Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File: G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier: /WV/rLzMayXT2DbV5zbnJahL92cur8iCqFZHexst68Q=
Subject key identifier: DC:82:E2:9D:F3:BF:8D:5F:14:69:1D:45:F3:49:D8:4F:82:54:28:AD
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial: 01964FA363A7AD288BEBDE1D0243E15F2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number: 0D22
Signing time: Sat 19 Apr 2025 20:00:30 +0000
Manifest this update: Sat 19 Apr 2025 20:00:30 +0000
Manifest next update: Sun 20 Apr 2025 20:00:30 +0000
Files and hashes: 1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: qyRYtOsO8WYYco/tFaoUZn991uiYrFmaMwcRVxCd3/k=)
2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:63:a7:ad:28:8b:eb:de:1d:02:43:e1:5f:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Validity
Not Before: Apr 19 20:00:30 2025 GMT
Not After : Apr 20 20:00:30 2025 GMT
Subject: CN=dc82e29df3bf8d5f14691d45f349d84f825428ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:41:53:71:2c:ea:7b:70:a2:cc:ad:02:f3:
c5:5b:15:6a:ea:55:45:1d:6b:3a:6b:26:1c:fb:5f:
78:36:b5:23:9d:02:6e:c0:88:bf:38:af:92:3e:ff:
d4:82:db:6e:25:ea:29:94:22:c1:44:7b:c4:3b:2d:
46:67:1b:05:da:a9:58:ff:77:8a:8d:5a:58:02:ea:
2f:0a:e3:da:41:f3:e9:49:cd:ac:a5:aa:ff:0e:8c:
f6:0d:fc:b0:29:34:d0:31:7e:65:98:8c:4b:2d:5d:
af:db:73:b0:dd:5e:4c:6e:68:68:c9:87:11:2d:df:
70:71:9c:bd:76:66:85:4b:cd:96:76:7a:b7:42:f5:
56:f9:ed:35:e7:85:73:88:27:90:c8:1a:b7:cd:81:
e1:eb:d2:c9:99:7b:da:28:81:81:26:2c:c5:0f:6b:
19:cb:ac:4a:f3:4d:ec:20:ab:0a:70:3d:15:77:28:
7b:62:99:59:41:52:49:75:17:08:02:97:04:d8:e1:
18:b8:8d:c9:c4:dc:a9:6e:bf:b1:57:72:44:f1:16:
f4:23:f9:be:c0:c1:b5:bc:bf:ca:32:25:5a:6d:ef:
e1:aa:78:da:e9:e1:d3:72:5a:23:e1:3e:70:32:c0:
c1:d2:66:ec:38:f0:c9:33:c1:aa:c9:73:d8:03:b1:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:82:E2:9D:F3:BF:8D:5F:14:69:1D:45:F3:49:D8:4F:82:54:28:AD
X509v3 Authority Key Identifier:
keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:13:42:5d:21:b4:50:e1:d9:f9:c6:8b:b9:fe:6a:84:2d:1f:
5b:09:f5:61:1e:29:a1:bd:c9:15:99:53:36:da:a9:34:2f:1e:
17:d5:f0:aa:36:4f:5f:8c:4f:72:90:14:9d:8a:71:4e:9c:d9:
42:7a:74:a4:84:c5:19:fe:42:7c:90:1b:9c:37:98:59:5f:af:
1a:be:04:76:2f:40:a7:f9:fc:2d:86:96:83:53:f2:68:83:fb:
f0:60:cc:1b:09:1f:74:50:9b:12:41:28:02:41:89:f0:92:38:
c0:9c:ba:1d:14:e8:6c:da:40:9a:dc:9e:99:2d:7e:e2:54:c8:
7f:7c:22:98:e1:c9:61:0b:b1:ac:5d:af:1e:3a:e6:48:e5:b9:
da:aa:b5:b8:71:97:ee:7d:19:12:ea:15:17:ac:57:19:d8:fd:
92:cd:39:db:20:2d:8c:f4:83:c0:11:f3:8a:3b:a8:37:8a:48:
04:df:6b:a9:84:c5:ac:d2:a9:83:42:b5:42:28:2f:a2:7b:52:
5d:8e:27:59:74:38:6d:5d:24:67:b1:68:6d:55:4f:bf:31:b9:
a2:ab:79:fe:ca:27:0d:0b:be:e2:e1:1b:0b:a5:c9:fd:0a:6c:
02:fd:68:cc:04:37:a2:af:0b:d3:4a:58:4a:cd:ca:64:85:9a:
d2:26:60:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPo2OnrSiL694dAkPhXyvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1
MWFiZTIwHhcNMjUwNDE5MjAwMDMwWhcNMjUwNDIwMjAwMDMwWjAzMTEwLwYDVQQD
EyhkYzgyZTI5ZGYzYmY4ZDVmMTQ2OTFkNDVmMzQ5ZDg0ZjgyNTQyOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGVBU3Es6ntwosytAvPFWxVq6lVF
HWs6ayYc+194NrUjnQJuwIi/OK+SPv/UgttuJeoplCLBRHvEOy1GZxsF2qlY/3eK
jVpYAuovCuPaQfPpSc2spar/Doz2DfywKTTQMX5lmIxLLV2v23Ow3V5MbmhoyYcR
Ld9wcZy9dmaFS82Wdnq3QvVW+e0154VziCeQyBq3zYHh69LJmXvaKIGBJizFD2sZ
y6xK803sIKsKcD0Vdyh7YplZQVJJdRcIApcE2OEYuI3JxNypbr+xV3JE8Rb0I/m+
wMG1vL/KMiVabe/hqnja6eHTcloj4T5wMsDB0mbsOPDJM8GqyXPYA7HovwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyC4p3zv41fFGkdRfNJ2E+CVCitMB8GA1UdIwQY
MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt
NjYzNDBiYmZmMGI5LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5
LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxNCXSG0
UOHZ+caLuf5qhC0fWwn1YR4pob3JFZlTNtqpNC8eF9XwqjZPX4xPcpAUnYpxTpzZ
Qnp0pITFGf5CfJAbnDeYWV+vGr4Edi9Ap/n8LYaWg1PyaIP78GDMGwkfdFCbEkEo
AkGJ8JI4wJy6HRTobNpAmtyemS1+4lTIf3wimOHJYQuxrF2vHjrmSOW52qq1uHGX
7n0ZEuoVF6xXGdj9ks052yAtjPSDwBHzijuoN4pIBN9rqYTFrNKpg0K1QigvontS
XY4nWXQ4bV0kZ7FobVVPvzG5oqt5/sonDQu+4uEbC6XJ/QpsAv1ozAQ3oq8L00pY
Ss3KZIWa0iZgCQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:01:32 2025 by rpki-client