Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: F01htOrnQ7VcFhI5jRlNv4fHqiyHtK2dKkSXac1Nc0Y=
Subject key identifier: A7:7E:36:3F:EA:E3:0F:AE:AF:A5:7B:C6:D0:E4:DC:56:23:24:84:E7
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 01958B84AA46BFFADE4CD9D90E74C1EF0109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1428
Signing time: Wed 12 Mar 2025 18:01:22 +0000
Manifest this update: Wed 12 Mar 2025 18:01:22 +0000
Manifest next update: Thu 13 Mar 2025 18:01:22 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: g7Cmk9KRfxHn5qRNvPR/f9yDUEei59pRcDuFsl+u4Bs=)
2: H7N53zVEHeFF4Ypnr4KNxpw7Y7A.roa (hash: Rauzo4l8LbEJsHoIgmNH9pstkYvXoM+T/qkFcHjlqFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:aa:46:bf:fa:de:4c:d9:d9:0e:74:c1:ef:01:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Mar 12 18:01:22 2025 GMT
Not After : Mar 13 18:01:22 2025 GMT
Subject: CN=a77e363feae30faeafa57bc6d0e4dc56232484e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:ad:46:88:15:e8:5b:02:a1:74:98:15:40:
71:7a:44:73:92:7d:09:88:39:f4:34:bd:45:15:72:
b8:ca:8a:f2:40:6d:63:a3:f3:5c:cc:12:cf:fe:32:
3a:e4:3a:ab:25:c8:c2:ce:75:e6:c1:2c:85:ff:3d:
4e:50:ab:36:0e:2e:ae:23:4e:cb:61:8b:2d:e6:9f:
13:09:d5:2b:7c:63:ba:42:a2:09:78:77:bc:14:a9:
ec:be:ec:59:a5:3a:ca:ee:c8:ed:22:10:16:e8:96:
03:e6:60:6d:0b:2f:df:96:e4:f6:b8:b0:8a:7e:29:
0d:da:15:29:b2:b0:b8:de:4c:19:2b:b6:00:7e:77:
2d:d4:07:1e:f2:8d:7b:6e:9a:01:6f:94:db:0c:4c:
e2:e5:63:07:b1:ac:06:f4:1f:29:1b:92:9c:e4:b5:
b5:ff:fd:c8:e5:56:02:28:b0:f6:9f:b4:67:e2:43:
ff:30:89:9f:da:0e:9c:35:43:dc:fb:10:31:e9:20:
2d:9c:ca:cd:52:aa:67:96:21:a0:a6:b5:a8:68:3b:
ad:14:64:e9:27:a7:de:85:32:ee:33:e5:8b:98:f6:
04:65:87:ef:9e:e5:19:2e:8f:0b:ab:b4:56:6c:ad:
00:9c:ec:e0:92:93:5b:ce:39:4e:d5:15:16:af:e0:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7E:36:3F:EA:E3:0F:AE:AF:A5:7B:C6:D0:E4:DC:56:23:24:84:E7
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:2d:6b:bf:57:c8:1d:6f:02:83:3d:54:91:a2:e7:f7:f7:
2d:df:92:e3:39:76:a2:79:c6:43:fe:5d:d3:e5:a9:b1:c6:38:
e2:6c:ec:06:e9:e0:71:92:d1:27:1f:d9:d6:07:32:cd:6d:f7:
2a:6a:c7:42:e1:40:d2:37:db:22:47:f3:e3:7f:bd:f7:0c:45:
bd:03:d3:d9:62:d9:d8:8c:0c:16:16:f0:a1:15:7f:18:a6:71:
18:84:cf:e5:ab:1e:ef:f9:7b:56:a6:5d:4f:04:cd:18:4d:52:
e6:a0:95:c4:c3:12:2d:f2:55:68:81:68:6f:c2:d2:74:02:b2:
5e:2c:d2:78:f7:dc:ea:45:93:5d:fa:8d:b6:e3:17:b3:72:65:
55:0e:44:48:c8:83:2d:ac:57:22:38:e1:38:7c:b6:e0:73:75:
aa:8b:72:8d:33:cd:e9:ce:22:49:f3:b5:81:a4:e7:c4:c0:cf:
3d:5b:80:f2:76:f0:31:2c:0a:79:7a:7b:07:8e:53:22:fa:32:
1e:f4:e2:90:d6:13:52:30:d2:81:1c:d9:94:b8:bd:67:e7:8f:
58:35:91:05:96:89:30:fc:40:a2:4a:f2:50:98:80:1b:d0:c6:
b3:49:2e:80:9f:6e:94:c9:2b:84:f1:46:ac:75:28:b6:f6:cc:
fe:29:d3:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhKpGv/reTNnZDnTB7wEJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODZjMjc3ZjZjYTgwOGFmZGNhMDU2NzNmNGI2YzI1NzM5
NzRlM2UwHhcNMjUwMzEyMTgwMTIyWhcNMjUwMzEzMTgwMTIyWjAzMTEwLwYDVQQD
EyhhNzdlMzYzZmVhZTMwZmFlYWZhNTdiYzZkMGU0ZGM1NjIzMjQ4NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuOtRogV6FsCoXSYFUBxekRzkn0J
iDn0NL1FFXK4yoryQG1jo/NczBLP/jI65DqrJcjCznXmwSyF/z1OUKs2Di6uI07L
YYst5p8TCdUrfGO6QqIJeHe8FKnsvuxZpTrK7sjtIhAW6JYD5mBtCy/fluT2uLCK
fikN2hUpsrC43kwZK7YAfnct1Ace8o17bpoBb5TbDEzi5WMHsawG9B8pG5Kc5LW1
//3I5VYCKLD2n7Rn4kP/MImf2g6cNUPc+xAx6SAtnMrNUqpnliGgprWoaDutFGTp
J6fehTLuM+WLmPYEZYfvnuUZLo8Lq7RWbK0AnOzgkpNbzjlO1RUWr+AMzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKd+Nj/q4w+ur6V7xtDk3FYjJITnMB8GA1UdIwQY
MBaAFPeGwnf2yoCK/coFZz9LbCVzl04+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQt
ZmNhMjQ1MzQzNGM5LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy82MjdkNGEtMWUwNy00ZTBjLTg5ZmQtZmNhMjQ1MzQzNGM5
LzEvOTRiQ2RfYktnSXI5eWdWblAwdHNKWE9YVGo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIQta79X
yB1vAoM9VJGi5/f3Ld+S4zl2onnGQ/5d0+WpscY44mzsBungcZLRJx/Z1gcyzW33
KmrHQuFA0jfbIkfz43+99wxFvQPT2WLZ2IwMFhbwoRV/GKZxGITP5ase7/l7VqZd
TwTNGE1S5qCVxMMSLfJVaIFob8LSdAKyXizSePfc6kWTXfqNtuMXs3JlVQ5ESMiD
LaxXIjjhOHy24HN1qotyjTPN6c4iSfO1gaTnxMDPPVuA8nbwMSwKeXp7B45TIvoy
HvTikNYTUjDSgRzZlLi9Z+ePWDWRBZaJMPxAokryUJiAG9DGs0kugJ9ulMkrhPFG
rHUotvbM/inT/w==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:11:35 2025 by rpki-client