Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
File: IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft (raw, json)
Hash identifier: jvpi8I4vtcDKxU+JURbmEZZPKjrzR0kGvl0HyavyB9Y=
Subject key identifier: F8:71:5F:1B:60:E4:9F:DF:C3:59:CF:4D:B0:46:D7:0E:F5:A6:77:28
Authority key identifier: 20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
Certificate issuer: /CN=205945443c5b25e4dcf6203f061ac04d36871554
Certificate serial: 019655DCAEED76CC754D703529A861E00D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 01:00:48 +0000
Manifest this update: Mon 21 Apr 2025 01:00:48 +0000
Manifest next update: Tue 22 Apr 2025 01:00:48 +0000
Files and hashes: 1: IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl (hash: vxPgAZigKuuy8xVAiKVSv10JzmNuYtU6W0th0hC9LOQ=)
2: vwwOJsNwZhQ7jXxQBO6C3CzaqW4.roa (hash: PgsS8twf0GYuOEotT5Wskvo1GlMh/1Ykh+edTuYgZgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:ae:ed:76:cc:75:4d:70:35:29:a8:61:e0:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=205945443c5b25e4dcf6203f061ac04d36871554
Validity
Not Before: Apr 21 01:00:48 2025 GMT
Not After : Apr 22 01:00:48 2025 GMT
Subject: CN=f8715f1b60e49fdfc359cf4db046d70ef5a67728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:50:71:e1:b3:f6:e0:52:59:57:c3:ea:67:f4:
c8:90:a9:e3:ef:f7:78:6e:e1:69:61:23:fb:7f:99:
b3:f9:f4:33:51:41:c4:06:f2:8c:81:79:20:e5:3d:
d7:38:bd:1a:2e:15:46:53:07:fb:04:96:d6:5b:d8:
88:77:d3:c2:f7:c0:9f:70:7a:df:3d:38:83:60:d1:
83:66:ca:e9:17:f0:2f:48:ff:14:9f:3e:c9:72:0c:
e4:3c:da:f6:55:af:03:45:4d:79:9f:33:19:6a:04:
d8:c6:2d:d4:e3:62:0d:fb:d2:a3:a3:33:1e:20:73:
88:f4:64:35:dd:1a:56:47:39:07:bd:69:a4:75:b4:
8e:a8:be:b3:de:27:4f:2b:ab:39:68:93:ea:20:98:
67:55:e6:25:8d:24:69:5b:74:df:59:21:4c:d7:df:
80:b4:4d:78:36:19:cf:f6:66:28:70:ac:79:6a:38:
9e:c2:70:ca:28:f4:82:dc:f7:6a:eb:31:83:f2:f9:
49:be:6a:2e:40:6f:b8:6c:72:88:8c:4b:cb:55:96:
9c:c6:06:8e:6c:55:fb:28:f0:af:36:6c:8e:97:cb:
af:31:f2:90:e1:4b:e1:bb:d4:4b:ca:e8:6d:6a:c1:
f9:94:e9:b4:61:8c:e9:f9:f5:ca:30:bd:93:f0:54:
3e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:5F:1B:60:E4:9F:DF:C3:59:CF:4D:B0:46:D7:0E:F5:A6:77:28
X509v3 Authority Key Identifier:
keyid:20:59:45:44:3C:5B:25:E4:DC:F6:20:3F:06:1A:C0:4D:36:87:15:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFlFRDxbJeTc9iA_BhrATTaHFVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/945305-0a63-4c2f-aaff-cb220b719e78/1/IFlFRDxbJeTc9iA_BhrATTaHFVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:66:5b:59:09:8b:3f:73:e7:a8:de:c0:db:d4:0e:90:62:26:
