Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
File: sCBx_ye9CehFJRchNknb9nvK1dE.mft (raw, json)
Hash identifier: YhYsMnD1akCoQp4/dftO5z04RrNwzBPVxRwRPAN9Dbc=
Subject key identifier: 34:77:E0:40:73:4B:9B:F2:86:B2:21:A7:FC:1E:3C:B3:87:7A:EF:43
Authority key identifier: B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
Certificate issuer: /CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Certificate serial: 01969E637B5C3C08798ADA5A5CB48530DAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
Manifest number: 01B0
Signing time: Mon 05 May 2025 03:00:41 +0000
Manifest this update: Mon 05 May 2025 03:00:41 +0000
Manifest next update: Tue 06 May 2025 03:00:41 +0000
Files and hashes: 1: sCBx_ye9CehFJRchNknb9nvK1dE.crl (hash: hxTylhgvr8sWHPBOF7vtct6JG1sQtp2h8cOohVsE52c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:7b:5c:3c:08:79:8a:da:5a:5c:b4:85:30:da:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02071ff27bd09e8452517213649dbf67bcad5d1
Validity
Not Before: May 5 03:00:41 2025 GMT
Not After : May 6 03:00:41 2025 GMT
Subject: CN=3477e040734b9bf286b221a7fc1e3cb3877aef43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:92:6a:74:6a:91:7a:a1:b3:c5:f7:fe:72:ec:
8c:36:41:dd:46:61:8c:3f:20:3b:f0:f4:09:c4:dd:
37:ce:74:c4:99:91:90:df:f1:ae:fd:55:18:83:eb:
0e:c0:fc:60:8c:bd:e2:76:6f:1e:58:89:2a:d0:78:
04:80:c2:20:d8:75:7d:6e:b0:b6:14:85:8c:b1:95:
65:3c:a6:4a:31:dc:e8:a2:8b:64:18:cd:fb:56:11:
5f:f6:38:03:1d:95:23:bd:46:31:01:1b:41:d1:5a:
7e:b1:ae:85:55:e2:1b:90:75:26:06:6d:b1:12:dd:
28:d2:d1:18:a0:2a:62:56:6c:4b:f1:6c:42:fe:fd:
60:a9:3b:b8:58:67:64:f1:92:9a:54:c7:42:80:0f:
bd:77:e7:0f:b5:20:1c:a5:81:29:85:9f:90:dc:76:
18:e4:ad:e2:7a:c0:34:ba:5a:b2:24:fa:fd:c8:80:
99:65:10:a2:29:b1:d2:7e:2b:78:09:62:bd:f7:21:
e5:16:78:df:88:05:ae:83:63:2e:af:58:b1:67:c6:
1c:45:a6:48:7f:d2:6c:9e:ba:c8:0a:ec:21:2f:28:
b9:ad:c9:de:a7:e3:59:1b:72:a6:20:fa:e1:04:59:
87:bf:9c:16:a1:21:4c:02:87:50:ae:9c:86:5e:34:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:77:E0:40:73:4B:9B:F2:86:B2:21:A7:FC:1E:3C:B3:87:7A:EF:43
X509v3 Authority Key Identifier:
keyid:B0:20:71:FF:27:BD:09:E8:45:25:17:21:36:49:DB:F6:7B:CA:D5:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCBx_ye9CehFJRchNknb9nvK1dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/566dba-8179-4c13-9d3f-bc895f731695/1/sCBx_ye9CehFJRchNknb9nvK1dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:b4:70:1c:e5:9b:01:92:71:97:e0:f7:85:6c:9a:45:df:
