Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
File: st8cE314lMzbp2jOuXHE099Z_pY.mft (raw, json)
Hash identifier: qMhjkrRyiF6dF/wu7eW4DbiGLL/Uw048kHLZFtqm2qg=
Subject key identifier: 16:D2:5E:4A:EF:D1:BA:1F:6B:39:C6:2E:97:DE:48:AF:BC:3F:9E:AE
Authority key identifier: B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
Certificate issuer: /CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Certificate serial: 0196545C59625358D7974824A5D44AB32953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 18:01:00 +0000
Manifest this update: Sun 20 Apr 2025 18:01:00 +0000
Manifest next update: Mon 21 Apr 2025 18:01:00 +0000
Files and hashes: 1: st8cE314lMzbp2jOuXHE099Z_pY.crl (hash: 9cCgAbF9MuBvJMSrOV7yCjAq0m8yVnU6UHniH9SLoY8=)
2: utentqqy5GUX6xjOO70Zx55fsK0.roa (hash: Z4JeWyzB0L9+u00qmx46AQ9h8ajUGAFCIAhK67ja97c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:59:62:53:58:d7:97:48:24:a5:d4:4a:b3:29:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df1c137d7894ccdba768ceb971c4d3df59fe96
Validity
Not Before: Apr 20 18:01:00 2025 GMT
Not After : Apr 21 18:01:00 2025 GMT
Subject: CN=16d25e4aefd1ba1f6b39c62e97de48afbc3f9eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:59:7f:43:04:77:4b:e8:96:d8:e4:15:96:
46:90:ef:76:93:c6:16:a6:5a:d1:32:50:e2:1b:88:
db:4a:74:cd:e3:7d:c4:d8:da:4c:9b:83:8b:b2:26:
1e:70:d4:e5:68:82:54:2f:d2:57:85:c6:c0:68:f0:
70:5c:13:28:20:11:33:39:8d:1e:f3:91:94:96:35:
5a:a5:e9:c4:67:1b:70:60:d1:4a:0c:6f:05:ff:8a:
e0:e5:62:03:7c:57:28:99:c6:b3:fa:88:23:cd:39:
c2:3c:45:e5:ba:58:2d:f5:2b:de:47:5e:3f:b1:ac:
52:0e:7d:13:1d:d9:32:19:6a:b3:a8:af:3a:19:72:
9c:95:6d:8d:7b:38:e4:bb:09:bf:9d:36:fb:18:c1:
a6:eb:58:4b:37:2c:7d:05:ad:79:51:ac:0f:b8:3c:
a3:b2:39:cd:9b:d5:e1:3c:c8:83:df:9e:02:c2:25:
12:48:a0:b9:e8:db:a7:8c:c8:bf:54:9c:88:ca:c0:
72:ab:6e:26:06:26:80:e7:82:de:11:74:57:51:06:
2b:8c:3c:2c:61:a2:0c:f3:4e:55:45:eb:cf:f8:32:
fe:53:96:0d:cb:81:de:9f:6c:c3:b7:03:76:c8:16:
05:67:4d:53:d3:60:8b:0f:b8:37:3a:7a:1c:29:c5:
86:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D2:5E:4A:EF:D1:BA:1F:6B:39:C6:2E:97:DE:48:AF:BC:3F:9E:AE
X509v3 Authority Key Identifier:
keyid:B2:DF:1C:13:7D:78:94:CC:DB:A7:68:CE:B9:71:C4:D3:DF:59:FE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8cE314lMzbp2jOuXHE099Z_pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b06956-e733-4564-9781-d0c4c86bb5fe/1/st8cE314lMzbp2jOuXHE099Z_pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9f:18:c0:9d:d2:aa:8c:40:8b:3a:89:39:ec:b0:2b:e3:8d:
56:1f:7b:63:ff:98:a1:0d:78:e8:48:9b:36:52:6d:3b:2f:37:
46:5d:1d:2f:ac:77:a9:2b:04:e2:c2:af:a7:45:95:9f:c8:30:
48:47:e6:3c:52:62:48:ec:1f:ee:ca:64:28:7c:17:f5:3e:41:
3a:c9:57:b8:4e:1c:c9:39:21:c1:6d:e0:13:f3:49:93:95:a5:
d5:5e:ef:d4:c1:a8:ac:db:86:06:0c:95:65:69:e1:f3:02:45:
ba:28:7e:8a:ae:48:1a:36:15:f7:29:e2:b3:5a:b9:ba:eb:c7:
17:b2:b3:2e:8a:0c:9f:10:d2:9a:cf:fd:ac:6f:fb:e8:bc:df:
12:96:b6:e1:64:b2:c4:bd:de:92:5a:b9:cc:10:12:02:8b:f0:
99:f1:22:e6:3f:24:07:e2:2e:dc:2b:6a:4e:68:08:53:92:9d:
41:4c:a5:f7:c4:88:76:ae:80:d4:b8:93:60:96:4d:27:88:28:
f4:d2:fb:b9:30:01:42:b9:c7:18:47:35:c4:0b:68:78:c7:f4:
0b:ff:84:a5:ee:ff:09:13:5b:ff:12:12:6f:e1:3e:9f:e2:f1:
9d:d6:7a:ee:5a:c1:a5:ab:57:b2:5c:fc:6a:bf:b1:0f:a6:8e:
bd:52:80:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUXFliU1jXl0gkpdRKsylTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyZGYxYzEzN2Q3ODk0Y2NkYmE3NjhjZWI5NzFjNGQzZGY1
OWZlOTYwHhcNMjUwNDIwMTgwMTAwWhcNMjUwNDIxMTgwMTAwWjAzMTEwLwYDVQQD
EygxNmQyNWU0YWVmZDFiYTFmNmIzOWM2MmU5N2RlNDhhZmJjM2Y5ZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/JZf0MEd0voltjkFZZGkO92k8YW
plrRMlDiG4jbSnTN433E2NpMm4OLsiYecNTlaIJUL9JXhcbAaPBwXBMoIBEzOY0e
85GUljVapenEZxtwYNFKDG8F/4rg5WIDfFcomcaz+ogjzTnCPEXlulgt9SveR14/
saxSDn0THdkyGWqzqK86GXKclW2Nezjkuwm/nTb7GMGm61hLNyx9Ba15UawPuDyj
sjnNm9XhPMiD354CwiUSSKC56NunjMi/VJyIysByq24mBiaA54LeEXRXUQYrjDws
YaIM805VRevP+DL+U5YNy4Hen2zDtwN2yBYFZ01T02CLD7g3OnocKcWGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbSXkrv0bofaznGLpfeSK+8P56uMB8GA1UdIwQY
MBaAFLLfHBN9eJTM26dozrlxxNPfWf6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEt
ZDBjNGM4NmJiNWZlLzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMDY5NTYtZTczMy00NTY0LTk3ODEtZDBjNGM4NmJiNWZl
LzEvc3Q4Y0UzMTRsTXpicDJqT3VYSEUwOTlaX3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM58YwJ3S
qoxAizqJOeywK+ONVh97Y/+YoQ146EibNlJtOy83Rl0dL6x3qSsE4sKvp0WVn8gw
SEfmPFJiSOwf7spkKHwX9T5BOslXuE4cyTkhwW3gE/NJk5Wl1V7v1MGorNuGBgyV
ZWnh8wJFuih+iq5IGjYV9ynis1q5uuvHF7KzLooMnxDSms/9rG/76LzfEpa24WSy
xL3eklq5zBASAovwmfEi5j8kB+Iu3CtqTmgIU5KdQUyl98SIdq6A1LiTYJZNJ4go
9NL7uTABQrnHGEc1xAtoeMf0C/+Epe7/CRNb/xISb+E+n+LxndZ67lrBpatXslz8
ar+xD6aOvVKAmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:51 2025 by rpki-client