5b:b2:fe:f7:e0:07:8d:d2:b7:6b:41:f8:e1:c6:28:d0:08:76:
fc:8a:48:77:55:a8:c4:75:05:e8:27:60:93:f4:48:3f:fa:1f:
0c:f4:5f:99:23:cf:f8:b9:20:2d:53:b7:33:18:9d:47:42:58:
91:10:df:e4:3c:3a:97:36:02:06:d8:f5:30:ce:75:e8:61:aa:
39:70:87:7d:d4:27:a1:ca:62:9c:84:4b:90:84:b1:f6:30:49:
ba:2d:00:77:f6:42:89:d5:da:2c:11:21:88:b5:ff:a0:7a:7d:
38:0e:91:e6:72:ee:c2:fc:f7:31:87:52:fc:a9:d1:d5:f3:61:
70:fc:f5:13:57:56:de:ba:0d:b4:8b:bf:d3:75:ea:f7:0a:dc:
59:d6:fe:6b:ae:89:d3:98:ff:ca:93:db:57:99:c3:90:3f:f7:
14:b5:8c:93:65:e5:40:a9:74:8b:63:b5:91:cc:ff:3e:74:2c:
6a:cb:ad:4e:02:d1:1f:72:81:00:e9:c5:a0:a3:9e:c1:8f:15:
e0:a8:5b:90:7c:a2:f9:79:1c:57:0c:91:36:f7:14:2a:a8:4f:
06:18:32:49:e7:34:23:e2:c4:da:f2:f2:fb:12:f0:25:c0:5b:
d4:76:a3:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3K7tdsx1TXA1Kahh4A2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTk0NTQ0M2M1YjI1ZTRkY2Y2MjAzZjA2MWFjMDRkMzY4
NzE1NTQwHhcNMjUwNDIxMDEwMDQ4WhcNMjUwNDIyMDEwMDQ4WjAzMTEwLwYDVQQD
EyhmODcxNWYxYjYwZTQ5ZmRmYzM1OWNmNGRiMDQ2ZDcwZWY1YTY3NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFBx4bP24FJZV8PqZ/TIkKnj7/d4
buFpYSP7f5mz+fQzUUHEBvKMgXkg5T3XOL0aLhVGUwf7BJbWW9iId9PC98CfcHrf
PTiDYNGDZsrpF/AvSP8Unz7JcgzkPNr2Va8DRU15nzMZagTYxi3U42IN+9KjozMe
IHOI9GQ13RpWRzkHvWmkdbSOqL6z3idPK6s5aJPqIJhnVeYljSRpW3TfWSFM19+A
tE14NhnP9mYocKx5ajiewnDKKPSC3Pdq6zGD8vlJvmouQG+4bHKIjEvLVZacxgaO
bFX7KPCvNmyOl8uvMfKQ4Uvhu9RLyuhtasH5lOm0YYzp+fXKML2T8FQ+tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhxXxtg5J/fw1nPTbBG1w71pncoMB8GA1UdIwQY
MBaAFCBZRUQ8WyXk3PYgPwYawE02hxVUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYt
Y2IyMjBiNzE5ZTc4LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85NDUzMDUtMGE2My00YzJmLWFhZmYtY2IyMjBiNzE5ZTc4
LzEvSUZsRlJEeGJKZVRjOWlBX0JockFUVGFIRlZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0mZbWQmL
P3PnqN7A29QOkGImW7L+9+AHjdK3a0H44cYo0Ah2/IpId1WoxHUF6Cdgk/RIP/of
DPRfmSPP+LkgLVO3MxidR0JYkRDf5Dw6lzYCBtj1MM516GGqOXCHfdQnocpinIRL
kISx9jBJui0Ad/ZCidXaLBEhiLX/oHp9OA6R5nLuwvz3MYdS/KnR1fNhcPz1E1dW
3roNtIu/03Xq9wrcWdb+a66J05j/ypPbV5nDkD/3FLWMk2XlQKl0i2O1kcz/PnQs
asutTgLRH3KBAOnFoKOewY8V4KhbkHyi+XkcVwyRNvcUKqhPBhgySec0I+LE2vLy
+xLwJcBb1Haj0w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:59 2025 by rpki-client