Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File: CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier: St4FJ8FC66yCrM5zWTF3jXukfrbJyygg5yVKOO4KLok=
Subject key identifier: D6:54:DE:3F:A7:A4:84:B4:B6:9A:4D:6B:02:D4:79:E2:25:83:08:FC
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer: /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial: 01964D7E5499690DF55D2D8D531312C60C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:46 +0000
Manifest this update: Sat 19 Apr 2025 10:00:46 +0000
Manifest next update: Sun 20 Apr 2025 10:00:46 +0000
Files and hashes: 1: 2137GkYhKriIsKTcyKMgkP9brCg.roa (hash: /7cteLANHoZOiqVgusN3Dqohbx1yk5x8PXrJnu2i8Fs=)
2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: kvwVjG98FAQdQPnL+v5Ahr7rDYHV3jzpoQJlpC8IPKA=)
3: hBvLKP5ixrQ0yB2qI1fJnI3xUfo.roa (hash: i0IaWEblK+pRuW5nqjbRL2Vkq0LREWGYkXklug1G2BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:54:99:69:0d:f5:5d:2d:8d:53:13:12:c6:0c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
Validity
Not Before: Apr 19 10:00:46 2025 GMT
Not After : Apr 20 10:00:46 2025 GMT
Subject: CN=d654de3fa7a484b4b69a4d6b02d479e2258308fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:b9:46:ad:58:00:b3:46:7f:d4:13:83:14:
b4:2a:d8:1c:ee:53:79:60:44:5c:e1:dc:c5:84:b7:
0b:84:15:89:45:ef:bc:5a:fc:6c:00:41:ca:cf:cf:
ac:35:b8:4a:ce:23:cd:a9:13:a4:34:1f:ed:90:f6:
94:ce:4b:49:fd:f1:b7:43:0a:04:21:44:38:02:db:
7f:d3:71:a2:1c:06:c3:a7:31:cb:82:41:32:fe:1b:
b4:2c:3b:7a:a9:6b:1f:e8:dd:19:74:be:c6:22:07:
6c:55:27:78:56:24:f4:38:fc:33:62:b6:ad:9b:14:
a5:f9:ce:98:da:b1:d1:f9:e9:1e:ef:b0:0b:a8:1f:
6d:42:42:82:0f:ef:4f:71:95:d6:40:86:6f:c1:34:
5c:f6:3c:4e:fb:55:fd:37:9c:40:d6:f5:97:04:6a:
db:8e:15:86:b5:f3:8f:52:44:02:2a:35:54:0c:ff:
b2:08:83:ad:d2:3b:c1:69:b2:32:79:c1:0d:56:75:
4a:d1:8e:cd:41:7f:4b:65:a0:fd:6f:95:72:a0:bc:
fe:87:34:eb:f1:29:ef:bc:97:09:65:ca:ee:a5:e4:
91:65:26:1e:d4:31:12:e3:39:37:0b:aa:cd:58:87:
0d:52:a9:67:35:60:b0:7a:f8:f6:0e:88:a4:a9:60:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:DE:3F:A7:A4:84:B4:B6:9A:4D:6B:02:D4:79:E2:25:83:08:FC
X509v3 Authority Key Identifier:
keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:93:72:cc:2a:27:fb:a9:76:82:15:86:3a:f7:74:f5:84:08:
92:3a:6d:8f:07:2b:8d:e5:f8:39:33:bb:ac:97:7a:ba:66:4b:
3a:da:d8:41:35:4a:50:38:ff:0c:5e:15:14:28:2e:41:b2:e4:
f9:ec:3b:d3:43:fa:11:3e:0b:79:ba:b6:ca:1b:5e:ca:99:c7:
65:61:62:e9:b3:e8:00:94:74:b0:35:90:ae:d3:fa:60:7f:d6:
ad:6d:45:f9:32:2e:8d:7e:e5:a8:71:be:87:67:32:6c:2d:19:
e0:fe:f3:61:89:64:bd:ee:36:10:d8:d2:c0:30:89:0a:7e:63:
d0:96:69:71:77:a6:3d:e4:34:a5:be:19:d6:95:0c:17:39:aa:
3f:2f:c9:3e:36:5f:71:53:25:5a:e0:43:7d:bb:6e:ca:6e:a9:
36:5c:e3:ca:7c:c1:d4:ff:93:3d:b4:63:4e:9e:d8:c2:79:54:
02:1f:b4:8c:6a:b7:a7:fd:ed:16:2c:0c:50:a4:30:2a:e9:ff:
93:bd:22:86:4d:07:1f:b0:aa:7b:8a:a7:3b:97:96:97:53:8d:
0d:d8:fe:39:a5:26:9a:d5:d8:ca:bc:f1:2e:f7:47:d3:7f:c7:
49:78:1d:6f:68:f2:55:0d:f7:83:9b:1a:e2:3d:83:6c:cf:9d:
b0:60:e3:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNflSZaQ31XS2NUxMSxgyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjUwNDE5MTAwMDQ2WhcNMjUwNDIwMTAwMDQ2WjAzMTEwLwYDVQQD
EyhkNjU0ZGUzZmE3YTQ4NGI0YjY5YTRkNmIwMmQ0NzllMjI1ODMwOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq165Rq1YALNGf9QTgxS0Ktgc7lN5
YERc4dzFhLcLhBWJRe+8WvxsAEHKz8+sNbhKziPNqROkNB/tkPaUzktJ/fG3QwoE
IUQ4Att/03GiHAbDpzHLgkEy/hu0LDt6qWsf6N0ZdL7GIgdsVSd4ViT0OPwzYrat
mxSl+c6Y2rHR+eke77ALqB9tQkKCD+9PcZXWQIZvwTRc9jxO+1X9N5xA1vWXBGrb
jhWGtfOPUkQCKjVUDP+yCIOt0jvBabIyecENVnVK0Y7NQX9LZaD9b5VyoLz+hzTr
8SnvvJcJZcrupeSRZSYe1DES4zk3C6rNWIcNUqlnNWCwevj2DoikqWDXTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZU3j+npIS0tppNawLUeeIlgwj8MB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZNyzCon
+6l2ghWGOvd09YQIkjptjwcrjeX4OTO7rJd6umZLOtrYQTVKUDj/DF4VFCguQbLk
+ew700P6ET4Lebq2yhteypnHZWFi6bPoAJR0sDWQrtP6YH/WrW1F+TIujX7lqHG+
h2cybC0Z4P7zYYlkve42ENjSwDCJCn5j0JZpcXemPeQ0pb4Z1pUMFzmqPy/JPjZf
cVMlWuBDfbtuym6pNlzjynzB1P+TPbRjTp7YwnlUAh+0jGq3p/3tFiwMUKQwKun/
k70ihk0HH7Cqe4qnO5eWl1ONDdj+OaUmmtXYyrzxLvdH03/HSXgdb2jyVQ33g5sa
4j2DbM+dsGDj5g==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:02:49 2025 by rpki-client