Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: BKqihr8veI2z749i0HFa1y0N1YNaU0tbOUeXF/MuDqQ=
Subject key identifier: 76:A8:53:F7:58:02:9A:5D:A9:F8:5F:BA:3A:DC:5E:60:DE:84:1E:2D
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 019644E89CF229EDA3431D423E10023243E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 0F3E
Signing time: Thu 17 Apr 2025 18:00:17 +0000
Manifest this update: Thu 17 Apr 2025 18:00:17 +0000
Manifest next update: Fri 18 Apr 2025 18:00:17 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: xfQODnzgt3WyHZyPnKbVdKAV7o5pOCGD3FhZdT2gbxQ=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:9c:f2:29:ed:a3:43:1d:42:3e:10:02:32:43:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: Apr 17 18:00:17 2025 GMT
Not After : Apr 18 18:00:17 2025 GMT
Subject: CN=76a853f758029a5da9f85fba3adc5e60de841e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:a9:d8:22:61:72:52:6f:6f:d5:06:17:62:
2c:b8:da:2c:9b:bf:cf:eb:88:c7:4a:2c:81:0e:25:
93:9d:7c:71:e9:40:95:69:65:b1:9a:cb:8a:96:fa:
0e:a6:fe:4d:66:95:1d:ed:97:61:a0:09:ca:c7:80:
48:83:72:9b:f6:84:c0:2a:c6:b8:cf:2e:bc:a6:3a:
20:36:d0:14:29:78:26:d3:71:83:96:08:44:7a:ab:
6a:e5:30:28:2c:f5:f5:a6:0b:59:4f:32:2b:c7:5a:
b4:f0:21:fa:af:33:86:c2:f5:98:3b:af:58:bb:b6:
55:60:ef:84:c5:50:e1:e5:f7:6c:a1:8e:c6:8b:40:
68:f4:12:a4:1a:09:c9:83:e4:7a:f6:06:20:1e:84:
ba:a4:e0:f8:39:f7:92:44:54:55:b2:d7:af:45:c4:
9f:8d:32:af:d6:9c:e4:ac:f1:6d:e7:3e:e3:e0:a0:
f9:37:57:fa:88:4c:5f:bb:b1:2e:4a:1d:14:bb:fb:
87:27:9e:b4:c1:77:ad:14:d3:76:68:c4:5c:6d:43:
a3:11:cb:c0:b0:51:b2:ba:d6:30:9b:3e:e4:f6:40:
95:3b:ba:e9:b8:5a:39:7b:3c:16:96:88:c0:bf:b5:
c3:51:dd:12:6e:81:c3:d4:a2:fb:fc:6f:c0:e4:9b:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:53:F7:58:02:9A:5D:A9:F8:5F:BA:3A:DC:5E:60:DE:84:1E:2D
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:4a:99:58:cb:19:37:37:7e:bb:d5:b9:9d:c8:2b:f3:02:bc:
eb:03:bc:d3:ae:1c:f3:18:c1:66:76:e5:36:78:55:78:3a:f3:
14:2a:7b:10:d9:bb:af:a1:3c:ca:69:49:b2:99:7e:1c:77:09:
54:25:4c:53:fd:db:83:9e:ef:4b:ed:62:1b:76:21:9b:1a:51:
58:6f:8e:85:b6:8d:c4:8e:9f:4c:a4:da:f7:a4:81:01:6d:fb:
a6:17:33:81:80:bc:a9:6a:5e:76:23:4b:53:55:b4:b4:a0:db:
23:3f:a0:2b:8f:84:ee:0d:c9:26:a9:16:05:70:42:84:eb:16:
96:bb:b9:2d:db:0b:43:9d:4f:8f:4d:b6:d9:f1:96:8a:c6:0f:
db:d7:a0:3f:ea:51:9e:74:42:d2:43:06:56:18:86:eb:79:8c:
89:93:1c:4c:fe:68:f7:a1:79:22:fa:e1:4e:51:7a:be:43:47:
b1:de:9b:7e:d2:2b:b0:0a:57:e2:be:cd:72:3e:0f:dd:bd:b0:
b1:f4:f7:e5:c6:0f:30:06:e1:b9:94:26:19:b5:c1:bf:ed:48:
01:70:71:b0:6b:77:f6:68:39:24:e4:84:d3:22:54:a6:70:98:
5c:5d:56:cd:7c:80:76:e4:32:14:fb:13:d4:c1:01:f9:94:6a:
22:c7:f0:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6JzyKe2jQx1CPhACMkPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGQ4ZDgwYWIzN2E3NTdiOWQzNzQ4Mjk1ZmU2NjlmNGUw
OTNiMjMwHhcNMjUwNDE3MTgwMDE3WhcNMjUwNDE4MTgwMDE3WjAzMTEwLwYDVQQD
Eyg3NmE4NTNmNzU4MDI5YTVkYTlmODVmYmEzYWRjNWU2MGRlODQxZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupap2CJhclJvb9UGF2IsuNosm7/P
64jHSiyBDiWTnXxx6UCVaWWxmsuKlvoOpv5NZpUd7ZdhoAnKx4BIg3Kb9oTAKsa4
zy68pjogNtAUKXgm03GDlghEeqtq5TAoLPX1pgtZTzIrx1q08CH6rzOGwvWYO69Y
u7ZVYO+ExVDh5fdsoY7Gi0Bo9BKkGgnJg+R69gYgHoS6pOD4OfeSRFRVstevRcSf
jTKv1pzkrPFt5z7j4KD5N1f6iExfu7EuSh0Uu/uHJ560wXetFNN2aMRcbUOjEcvA
sFGyutYwmz7k9kCVO7rpuFo5ezwWlojAv7XDUd0SboHD1KL7/G/A5JuBCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaoU/dYAppdqfhfujrcXmDehB4tMB8GA1UdIwQY
MBaAFEZNjYCrN6dXudN0gpX+Zp9OCTsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgt
OTExYmIzZGNmMGQ3LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgtOTExYmIzZGNmMGQ3
LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkqZWMsZ
Nzd+u9W5ncgr8wK86wO8064c8xjBZnblNnhVeDrzFCp7ENm7r6E8ymlJspl+HHcJ
VCVMU/3bg57vS+1iG3YhmxpRWG+OhbaNxI6fTKTa96SBAW37phczgYC8qWpediNL
U1W0tKDbIz+gK4+E7g3JJqkWBXBChOsWlru5LdsLQ51Pj0222fGWisYP29egP+pR
nnRC0kMGVhiG63mMiZMcTP5o96F5IvrhTlF6vkNHsd6bftIrsApX4r7Ncj4P3b2w
sfT35cYPMAbhuZQmGbXBv+1IAXBxsGt39mg5JOSE0yJUpnCYXF1WzXyAduQyFPsT
1MEB+ZRqIsfwjA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:05 2025 by rpki-client