Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: AWXO7c8DvVz4PBoCrXTnIBLMvl93WRFThXO7WWv9b1Q=
Subject key identifier: 38:85:E9:1D:B4:27:15:AA:FB:76:B4:40:B5:52:5F:E7:16:72:F6:2D
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 0196C2A6C818DE36469889C0E5F34A2B0B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 33
Signing time: Mon 12 May 2025 04:00:32 +0000
Manifest this update: Mon 12 May 2025 04:00:32 +0000
Manifest next update: Tue 13 May 2025 04:00:32 +0000
Files and hashes: 1: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: CHiMo7J14/1NjBqTVP+4PEloeOoWbUKvPZXciUdtg9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c8:18:de:36:46:98:89:c0:e5:f3:4a:2b:0b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: May 12 04:00:32 2025 GMT
Not After : May 13 04:00:32 2025 GMT
Subject: CN=3885e91db42715aafb76b440b5525fe71672f62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:4b:4e:4e:07:fb:38:ed:f2:b4:47:c0:15:
a1:87:99:4e:83:a9:c3:a0:92:75:00:f3:4b:2b:eb:
97:55:62:79:57:6b:76:6c:b3:ed:19:54:97:7a:44:
ed:7f:91:7e:3f:8d:c4:f8:d1:28:9b:28:8d:16:7c:
ae:5a:c0:39:21:20:15:74:b0:7b:f6:d9:2f:d7:2a:
b6:96:60:e3:03:2b:2a:15:5a:9d:22:e1:35:c2:7d:
f7:df:cf:1e:5f:f6:0d:1a:9d:fb:7f:06:c7:bb:3f:
bd:cf:f2:f5:95:16:01:39:76:af:64:11:ac:77:32:
54:51:7a:87:d1:6e:eb:d8:e6:d8:6f:5f:46:44:68:
36:f9:89:94:ee:ad:82:c2:79:e8:f7:14:ef:b4:94:
83:8a:49:28:96:70:8b:fe:e7:70:ef:1b:79:f5:86:
84:6b:8e:a6:de:6d:09:e4:96:65:92:1e:e4:e1:79:
d1:e8:ac:50:f8:3b:97:a7:c7:6f:74:77:ce:a4:75:
43:22:82:0d:07:11:c3:b3:89:ca:93:ce:1c:ba:51:
31:6b:f4:73:40:99:29:dc:18:81:b9:63:a8:f5:55:
e5:3d:21:8d:27:40:9d:6c:b1:79:3e:45:53:57:3b:
a4:b6:ea:d2:41:53:7b:8f:7c:7b:56:a6:38:f9:fa:
9f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:85:E9:1D:B4:27:15:AA:FB:76:B4:40:B5:52:5F:E7:16:72:F6:2D
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:65:8c:6d:d5:bb:6a:ca:b0:57:66:36:01:b1:b7:06:09:9d:
1a:af:0b:fd:69:21:f5:53:09:4a:05:22:b8:39:66:61:99:ca:
fb:65:93:2e:d6:14:87:a5:a6:42:6a:30:c7:37:c0:50:48:1d:
88:f3:4e:69:db:17:b7:ec:6b:c9:d9:bb:76:c3:33:be:3f:cd:
fc:a1:c7:84:e8:5d:c4:88:62:f0:71:38:cc:23:d8:a5:e1:79:
c1:99:f4:a9:07:b7:dd:7f:63:28:36:99:c7:17:e2:a0:d3:57:
0b:81:bc:76:2b:8d:9e:02:c0:c1:28:31:85:7b:e7:6e:aa:2d:
e6:14:9c:3a:98:e0:58:ce:d9:55:76:20:17:26:71:ea:19:4a:
89:05:dd:a5:14:71:f5:9a:9b:ce:18:cd:32:74:78:d0:0a:a0:
c1:09:55:b9:4c:d0:c0:08:3d:86:1f:16:d4:1d:c7:7a:c6:37:
cb:70:d4:c6:91:19:48:26:44:67:67:f3:b8:33:66:20:bd:f3:
6f:62:80:f7:9e:ab:5b:85:3d:8b:43:25:4b:ce:b0:b5:12:ac:
55:41:0f:1a:54:f6:b3:5d:9c:fc:6f:49:a9:ca:04:b6:af:23:
94:56:6b:b1:53:65:a1:51:78:ed:4c:9a:d9:d1:d0:26:a3:d7:
01:59:13:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCpsgY3jZGmInA5fNKKwuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOGRhYjcwZjQ0YTdlYjhiMWNmYzEzNzQzM2ZjZDRkNzhh
MDNiMDUwHhcNMjUwNTEyMDQwMDMyWhcNMjUwNTEzMDQwMDMyWjAzMTEwLwYDVQQD
EygzODg1ZTkxZGI0MjcxNWFhZmI3NmI0NDBiNTUyNWZlNzE2NzJmNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqNLTk4H+zjt8rRHwBWhh5lOg6nD
oJJ1APNLK+uXVWJ5V2t2bLPtGVSXekTtf5F+P43E+NEomyiNFnyuWsA5ISAVdLB7
9tkv1yq2lmDjAysqFVqdIuE1wn33388eX/YNGp37fwbHuz+9z/L1lRYBOXavZBGs
dzJUUXqH0W7r2ObYb19GRGg2+YmU7q2Cwnno9xTvtJSDikkolnCL/udw7xt59YaE
a46m3m0J5JZlkh7k4XnR6KxQ+DuXp8dvdHfOpHVDIoINBxHDs4nKk84culExa/Rz
QJkp3BiBuWOo9VXlPSGNJ0CdbLF5PkVTVzukturSQVN7j3x7VqY4+fqfpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiF6R20JxWq+3a0QLVSX+cWcvYtMB8GA1UdIwQY
MBaAFDGNq3D0Sn64sc/BN0M/zU14oDsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAt
ZDk5ZjY2ZWY2MDZjLzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NGY4NzQtNDQ2Yy00NjQ2LThkYjAtZDk5ZjY2ZWY2MDZj
LzEvTVkycmNQUktmcml4ejhFM1F6X05UWGlnT3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmWMbdW7
asqwV2Y2AbG3BgmdGq8L/Wkh9VMJSgUiuDlmYZnK+2WTLtYUh6WmQmowxzfAUEgd
iPNOadsXt+xrydm7dsMzvj/N/KHHhOhdxIhi8HE4zCPYpeF5wZn0qQe33X9jKDaZ
xxfioNNXC4G8diuNngLAwSgxhXvnbqot5hScOpjgWM7ZVXYgFyZx6hlKiQXdpRRx
9ZqbzhjNMnR40AqgwQlVuUzQwAg9hh8W1B3HesY3y3DUxpEZSCZEZ2fzuDNmIL3z
b2KA956rW4U9i0MlS86wtRKsVUEPGlT2s12c/G9JqcoEtq8jlFZrsVNloVF47Uya
2dHQJqPXAVkTPA==
-----END CERTIFICATE-----
Generated at Mon May 12 11:25:42 2025 by rpki-client