Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
File: sUIEOsH4lSfPigbXJijjaYM8grE.mft (raw, json)
Hash identifier: C/J+iTcu4iHXn46aFPmqQYzQEsOHPtDXeFZm7a05fmk=
Subject key identifier: 32:06:D9:BE:65:AC:16:68:CB:10:4F:C5:33:AA:34:44:4E:B6:43:BA
Authority key identifier: B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
Certificate issuer: /CN=b142043ac1f89527cf8a06d72628e369833c82b1
Certificate serial: 01964FDA79619545D18B168CA19B621ABA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
Manifest number: 096E
Signing time: Sat 19 Apr 2025 21:00:40 +0000
Manifest this update: Sat 19 Apr 2025 21:00:40 +0000
Manifest next update: Sun 20 Apr 2025 21:00:40 +0000
Files and hashes: 1: sUIEOsH4lSfPigbXJijjaYM8grE.crl (hash: EmMjSCm3Ol8pnfpiwJvtx5x2dykvFUHpIgHaWIE6iKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:79:61:95:45:d1:8b:16:8c:a1:9b:62:1a:ba:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b142043ac1f89527cf8a06d72628e369833c82b1
Validity
Not Before: Apr 19 21:00:40 2025 GMT
Not After : Apr 20 21:00:40 2025 GMT
Subject: CN=3206d9be65ac1668cb104fc533aa34444eb643ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:4a:40:c0:33:9e:06:44:ef:86:5a:f6:02:
06:56:6a:12:00:b5:95:0e:69:38:01:51:b3:aa:af:
32:60:9c:e5:92:f3:ae:42:38:8a:05:90:59:b0:bb:
ee:ce:e5:f6:b1:c8:ea:37:d3:66:19:e5:71:90:8d:
e3:44:7f:50:33:73:80:b8:c9:30:00:88:89:1a:d0:
1e:bd:f7:d1:17:b4:ae:b0:ad:a3:f5:3f:6e:39:3e:
61:ea:6b:18:80:dd:37:fc:1f:bd:d0:9b:91:88:ad:
b4:a1:3f:ce:90:79:8b:ef:6e:eb:0b:3f:16:54:be:
9a:a4:0c:99:84:94:b7:64:74:61:5a:ce:d4:74:7a:
7f:14:e4:a3:f2:a5:85:3b:79:9f:06:7a:e7:7d:ba:
33:35:51:39:46:a1:5e:e1:d7:0a:d1:b5:62:80:e0:
db:63:d1:c9:2f:7e:9a:ca:96:6a:bb:e1:9d:f9:fa:
4b:d7:ec:86:72:5e:c3:be:73:1b:da:e0:4d:84:bb:
36:29:32:0d:1f:9a:53:66:6c:d8:d6:63:1f:aa:18:
16:8e:d1:ac:32:53:e0:bd:c0:69:4d:f7:13:d2:1a:
6d:f3:2a:2d:73:a4:a0:68:fa:ff:6e:38:0b:e1:12:
2b:1f:39:39:52:99:9b:3a:78:65:0c:16:0e:97:00:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:06:D9:BE:65:AC:16:68:CB:10:4F:C5:33:AA:34:44:4E:B6:43:BA
X509v3 Authority Key Identifier:
keyid:B1:42:04:3A:C1:F8:95:27:CF:8A:06:D7:26:28:E3:69:83:3C:82:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUIEOsH4lSfPigbXJijjaYM8grE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/22d4d9-74b5-4a6f-bd90-c1f7582ed4d6/1/sUIEOsH4lSfPigbXJijjaYM8grE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:38:37:f9:3f:00:7d:70:cf:dc:fd:e1:d1:03:a1:6e:29:7c:
