Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
File: IrPk850cPBTYMWBr_KFmbd6b7WI.mft (raw, json)
Hash identifier: mrY9kt0WO9hVcASPqc0VbaBm1cVkhlYCzf38AirxSRI=
Subject key identifier: 99:0C:C3:72:76:7B:34:F0:1D:97:47:74:E0:75:AC:F2:A4:BD:ED:5F
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 0196C04A99F4BDF0AB8578FD9798896EB9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
Manifest number: 0F70
Signing time: Sun 11 May 2025 17:00:36 +0000
Manifest this update: Sun 11 May 2025 17:00:36 +0000
Manifest next update: Mon 12 May 2025 17:00:36 +0000
Files and hashes: 1: IrPk850cPBTYMWBr_KFmbd6b7WI.crl (hash: IgrM6n/Xn4KOxM10MFTv6++77xbu1VikXLe1NJfqwR8=)
2: eUQnxtW594Ad6vU9njmKr7uq7YI.roa (hash: 1w4c53hZ6iVZ5hhHMJGwGhh/v6xJyfrfdyok+gD0KR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:99:f4:bd:f0:ab:85:78:fd:97:98:89:6e:b9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: May 11 17:00:36 2025 GMT
Not After : May 12 17:00:36 2025 GMT
Subject: CN=990cc372767b34f01d974774e075acf2a4bded5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2c:e1:84:17:89:53:7e:1b:2a:07:02:1f:89:
cb:05:04:94:29:63:a9:88:cb:86:02:93:52:b4:e0:
31:6a:7f:cd:9c:84:54:b8:1a:cc:fb:12:56:ec:9b:
47:b3:04:d6:de:61:41:c6:ef:a2:4a:47:54:c4:37:
22:ad:f6:e6:6b:78:42:10:81:ec:e1:11:18:19:ba:
34:8a:64:b0:25:63:16:32:b0:fc:0d:3d:84:2a:31:
c6:19:0e:41:22:d3:ee:e7:1d:55:1e:b7:13:ff:3f:
61:7c:1e:d8:94:39:03:95:83:53:92:2f:f5:87:2b:
ba:fa:23:7d:0c:01:07:40:9b:93:cf:a7:94:21:c6:
6d:ab:57:6e:ef:d7:4e:70:50:91:aa:6e:cc:d6:45:
93:89:f5:83:8e:a5:70:12:47:46:22:90:78:11:f8:
0c:4d:7d:b9:75:86:18:d7:f9:8b:06:2a:bc:f7:a6:
af:ee:0f:85:86:79:7e:5d:c8:6a:3d:6c:5c:bb:b6:
46:7a:b8:43:31:dd:ac:b2:7a:79:dd:63:28:5a:2f:
f1:e3:ad:80:24:d7:c2:cb:82:28:ae:70:01:14:2b:
c6:2e:05:0a:9a:89:7d:64:64:7f:03:c2:ab:1f:78:
f1:21:aa:0c:da:e5:31:1d:f9:0f:f6:7f:13:55:75:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0C:C3:72:76:7B:34:F0:1D:97:47:74:E0:75:AC:F2:A4:BD:ED:5F
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c5:ae:34:6e:56:31:8d:0e:03:31:ee:49:66:75:94:93:ac:
0e:ed:30:b7:2a:9a:7c:13:d7:73:97:12:15:22:fa:45:55:2f:
c1:8c:00:a6:e8:3b:6e:81:7f:53:55:82:12:82:9f:1d:1c:9d:
d3:3a:2f:9c:9f:08:ba:4e:44:17:5d:25:ef:96:7b:fd:d3:dc:
c5:47:43:43:d4:9e:22:17:a2:61:43:56:42:6d:74:ef:5e:24:
3f:f5:74:5b:35:04:97:90:b6:52:68:85:7c:33:0f:e3:42:be:
e0:37:fe:3d:63:1e:b5:fe:dc:b6:3e:aa:3d:57:5d:e2:4c:f6:
f8:3e:ba:ef:0f:39:7b:b3:3c:36:f5:31:5c:ab:88:e2:a2:39:
04:8d:c7:64:6b:0e:34:11:91:7b:c2:e8:35:89:65:6b:35:84:
e7:f2:a7:37:b5:ce:7c:a1:de:f8:a2:bd:4c:71:b5:7b:84:74:
95:5d:41:a7:f4:2e:39:cb:c6:d4:c4:bb:a4:e1:e9:84:6f:50:
f9:d3:47:f9:13:e8:61:a3:cd:ac:2e:00:52:1c:0c:30:cb:23:
16:84:6e:02:58:82:76:1c:6b:da:42:6d:41:5f:3c:c8:40:e5:
9b:1c:b7:6c:c6:54:b2:ad:c5:07:d7:ab:ef:35:40:1a:58:a0:
ea:c5:21:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASpn0vfCrhXj9l5iJbrnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjNlNGYzOWQxYzNjMTRkODMxNjA2YmZjYTE2NjZkZGU5
YmVkNjIwHhcNMjUwNTExMTcwMDM2WhcNMjUwNTEyMTcwMDM2WjAzMTEwLwYDVQQD
Eyg5OTBjYzM3Mjc2N2IzNGYwMWQ5NzQ3NzRlMDc1YWNmMmE0YmRlZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yzhhBeJU34bKgcCH4nLBQSUKWOp
iMuGApNStOAxan/NnIRUuBrM+xJW7JtHswTW3mFBxu+iSkdUxDcirfbma3hCEIHs
4REYGbo0imSwJWMWMrD8DT2EKjHGGQ5BItPu5x1VHrcT/z9hfB7YlDkDlYNTki/1
hyu6+iN9DAEHQJuTz6eUIcZtq1du79dOcFCRqm7M1kWTifWDjqVwEkdGIpB4EfgM
TX25dYYY1/mLBiq896av7g+Fhnl+XchqPWxcu7ZGerhDMd2ssnp53WMoWi/x462A
JNfCy4IornABFCvGLgUKmol9ZGR/A8KrH3jxIaoM2uUxHfkP9n8TVXWlDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkMw3J2ezTwHZdHdOB1rPKkve1fMB8GA1UdIwQY
MBaAFCKz5POdHDwU2DFga/yhZm3em+1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQt
ZWQ1OTQ3ZjY2YjcwLzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MWE2NzgtMzY0NS00Y2E0LThjMGQtZWQ1OTQ3ZjY2Yjcw
LzEvSXJQazg1MGNQQlRZTVdCcl9LRm1iZDZiN1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8WuNG5W
MY0OAzHuSWZ1lJOsDu0wtyqafBPXc5cSFSL6RVUvwYwApug7boF/U1WCEoKfHRyd
0zovnJ8Iuk5EF10l75Z7/dPcxUdDQ9SeIheiYUNWQm10714kP/V0WzUEl5C2UmiF
fDMP40K+4Df+PWMetf7ctj6qPVdd4kz2+D667w85e7M8NvUxXKuI4qI5BI3HZGsO
NBGRe8LoNYllazWE5/KnN7XOfKHe+KK9THG1e4R0lV1Bp/QuOcvG1MS7pOHphG9Q
+dNH+RPoYaPNrC4AUhwMMMsjFoRuAliCdhxr2kJtQV88yEDlmxy3bMZUsq3FB9er
7zVAGlig6sUhVw==
-----END CERTIFICATE-----
Generated at Mon May 12 02:19:40 2025 by rpki-client