Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
File: 2mUl3kqm0Moa572O4eNb_SaWSbs.mft (raw, json)
Hash identifier: /Z9EzZvKLmphCgzY3uYFa9sLmoYhUz6d4xzL2g00u1s=
Subject key identifier: 38:2E:8D:3A:EC:49:70:9E:1E:E8:1A:48:A4:0F:17:82:E7:11:5F:60
Authority key identifier: DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
Certificate issuer: /CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Certificate serial: 01964BC6DE3A1BFD7877BD43AF962485E35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
Manifest number: 1501
Signing time: Sat 19 Apr 2025 02:00:46 +0000
Manifest this update: Sat 19 Apr 2025 02:00:46 +0000
Manifest next update: Sun 20 Apr 2025 02:00:46 +0000
Files and hashes: 1: 2mUl3kqm0Moa572O4eNb_SaWSbs.crl (hash: eWURGpZndTIRIC7rRSaM0oVwNs49Bq+mXR5tLKi/tXw=)
2: tRJ-BFOul5VHl3dNMXgsuOwV3fo.roa (hash: pgbFxeJVexeBAKYnPH6MZKH2xCeZI1yAADTtVOgrLAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:de:3a:1b:fd:78:77:bd:43:af:96:24:85:e3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6525de4aa6d0ca1ae7bd8ee1e35bfd269649bb
Validity
Not Before: Apr 19 02:00:46 2025 GMT
Not After : Apr 20 02:00:46 2025 GMT
Subject: CN=382e8d3aec49709e1ee81a48a40f1782e7115f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:6d:a9:fe:94:2e:15:29:3c:3b:23:9a:e2:
ec:9d:b3:75:22:1f:56:38:ef:ff:18:6e:57:23:79:
99:b0:4a:b5:3e:ab:e6:b9:cc:0c:eb:8a:03:e3:dc:
a0:b3:4b:b9:29:e0:37:8f:cb:2b:65:06:97:5c:83:
d9:4a:38:70:b2:e0:0c:87:e9:e3:c1:61:11:77:36:
eb:24:5c:e4:d9:a0:36:99:a6:2f:85:c8:91:5e:82:
4e:41:fb:0d:24:ff:2a:10:c2:c5:18:e5:59:3e:96:
7b:d2:87:95:fe:19:57:dc:d2:b6:60:d7:51:ab:62:
c5:c6:6b:1b:6e:b8:08:0e:11:df:ca:9d:e1:20:47:
bc:ca:83:df:c5:f4:6c:49:88:04:07:64:76:4a:fc:
fe:ba:2e:4c:87:aa:9e:29:a6:cf:94:b8:50:2c:d3:
46:59:76:aa:6a:0a:76:99:03:9f:4e:c1:66:de:a8:
6c:3e:60:39:fc:c1:76:c3:9a:93:07:2e:d4:6c:ac:
60:08:9d:8d:99:ac:70:fd:9a:b9:91:a9:b7:2f:93:
9a:d4:32:6d:fb:9b:19:73:fd:fb:ec:8a:98:9b:e9:
28:46:c1:97:a0:b6:6e:ed:8e:c0:5b:07:44:8c:38:
2d:46:26:1f:3a:74:9e:57:d1:d8:b0:9a:33:ab:39:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:8D:3A:EC:49:70:9E:1E:E8:1A:48:A4:0F:17:82:E7:11:5F:60
X509v3 Authority Key Identifier:
keyid:DA:65:25:DE:4A:A6:D0:CA:1A:E7:BD:8E:E1:E3:5B:FD:26:96:49:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mUl3kqm0Moa572O4eNb_SaWSbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ac567d-46d2-4081-94ef-eedf76077f09/1/2mUl3kqm0Moa572O4eNb_SaWSbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:7f:b5:8d:ce:a0:51:67:8a:44:94:17:6f:87:97:a2:33:0d:
