Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: 9dDrttFmyh0+qOu3sv4PYJTjSZ0RSxTwudTFnpkKpCw=
Subject key identifier: E0:57:DC:D6:74:ED:8D:D9:44:74:07:CA:DB:DF:BF:13:9F:31:8B:0A
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 0196B859FA46D34CDE17B5125F905C3B2372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 152E
Signing time: Sat 10 May 2025 04:00:26 +0000
Manifest this update: Sat 10 May 2025 04:00:26 +0000
Manifest next update: Sun 11 May 2025 04:00:26 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: dtFw/RVAcJOt8j1H4LlAUlSlnmk6oaqU2h+klhydaZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:59:fa:46:d3:4c:de:17:b5:12:5f:90:5c:3b:23:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: May 10 04:00:26 2025 GMT
Not After : May 11 04:00:26 2025 GMT
Subject: CN=e057dcd674ed8dd9447407cadbdfbf139f318b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:84:cd:33:26:f3:9f:ae:78:c0:fa:52:f0:
fe:b1:a7:fe:c0:80:64:82:d5:44:2a:ce:de:15:a4:
36:bf:a2:a6:09:04:6a:64:1d:0d:82:d5:41:87:23:
27:e9:ee:e2:68:b0:fa:10:f7:7f:98:4b:f2:65:6d:
0b:2f:56:51:3f:f3:6d:aa:da:06:2c:dd:32:9b:56:
07:29:0b:b6:5d:c3:ed:4a:86:f1:d7:bc:68:e3:8a:
67:96:da:73:18:1c:a6:7a:95:86:44:5f:15:23:12:
2e:40:13:bd:bd:5e:3d:c4:60:c4:ed:38:87:2b:3a:
b0:93:b1:87:4e:b9:32:ab:6b:f9:d9:f1:04:4a:6b:
b3:c1:e9:0c:fa:ee:27:34:1d:40:c5:c7:b4:37:35:
73:cb:58:37:eb:0e:bb:4d:3b:c1:6e:86:9c:dc:dc:
17:ab:4d:63:df:6c:f7:e5:9b:61:38:7c:63:78:bb:
c4:63:82:da:1c:d0:80:16:85:1f:a0:69:e9:44:96:
e3:c6:3e:67:20:80:ba:67:81:f3:08:fd:c6:cb:25:
77:95:52:72:99:da:90:f0:7e:4b:6e:7a:87:a0:1b:
64:cf:82:a9:4e:bc:ab:0e:e7:a1:99:41:96:80:95:
a7:ae:cb:16:fa:4a:6e:89:59:59:c7:2a:fe:36:97:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:DC:D6:74:ED:8D:D9:44:74:07:CA:DB:DF:BF:13:9F:31:8B:0A
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:45:84:25:89:64:a9:ba:f2:b9:72:96:6e:94:e4:21:f1:0f:
d8:5c:62:d4:d0:1e:fa:38:fb:79:b6:9e:07:37:10:99:0a:7c:
8e:27:f6:51:3d:62:9d:1d:a0:eb:85:00:7a:12:90:2c:04:e2:
08:e4:28:2c:c1:7d:13:8f:48:ee:cd:f9:99:a9:e6:77:f2:cf:
ef:a5:55:42:7c:48:84:16:dd:54:5a:e1:0f:43:a7:ef:17:55:
9f:e4:f9:53:df:7d:36:58:c9:24:aa:4c:cb:3c:42:16:ee:bb:
59:1d:b1:a9:a5:17:4b:25:19:2d:6f:a2:d1:30:89:07:96:ae:
f2:cd:aa:e0:79:fc:16:9f:35:6a:f7:80:08:da:21:ea:69:71:
4b:8d:b3:fe:16:f8:b9:e8:a2:ab:8d:f5:62:c0:d2:26:0b:de:
1a:a5:67:ca:47:62:87:bd:80:89:86:77:6a:4f:cf:f3:a0:5a:
1e:1a:8c:3f:75:ef:06:09:c7:63:64:6b:67:86:b3:0c:1c:e4:
69:b2:60:15:52:c2:d5:44:4f:c0:03:a4:fe:93:ea:9a:38:32:
71:1f:ec:49:16:a5:2d:54:96:9b:65:36:db:f2:ad:e7:d9:f7:
b1:13:b6:7a:02:7b:24:e5:f5:3b:a3:82:b8:51:1a:09:7f:7b:
01:59:36:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WfpG00zeF7USX5BcOyNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy
MzE0MTgwHhcNMjUwNTEwMDQwMDI2WhcNMjUwNTExMDQwMDI2WjAzMTEwLwYDVQQD
EyhlMDU3ZGNkNjc0ZWQ4ZGQ5NDQ3NDA3Y2FkYmRmYmYxMzlmMzE4YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02+EzTMm85+ueMD6UvD+saf+wIBk
gtVEKs7eFaQ2v6KmCQRqZB0NgtVBhyMn6e7iaLD6EPd/mEvyZW0LL1ZRP/NtqtoG
LN0ym1YHKQu2XcPtSobx17xo44pnltpzGBymepWGRF8VIxIuQBO9vV49xGDE7TiH
Kzqwk7GHTrkyq2v52fEESmuzwekM+u4nNB1Axce0NzVzy1g36w67TTvBboac3NwX
q01j32z35ZthOHxjeLvEY4LaHNCAFoUfoGnpRJbjxj5nIIC6Z4HzCP3GyyV3lVJy
mdqQ8H5LbnqHoBtkz4KpTryrDuehmUGWgJWnrssW+kpuiVlZxyr+NpfgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBX3NZ07Y3ZRHQHytvfvxOfMYsKMB8GA1UdIwQY
MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt
YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl
LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0WEJYlk
qbryuXKWbpTkIfEP2Fxi1NAe+jj7ebaeBzcQmQp8jif2UT1inR2g64UAehKQLATi
COQoLMF9E49I7s35manmd/LP76VVQnxIhBbdVFrhD0On7xdVn+T5U999NljJJKpM
yzxCFu67WR2xqaUXSyUZLW+i0TCJB5au8s2q4Hn8Fp81aveACNoh6mlxS42z/hb4
ueiiq431YsDSJgveGqVnykdih72AiYZ3ak/P86BaHhqMP3XvBgnHY2RrZ4azDBzk
abJgFVLC1URPwAOk/pPqmjgycR/sSRalLVSWm2U22/Kt59n3sRO2egJ7JOX1O6OC
uFEaCX97AVk2Bg==
-----END CERTIFICATE-----
Generated at Sat May 10 08:21:00 2025 by rpki-client