Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json)
Hash identifier: DOuxY1nIUb6K0plUEQfnw27Idp6NM6JWfb1L33yHGmo=
Subject key identifier: 1B:7D:79:E5:D1:35:06:6E:C0:7D:15:FA:0C:E0:B5:9B:28:9A:25:43
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0196CB05BC58E351EA8F6D6F7FE411D23A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
Manifest number: 021B
Signing time: Tue 13 May 2025 19:01:12 +0000
Manifest this update: Tue 13 May 2025 19:01:12 +0000
Manifest next update: Wed 14 May 2025 19:01:12 +0000
Files and hashes: 1: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: CJzdFTUXnsWvRT3+YryS7z2KeL+3a+j+yF/AJe6VpFk=)
2: gKbl_ApJpltlQyfFare3nEvnPsU.roa (hash: tYvNM/6GmJahHZcQYjEfM07RPZ9Md8r3F+k+Tp4UUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:05:bc:58:e3:51:ea:8f:6d:6f:7f:e4:11:d2:3a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: May 13 19:01:12 2025 GMT
Not After : May 14 19:01:12 2025 GMT
Subject: CN=1b7d79e5d135066ec07d15fa0ce0b59b289a2543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:d5:3a:cc:f6:ab:3a:9c:46:7a:bd:4f:ae:
cf:32:3e:b4:76:46:10:3f:35:91:ce:e1:70:30:8e:
fa:65:77:da:a3:28:60:4f:61:2f:79:f5:c6:8c:17:
8d:2f:32:28:c2:86:eb:36:c6:3a:a1:90:4a:a8:33:
d0:95:46:db:33:46:b8:78:78:d7:5d:94:93:5f:44:
af:64:79:d5:63:c6:8f:df:37:6e:4a:d7:14:1e:01:
46:70:8f:2c:9d:03:59:e3:6d:bc:da:db:61:13:24:
2a:e8:ee:f6:6b:16:24:eb:37:6c:24:74:ca:70:01:
19:30:9a:70:3a:38:dd:ee:9f:f6:84:03:16:a8:9e:
d3:6b:f0:f0:70:aa:87:64:72:7f:7f:9c:53:a4:61:
55:c6:0a:20:e1:b2:8e:cc:60:53:03:9c:aa:fb:67:
7c:4e:11:e1:61:70:7a:de:4d:f8:91:b9:4e:aa:7a:
bd:a6:61:e8:cf:fd:6d:07:87:26:8e:d5:64:b2:dd:
da:c6:e7:a0:6c:97:90:2a:67:4f:5a:1c:74:5b:d5:
ab:ec:36:a0:7a:f9:83:ff:21:37:a9:48:95:c2:e2:
7f:d6:fe:1b:ed:6e:8d:89:84:75:cb:4b:e6:8f:c0:
93:3d:f8:e9:a5:3a:0c:dd:91:04:ef:71:0f:bb:4d:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7D:79:E5:D1:35:06:6E:C0:7D:15:FA:0C:E0:B5:9B:28:9A:25:43
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:21:2a:72:08:82:6a:2f:f0:04:df:e0:8d:31:61:c6:60:70:
14:8c:07:cf:2a:ae:e7:42:2a:19:d0:55:19:29:bc:f5:07:23:
1c:27:ee:39:d2:63:07:07:0c:85:4c:75:46:1d:06:59:7f:9d:
30:95:17:2f:7f:e1:cd:bd:91:db:97:ab:37:ba:42:0f:1c:6b:
38:cd:03:ab:d4:07:92:84:92:3b:d7:b4:e9:ee:06:49:42:62:
37:55:f2:13:f1:b5:d7:24:70:ed:b6:f9:eb:66:fb:42:b9:e4:
8e:82:5e:c2:9f:50:34:09:c6:60:c4:ca:7c:36:99:0d:78:d7:
c6:76:eb:97:75:2d:79:5c:b0:dc:02:5b:49:62:49:ce:b5:51:
7d:0c:8c:35:a4:38:22:e5:ab:36:2e:d9:96:66:8b:18:62:cb:
f7:38:fc:75:99:26:ef:5b:38:81:77:67:19:b5:4b:c0:ba:d3:
5a:1e:97:a9:80:51:fe:98:0d:7a:8e:a3:cb:de:09:16:2f:8d:
2d:fa:86:1a:94:19:e2:29:1e:33:c7:19:32:5b:af:d9:2e:1b:
26:ec:38:53:80:26:88:a6:8d:fb:dd:55:e6:f6:2f:92:15:37:
19:8b:1e:0c:54:88:75:ee:e1:e6:b5:e4:cf:c8:ad:4c:f8:ef:
25:3b:19:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBbxY41Hqj21vf+QR0jo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjUwNTEzMTkwMTEyWhcNMjUwNTE0MTkwMTEyWjAzMTEwLwYDVQQD
EygxYjdkNzllNWQxMzUwNjZlYzA3ZDE1ZmEwY2UwYjU5YjI4OWEyNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkizVOsz2qzqcRnq9T67PMj60dkYQ
PzWRzuFwMI76ZXfaoyhgT2EvefXGjBeNLzIowobrNsY6oZBKqDPQlUbbM0a4eHjX
XZSTX0SvZHnVY8aP3zduStcUHgFGcI8snQNZ42282tthEyQq6O72axYk6zdsJHTK
cAEZMJpwOjjd7p/2hAMWqJ7Ta/DwcKqHZHJ/f5xTpGFVxgog4bKOzGBTA5yq+2d8
ThHhYXB63k34kblOqnq9pmHoz/1tB4cmjtVkst3axuegbJeQKmdPWhx0W9Wr7Dag
evmD/yE3qUiVwuJ/1v4b7W6NiYR1y0vmj8CTPfjppToM3ZEE73EPu01g5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBt9eeXRNQZuwH0V+gzgtZsomiVDMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwiEqcgiC
ai/wBN/gjTFhxmBwFIwHzyqu50IqGdBVGSm89QcjHCfuOdJjBwcMhUx1Rh0GWX+d
MJUXL3/hzb2R25erN7pCDxxrOM0Dq9QHkoSSO9e06e4GSUJiN1XyE/G11yRw7bb5
62b7QrnkjoJewp9QNAnGYMTKfDaZDXjXxnbrl3UteVyw3AJbSWJJzrVRfQyMNaQ4
IuWrNi7ZlmaLGGLL9zj8dZkm71s4gXdnGbVLwLrTWh6XqYBR/pgNeo6jy94JFi+N
LfqGGpQZ4ikeM8cZMluv2S4bJuw4U4AmiKaN+91V5vYvkhU3GYseDFSIde7h5rXk
z8itTPjvJTsZiQ==
-----END CERTIFICATE-----
Generated at Wed May 14 00:22:42 2025 by rpki-client