Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: pW1ecwA1HLBaBpAuSYoZ9xvs4SVa5KeQ7+QQqeYsyK0=
Subject key identifier: FE:73:2A:96:7B:0A:D5:B7:98:BA:81:E0:EF:E3:D0:20:69:23:09:D7
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 01964F6D6525665174A8A3475580377A84D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 11B6
Signing time: Sat 19 Apr 2025 19:01:31 +0000
Manifest this update: Sat 19 Apr 2025 19:01:31 +0000
Manifest next update: Sun 20 Apr 2025 19:01:31 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: ckcU9a+IOSf/l4bNfkVgjbu5uSwA7JTaoy1yNY8e0NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:65:25:66:51:74:a8:a3:47:55:80:37:7a:84:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Apr 19 19:01:31 2025 GMT
Not After : Apr 20 19:01:31 2025 GMT
Subject: CN=fe732a967b0ad5b798ba81e0efe3d020692309d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:18:ff:6c:e0:83:60:0b:2a:a1:84:c0:66:ab:
26:9b:7b:e9:f3:15:80:ab:24:fd:34:d3:72:04:6b:
24:b7:24:ee:b9:1a:b3:9a:3f:14:2f:bb:b3:91:b7:
3d:f0:ee:08:cf:5f:0c:ff:71:e7:54:28:a8:f3:0f:
e9:c6:4d:66:d9:d5:33:ea:83:5f:92:8c:fd:04:aa:
e1:9b:2c:86:f6:98:56:b5:fc:5d:00:a0:2d:fa:15:
04:da:30:88:03:a3:63:c0:c7:6e:0a:fb:02:50:4f:
5c:73:f6:3e:c7:d6:9e:e4:73:8d:e2:b2:f2:38:68:
be:f4:3a:63:2d:76:40:1b:5f:9b:dd:52:9b:c4:70:
91:05:5b:fb:01:aa:80:3d:ee:25:39:8c:52:94:c1:
47:c1:49:e7:1d:fa:ca:fb:fc:58:25:1e:e4:8d:71:
8b:97:60:8d:b0:7c:13:00:cd:81:3a:0d:af:b1:20:
b8:e4:83:32:fb:d8:19:03:39:f1:98:0d:1d:e4:82:
47:df:ae:6a:3e:ba:5f:5b:fb:24:70:dc:20:cb:46:
a7:06:18:aa:f2:28:b1:6d:69:2f:33:1d:08:fd:d9:
79:0b:92:3c:f2:77:38:85:76:ec:47:f6:5f:e7:80:
73:a7:2b:2a:48:45:d9:f9:e0:ac:2b:88:8d:15:ef:
de:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:73:2A:96:7B:0A:D5:B7:98:BA:81:E0:EF:E3:D0:20:69:23:09:D7
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f8:63:4c:9a:35:5e:b9:b5:06:a7:64:4b:1c:8d:4e:57:29:
a4:90:2f:1d:cc:a2:8f:e5:eb:58:2d:14:bf:e4:00:18:6c:81:
78:3b:32:a6:4f:b6:b9:02:d4:8b:4b:f9:97:7a:d9:b9:65:6c:
f8:45:a2:d1:1a:df:dc:b6:08:a9:0e:50:4d:5b:2f:00:57:36:
f6:9c:e7:6e:dd:61:1b:d9:6d:20:5d:e5:2a:28:0e:73:37:08:
97:0e:c7:03:51:b9:fa:6c:7a:c8:2a:f7:27:49:06:76:ca:84:
6a:85:59:e5:c0:ef:56:77:24:e4:29:3c:72:c0:0d:67:02:75:
03:07:35:a3:eb:ce:91:0f:31:f9:87:c6:9a:10:e0:2a:3e:1a:
19:a3:3f:2e:7f:c1:0c:ab:91:92:ab:08:68:dc:4e:be:e3:d1:
7a:ae:e0:a0:33:8f:1c:1a:18:70:74:d3:bc:8c:8f:ff:bc:c6:
42:02:c4:58:df:57:38:8b:fb:ff:c4:7d:ad:dc:e2:91:8b:11:
e6:83:43:fa:55:15:30:b7:dd:b8:29:ad:6f:e3:da:b4:78:7a:
15:5d:f3:35:81:51:3e:31:72:aa:55:66:ec:c9:d5:6f:37:6b:
2e:a8:57:a9:56:35:43:54:d9:0f:43:53:6f:f5:e3:bc:21:b9:
1e:d4:da:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbWUlZlF0qKNHVYA3eoTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjUwNDE5MTkwMTMxWhcNMjUwNDIwMTkwMTMxWjAzMTEwLwYDVQQD
EyhmZTczMmE5NjdiMGFkNWI3OThiYTgxZTBlZmUzZDAyMDY5MjMwOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Bj/bOCDYAsqoYTAZqsmm3vp8xWA
qyT9NNNyBGsktyTuuRqzmj8UL7uzkbc98O4Iz18M/3HnVCio8w/pxk1m2dUz6oNf
koz9BKrhmyyG9phWtfxdAKAt+hUE2jCIA6NjwMduCvsCUE9cc/Y+x9ae5HON4rLy
OGi+9DpjLXZAG1+b3VKbxHCRBVv7AaqAPe4lOYxSlMFHwUnnHfrK+/xYJR7kjXGL
l2CNsHwTAM2BOg2vsSC45IMy+9gZAznxmA0d5IJH365qPrpfW/skcNwgy0anBhiq
8iixbWkvMx0I/dl5C5I88nc4hXbsR/Zf54BzpysqSEXZ+eCsK4iNFe/e1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5zKpZ7CtW3mLqB4O/j0CBpIwnXMB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPhjTJo1
Xrm1BqdkSxyNTlcppJAvHcyij+XrWC0Uv+QAGGyBeDsypk+2uQLUi0v5l3rZuWVs
+EWi0Rrf3LYIqQ5QTVsvAFc29pznbt1hG9ltIF3lKigOczcIlw7HA1G5+mx6yCr3
J0kGdsqEaoVZ5cDvVnck5Ck8csANZwJ1Awc1o+vOkQ8x+YfGmhDgKj4aGaM/Ln/B
DKuRkqsIaNxOvuPReq7goDOPHBoYcHTTvIyP/7zGQgLEWN9XOIv7/8R9rdzikYsR
5oND+lUVMLfduCmtb+PatHh6FV3zNYFRPjFyqlVm7MnVbzdrLqhXqVY1Q1TZD0NT
b/XjvCG5HtTatw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:31 2025 by rpki-client