Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: 4UjaTIlhUS8pTxc3YsWJwqahXvATnl/4a1MEs4k243A=
Subject key identifier: 80:ED:15:28:41:AE:36:BB:CA:67:E1:22:50:38:52:A4:6D:DA:07:F1
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 0196C615E01514C2BD815B47B1871FC30A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 020B
Signing time: Mon 12 May 2025 20:00:44 +0000
Manifest this update: Mon 12 May 2025 20:00:44 +0000
Manifest next update: Tue 13 May 2025 20:00:44 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: y6Oe8tsSUSFM3HlzL5JQZ7ANx7qytF4/kMe1orJn1SE=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:e0:15:14:c2:bd:81:5b:47:b1:87:1f:c3:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: May 12 20:00:44 2025 GMT
Not After : May 13 20:00:44 2025 GMT
Subject: CN=80ed152841ae36bbca67e122503852a46dda07f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:f1:e6:b4:fd:df:52:89:44:05:07:fd:a6:
77:19:20:ac:42:2f:e4:32:40:b4:61:64:dc:d1:d0:
e5:39:e0:fd:4e:fe:c3:e5:f7:ca:4c:d2:5f:4d:8f:
23:6d:82:b2:30:77:2b:29:7d:8f:ac:63:60:3e:30:
99:f8:ed:f7:06:5b:66:7b:16:aa:43:89:7a:6d:1c:
ad:84:3a:f4:ba:49:d7:63:59:af:6a:f5:47:34:78:
30:48:62:25:40:a2:68:17:8d:e3:e4:7e:93:89:33:
94:e4:cd:b1:b6:e4:56:f2:3e:7a:bc:6a:a2:aa:14:
64:7f:60:77:e0:d5:28:e3:3f:ae:c8:7c:db:45:61:
c0:ca:1c:5c:d1:1d:44:a2:8b:27:bb:c2:52:6b:c1:
68:2f:21:25:d5:de:d1:e5:1f:98:6c:cc:50:9d:f4:
18:b9:1e:6d:c0:79:92:4f:87:36:47:61:97:f7:e0:
ed:7a:93:b5:42:8d:08:02:5a:52:ec:e7:19:b6:11:
34:71:1a:ae:96:b1:a8:4b:aa:59:f8:04:ac:61:0d:
bf:58:4d:bf:28:01:ee:1a:19:81:3d:d7:45:3d:c1:
ec:7c:ee:21:b5:5a:5b:dd:7d:79:c6:f9:bd:06:5f:
5b:08:fc:32:14:5f:8d:9b:f8:4e:68:e4:ac:c8:82:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:15:28:41:AE:36:BB:CA:67:E1:22:50:38:52:A4:6D:DA:07:F1
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:9c:39:de:10:38:18:cd:5b:fd:9c:e4:55:67:4c:2a:b7:94:
3e:6e:ab:bc:31:43:54:91:b4:cc:df:ef:6b:f5:6e:02:1f:10:
8b:24:c7:62:15:2d:93:e6:41:d0:da:81:ef:e2:47:e3:45:e7:
cc:c8:57:3a:a8:20:fc:c2:8a:f7:e3:6f:7c:1f:1a:68:f8:47:
9f:3e:23:94:83:1a:e6:e1:03:da:39:ad:ab:2b:a8:2c:a9:cc:
5c:de:ab:5a:a6:7b:8c:32:9c:d7:4e:96:48:11:32:c2:73:c9:
11:b4:2b:1d:33:b1:83:7e:46:ef:22:a5:3f:af:e9:e9:f7:b8:
a3:98:96:9b:71:de:5f:e9:45:38:9b:e6:67:59:99:bf:d8:d2:
5e:78:f4:39:8e:2d:0b:b7:2c:57:00:25:15:89:20:d2:b8:8a:
3e:57:d4:aa:71:25:89:42:43:47:d3:9b:5f:57:a8:26:98:fa:
ef:d1:21:16:83:63:bd:10:3e:c6:b6:39:f0:ca:9b:42:f8:4a:
a3:65:bb:53:e8:bf:62:c6:7d:79:33:51:20:18:8c:81:72:98:
54:4b:b0:89:9b:8e:94:8c:81:47:81:18:d7:ac:51:8f:9c:37:
3b:a1:26:98:79:7d:f3:d2:3a:c6:18:ca:6a:ab:2c:f2:0e:cb:
07:0e:7e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGFeAVFMK9gVtHsYcfwwoDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOGZlMmIxOWJkM2ViN2Y3MGE0ZWVkYWI2MTZiNTMyNTAw
MTE1MjAwHhcNMjUwNTEyMjAwMDQ0WhcNMjUwNTEzMjAwMDQ0WjAzMTEwLwYDVQQD
Eyg4MGVkMTUyODQxYWUzNmJiY2E2N2UxMjI1MDM4NTJhNDZkZGEwN2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCPx5rT931KJRAUH/aZ3GSCsQi/k
MkC0YWTc0dDlOeD9Tv7D5ffKTNJfTY8jbYKyMHcrKX2PrGNgPjCZ+O33Bltmexaq
Q4l6bRythDr0uknXY1mvavVHNHgwSGIlQKJoF43j5H6TiTOU5M2xtuRW8j56vGqi
qhRkf2B34NUo4z+uyHzbRWHAyhxc0R1Eoosnu8JSa8FoLyEl1d7R5R+YbMxQnfQY
uR5twHmST4c2R2GX9+DtepO1Qo0IAlpS7OcZthE0cRqulrGoS6pZ+ASsYQ2/WE2/
KAHuGhmBPddFPcHsfO4htVpb3X15xvm9Bl9bCPwyFF+Nm/hOaOSsyILN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDtFShBrja7ymfhIlA4UqRt2gfxMB8GA1UdIwQY
MBaAFDyP4rGb0+t/cKTu2rYWtTJQARUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUt
MTJlNmE2ZWRkMTI0LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lN2VkZDEtYzc5Zi00ODkwLWExNzUtMTJlNmE2ZWRkMTI0
LzEvUElfaXNadlQ2Mzl3cE83YXRoYTFNbEFCRlNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Jw53hA4
GM1b/ZzkVWdMKreUPm6rvDFDVJG0zN/va/VuAh8QiyTHYhUtk+ZB0NqB7+JH40Xn
zMhXOqgg/MKK9+NvfB8aaPhHnz4jlIMa5uED2jmtqyuoLKnMXN6rWqZ7jDKc106W
SBEywnPJEbQrHTOxg35G7yKlP6/p6fe4o5iWm3HeX+lFOJvmZ1mZv9jSXnj0OY4t
C7csVwAlFYkg0riKPlfUqnEliUJDR9ObX1eoJpj679EhFoNjvRA+xrY58MqbQvhK
o2W7U+i/YsZ9eTNRIBiMgXKYVEuwiZuOlIyBR4EY16xRj5w3O6EmmHl989I6xhjK
aqss8g7LBw5+Hg==
-----END CERTIFICATE-----
Generated at Tue May 13 02:47:06 2025 by rpki-client