Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: WUyH8B5wgNkMvsWKrD2zSyyYIocKwR+B6f3dyiIOM3E=
Subject key identifier: 6D:87:9D:35:A8:5C:73:BE:C6:E3:F5:EC:8D:0B:3B:C9:96:91:C9:4C
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0196312C32ABA5CD813246A38F2D7D0921D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 03B1
Signing time: Sun 13 Apr 2025 22:01:42 +0000
Manifest this update: Sun 13 Apr 2025 22:01:42 +0000
Manifest next update: Mon 14 Apr 2025 22:01:42 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: QhUHDcUb9yvdkTbu1ysB2FZFuhNhucBBFg5faYq0siA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:2c:32:ab:a5:cd:81:32:46:a3:8f:2d:7d:09:21:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Apr 13 22:01:42 2025 GMT
Not After : Apr 14 22:01:42 2025 GMT
Subject: CN=6d879d35a85c73bec6e3f5ec8d0b3bc99691c94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:bc:53:a5:bc:a2:74:05:2f:37:7b:dd:3b:
00:d1:05:b6:25:45:ca:a9:e3:8c:bf:f7:e1:0d:ac:
aa:1b:30:3d:01:b5:e9:37:c3:69:c3:1e:17:ca:15:
b3:ff:cc:3e:ff:7a:4a:fa:17:c3:7f:f1:f8:2a:75:
90:9e:2f:ef:85:82:0a:2f:29:96:cc:f2:d4:9a:44:
5d:de:bf:0b:78:c4:74:20:75:a6:4e:ee:97:49:1b:
f6:d4:2e:4e:73:d8:91:1d:64:e5:4c:b3:f0:ae:91:
81:92:74:e8:57:1c:2e:ab:1e:eb:b7:ec:08:e8:92:
b1:20:63:10:c9:49:18:30:a4:c9:23:2a:23:fa:81:
ee:7a:37:46:51:a4:87:6f:67:a6:79:f9:d7:37:98:
17:be:e3:12:9e:ab:9e:c5:83:1c:50:68:44:1d:bc:
85:77:20:2b:8e:c1:bf:ea:cb:56:11:08:e0:b3:00:
c8:c2:2f:43:2d:05:75:24:45:c7:06:33:d1:7e:70:
da:4f:08:ee:3b:bf:66:83:d9:2d:af:f1:eb:69:88:
b4:a0:08:56:25:4e:de:86:b2:4a:4b:57:7e:84:e1:
ce:c2:c3:f5:5f:5f:ec:2c:5c:4b:50:77:33:a1:d5:
93:6d:c4:72:10:d3:8f:70:d9:54:8d:60:d8:48:4f:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:9D:35:A8:5C:73:BE:C6:E3:F5:EC:8D:0B:3B:C9:96:91:C9:4C
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b1:1b:10:f0:4d:79:87:2b:44:96:1a:ab:8f:20:cd:d0:3c:
82:aa:34:7c:8c:fa:e4:9f:89:0d:5d:96:1c:dc:ad:5a:c5:9e:
c5:41:06:67:68:2f:a6:f0:3c:f1:53:fb:f6:fc:6f:f3:e5:53:
06:98:c8:25:06:de:61:db:fa:5a:b0:a7:b5:e3:9f:6f:4d:40:
97:c2:de:92:0b:cf:11:a8:a3:61:df:95:8f:67:77:d2:0b:9f:
1d:0d:00:ea:65:f3:cf:1b:da:4a:02:51:4d:9d:eb:f1:14:97:
af:72:2d:55:00:ad:80:36:cf:8d:f6:27:05:97:8c:e1:4d:16:
e8:a4:7c:71:58:a0:ff:23:c4:52:af:a4:7d:b3:72:47:34:6f:
90:de:a7:71:af:e3:7f:dd:a3:08:23:d5:d4:7b:6b:03:b6:73:
60:23:9f:14:1a:9a:45:96:54:df:27:45:aa:b6:58:81:65:e9:
f9:69:e8:f2:4e:af:37:ca:6d:7d:a0:18:ff:3e:fe:42:16:4c:
73:55:48:86:ac:e0:b0:4f:41:3e:df:65:7b:6f:0b:bd:c5:6b:
ab:ed:d4:eb:a4:08:25:b4:e1:0f:58:88:05:38:a5:9b:55:ac:
db:47:72:8b:c1:90:10:1b:4f:1f:94:f1:c6:51:72:a1:38:06:
86:f3:c6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYxLDKrpc2BMkajjy19CSHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MDk3YTE1NmFlZjJmODJmZjEzYjNjMTZhZmY2ZjdlMTZk
YjAyYzgwHhcNMjUwNDEzMjIwMTQyWhcNMjUwNDE0MjIwMTQyWjAzMTEwLwYDVQQD
Eyg2ZDg3OWQzNWE4NWM3M2JlYzZlM2Y1ZWM4ZDBiM2JjOTk2OTFjOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm28U6W8onQFLzd73TsA0QW2JUXK
qeOMv/fhDayqGzA9AbXpN8Npwx4XyhWz/8w+/3pK+hfDf/H4KnWQni/vhYIKLymW
zPLUmkRd3r8LeMR0IHWmTu6XSRv21C5Oc9iRHWTlTLPwrpGBknToVxwuqx7rt+wI
6JKxIGMQyUkYMKTJIyoj+oHuejdGUaSHb2emefnXN5gXvuMSnquexYMcUGhEHbyF
dyArjsG/6stWEQjgswDIwi9DLQV1JEXHBjPRfnDaTwjuO79mg9ktr/HraYi0oAhW
JU7ehrJKS1d+hOHOwsP1X1/sLFxLUHczodWTbcRyENOPcNlUjWDYSE+7PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2HnTWoXHO+xuP17I0LO8mWkclMMB8GA1UdIwQY
MBaAFKUJehVq7y+C/xOzwWr/b34W2wLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUt
MGQzMzk3MDdjYjg4LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi80MmY3ZjgtNzQwNy00MzJkLWJiYjUtMGQzMzk3MDdjYjg4
LzEvcFFsNkZXcnZMNExfRTdQQmF2OXZmaGJiQXNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrEbEPBN
eYcrRJYaq48gzdA8gqo0fIz65J+JDV2WHNytWsWexUEGZ2gvpvA88VP79vxv8+VT
BpjIJQbeYdv6WrCnteOfb01Al8LekgvPEaijYd+Vj2d30gufHQ0A6mXzzxvaSgJR
TZ3r8RSXr3ItVQCtgDbPjfYnBZeM4U0W6KR8cVig/yPEUq+kfbNyRzRvkN6nca/j
f92jCCPV1HtrA7ZzYCOfFBqaRZZU3ydFqrZYgWXp+Wno8k6vN8ptfaAY/z7+QhZM
c1VIhqzgsE9BPt9le28LvcVrq+3U66QIJbThD1iIBTilm1Ws20dyi8GQEBtPH5Tx
xlFyoTgGhvPGzw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:23:36 2025 by rpki-client