Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File: Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier: GgysyvHqExgBHp56A9Q5ozcKUKZpxqiNMB3Le5BVzHA=
Subject key identifier: BB:A3:47:8D:6D:39:44:D8:2D:E3:B0:5F:DA:64:7E:F6:B1:6F:85:B4
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer: /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial: 0196A5780E04E2228F43CD1A270C43AD30CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number: 0F70
Signing time: Tue 06 May 2025 12:00:30 +0000
Manifest this update: Tue 06 May 2025 12:00:30 +0000
Manifest next update: Wed 07 May 2025 12:00:30 +0000
Files and hashes: 1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: kykSneCXgtqg4qvSZRapZBatZPWStuaY8cv0q771LQE=)
2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:0e:04:e2:22:8f:43:cd:1a:27:0c:43:ad:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Validity
Not Before: May 6 12:00:30 2025 GMT
Not After : May 7 12:00:30 2025 GMT
Subject: CN=bba3478d6d3944d82de3b05fda647ef6b16f85b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:78:ae:42:1b:5e:ea:5f:6e:84:ba:43:76:
6f:91:e8:a8:20:04:bb:db:6c:34:58:56:ef:db:33:
aa:cb:21:c9:d2:0b:61:c7:19:2f:7d:b4:95:ee:08:
02:e2:76:52:03:ae:03:cb:52:78:06:98:a7:57:eb:
dc:16:28:a6:44:bb:b0:71:8a:45:9e:d5:01:cf:4c:
1d:47:9a:0b:b3:9e:b1:06:26:7f:a5:37:e4:a9:c0:
c5:96:da:0e:e1:ec:13:1b:8d:32:9f:c9:2c:94:76:
69:4e:d5:cb:d0:7f:72:97:dd:2d:a0:9b:56:f0:30:
6b:27:9b:1d:9c:59:be:95:1d:98:b7:fb:72:a6:3e:
0c:11:fd:77:af:49:68:09:90:34:a4:d7:ef:01:cf:
bb:26:99:91:72:ea:6e:34:fb:8b:63:e5:4d:4f:d0:
d6:8a:63:6f:15:bb:af:b3:2e:c4:83:cf:5f:b7:25:
a0:20:0e:6b:b3:05:9c:54:77:27:5a:67:20:47:76:
7b:fa:16:23:2b:de:be:80:a0:6e:0a:ee:b5:fe:97:
98:ad:37:34:d8:1a:2c:64:02:f3:35:2a:f2:b4:80:
9d:61:0d:01:8e:94:17:89:27:c3:b4:5d:9e:79:5e:
56:92:ed:b4:6f:42:b9:1a:47:57:3c:1c:cb:8e:ec:
24:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:47:8D:6D:39:44:D8:2D:E3:B0:5F:DA:64:7E:F6:B1:6F:85:B4
X509v3 Authority Key Identifier:
keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:7b:12:b0:40:c9:5c:f9:32:22:75:e4:09:00:5a:b0:61:d0:
03:5f:67:1b:f6:02:32:75:28:74:ab:23:89:a3:36:67:36:b7:
ed:d9:41:c5:60:e6:bf:9f:dc:35:8a:ae:42:6d:3a:b7:f8:4d:
57:15:cd:58:95:a1:e8:29:de:5b:e1:94:77:e9:d8:51:0a:2d:
8b:72:c7:92:d9:dd:07:99:1e:2e:e5:38:36:c3:b3:1f:ab:a4:
78:90:33:ec:37:20:4b:8a:93:e0:e5:45:99:b6:2e:21:38:0e:
b5:ae:d4:75:ab:67:cd:ab:56:b4:bf:ad:34:53:c8:e7:93:b0:
02:58:e0:a1:d2:14:24:9e:21:95:5c:a0:bd:a2:6a:98:d2:a0:
1d:85:e3:5e:29:53:0b:a5:e3:16:6a:bb:ce:74:96:9c:52:29:
82:7c:58:d2:e4:73:dc:23:6f:3a:f3:06:35:b5:ec:2d:78:93:
6e:ec:78:d9:b6:9d:5f:1a:20:d4:71:76:16:ab:58:80:b6:c3:
2e:f7:4f:a7:94:7d:8a:b9:a0:03:d5:b2:b7:5c:11:b8:10:21:
13:89:a6:97:fe:a4:1d:f9:f7:de:4e:96:d1:c8:29:6b:c8:27:
6c:7d:6b:84:f3:79:e9:01:a2:5d:88:42:36:66:cb:bb:f6:30:
cc:37:94:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaleA4E4iKPQ80aJwxDrTDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGQ4ZDgwYWIzN2E3NTdiOWQzNzQ4Mjk1ZmU2NjlmNGUw
OTNiMjMwHhcNMjUwNTA2MTIwMDMwWhcNMjUwNTA3MTIwMDMwWjAzMTEwLwYDVQQD
EyhiYmEzNDc4ZDZkMzk0NGQ4MmRlM2IwNWZkYTY0N2VmNmIxNmY4NWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNJ4rkIbXupfboS6Q3ZvkeioIAS7
22w0WFbv2zOqyyHJ0gthxxkvfbSV7ggC4nZSA64Dy1J4BpinV+vcFiimRLuwcYpF
ntUBz0wdR5oLs56xBiZ/pTfkqcDFltoO4ewTG40yn8kslHZpTtXL0H9yl90toJtW
8DBrJ5sdnFm+lR2Yt/typj4MEf13r0loCZA0pNfvAc+7JpmRcupuNPuLY+VNT9DW
imNvFbuvsy7Eg89ftyWgIA5rswWcVHcnWmcgR3Z7+hYjK96+gKBuCu61/peYrTc0
2BosZALzNSrytICdYQ0BjpQXiSfDtF2eeV5Wku20b0K5GkdXPBzLjuwkVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLujR41tOUTYLeOwX9pkfvaxb4W0MB8GA1UdIwQY
MBaAFEZNjYCrN6dXudN0gpX+Zp9OCTsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgt
OTExYmIzZGNmMGQ3LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZTQ3ZDItN2U3MS00NWRlLThmMTgtOTExYmIzZGNmMGQ3
LzEvUmsyTmdLczNwMWU1MDNTQ2xmNW1uMDRKT3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3sSsEDJ
XPkyInXkCQBasGHQA19nG/YCMnUodKsjiaM2Zza37dlBxWDmv5/cNYquQm06t/hN
VxXNWJWh6CneW+GUd+nYUQoti3LHktndB5keLuU4NsOzH6ukeJAz7DcgS4qT4OVF
mbYuITgOta7UdatnzatWtL+tNFPI55OwAljgodIUJJ4hlVygvaJqmNKgHYXjXilT
C6XjFmq7znSWnFIpgnxY0uRz3CNvOvMGNbXsLXiTbux42badXxog1HF2FqtYgLbD
LvdPp5R9irmgA9Wyt1wRuBAhE4mml/6kHfn33k6W0cgpa8gnbH1rhPN56QGiXYhC
NmbLu/YwzDeURQ==
-----END CERTIFICATE-----
Generated at Tue May 6 20:54:49 2025 by rpki-client