Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File: 1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier: 5yLigMoBlss9GbHJVjh1snk9sIkhIC8da0RwCr+w1oU=
Subject key identifier: ED:A6:1A:1C:B1:12:F5:E9:9B:FF:AC:B1:95:C2:96:43:94:22:63:15
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer: /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial: 0196C1261CF8A4F58ACEA78F3983ACC6B8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 21:00:22 +0000
Manifest this update: Sun 11 May 2025 21:00:22 +0000
Manifest next update: Mon 12 May 2025 21:00:22 +0000
Files and hashes: 1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: bqhkw/J3ymqWMBXq6gLmUCbS+pnMdJx7BUNvYM80tyI=)
2: DiWaQ483B87mmH9xBQjUT-gKREU.roa (hash: +HNilVQSXx0rRIqto+Np0Fi3ncazRRex3uQcgtaQ1OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:1c:f8:a4:f5:8a:ce:a7:8f:39:83:ac:c6:b8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Validity
Not Before: May 11 21:00:22 2025 GMT
Not After : May 12 21:00:22 2025 GMT
Subject: CN=eda61a1cb112f5e99bffacb195c2964394226315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:68:ba:97:56:64:8b:6a:65:49:28:de:3c:
27:65:38:b9:c6:7d:d0:49:b4:d2:69:30:c2:cc:88:
ae:07:65:a4:f4:d1:70:08:a0:cf:12:b6:9c:6d:3a:
8f:0d:db:00:49:f0:4e:3b:99:31:a8:ef:e9:24:6b:
4b:c8:f2:b4:30:35:df:d0:0b:19:a2:b3:8e:df:c1:
a5:64:62:f9:da:67:f3:10:9d:4f:db:35:53:6a:7f:
28:5b:53:89:a4:5d:12:47:08:01:a5:56:e4:a0:b3:
e8:f1:a8:86:2a:f7:a5:8b:59:32:c3:df:9a:f7:bf:
59:ad:1c:c2:40:7f:ff:c2:52:c5:a9:25:99:78:a4:
7b:b6:18:6f:86:a3:df:27:e6:89:c0:0e:01:e5:05:
64:1a:ab:20:a9:39:61:6a:4e:eb:c0:18:de:1b:33:
d7:74:bd:51:31:49:22:a1:6b:96:f1:8b:53:19:97:
5f:2d:5f:aa:2b:a4:0a:bd:86:d5:8d:af:49:7b:92:
17:6c:1b:29:67:9c:07:d5:aa:1b:f1:ee:b8:41:f1:
93:ef:51:1d:41:1b:db:db:65:72:6a:73:bd:15:92:
cf:07:be:3f:79:93:a8:52:20:eb:39:4a:80:28:50:
8b:12:c4:51:3d:45:c1:73:13:be:88:b6:4a:bc:80:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:1A:1C:B1:12:F5:E9:9B:FF:AC:B1:95:C2:96:43:94:22:63:15
X509v3 Authority Key Identifier:
keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2a:bd:02:66:29:80:c9:6c:44:e3:40:4b:f3:81:48:9b:2b:
cf:09:fa:17:cf:e2:57:ae:ce:cb:b8:dc:94:92:14:57:24:71:
02:f0:55:90:ab:a4:d9:2d:ae:9f:1f:f1:e8:ca:5d:79:c9:69:
7c:bd:61:aa:39:ef:2c:f4:74:b0:b0:c2:dd:be:d3:1c:7a:5d:
80:fb:ae:94:ba:23:c0:9a:3b:a5:79:7a:21:11:c4:33:35:2e:
a2:8e:74:e9:ac:10:61:59:a4:72:f4:f5:91:c9:1f:1b:17:62:
94:a2:43:c1:7c:f8:dc:7f:14:30:80:d6:92:b9:66:79:6e:93:
58:b1:8f:8e:e6:05:72:03:9d:60:20:52:0b:6d:ae:67:51:86:
be:47:51:54:dd:4d:ad:42:e3:75:81:92:3b:52:78:b7:15:bd:
02:dd:a9:c0:de:26:d7:14:4c:87:56:60:a6:19:ea:64:96:45:
a1:bb:68:f7:2e:e5:08:05:a8:ef:9a:bf:0d:67:d8:9d:1b:40:
b2:ad:61:b3:40:a4:8c:c0:e8:7e:03:c3:db:73:ae:b8:de:b2:
50:af:14:d3:cf:1d:26:5a:d7:f8:b8:f1:4c:b5:bd:d5:59:da:
a4:72:ec:8f:d1:31:75:a4:33:a7:7a:bf:b2:9e:0f:67:52:ee:
e2:41:1d:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJhz4pPWKzqePOYOsxrjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OTIzZGY0ZGFlOTE5NTBjZjAwZDIzNWZlMzllMDBlZWEz
ODE2ZDIwHhcNMjUwNTExMjEwMDIyWhcNMjUwNTEyMjEwMDIyWjAzMTEwLwYDVQQD
EyhlZGE2MWExY2IxMTJmNWU5OWJmZmFjYjE5NWMyOTY0Mzk0MjI2MzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/doupdWZItqZUko3jwnZTi5xn3Q
SbTSaTDCzIiuB2Wk9NFwCKDPEracbTqPDdsASfBOO5kxqO/pJGtLyPK0MDXf0AsZ
orOO38GlZGL52mfzEJ1P2zVTan8oW1OJpF0SRwgBpVbkoLPo8aiGKveli1kyw9+a
979ZrRzCQH//wlLFqSWZeKR7thhvhqPfJ+aJwA4B5QVkGqsgqTlhak7rwBjeGzPX
dL1RMUkioWuW8YtTGZdfLV+qK6QKvYbVja9Je5IXbBspZ5wH1aob8e64QfGT71Ed
QRvb22VyanO9FZLPB74/eZOoUiDrOUqAKFCLEsRRPUXBcxO+iLZKvIBXQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2mGhyxEvXpm/+ssZXClkOUImMVMB8GA1UdIwQY
MBaAFNaSPfTa6RlQzwDSNf454A7qOBbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYt
OGQ2ZmMwMTA1MjNkLzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zMjY4MGQtMDNkOS00YWZhLTk0MTYtOGQ2ZmMwMTA1MjNk
LzEvMXBJOTlOcnBHVkRQQU5JMV9qbmdEdW80RnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyq9AmYp
gMlsRONAS/OBSJsrzwn6F8/iV67Oy7jclJIUVyRxAvBVkKuk2S2unx/x6Mpdeclp
fL1hqjnvLPR0sLDC3b7THHpdgPuulLojwJo7pXl6IRHEMzUuoo506awQYVmkcvT1
kckfGxdilKJDwXz43H8UMIDWkrlmeW6TWLGPjuYFcgOdYCBSC22uZ1GGvkdRVN1N
rULjdYGSO1J4txW9At2pwN4m1xRMh1ZgphnqZJZFobto9y7lCAWo75q/DWfYnRtA
sq1hs0CkjMDofgPD23OuuN6yUK8U088dJlrX+LjxTLW91VnapHLsj9ExdaQzp3q/
sp4PZ1Lu4kEdWQ==
-----END CERTIFICATE-----
Generated at Mon May 12 03:57:53 2025 by rpki-client