Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: O46wFiIkYr+pf8+cz7pItF9wUqyWI6Hx5XrC4H8WbsE=
Subject key identifier: 49:B3:D8:B6:AA:7D:FE:DD:B5:67:0D:D7:60:3C:B7:8D:90:62:DE:35
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 0196B8FEE81316A517D7F4511B700FC5C52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 01D7
Signing time: Sat 10 May 2025 07:00:35 +0000
Manifest this update: Sat 10 May 2025 07:00:35 +0000
Manifest next update: Sun 11 May 2025 07:00:35 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: X1I1E3j+yWB6+tNqoLx7ipZQCFU1QqseHrMTJJtw7i0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e8:13:16:a5:17:d7:f4:51:1b:70:0f:c5:c5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: May 10 07:00:35 2025 GMT
Not After : May 11 07:00:35 2025 GMT
Subject: CN=49b3d8b6aa7dfeddb5670dd7603cb78d9062de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3f:8c:ff:9b:21:92:84:5e:8e:6f:c1:89:4c:
a3:62:4b:ef:9f:f6:96:6d:90:87:ba:41:a3:bb:dc:
bd:8e:31:c3:00:28:00:99:a8:a9:b7:c4:4d:e6:2f:
6d:3b:88:59:91:95:95:09:92:11:57:a4:e3:bb:32:
87:b6:4e:b5:34:c0:24:e8:52:f6:a7:e2:be:3a:a0:
8a:4b:63:e9:04:79:ea:ce:83:7f:95:07:dc:f3:9b:
2b:04:68:89:da:b5:a1:aa:33:55:2b:b8:3a:51:96:
99:26:1c:a5:3f:08:2a:54:79:01:f5:fb:28:3f:1b:
74:6e:b8:2a:b6:ee:62:77:2d:71:25:30:fa:55:fe:
f7:29:9d:1e:4e:e7:61:9f:a2:75:81:8c:a1:04:43:
a5:aa:21:c3:36:f3:d6:b0:53:a4:92:d5:bb:1d:18:
cf:07:6b:27:34:06:53:a8:72:53:99:01:d9:8a:49:
bd:17:ad:eb:92:83:9e:79:f6:ac:79:d5:c4:aa:b2:
d7:58:c8:5b:d1:6c:16:9a:01:d9:1c:49:bd:45:0a:
da:d5:ae:58:a2:07:ec:eb:0a:a5:fa:06:cb:d9:b1:
41:73:ba:50:e2:e4:e7:b9:2c:e1:5a:59:9b:fa:97:
b7:cf:f9:c4:c0:4c:36:b2:65:78:d7:75:af:82:ee:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B3:D8:B6:AA:7D:FE:DD:B5:67:0D:D7:60:3C:B7:8D:90:62:DE:35
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4c:42:a5:17:fc:19:4f:b6:da:a8:5b:74:0f:24:75:28:15:
f4:98:0a:2d:db:90:f4:eb:06:e3:e5:11:05:25:55:89:40:7b:
65:50:43:46:db:5d:ee:ed:5c:94:0c:fc:05:59:28:c7:0e:7f:
76:08:e6:65:34:0b:af:04:d1:ef:c1:98:05:f2:53:24:66:c8:
44:f4:ca:9c:a0:83:38:3a:e1:fc:73:98:c1:be:e6:1d:7a:9d:
49:86:42:03:20:d6:96:88:22:c4:67:8c:0b:bb:00:23:2b:bd:
85:24:a0:f2:cd:2c:ad:2e:c4:15:75:ff:83:bd:9a:e5:4d:4b:
5c:01:bb:99:51:7b:71:5b:f6:92:17:6d:98:31:7c:e7:66:05:
07:f7:b4:3c:01:29:06:d1:88:01:f8:e5:46:40:c3:01:79:86:
76:f8:8e:42:c5:f0:d5:61:42:7c:f1:1d:79:78:aa:f4:07:bd:
35:e2:09:67:f9:d9:25:e7:4f:6d:cf:60:6d:ec:dd:86:39:dc:
cb:cc:2f:ec:5e:cf:7d:46:4c:8c:df:03:66:a3:04:35:9a:eb:
f7:a9:6b:ce:78:92:82:2d:7b:32:8a:47:d4:6a:87:ae:2c:1b:
d8:58:37:9c:6c:b1:f1:0c:16:47:4b:09:ae:7a:cf:ef:62:d7:
e5:c6:6b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/ugTFqUX1/RRG3APxcUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTQyZGFkMGJhZWRlNGE4YjExNTBmNDU5YTAzZjAxMWNk
YmE2NTQwHhcNMjUwNTEwMDcwMDM1WhcNMjUwNTExMDcwMDM1WjAzMTEwLwYDVQQD
Eyg0OWIzZDhiNmFhN2RmZWRkYjU2NzBkZDc2MDNjYjc4ZDkwNjJkZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D+M/5shkoRejm/BiUyjYkvvn/aW
bZCHukGju9y9jjHDACgAmaipt8RN5i9tO4hZkZWVCZIRV6TjuzKHtk61NMAk6FL2
p+K+OqCKS2PpBHnqzoN/lQfc85srBGiJ2rWhqjNVK7g6UZaZJhylPwgqVHkB9fso
Pxt0brgqtu5idy1xJTD6Vf73KZ0eTudhn6J1gYyhBEOlqiHDNvPWsFOkktW7HRjP
B2snNAZTqHJTmQHZikm9F63rkoOeefasedXEqrLXWMhb0WwWmgHZHEm9RQra1a5Y
ogfs6wql+gbL2bFBc7pQ4uTnuSzhWlmb+pe3z/nEwEw2smV413Wvgu4FsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmz2Laqff7dtWcN12A8t42QYt41MB8GA1UdIwQY
MBaAFK9ULa0Lrt5KixFQ9FmgPwEc26ZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMt
NmI1MDA4NGY0MjY0LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMtNmI1MDA4NGY0MjY0
LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUxCpRf8
GU+22qhbdA8kdSgV9JgKLduQ9OsG4+URBSVViUB7ZVBDRttd7u1clAz8BVkoxw5/
dgjmZTQLrwTR78GYBfJTJGbIRPTKnKCDODrh/HOYwb7mHXqdSYZCAyDWlogixGeM
C7sAIyu9hSSg8s0srS7EFXX/g72a5U1LXAG7mVF7cVv2khdtmDF852YFB/e0PAEp
BtGIAfjlRkDDAXmGdviOQsXw1WFCfPEdeXiq9Ae9NeIJZ/nZJedPbc9gbezdhjnc
y8wv7F7PfUZMjN8DZqMENZrr96lrzniSgi17MopH1GqHriwb2Fg3nGyx8QwWR0sJ
rnrP72LX5cZryQ==
-----END CERTIFICATE-----
Generated at Sat May 10 16:37:07 2025 by rpki-client