Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: nnPALKnb+OAZhnUME5qjhctMT2rnEzF8ARce2EzFpD4=
Subject key identifier: C1:F8:8D:1B:70:EE:BE:CE:05:9E:AA:13:0B:73:CB:2C:7F:1A:D1:0C
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 0196B8234AFE267C08A70951125BC66F8DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 07FA
Signing time: Sat 10 May 2025 03:00:42 +0000
Manifest this update: Sat 10 May 2025 03:00:42 +0000
Manifest next update: Sun 11 May 2025 03:00:42 +0000
Files and hashes: 1: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: utFBIUopDr1cfOpyJbsyE/ozvPZv9lIJfa3yErCwO3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:4a:fe:26:7c:08:a7:09:51:12:5b:c6:6f:8d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: May 10 03:00:42 2025 GMT
Not After : May 11 03:00:42 2025 GMT
Subject: CN=c1f88d1b70eebece059eaa130b73cb2c7f1ad10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:7c:02:72:27:ce:e2:4f:6f:12:97:f6:f6:
b3:ba:23:8f:4d:18:d9:9b:60:ef:8a:51:bb:4a:ba:
b6:94:71:5a:f1:91:40:7f:fe:e0:b8:58:a5:31:13:
df:9f:9c:23:c0:52:1a:b3:28:c7:66:b1:c8:27:10:
fd:41:35:d1:43:89:23:a7:fa:84:50:e4:66:61:0b:
c6:94:86:eb:e2:85:94:2c:94:15:7b:3c:77:c8:2f:
9a:af:7e:1c:5d:96:79:14:c5:90:8b:ec:b2:e2:0a:
60:83:70:28:25:ba:d5:da:fa:ed:de:be:85:1f:f4:
0d:b7:6e:c8:23:53:df:87:d8:6a:9a:5d:fd:47:39:
7d:92:d1:b4:a3:e6:7e:b9:6d:f0:08:7d:47:81:c9:
ff:a7:40:22:2c:d7:1f:6a:41:a0:8b:09:09:ea:7b:
a5:50:49:3c:dd:05:fa:74:ce:ed:39:37:f8:21:49:
21:8d:af:89:4f:4c:e8:b3:2c:48:bf:fb:58:43:99:
e5:9c:de:99:14:f7:c7:b9:c8:cb:37:7e:98:fb:cf:
c7:02:5e:00:fb:f6:ca:69:18:82:77:75:a0:14:19:
22:da:15:d8:3f:d9:ac:ab:30:d1:f0:f1:43:fa:83:
90:67:95:cb:57:28:2a:21:78:17:79:06:5c:20:0f:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:8D:1B:70:EE:BE:CE:05:9E:AA:13:0B:73:CB:2C:7F:1A:D1:0C
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:31:c9:54:a1:a8:1d:6a:af:c0:0b:c5:89:6c:3a:b1:66:
ff:1f:02:7d:f2:5f:3f:31:2e:72:66:bb:11:b0:62:1f:c4:ca:
4d:fd:a7:3b:07:e1:a7:e8:a6:dc:e5:3a:c9:3e:bb:9e:f1:3f:
9a:b4:2b:98:8a:1a:76:92:e3:d4:8c:bd:b1:31:f1:c7:cf:00:
2c:ed:7d:e4:2a:db:a4:84:88:1f:7e:7c:a2:36:ae:25:26:8c:
f0:76:83:d8:b1:06:ba:5b:20:7b:f0:6c:f8:8d:81:db:78:ba:
44:8d:d4:78:74:40:48:b5:01:cb:77:64:08:2a:2c:52:4e:71:
90:97:5e:5b:cb:79:66:dc:55:dd:dd:81:42:b1:74:43:55:e7:
d7:8b:1a:44:db:37:7e:b1:fe:4b:b9:6e:80:b1:0f:78:e7:d4:
8a:2f:38:dc:09:9e:d2:d7:dc:b1:6c:d3:f0:d5:8f:b6:5d:86:
a9:89:45:87:2b:7a:7f:ad:3e:3a:24:97:59:3e:89:37:8f:53:
92:82:02:6d:12:6e:d4:c5:f8:6f:95:b6:71:c0:a2:dc:a2:f8:
05:6a:a8:4e:13:e5:57:76:30:b9:cf:74:5f:89:8e:b4:20:1b:
ff:31:19:37:87:fe:33:6a:c2:7f:9d:13:e1:b4:ee:d8:ee:18:
f9:7b:4f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I0r+JnwIpwlRElvGb43ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh
ZTRkMWEwHhcNMjUwNTEwMDMwMDQyWhcNMjUwNTExMDMwMDQyWjAzMTEwLwYDVQQD
EyhjMWY4OGQxYjcwZWViZWNlMDU5ZWFhMTMwYjczY2IyYzdmMWFkMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8d8AnInzuJPbxKX9vazuiOPTRjZ
m2DvilG7Srq2lHFa8ZFAf/7guFilMRPfn5wjwFIasyjHZrHIJxD9QTXRQ4kjp/qE
UORmYQvGlIbr4oWULJQVezx3yC+ar34cXZZ5FMWQi+yy4gpgg3AoJbrV2vrt3r6F
H/QNt27II1Pfh9hqml39Rzl9ktG0o+Z+uW3wCH1Hgcn/p0AiLNcfakGgiwkJ6nul
UEk83QX6dM7tOTf4IUkhja+JT0zosyxIv/tYQ5nlnN6ZFPfHucjLN36Y+8/HAl4A
+/bKaRiCd3WgFBki2hXYP9msqzDR8PFD+oOQZ5XLVygqIXgXeQZcIA+7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH4jRtw7r7OBZ6qEwtzyyx/GtEMMB8GA1UdIwQY
MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt
ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl
LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5ExyVSh
qB1qr8ALxYlsOrFm/x8CffJfPzEucma7EbBiH8TKTf2nOwfhp+im3OU6yT67nvE/
mrQrmIoadpLj1Iy9sTHxx88ALO195CrbpISIH358ojauJSaM8HaD2LEGulsge/Bs
+I2B23i6RI3UeHRASLUBy3dkCCosUk5xkJdeW8t5ZtxV3d2BQrF0Q1Xn14saRNs3
frH+S7lugLEPeOfUii843Ame0tfcsWzT8NWPtl2GqYlFhyt6f60+OiSXWT6JN49T
koICbRJu1MX4b5W2ccCi3KL4BWqoThPlV3Ywuc90X4mOtCAb/zEZN4f+M2rCf50T
4bTu2O4Y+XtPRg==
-----END CERTIFICATE-----
Generated at Sat May 10 05:39:50 2025 by rpki-client