Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json)
Hash identifier: 2bMAFRqVNTev29h8jO32jANg0+4YuDQ9n2sdqICL2A8=
Subject key identifier: 46:D3:78:EC:BA:CB:6E:5D:BD:A4:77:71:41:7F:89:25:96:EA:D8:7E
Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Certificate serial: 01964EC8166B2F535475421BE4A73074F764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
Manifest number: 012F
Signing time: Sat 19 Apr 2025 16:00:57 +0000
Manifest this update: Sat 19 Apr 2025 16:00:57 +0000
Manifest next update: Sun 20 Apr 2025 16:00:57 +0000
Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: Y7Rkik2z0iTDRB2+NeOgn+8mIvDr6zAheRa31fxeHLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c8:16:6b:2f:53:54:75:42:1b:e4:a7:30:74:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee
Validity
Not Before: Apr 19 16:00:57 2025 GMT
Not After : Apr 20 16:00:57 2025 GMT
Subject: CN=46d378ecbacb6e5dbda47771417f892596ead87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:5c:56:71:54:a1:bf:d0:1a:3b:46:23:bb:
69:52:13:6d:e5:d7:a9:d3:82:2c:d0:c6:7a:a0:ac:
d0:94:a7:53:63:36:c1:cc:96:d9:27:92:5a:30:51:
0d:b8:3f:4b:ed:a3:c9:69:30:b9:5c:a7:5c:02:9d:
f0:4e:6a:80:3c:ea:88:4b:d4:69:6a:82:4a:7f:4c:
f8:ee:83:79:fb:02:47:9f:b8:70:ca:94:5d:01:26:
8b:4d:44:87:54:2d:8e:84:a1:e8:13:87:38:3a:47:
10:81:13:76:d2:83:7f:a8:d3:6c:99:32:1e:ea:ee:
6d:e6:8c:42:1d:86:a9:e9:2f:58:71:ee:95:a2:a3:
f8:7c:52:4c:fd:e2:8b:d4:49:4b:35:58:2d:01:33:
12:fe:71:ae:46:70:7b:c3:92:2f:81:12:3f:31:8f:
55:37:8b:29:ff:06:54:ce:e8:64:ea:3d:58:d6:de:
22:eb:a3:9e:35:5d:18:d4:7e:ce:d8:39:15:a3:aa:
4b:37:cc:31:8e:6c:36:00:8a:45:e1:c8:d5:3f:c3:
13:38:bf:a8:a3:50:83:95:55:87:a9:27:e0:22:21:
67:e5:aa:a9:e6:f3:97:a4:c7:37:66:b2:09:14:4e:
46:c5:78:48:fc:37:5a:c5:ab:3f:76:ef:1d:80:89:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:78:EC:BA:CB:6E:5D:BD:A4:77:71:41:7F:89:25:96:EA:D8:7E
X509v3 Authority Key Identifier:
keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9a:3e:da:0e:fe:89:c5:e6:91:b4:f3:76:e7:c4:6b:62:cc:
7b:d6:bc:8e:7b:3c:a7:34:67:f2:e4:48:23:2e:63:e9:40:f7:
d6:bf:4b:f7:58:ed:9c:7d:00:f5:2a:1d:4c:8e:22:4b:ae:cd:
d4:6d:cf:9f:40:a4:e1:dc:81:ba:85:c3:fb:e9:93:c0:04:27:
3e:4f:56:dd:be:de:3d:40:0d:6d:fc:aa:63:04:2d:16:3b:12:
1a:14:2e:11:b7:ad:f1:a3:51:dc:bb:7b:7b:30:2a:3a:f1:c6:
70:65:16:a7:02:75:56:49:1f:da:a4:92:2b:5d:54:78:cd:ce:
31:91:46:24:a9:85:ff:a4:18:b7:77:31:72:df:55:69:07:5c:
c3:ee:b0:04:df:42:d0:7a:b9:d1:12:ce:a8:71:ed:dd:ee:7a:
da:25:74:42:58:11:8f:cd:27:0f:0e:b6:4a:26:a5:8b:25:e8:
cb:8a:df:58:93:00:de:a9:09:12:69:6a:83:b3:ee:50:7a:73:
c1:ab:91:f2:6c:70:02:11:02:02:ca:17:e6:dd:d3:ee:a7:fe:
14:c8:19:7a:eb:03:76:87:1d:2c:9c:63:6b:cd:74:b8:16:15:
0e:3e:77:46:7d:b5:6a:ee:17:f0:9e:e1:ed:59:59:7b:6e:7d:
27:94:99:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOyBZrL1NUdUIb5KcwdPdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1
MmI1ZWUwHhcNMjUwNDE5MTYwMDU3WhcNMjUwNDIwMTYwMDU3WjAzMTEwLwYDVQQD
Eyg0NmQzNzhlY2JhY2I2ZTVkYmRhNDc3NzE0MTdmODkyNTk2ZWFkODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk9cVnFUob/QGjtGI7tpUhNt5dep
04Is0MZ6oKzQlKdTYzbBzJbZJ5JaMFENuD9L7aPJaTC5XKdcAp3wTmqAPOqIS9Rp
aoJKf0z47oN5+wJHn7hwypRdASaLTUSHVC2OhKHoE4c4OkcQgRN20oN/qNNsmTIe
6u5t5oxCHYap6S9Yce6VoqP4fFJM/eKL1ElLNVgtATMS/nGuRnB7w5IvgRI/MY9V
N4sp/wZUzuhk6j1Y1t4i66OeNV0Y1H7O2DkVo6pLN8wxjmw2AIpF4cjVP8MTOL+o
o1CDlVWHqSfgIiFn5aqp5vOXpMc3ZrIJFE5GxXhI/Ddaxas/du8dgImp+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbTeOy6y25dvaR3cUF/iSWW6th+MB8GA1UdIwQY
MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt
N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0
LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZo+2g7+
icXmkbTzdufEa2LMe9a8jns8pzRn8uRIIy5j6UD31r9L91jtnH0A9SodTI4iS67N
1G3Pn0Ck4dyBuoXD++mTwAQnPk9W3b7ePUANbfyqYwQtFjsSGhQuEbet8aNR3Lt7
ezAqOvHGcGUWpwJ1Vkkf2qSSK11UeM3OMZFGJKmF/6QYt3cxct9VaQdcw+6wBN9C
0Hq50RLOqHHt3e562iV0QlgRj80nDw62SialiyXoy4rfWJMA3qkJEmlqg7PuUHpz
wauR8mxwAhECAsoX5t3T7qf+FMgZeusDdocdLJxja810uBYVDj53Rn21au4X8J7h
7VlZe259J5SZ7g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:52:20 2025 by rpki-client