Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File: CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier: oh5fC0Jlrz/ZBUdMm0yTwmWXMzSNKPq0v46Tzfo1rsg=
Subject key identifier: A6:C1:2B:CB:1C:AF:EC:F6:0E:4C:83:2E:C3:B7:D1:6F:37:C5:D9:5E
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer: /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial: 0196C081B5F5396E4ADBACA15FFADBD7AA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 18:00:48 +0000
Manifest this update: Sun 11 May 2025 18:00:48 +0000
Manifest next update: Mon 12 May 2025 18:00:48 +0000
Files and hashes: 1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: nz0lT3fYjrxHAHaYvIe8OFv6l1tvppzKV6PgosjcwiY=)
2: FuulQ2OCXlEeKOdXSHSbO4OXD9g.roa (hash: vDsoze7SRq5/DcfNiXEwTROz6jQawFkLYnYc3el4ix8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:b5:f5:39:6e:4a:db:ac:a1:5f:fa:db:d7:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
Validity
Not Before: May 11 18:00:48 2025 GMT
Not After : May 12 18:00:48 2025 GMT
Subject: CN=a6c12bcb1cafecf60e4c832ec3b7d16f37c5d95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:9a:b5:44:c7:b0:78:1a:54:d8:f7:52:1c:
f4:1b:d3:14:d3:57:33:fe:e7:d9:81:ca:75:c7:da:
ff:0f:99:d7:f5:e9:63:f6:65:68:0e:5e:e0:28:04:
aa:01:5c:67:40:28:90:c2:df:20:0e:39:e6:ba:67:
e6:75:16:41:0b:d7:63:7d:e5:fa:89:81:9f:c1:0a:
c5:15:b0:cb:66:e2:c8:91:27:c7:52:cb:f4:fe:c7:
8f:0f:46:3d:47:2c:5f:2f:ea:9d:02:0f:a5:37:9a:
30:0f:2f:f8:cf:c6:b3:6f:d4:64:6f:bc:3b:13:e5:
6f:cb:22:e1:dc:df:af:7a:91:20:4f:45:f6:8e:ee:
72:8d:21:64:7a:e2:92:ef:3f:87:43:22:fa:ec:f7:
f4:26:05:66:89:5c:39:3a:65:56:26:6e:14:d2:33:
9c:aa:8c:e1:88:7d:9d:d3:a2:b7:e0:af:a4:aa:6b:
a0:10:f4:69:58:5d:07:55:16:3f:6a:21:57:1f:85:
f7:19:2f:25:b1:18:13:7a:08:32:ba:56:cf:f9:9f:
ec:ae:e9:0c:5b:2e:31:55:72:39:9e:23:72:a3:99:
2e:cb:ed:bd:7c:e3:92:3d:02:cb:b0:f9:cd:27:38:
19:1b:ff:42:5e:fd:f3:15:e2:cd:13:56:91:66:8a:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:2B:CB:1C:AF:EC:F6:0E:4C:83:2E:C3:B7:D1:6F:37:C5:D9:5E
X509v3 Authority Key Identifier:
keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:82:70:dd:6c:3d:98:1b:de:a3:d2:c5:af:8b:8b:9f:c5:61:
47:da:02:60:48:23:ec:eb:26:30:d8:20:3c:61:d1:99:89:8a:
a1:1d:5f:66:91:4c:d9:48:50:1f:9e:c3:f5:a5:3d:cb:df:ee:
95:7f:44:df:05:47:c7:88:eb:68:3b:e8:96:04:bd:3f:8a:e3:
30:7d:82:16:04:50:2a:df:85:29:6f:af:bc:06:fb:e5:96:18:
00:f3:f2:c9:f9:07:e8:33:d0:92:77:5d:23:36:85:1b:a3:96:
b5:77:25:d9:68:4e:64:a6:95:2a:77:ca:e6:7f:8d:5f:78:4b:
5e:c3:24:b6:bb:97:5b:72:57:fc:f8:ac:f3:a9:b5:f2:3c:3b:
90:cb:7a:55:9c:79:60:fa:de:49:3b:3f:8f:38:db:79:57:d9:
0c:b7:3e:09:52:90:22:d9:78:c3:cd:69:39:4b:11:b1:39:c2:
ac:9e:2c:10:3c:59:93:ee:67:25:3a:4d:e8:4f:14:6e:72:ea:
7c:8f:56:f8:47:cc:c0:25:a6:4d:99:e1:05:a9:31:f4:52:65:
0f:e2:51:31:a5:42:c6:e4:1f:ca:9c:7d:04:b4:6d:bf:c9:87:
73:cf:70:dc:de:00:f7:0c:43:85:6a:54:7c:8c:fd:9f:16:b1:
8e:5c:0d:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgbX1OW5K26yhX/rb16qAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjUwNTExMTgwMDQ4WhcNMjUwNTEyMTgwMDQ4WjAzMTEwLwYDVQQD
EyhhNmMxMmJjYjFjYWZlY2Y2MGU0YzgzMmVjM2I3ZDE2ZjM3YzVkOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01KatUTHsHgaVNj3Uhz0G9MU01cz
/ufZgcp1x9r/D5nX9elj9mVoDl7gKASqAVxnQCiQwt8gDjnmumfmdRZBC9djfeX6
iYGfwQrFFbDLZuLIkSfHUsv0/sePD0Y9RyxfL+qdAg+lN5owDy/4z8azb9Rkb7w7
E+VvyyLh3N+vepEgT0X2ju5yjSFkeuKS7z+HQyL67Pf0JgVmiVw5OmVWJm4U0jOc
qozhiH2d06K34K+kqmugEPRpWF0HVRY/aiFXH4X3GS8lsRgTeggyulbP+Z/srukM
Wy4xVXI5niNyo5kuy+29fOOSPQLLsPnNJzgZG/9CXv3zFeLNE1aRZopaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbBK8scr+z2DkyDLsO30W83xdleMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4Jw3Ww9
mBveo9LFr4uLn8VhR9oCYEgj7OsmMNggPGHRmYmKoR1fZpFM2UhQH57D9aU9y9/u
lX9E3wVHx4jraDvolgS9P4rjMH2CFgRQKt+FKW+vvAb75ZYYAPPyyfkH6DPQkndd
IzaFG6OWtXcl2WhOZKaVKnfK5n+NX3hLXsMktruXW3JX/Pis86m18jw7kMt6VZx5
YPreSTs/jzjbeVfZDLc+CVKQItl4w81pOUsRsTnCrJ4sEDxZk+5nJTpN6E8UbnLq
fI9W+EfMwCWmTZnhBakx9FJlD+JRMaVCxuQfypx9BLRtv8mHc89w3N4A9wxDhWpU
fIz9nxaxjlwNtA==
-----END CERTIFICATE-----
Generated at Mon May 12 02:29:39 2025 by rpki-client