e7:82:36:c2:79:2c:19:4f:e4:40:2f:af:78:fd:39:b2:49:59:
17:fd:0c:a4:38:d8:38:d3:79:b3:51:aa:4f:c1:85:6e:ba:a6:
18:fb:cc:10:b9:fd:67:ca:de:a4:33:9b:a2:ba:52:a9:b1:79:
30:79:91:fd:83:11:44:64:e7:06:bb:52:f7:59:dc:e3:5b:45:
f7:e8:38:dc:8d:3a:72:aa:f4:30:b8:49:7f:a4:1b:16:b1:d1:
ce:a9:37:8f:22:5f:06:48:83:a5:8f:c0:ad:3b:d4:a7:8a:b3:
2e:a1:f2:00:2c:d6:bf:71:86:8d:8f:c6:d0:66:ff:44:bf:aa:
29:65:b4:6b:59:c9:b0:6e:c7:fd:d0:74:d8:90:3a:f1:33:e3:
dd:ae:b6:13:99:c9:9d:2f:39:64:03:8b:d9:84:40:c0:6e:70:
8e:b7:26:a0:3b:a4:48:0f:a7:37:04:71:17:f9:f5:4a:43:bb:
51:5d:db:fa:92:6e:37:5f:05:f2:c1:6a:54:ef:f2:fd:d1:b1:
65:ef:fe:97:dd:4b:a0:94:ec:8b:ca:a1:b3:4f:77:f8:56:ce:
82:52:62:81:c3:71:28:92:71:0f:46:09:00:4d:c1:d8:0c:04:
8b:c8:a9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY3tcPAh5itpaXLSFMNr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMjA3MWZmMjdiZDA5ZTg0NTI1MTcyMTM2NDlkYmY2N2Jj
YWQ1ZDEwHhcNMjUwNTA1MDMwMDQxWhcNMjUwNTA2MDMwMDQxWjAzMTEwLwYDVQQD
EygzNDc3ZTA0MDczNGI5YmYyODZiMjIxYTdmYzFlM2NiMzg3N2FlZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JJqdGqReqGzxff+cuyMNkHdRmGM
PyA78PQJxN03znTEmZGQ3/Gu/VUYg+sOwPxgjL3idm8eWIkq0HgEgMIg2HV9brC2
FIWMsZVlPKZKMdzoootkGM37VhFf9jgDHZUjvUYxARtB0Vp+sa6FVeIbkHUmBm2x
Et0o0tEYoCpiVmxL8WxC/v1gqTu4WGdk8ZKaVMdCgA+9d+cPtSAcpYEphZ+Q3HYY
5K3iesA0ulqyJPr9yICZZRCiKbHSfit4CWK99yHlFnjfiAWug2Mur1ixZ8YcRaZI
f9JsnrrICuwhLyi5rcnep+NZG3KmIPrhBFmHv5wWoSFMAodQrpyGXjRkhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR34EBzS5vyhrIhp/wePLOHeu9DMB8GA1UdIwQY
MBaAFLAgcf8nvQnoRSUXITZJ2/Z7ytXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2Yt
YmM4OTVmNzMxNjk1LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81NjZkYmEtODE3OS00YzEzLTlkM2YtYmM4OTVmNzMxNjk1
LzEvc0NCeF95ZTlDZWhGSlJjaE5rbmI5bnZLMWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbK0cBzl
mwGScZfg94VsmkXf54I2wnksGU/kQC+veP05sklZF/0MpDjYONN5s1GqT8GFbrqm
GPvMELn9Z8repDOborpSqbF5MHmR/YMRRGTnBrtS91nc41tF9+g43I06cqr0MLhJ
f6QbFrHRzqk3jyJfBkiDpY/ArTvUp4qzLqHyACzWv3GGjY/G0Gb/RL+qKWW0a1nJ
sG7H/dB02JA68TPj3a62E5nJnS85ZAOL2YRAwG5wjrcmoDukSA+nNwRxF/n1SkO7
UV3b+pJuN18F8sFqVO/y/dGxZe/+l91LoJTsi8qhs093+FbOglJigcNxKJJxD0YJ
AE3B2AwEi8ipOw==
-----END CERTIFICATE-----
Generated at Mon May 5 10:45:50 2025 by rpki-client