Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: oztpkDwGEcTEF9bLEHq+T8K3iAcMv9cGF1jQDH7xC+g=
Subject key identifier: A5:22:36:51:6C:3E:AA:D5:F1:89:62:FA:D8:B3:B1:AC:12:9F:D8:3B
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0196409EB83457CB8BD247F652826E37F8B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 14F0
Signing time: Wed 16 Apr 2025 22:01:05 +0000
Manifest this update: Wed 16 Apr 2025 22:01:05 +0000
Manifest next update: Thu 17 Apr 2025 22:01:05 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: jLowV6rxfwTZRJ88fkzO2Mu+yl44O/kuPqPgkA23JWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:b8:34:57:cb:8b:d2:47:f6:52:82:6e:37:f8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Apr 16 22:01:05 2025 GMT
Not After : Apr 17 22:01:05 2025 GMT
Subject: CN=a52236516c3eaad5f18962fad8b3b1ac129fd83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8e:fb:51:92:81:e1:b8:14:ed:cd:6a:73:45:
05:6a:2e:a3:11:c0:b7:05:09:6d:fa:f5:12:a8:b2:
87:71:17:8a:7e:18:47:48:89:24:57:30:9b:9b:38:
4a:f2:ea:35:fc:e9:68:5e:4f:5a:a8:ad:7f:d9:d9:
db:74:4d:a6:da:2a:1b:f7:42:b7:e1:3e:e3:0e:8f:
7c:e7:25:a9:7f:04:77:d1:83:2f:12:d9:0b:65:a2:
f2:93:95:90:c9:18:5a:89:51:68:61:4a:12:59:2d:
0f:06:36:2d:cd:72:48:5a:de:06:50:9d:33:f0:00:
12:39:84:8b:b7:a5:5e:b5:a0:a3:aa:e5:e5:b2:aa:
6a:02:73:3f:ff:c3:67:e7:8e:0f:24:43:15:d8:65:
46:8b:3e:5a:86:b8:03:94:83:fa:11:07:33:93:a5:
7f:74:a9:ad:f3:61:29:90:a3:b9:22:b4:11:cd:c3:
ce:32:a2:ec:c5:eb:94:b3:36:b4:bf:e8:2d:34:e4:
ad:03:98:f3:68:5a:83:d6:92:93:5d:54:d7:15:89:
6d:0f:80:46:ed:8b:3f:ff:28:aa:9d:80:24:18:44:
c9:54:65:23:47:a7:d3:68:ed:21:43:61:6e:66:9c:
d7:47:7a:f1:12:6a:d5:18:9b:de:91:79:9c:61:bd:
c2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:36:51:6C:3E:AA:D5:F1:89:62:FA:D8:B3:B1:AC:12:9F:D8:3B
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:e1:6d:6a:a9:29:ab:43:b8:67:d1:e6:83:1e:f3:cd:d6:
55:31:5d:ca:c3:0d:5f:32:a2:c7:bf:14:0f:86:4c:fc:94:4c:
dc:33:db:e2:8c:46:9e:00:40:ba:25:1e:d0:1c:95:c7:a3:40:
38:b0:d9:f7:b2:c1:7a:83:5b:67:e9:dc:35:b9:a8:14:32:26:
8b:69:07:79:ad:ef:63:2c:bc:2f:82:99:3f:fc:34:cb:83:03:
ae:4f:12:51:a8:68:56:b0:a6:67:8a:72:72:3f:c3:dd:d4:a3:
bd:57:0a:e0:2c:f1:50:14:48:96:e1:3d:02:b8:5d:cf:a6:b1:
2a:a3:09:f4:e5:2a:29:88:7d:3d:3d:3a:a1:24:84:a6:34:ab:
53:94:4b:bb:03:7e:36:c6:3f:10:5d:3b:e0:f2:49:43:24:57:
7e:c9:b8:f9:9b:52:e1:64:6f:04:86:4c:43:d9:9e:3b:6f:d3:
51:51:09:12:82:39:7b:6f:fc:a4:7a:e3:f5:3a:fd:d0:f5:d9:
2b:35:5c:d8:ea:c0:1c:34:a7:67:ae:8b:c4:68:b0:9d:c4:47:
a3:7b:37:a0:da:6e:41:80:0d:c5:bc:51:64:a1:27:c9:e7:d2:
68:d1:7a:98:47:d5:cb:71:12:ea:7e:a7:c9:ac:1d:70:5e:ca:
59:32:8c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAnrg0V8uL0kf2UoJuN/i1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2
MWU0ZWMwHhcNMjUwNDE2MjIwMTA1WhcNMjUwNDE3MjIwMTA1WjAzMTEwLwYDVQQD
EyhhNTIyMzY1MTZjM2VhYWQ1ZjE4OTYyZmFkOGIzYjFhYzEyOWZkODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY77UZKB4bgU7c1qc0UFai6jEcC3
BQlt+vUSqLKHcReKfhhHSIkkVzCbmzhK8uo1/OloXk9aqK1/2dnbdE2m2iob90K3
4T7jDo985yWpfwR30YMvEtkLZaLyk5WQyRhaiVFoYUoSWS0PBjYtzXJIWt4GUJ0z
8AASOYSLt6VetaCjquXlsqpqAnM//8Nn544PJEMV2GVGiz5ahrgDlIP6EQczk6V/
dKmt82EpkKO5IrQRzcPOMqLsxeuUsza0v+gtNOStA5jzaFqD1pKTXVTXFYltD4BG
7Ys//yiqnYAkGETJVGUjR6fTaO0hQ2FuZpzXR3rxEmrVGJvekXmcYb3CWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUiNlFsPqrV8Yli+tizsawSn9g7MB8GA1UdIwQY
MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt
NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3
LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAas7hbWqp
KatDuGfR5oMe883WVTFdysMNXzKix78UD4ZM/JRM3DPb4oxGngBAuiUe0ByVx6NA
OLDZ97LBeoNbZ+ncNbmoFDImi2kHea3vYyy8L4KZP/w0y4MDrk8SUahoVrCmZ4py
cj/D3dSjvVcK4CzxUBRIluE9Arhdz6axKqMJ9OUqKYh9PT06oSSEpjSrU5RLuwN+
NsY/EF074PJJQyRXfsm4+ZtS4WRvBIZMQ9meO2/TUVEJEoI5e2/8pHrj9Tr90PXZ
KzVc2OrAHDSnZ66LxGiwncRHo3s3oNpuQYANxbxRZKEnyefSaNF6mEfVy3ES6n6n
yawdcF7KWTKMGg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:06 2025 by rpki-client