Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: 65VRf33W5k/PZ70a7jsc8/OsrBNER5ZtlPu3tFxYaGw=
Subject key identifier: 76:9D:A3:9F:9C:11:C5:22:B2:DF:FC:E7:E0:CE:79:57:5F:0D:FA:1E
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0196138F6A5A1285C459C39270A678F529CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 081A
Signing time: Tue 08 Apr 2025 04:01:28 +0000
Manifest this update: Tue 08 Apr 2025 04:01:28 +0000
Manifest next update: Wed 09 Apr 2025 04:01:28 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: os6snHJzhjGsIIX9GBvyfYPEyll7+TQspWwl8zNVFVE=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:6a:5a:12:85:c4:59:c3:92:70:a6:78:f5:29:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Apr 8 04:01:28 2025 GMT
Not After : Apr 9 04:01:28 2025 GMT
Subject: CN=769da39f9c11c522b2dffce7e0ce79575f0dfa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:4e:ca:10:14:cd:f1:a1:13:00:00:ca:7c:
11:da:40:f4:ae:a4:71:65:a7:28:35:36:c6:cd:b7:
9c:71:92:71:d6:fd:51:55:8e:4f:3c:cb:b6:a3:31:
46:2b:6d:5b:44:09:15:e0:17:e1:84:90:1b:0d:09:
f0:9b:db:2a:d8:4e:96:15:ef:93:bf:fe:cb:37:84:
12:e0:6f:2f:93:a9:87:98:82:27:d0:c9:43:40:18:
57:56:df:4d:15:7f:dc:24:6b:39:d8:20:2f:e7:1a:
37:57:2f:e3:2f:1d:37:17:ec:4c:c4:db:2f:23:9b:
0e:f5:cd:b9:5c:a8:dd:5f:27:a3:dd:68:e0:c8:63:
fb:cb:1b:8d:32:6d:23:bd:35:bd:f2:34:2f:2f:49:
91:e2:30:a6:72:3b:15:85:21:17:d8:e2:1b:eb:61:
f4:43:29:22:f7:a0:76:56:b0:c1:5b:80:1a:3a:17:
04:a9:78:cc:68:56:f7:1f:e3:03:b3:a4:d9:cd:7f:
ca:4b:2c:0a:2e:bd:74:d8:7d:01:9a:36:ca:6e:b0:
c3:a0:c6:76:b3:6b:4a:17:5d:cf:c1:fa:e8:62:21:
1f:35:e1:4e:23:95:e0:9b:a0:3c:8b:82:d6:6b:45:
28:31:61:7a:41:cb:b8:49:1d:16:eb:a7:c0:7e:d0:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:A3:9F:9C:11:C5:22:B2:DF:FC:E7:E0:CE:79:57:5F:0D:FA:1E
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:8d:09:61:fa:dd:8b:73:60:4f:92:02:e2:4d:20:16:2c:
84:3b:80:e8:70:e5:af:49:d3:dd:c5:ac:be:b1:73:d8:55:cb:
11:08:88:b8:4f:51:f9:e8:b2:14:18:2b:5f:3e:01:94:8f:2c:
36:39:a2:97:9f:ee:a9:fc:94:70:0b:a5:67:91:26:f7:fd:5e:
ac:41:3f:72:85:77:62:d2:5e:fd:c6:f3:9f:53:a5:ed:55:65:
69:7a:d2:66:96:ae:b4:c2:f3:e0:bc:b1:9f:23:45:8a:56:0d:
14:f5:85:cd:00:71:0a:fe:cc:98:4b:0a:c9:41:0c:d0:b5:29:
d2:6a:e0:4e:28:47:b7:8b:c7:4b:60:57:24:a3:35:b8:69:9a:
af:4f:25:08:ba:8a:23:0b:5f:9f:78:ae:e4:49:73:15:c4:88:
95:62:3d:40:b7:7b:c3:7d:0d:18:5a:ec:c8:31:4f:4b:4a:c8:
9c:8a:dc:f8:a5:3e:c1:6a:b5:20:5f:8e:7c:a6:21:fc:92:04:
15:43:eb:e3:07:53:7f:d2:66:50:a2:e9:09:59:b9:0a:68:0a:
ef:1c:ce:c7:96:f6:ed:5a:e7:e3:a7:82:0a:87:21:67:26:6b:
9a:d7:9a:d0:fb:9c:21:ec:cc:6f:f1:4b:26:0c:dc:7a:2f:ac:
9e:f9:bc:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYTj2paEoXEWcOScKZ49SnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWY1ZDJiN2RiZjUyNDQ5YjAxMjUzYjBmODI3ZjQwMWE4
YTdjODEwHhcNMjUwNDA4MDQwMTI4WhcNMjUwNDA5MDQwMTI4WjAzMTEwLwYDVQQD
Eyg3NjlkYTM5ZjljMTFjNTIyYjJkZmZjZTdlMGNlNzk1NzVmMGRmYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKtOyhAUzfGhEwAAynwR2kD0rqRx
ZacoNTbGzbeccZJx1v1RVY5PPMu2ozFGK21bRAkV4BfhhJAbDQnwm9sq2E6WFe+T
v/7LN4QS4G8vk6mHmIIn0MlDQBhXVt9NFX/cJGs52CAv5xo3Vy/jLx03F+xMxNsv
I5sO9c25XKjdXyej3WjgyGP7yxuNMm0jvTW98jQvL0mR4jCmcjsVhSEX2OIb62H0
Qyki96B2VrDBW4AaOhcEqXjMaFb3H+MDs6TZzX/KSywKLr102H0BmjbKbrDDoMZ2
s2tKF13PwfroYiEfNeFOI5Xgm6A8i4LWa0UoMWF6Qcu4SR0W66fAftAYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHado5+cEcUist/85+DOeVdfDfoeMB8GA1UdIwQY
MBaAFEmfXSt9v1JEmwElOw+Cf0AainyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYt
YjlkY2NhYjZkZjJlLzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NTQ0NjUtZWRjZC00NjM2LTg1NWYtYjlkY2NhYjZkZjJl
LzEvU1o5ZEszMl9Va1NiQVNVN0Q0Sl9RQnFLZklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAML6NCWH6
3YtzYE+SAuJNIBYshDuA6HDlr0nT3cWsvrFz2FXLEQiIuE9R+eiyFBgrXz4BlI8s
Njmil5/uqfyUcAulZ5Em9/1erEE/coV3YtJe/cbzn1Ol7VVlaXrSZpautMLz4Lyx
nyNFilYNFPWFzQBxCv7MmEsKyUEM0LUp0mrgTihHt4vHS2BXJKM1uGmar08lCLqK
Iwtfn3iu5ElzFcSIlWI9QLd7w30NGFrsyDFPS0rInIrc+KU+wWq1IF+OfKYh/JIE
FUPr4wdTf9JmUKLpCVm5CmgK7xzOx5b27Vrn46eCCochZyZrmtea0PucIezMb/FL
Jgzcei+snvm8Pg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:38 2025 by rpki-client