Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft (raw, json)
Hash identifier: FW3XGzgKVi0KS3nbhkbPB8x0TPycEo5wuEP95IKZnvA=
Subject key identifier: 9B:42:B5:C0:10:38:E5:6B:01:E9:6A:CA:34:34:3F:DE:0C:E4:29:FF
Authority key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Certificate issuer: /CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Certificate serial: 01964D10044D98B972E93F146FFF987511AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
Manifest number: 06E3
Signing time: Sat 19 Apr 2025 08:00:17 +0000
Manifest this update: Sat 19 Apr 2025 08:00:17 +0000
Manifest next update: Sun 20 Apr 2025 08:00:17 +0000
Files and hashes: 1: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl (hash: 9Nu/RHchXqf46IaIiYfkruaXjoU9JtXYnHuo7Ls9l3E=)
2: 1Ae_yfQHDKRNnQDwOPRaMQCngyQ.roa (hash: +NTp7Q1pqxAx2whls9B3Uy3bHdVw5DZ30CWN9JliAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:04:4d:98:b9:72:e9:3f:14:6f:ff:98:75:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Validity
Not Before: Apr 19 08:00:17 2025 GMT
Not After : Apr 20 08:00:17 2025 GMT
Subject: CN=9b42b5c01038e56b01e96aca34343fde0ce429ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3a:a9:83:af:66:1a:ca:0f:74:d8:dc:51:68:
d1:dc:72:17:45:64:55:fc:ae:bb:a4:39:c7:bd:4b:
c7:24:18:5c:65:4a:e6:21:5e:74:65:38:df:7e:17:
d3:23:4a:a0:da:2b:d5:f1:30:ee:e8:4e:86:68:d6:
8b:f8:e9:d2:44:b9:e2:a6:f5:8e:8f:49:58:04:6a:
a9:54:04:27:7f:ce:8b:e7:5a:ab:06:e8:4e:54:32:
7a:79:bf:6a:54:b3:92:f4:3d:ce:28:a5:e9:5f:9c:
8c:7f:ac:21:29:35:ac:82:cf:78:f3:42:af:a5:71:
aa:51:25:f0:70:5c:2a:01:44:f1:72:a2:e1:e8:25:
81:91:77:c3:c0:01:28:99:47:ad:50:2d:6b:38:ba:
ee:0c:5a:c7:93:bf:14:96:47:4d:59:d3:bf:91:16:
d5:40:ed:bf:81:cb:42:62:78:58:f7:a4:fb:8f:a0:
1a:31:cb:fb:c3:ee:3b:fd:fb:e5:7d:9d:29:ec:66:
9c:81:6b:bc:58:0c:ec:c8:78:19:5c:65:da:64:03:
ff:98:98:2f:ba:87:38:29:a6:f8:9e:2b:80:9c:7f:
fc:68:ee:7c:c4:1f:02:0a:dd:af:79:27:c2:fb:1c:
f4:96:81:30:18:e1:2b:9c:b1:90:45:ee:ba:15:a4:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:B5:C0:10:38:E5:6B:01:E9:6A:CA:34:34:3F:DE:0C:E4:29:FF
X509v3 Authority Key Identifier:
keyid:D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:76:95:0d:a4:3b:f4:f4:41:90:64:6c:97:10:15:77:7e:63:
4f:a7:0f:ef:b1:59:78:01:04:e2:ac:10:98:82:e7:4d:1a:01:
91:e3:24:66:37:18:df:ef:5b:57:b4:14:4b:18:96:a8:2f:fe:
6e:46:1b:17:0c:58:7f:74:90:25:57:36:81:f4:0f:34:55:1a:
e1:4d:fe:93:f3:1f:12:ca:a3:4f:fe:fc:27:e6:df:d6:2d:34:
ca:b1:63:1e:2a:87:a5:3c:45:c7:ac:59:39:ba:df:2b:a8:54:
ba:2e:82:71:41:7f:14:5d:a0:a4:ef:cf:28:b1:30:ea:da:f2:
05:92:1b:1d:f1:d5:9e:4b:f2:68:3d:ec:a8:48:5f:bd:c2:06:
3e:78:1f:bc:04:79:cc:bb:bd:3d:fc:a0:36:4e:21:ad:67:e8:
32:d4:46:a1:88:0a:20:c7:bd:a9:ef:d9:81:d2:60:22:b4:44:
41:69:cf:0d:6d:32:f7:00:59:c7:ea:0e:bd:d7:92:ea:f0:08:
8f:43:47:99:52:06:70:13:22:56:7a:a7:98:0c:dd:9f:87:28:
01:b3:e2:48:5d:dd:45:c4:dd:cd:81:3b:e4:e8:25:0b:15:ac:
32:b0:61:e6:43:cb:0e:9f:8d:5c:64:1a:55:e7:c2:47:d1:15:
7a:f0:4a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNEARNmLly6T8Ub/+YdRGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZGQ0ZGRkNTM2ZjE4YTg3MmNiYWMxNWU1ODk1NDJhZWRj
ZDA3MzcwHhcNMjUwNDE5MDgwMDE3WhcNMjUwNDIwMDgwMDE3WjAzMTEwLwYDVQQD
Eyg5YjQyYjVjMDEwMzhlNTZiMDFlOTZhY2EzNDM0M2ZkZTBjZTQyOWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dqpg69mGsoPdNjcUWjR3HIXRWRV
/K67pDnHvUvHJBhcZUrmIV50ZTjffhfTI0qg2ivV8TDu6E6GaNaL+OnSRLnipvWO
j0lYBGqpVAQnf86L51qrBuhOVDJ6eb9qVLOS9D3OKKXpX5yMf6whKTWsgs9480Kv
pXGqUSXwcFwqAUTxcqLh6CWBkXfDwAEomUetUC1rOLruDFrHk78UlkdNWdO/kRbV
QO2/gctCYnhY96T7j6AaMcv7w+47/fvlfZ0p7GacgWu8WAzsyHgZXGXaZAP/mJgv
uoc4Kab4niuAnH/8aO58xB8CCt2veSfC+xz0loEwGOErnLGQRe66FaTsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtCtcAQOOVrAelqyjQ0P94M5Cn/MB8GA1UdIwQY
MBaAFNLdTd1TbxiocsusFeWJVCrtzQc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQt
NWIxMzJmN2QzYjQ5LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2EwMWMtNTIzMi00N2M1LWIwMTQtNWIxMzJmN2QzYjQ5
LzEvMHQxTjNWTnZHS2h5eTZ3VjVZbFVLdTNOQnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanaVDaQ7
9PRBkGRslxAVd35jT6cP77FZeAEE4qwQmILnTRoBkeMkZjcY3+9bV7QUSxiWqC/+
bkYbFwxYf3SQJVc2gfQPNFUa4U3+k/MfEsqjT/78J+bf1i00yrFjHiqHpTxFx6xZ
ObrfK6hUui6CcUF/FF2gpO/PKLEw6tryBZIbHfHVnkvyaD3sqEhfvcIGPngfvAR5
zLu9PfygNk4hrWfoMtRGoYgKIMe9qe/ZgdJgIrREQWnPDW0y9wBZx+oOvdeS6vAI
j0NHmVIGcBMiVnqnmAzdn4coAbPiSF3dRcTdzYE75OglCxWsMrBh5kPLDp+NXGQa
VefCR9EVevBKfA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:13 2025 by rpki-client