Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
File: CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft (raw, json)
Hash identifier: MxzM+SWPNeK6uQlaHikEwX3jVbzbKG3yLaxS6VcBCRU=
Subject key identifier: 69:D6:B3:E0:A6:D9:C1:B0:BC:56:46:5B:4B:34:25:51:4B:F2:E0:80
Authority key identifier: 0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
Certificate issuer: /CN=0ab36668893a8244d553efca4688d0f1019e4e25
Certificate serial: 01963A2E1C6A9283B07A54D2D22FC1A5F6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
Manifest number: 148D
Signing time: Tue 15 Apr 2025 16:00:22 +0000
Manifest this update: Tue 15 Apr 2025 16:00:22 +0000
Manifest next update: Wed 16 Apr 2025 16:00:22 +0000
Files and hashes: 1: 7YGMzeES1KkLAsbbmtI6ZjvO9Q4.roa (hash: l1BU7g4Ila9ufWlHn68dydGGRXENxO9riUoJiMBfymw=)
2: CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl (hash: 0GuMI1YS3/F87w/JTn6WMCy0DG6Cq42KugTrb5kvTWc=)
3: UJ4AA8lthTvUaOv8y96F5tCFgzY.roa (hash: tgN2dNaoq5w5rynmNpRaU4NnYl8mkFWnYFqCjapx3rI=)
4: nRz9AftCLig4OmS0E1eBTIrPa5M.roa (hash: ea2h97J02X030CkXXWTZE1BGZvnjhrqY95EK1+tYFdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:2e:1c:6a:92:83:b0:7a:54:d2:d2:2f:c1:a5:f6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab36668893a8244d553efca4688d0f1019e4e25
Validity
Not Before: Apr 15 16:00:22 2025 GMT
Not After : Apr 16 16:00:22 2025 GMT
Subject: CN=69d6b3e0a6d9c1b0bc56465b4b3425514bf2e080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:d7:95:72:b6:63:e2:bd:ba:70:2d:41:85:
0e:15:f2:8a:64:b1:00:dc:c5:d8:b3:ab:0a:33:ba:
98:ca:92:70:a1:6b:e7:5d:54:0f:4d:1c:c5:9e:4f:
9d:39:26:5d:93:1d:52:21:b1:81:fe:92:71:13:d8:
5f:43:59:9f:07:b8:1e:28:23:19:e9:37:9d:c1:05:
ae:28:8e:7e:f8:13:f0:3e:59:b2:59:0e:c1:17:61:
25:ae:2c:76:43:c2:7e:0b:26:b6:ed:fd:15:c0:b2:
8f:26:fa:ae:3e:65:06:c5:45:28:76:aa:20:9a:9b:
76:dc:da:4b:52:9e:40:f4:ce:d0:71:04:f9:65:16:
41:6c:94:c7:8a:a0:c3:bc:a5:b0:56:87:12:a3:a3:
b0:f9:57:9b:71:2f:7e:40:d8:f6:c5:31:36:d5:40:
98:5f:f6:55:0d:ab:40:83:71:08:f3:7a:7a:0d:e2:
b7:2a:e9:03:e7:5c:96:9f:98:f5:c5:7b:08:c8:c3:
79:a4:7c:b1:5a:e6:3e:c7:4a:90:2e:81:b6:72:99:
ad:61:70:ce:79:e5:da:44:64:37:35:8e:ef:f0:37:
05:09:a2:00:eb:3e:4f:72:1e:ce:91:1d:22:ff:45:
f7:c7:cd:98:0f:89:24:8f:49:b2:42:6c:6e:45:1e:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D6:B3:E0:A6:D9:C1:B0:BC:56:46:5B:4B:34:25:51:4B:F2:E0:80
X509v3 Authority Key Identifier:
