0:
b2:67:fa:b4:97:7d:89:5d:41:05:52:fc:84:e6:bd:54:cc:5c:
16:cf:f1:d8:9f:d6:58:cb:5e:93:6b:57:e2:62:60:d7:4d:a8:
a0:e7:84:ef:63:b2:4f:ac:c9:9b:6c:e9:ef:6a:42:99:3e:67:
9d:db:cb:4c:7d:be:ae:1d:ba:28:ec:a6:67:0c:34:11:89:ff:
47:5a:06:e9:e8:2d:c8:56:77:a4:8b:1d:24:63:dd:ae:5b:01:
fa:d1:f6:00:dd:0e:38:01:0b:0e:64:45:92:e5:1a:93:fa:bc:
42:4c:ce:5b:cf:34:ac:eb:4b:38:26:52:44:d6:c7:17:e3:cc:
dc:0a:a9:91:0f:f5:eb:9b:37:a3:39:57:a4:c4:10:31:cd:ba:
cc:53:f7:1d:79:74:5a:29:e1:6e:c0:d9:16:95:c4:37:df:3b:
51:d4:c9:d1:12:18:b7:a9:c8:56:4e:81:0b:2b:50:d8:ba:d0:
84:8e:0d:71:d0:d8:7f:4b:82:56:b2:30:ee:1f:ad:42:ca:a4:
e5:d5:7d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPYRzUKGWamP1B2sR4KqyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWQ2ZTM5OTkxYTJlOGMwOWMxYWRlNTNiZTU5NWY4Yjhh
OTQyNWUwHhcNMjUwMzEzMTIwMTAwWhcNMjUwMzE0MTIwMTAwWjAzMTEwLwYDVQQD
EyhhZWU4YmI0YTQwMzY1MTdlZDBhNzJhMzYxMjEzMzQ0ZjM5MjE4N2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HFP3IAsC0sHkNItMCQ65C+2p5ni
h1jiRVxwcKkBTCV9mjn2tbEdFcW/lsRkLLd9NBEd69T8NjBN9xkpi8HbvAj0k0Xa
YPiHeof9pPCOUg6fZDKdbuTvrNAPXfeFQhD0/ykAP8ifLfBU22SgyeIqSJtRg6fo
GVBZy9wYIomtC/Obh4ayfjYW+6ijtl/i0jzUMRX0wL9ZU1fkPBWq1XLQdR8H0ROm
rwuqzGQovteMc/SIm+YlfVTb3tYT/xuVh/i/ISdyRli0ehXtecEGqwkazHgdVmUd
GJ9qv1LPAM/7t97VBvSgML72XJ7eMxyZwkbJFLadrGDspT0w2fswSYLo8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7ou0pANlF+0KcqNhITNE85IYe9MB8GA1UdIwQY
MBaAFJOtbjmZGi6MCcGt5Tvllfi4qUJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQt
Zjc3NmM5MjIwN2I3LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xZDQ5OTQtY2ZlMy00NmRmLWIwMmQtZjc3NmM5MjIwN2I3
LzEvazYxdU9aa2FMb3dKd2EzbE8tV1YtTGlwUWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDh9rkl8
xbrcg3BSco+XLF05snNddWEAW1OCHqHwDOgG4rYkbRVFp2FkU17g+7omtvbFoL3g
smf6tJd9iV1BBVL8hOa9VMxcFs/x2J/WWMtek2tX4mJg102ooOeE72OyT6zJm2zp
72pCmT5nndvLTH2+rh26KOymZww0EYn/R1oG6egtyFZ3pIsdJGPdrlsB+tH2AN0O
OAELDmRFkuUak/q8QkzOW880rOtLOCZSRNbHF+PM3AqpkQ/165s3ozlXpMQQMc26
zFP3HXl0WinhbsDZFpXEN987UdTJ0RIYt6nIVk6BCytQ2LrQhI4NcdDYf0uCVrIw
7h+tQsqk5dV9vQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:37 2025 by rpki-client