8f:f3:3b:ed:e6:ec:fb:7e:c7:0e:47:78:19:67:a2:11:10:c9:
8e:50:0d:0e:4c:52:56:ad:a1:3d:9c:43:df:a8:e4:07:da:aa:
15:0d:3b:18:1c:57:4e:a2:05:58:2f:b5:25:dc:7e:29:c3:45:
72:53:7d:a8:7c:ea:1a:19:78:3e:bd:45:06:fb:f5:fd:e8:17:
e5:fc:6c:15:cf:da:2d:b4:42:b7:52:1a:a2:ca:8c:82:61:29:
70:22:4c:9c:38:f8:8b:d6:9a:37:9a:40:c8:90:a9:ef:13:f2:
94:f8:d8:b1:41:9f:aa:b3:6c:16:e7:e0:6d:86:53:8e:19:20:
3f:4f:f8:ed:03:b2:df:39:47:45:f9:d7:60:79:21:a3:4a:fa:
39:d1:5f:28:8e:73:d3:9b:df:b7:41:b4:f6:1a:63:1a:52:19:
ca:d1:8d:6b:57:e1:41:d1:e6:fc:f4:9b:c2:1a:92:33:65:72:
d0:ca:b0:a0:21:f6:b3:01:43:00:73:4b:e0:f2:56:75:40:bc:
dd:29:ff:ce:3b:a9:e2:3b:44:50:8a:5e:97:b0:af:d3:75:11:
aa:f2:2d:84:1f:8f:b9:24:50:98:fe:1e:d9:05:77:2b:56:5a:
d6:f9:84:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZP2nlhlUXRixaMoZtiGroHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDIwNDNhYzFmODk1MjdjZjhhMDZkNzI2MjhlMzY5ODMz
YzgyYjEwHhcNMjUwNDE5MjEwMDQwWhcNMjUwNDIwMjEwMDQwWjAzMTEwLwYDVQQD
EygzMjA2ZDliZTY1YWMxNjY4Y2IxMDRmYzUzM2FhMzQ0NDRlYjY0M2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRKQMAzngZE74Za9gIGVmoSALWV
Dmk4AVGzqq8yYJzlkvOuQjiKBZBZsLvuzuX2scjqN9NmGeVxkI3jRH9QM3OAuMkw
AIiJGtAevffRF7SusK2j9T9uOT5h6msYgN03/B+90JuRiK20oT/OkHmL727rCz8W
VL6apAyZhJS3ZHRhWs7UdHp/FOSj8qWFO3mfBnrnfbozNVE5RqFe4dcK0bVigODb
Y9HJL36aypZqu+Gd+fpL1+yGcl7DvnMb2uBNhLs2KTINH5pTZmzY1mMfqhgWjtGs
MlPgvcBpTfcT0hpt8yotc6SgaPr/bjgL4RIrHzk5UpmbOnhlDBYOlwCWpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIG2b5lrBZoyxBPxTOqNEROtkO6MB8GA1UdIwQY
MBaAFLFCBDrB+JUnz4oG1yYo42mDPIKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VJRU9zSDRsU2ZQaWdiWEppamphWU04Z3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yMmQ0ZDktNzRiNS00YTZmLWJkOTAt
YzFmNzU4MmVkNGQ2LzEvc1VJRU9zSDRsU2ZQaWdiWEppamphWU04Z3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yMmQ0ZDktNzRiNS00YTZmLWJkOTAtYzFmNzU4MmVkNGQ2
LzEvc1VJRU9zSDRsU2ZQaWdiWEppamphWU04Z3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Tg3+T8A
fXDP3P3h0QOhbil8j/M77ebs+37HDkd4GWeiERDJjlANDkxSVq2hPZxD36jkB9qq
FQ07GBxXTqIFWC+1Jdx+KcNFclN9qHzqGhl4Pr1FBvv1/egX5fxsFc/aLbRCt1Ia
osqMgmEpcCJMnDj4i9aaN5pAyJCp7xPylPjYsUGfqrNsFufgbYZTjhkgP0/47QOy
3zlHRfnXYHkho0r6OdFfKI5z05vft0G09hpjGlIZytGNa1fhQdHm/PSbwhqSM2Vy
0MqwoCH2swFDAHNL4PJWdUC83Sn/zjup4jtEUIpel7Cv03URqvIthB+PuSRQmP4e
2QV3K1Za1vmEpQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:25 2025 by rpki-client