keyid:0A:B3:66:68:89:3A:82:44:D5:53:EF:CA:46:88:D0:F1:01:9E:4E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrNmaIk6gkTVU-_KRojQ8QGeTiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e57503-f658-43e2-93a9-2af067a130aa/1/CrNmaIk6gkTVU-_KRojQ8QGeTiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:4a:43:99:69:5f:1a:76:15:a2:d0:e0:8c:d5:6f:cd:09:
4d:e6:56:51:2c:50:ef:22:d7:1c:03:d3:5c:e5:eb:24:ea:f1:
46:d5:61:16:fc:29:a0:db:f7:c4:00:48:f3:4c:b8:ba:39:1f:
ab:d1:30:e7:84:8d:84:90:40:4f:48:9b:00:21:d2:a5:ed:e9:
59:4c:29:cc:d1:54:ee:11:80:7c:58:57:2f:c3:d4:c6:0c:62:
2d:15:51:cd:19:53:20:71:c8:0d:b0:44:73:ef:42:e0:33:56:
50:6d:48:69:54:3e:00:6a:7c:4c:8e:61:6b:b5:ce:48:f2:12:
44:01:c5:bf:62:e2:ba:7a:c2:5a:d4:72:67:ec:db:7c:df:f1:
27:b2:82:a1:bb:1c:46:a9:59:d2:b6:cb:00:72:41:ed:e3:e0:
e5:fc:01:5a:fe:64:a8:2d:fd:9e:b0:80:d8:8f:f5:70:89:aa:
4e:24:33:ae:41:23:56:3a:a3:70:27:de:ba:24:6b:31:f7:9b:
a0:3a:81:eb:af:e5:fb:7d:0b:b4:83:57:2a:2b:38:81:b4:34:
e9:18:7f:09:7a:ed:ea:d7:1e:f3:a4:e6:18:f8:12:de:3e:9f:
70:62:e0:e6:87:b7:b7:06:d5:f8:52:40:b5:6c:2a:aa:97:f1:
4d:5a:e1:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY6LhxqkoOwelTS0i/BpfbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM2NjY4ODkzYTgyNDRkNTUzZWZjYTQ2ODhkMGYxMDE5
ZTRlMjUwHhcNMjUwNDE1MTYwMDIyWhcNMjUwNDE2MTYwMDIyWjAzMTEwLwYDVQQD
Eyg2OWQ2YjNlMGE2ZDljMWIwYmM1NjQ2NWI0YjM0MjU1MTRiZjJlMDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5nXlXK2Y+K9unAtQYUOFfKKZLEA
3MXYs6sKM7qYypJwoWvnXVQPTRzFnk+dOSZdkx1SIbGB/pJxE9hfQ1mfB7geKCMZ
6TedwQWuKI5++BPwPlmyWQ7BF2Elrix2Q8J+Cya27f0VwLKPJvquPmUGxUUodqog
mpt23NpLUp5A9M7QcQT5ZRZBbJTHiqDDvKWwVocSo6Ow+VebcS9+QNj2xTE21UCY
X/ZVDatAg3EI83p6DeK3KukD51yWn5j1xXsIyMN5pHyxWuY+x0qQLoG2cpmtYXDO
eeXaRGQ3NY7v8DcFCaIA6z5Pch7OkR0i/0X3x82YD4kkj0myQmxuRR6U5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnWs+Cm2cGwvFZGW0s0JVFL8uCAMB8GA1UdIwQY
MBaAFAqzZmiJOoJE1VPvykaI0PEBnk4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTkt
MmFmMDY3YTEzMGFhLzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNTc1MDMtZjY1OC00M2UyLTkzYTktMmFmMDY3YTEzMGFh
LzEvQ3JObWFJazZna1RWVS1fS1JvalE4UUdlVGlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmZKQ5lp
Xxp2FaLQ4IzVb80JTeZWUSxQ7yLXHAPTXOXrJOrxRtVhFvwpoNv3xABI80y4ujkf
q9Ew54SNhJBAT0ibACHSpe3pWUwpzNFU7hGAfFhXL8PUxgxiLRVRzRlTIHHIDbBE
c+9C4DNWUG1IaVQ+AGp8TI5ha7XOSPISRAHFv2LiunrCWtRyZ+zbfN/xJ7KCobsc
RqlZ0rbLAHJB7ePg5fwBWv5kqC39nrCA2I/1cImqTiQzrkEjVjqjcCfeuiRrMfeb
oDqB66/l+30LtINXKis4gbQ06Rh/CXrt6tce86TmGPgS3j6fcGLg5oe3twbV+FJA
tWwqqpfxTVrh5A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 00:01:34 2025 by rpki-client