Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier: T066NSZ0vz+lZfMrmNiy6MoeGzB9gjmLiy11EzqCDYI=
Subject key identifier: 98:1A:33:9E:0F:CF:EE:38:20:20:3F:74:02:EF:75:D2:D5:A3:D6:06
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial: 0196A277CA85886E5D1FEF7F0ACA85FBD3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number: 0F73
Signing time: Mon 05 May 2025 22:01:21 +0000
Manifest this update: Mon 05 May 2025 22:01:21 +0000
Manifest next update: Tue 06 May 2025 22:01:21 +0000
Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: SK4BNZaV8PBCXlrCBB1fDTu0zbwOcqpU8lOxEoY3Ho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:ca:85:88:6e:5d:1f:ef:7f:0a:ca:85:fb:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Validity
Not Before: May 5 22:01:21 2025 GMT
Not After : May 6 22:01:21 2025 GMT
Subject: CN=981a339e0fcfee3820203f7402ef75d2d5a3d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:d0:86:53:fb:7e:3b:ac:16:1d:28:ac:f6:51:
0b:5a:05:30:23:2b:e7:53:af:1d:af:37:5e:80:ff:
b9:39:99:ab:db:94:ca:db:1b:c2:12:93:b1:a0:ad:
eb:a9:eb:a7:08:c0:e4:6f:4e:0e:e8:08:6d:d0:bb:
b4:42:72:11:03:1b:55:79:fa:54:98:b1:40:ca:71:
a7:30:01:40:e5:d5:9c:3b:48:fe:0a:95:17:64:ad:
4b:9f:ce:c7:5c:25:b1:b4:3c:52:9f:d6:7f:95:c9:
78:d9:4f:36:da:b5:69:22:9e:b8:6f:3a:c2:6d:3d:
a7:06:e8:e8:4e:1c:8b:2f:29:40:16:f7:71:e4:03:
bb:56:f9:44:fa:f2:e8:c2:53:ad:81:07:9a:58:18:
c9:16:9d:7b:1c:75:43:8f:81:8b:a5:c7:6a:ad:88:
77:9d:82:6b:77:bf:57:a7:5e:3c:32:88:fb:4b:e3:
1c:89:63:51:f6:0c:3e:cf:3b:b4:09:89:42:d5:c5:
72:8c:c7:ff:b2:9a:ca:3e:8b:7b:c3:84:b8:24:ea:
6a:49:91:1b:7e:58:40:4d:87:7c:dd:ed:1e:1b:1d:
fe:a4:07:88:0d:32:27:9c:3f:28:2c:92:28:bb:c8:
b4:19:e1:92:ae:f9:7b:96:31:ff:f2:6d:42:ef:d1:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1A:33:9E:0F:CF:EE:38:20:20:3F:74:02:EF:75:D2:D5:A3:D6:06
X509v3 Authority Key Identifier:
keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1e:ed:29:d7:ca:d4:74:9c:cc:8f:dc:76:00:b8:64:6c:ce:
6a:13:27:bd:5c:ea:95:40:b4:e9:62:1d:77:a8:03:c8:b7:5b:
45:31:af:f5:6d:bb:54:13:dc:a7:ae:ec:1a:4c:d6:36:15:40:
d7:35:2b:ac:da:f9:2a:26:04:25:3b:86:f8:66:b1:84:aa:ee:
70:91:e7:bc:30:bb:3e:84:c6:d9:e6:75:42:e7:98:81:ed:01:
b7:ba:2a:36:b4:4d:c7:b7:6a:c2:cc:a1:47:8a:68:c4:27:20:
e2:9a:e5:c0:f3:92:07:0e:1e:0e:b6:9b:de:c3:62:f9:c7:60:
44:e1:1a:e7:2a:cc:5e:40:dd:8b:da:8e:83:0f:e9:90:ed:9f:
1c:6c:5c:7a:de:8e:71:0b:5b:0a:4d:8d:10:3a:05:13:af:60:
ec:58:eb:c1:8d:b5:e1:ff:37:7f:1c:07:cc:70:04:d4:ea:b9:
48:f5:1e:6b:80:d9:92:30:04:5d:62:b6:dd:28:4c:c7:ee:96:
82:4d:9e:1d:fb:42:0f:44:92:c6:79:97:4a:9f:cb:3e:36:74:
1f:fd:bd:25:60:41:35:14:6d:3f:59:c3:bd:b5:f7:b7:4c:24:
fb:f9:af:87:43:a8:a9:de:0a:0c:fa:36:ae:13:a8:66:f5:45:
2d:b7:55:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaid8qFiG5dH+9/CsqF+9P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzM4NTEwNzFmOTYwODhjN2I3MTE5Y2I1ZTE0NjNjYmFi
OThjNTkwHhcNMjUwNTA1MjIwMTIxWhcNMjUwNTA2MjIwMTIxWjAzMTEwLwYDVQQD
Eyg5ODFhMzM5ZTBmY2ZlZTM4MjAyMDNmNzQwMmVmNzVkMmQ1YTNkNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dCGU/t+O6wWHSis9lELWgUwIyvn
U68drzdegP+5OZmr25TK2xvCEpOxoK3rqeunCMDkb04O6Aht0Lu0QnIRAxtVefpU
mLFAynGnMAFA5dWcO0j+CpUXZK1Ln87HXCWxtDxSn9Z/lcl42U822rVpIp64bzrC
bT2nBujoThyLLylAFvdx5AO7VvlE+vLowlOtgQeaWBjJFp17HHVDj4GLpcdqrYh3
nYJrd79Xp148Moj7S+MciWNR9gw+zzu0CYlC1cVyjMf/sprKPot7w4S4JOpqSZEb
flhATYd83e0eGx3+pAeIDTInnD8oLJIou8i0GeGSrvl7ljH/8m1C79EUYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgaM54Pz+44ICA/dALvddLVo9YGMB8GA1UdIwQY
MBaAFCLDhRBx+WCIx7cRnLXhRjy6uYxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTIt
Y2JmZGUwMjkwNzA4LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9mMGZmNWEtNTE2Yy00YjhlLWI5YTItY2JmZGUwMjkwNzA4
LzEvSXNPRkVISDVZSWpIdHhHY3RlRkdQTHE1akZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR7tKdfK
1HSczI/cdgC4ZGzOahMnvVzqlUC06WIdd6gDyLdbRTGv9W27VBPcp67sGkzWNhVA
1zUrrNr5KiYEJTuG+GaxhKrucJHnvDC7PoTG2eZ1QueYge0Bt7oqNrRNx7dqwsyh
R4poxCcg4prlwPOSBw4eDrab3sNi+cdgROEa5yrMXkDdi9qOgw/pkO2fHGxcet6O
cQtbCk2NEDoFE69g7FjrwY214f83fxwHzHAE1Oq5SPUea4DZkjAEXWK23ShMx+6W
gk2eHftCD0SSxnmXSp/LPjZ0H/29JWBBNRRtP1nDvbX3t0wk+/mvh0Ooqd4KDPo2
rhOoZvVFLbdVbA==
-----END CERTIFICATE-----
Generated at Tue May 6 05:56:45 2025 by rpki-client