fd:00:d4:b8:be:35:17:75:0b:5d:93:e2:cc:d2:e7:0c:f2:e9:
68:2f:93:4a:71:4d:da:86:37:85:fe:a1:87:62:5a:f3:e9:9f:
1f:29:bd:da:5c:cc:fd:61:e2:1c:5a:93:2c:86:c1:33:a8:72:
9d:32:80:e2:e4:92:67:95:b8:ea:39:07:8f:74:30:79:dd:6e:
eb:46:45:7e:a4:42:a1:bf:22:ee:b3:c0:71:93:a2:69:38:e8:
a6:a0:60:a6:6f:ba:06:82:e6:cb:ec:a2:43:32:ce:f4:e4:e1:
7c:81:d4:47:1b:1d:b6:32:41:a9:45:c5:f9:b5:15:86:6b:ec:
a0:4d:7b:19:68:69:1f:c2:14:14:48:04:3e:a4:92:9f:a2:79:
ce:fb:f6:73:e3:72:d2:b4:f6:48:0b:f4:fc:b5:e3:26:a8:e6:
32:28:f3:97:4c:98:2d:11:80:f6:ff:11:6c:62:50:76:a0:35:
a2:c4:68:b1:90:fd:89:db:47:dc:1b:fc:d7:18:cf:2f:7c:70:
4f:62:e9:1b:71:84:92:2d:c9:13:a6:fd:f2:37:20:d6:46:35:
8e:50:cc:69:b7:5a:b9:c6:74:35:d3:b4:ec:bf:9f:fb:0b:b3:
b0:98:39:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZLxt46G/14d71Dr5YkheNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjUyNWRlNGFhNmQwY2ExYWU3YmQ4ZWUxZTM1YmZkMjY5
NjQ5YmIwHhcNMjUwNDE5MDIwMDQ2WhcNMjUwNDIwMDIwMDQ2WjAzMTEwLwYDVQQD
EygzODJlOGQzYWVjNDk3MDllMWVlODFhNDhhNDBmMTc4MmU3MTE1ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4Ntqf6ULhUpPDsjmuLsnbN1Ih9W
OO//GG5XI3mZsEq1PqvmucwM64oD49ygs0u5KeA3j8srZQaXXIPZSjhwsuAMh+nj
wWERdzbrJFzk2aA2maYvhciRXoJOQfsNJP8qEMLFGOVZPpZ70oeV/hlX3NK2YNdR
q2LFxmsbbrgIDhHfyp3hIEe8yoPfxfRsSYgEB2R2Svz+ui5Mh6qeKabPlLhQLNNG
WXaqagp2mQOfTsFm3qhsPmA5/MF2w5qTBy7UbKxgCJ2Nmaxw/Zq5kam3L5Oa1DJt
+5sZc/377IqYm+koRsGXoLZu7Y7AWwdEjDgtRiYfOnSeV9HYsJozqznpKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgujTrsSXCeHugaSKQPF4LnEV9gMB8GA1UdIwQY
MBaAFNplJd5KptDKGue9juHjW/0mlkm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYt
ZWVkZjc2MDc3ZjA5LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hYzU2N2QtNDZkMi00MDgxLTk0ZWYtZWVkZjc2MDc3ZjA5
LzEvMm1VbDNrcW0wTW9hNTcyTzRlTmJfU2FXU2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiX+1jc6g
UWeKRJQXb4eXojMN/QDUuL41F3ULXZPizNLnDPLpaC+TSnFN2oY3hf6hh2Ja8+mf
Hym92lzM/WHiHFqTLIbBM6hynTKA4uSSZ5W46jkHj3Qwed1u60ZFfqRCob8i7rPA
cZOiaTjopqBgpm+6BoLmy+yiQzLO9OThfIHURxsdtjJBqUXF+bUVhmvsoE17GWhp
H8IUFEgEPqSSn6J5zvv2c+Ny0rT2SAv0/LXjJqjmMijzl0yYLRGA9v8RbGJQdqA1
osRosZD9idtH3Bv81xjPL3xwT2LpG3GEki3JE6b98jcg1kY1jlDMabdaucZ0NdO0
7L+f+wuzsJg5LQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:17 2025 by rpki-client