Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: tgnUFKSDXVDhO71dJmKc8AUpwav52GdmeceOlfqR6t0=
Subject key identifier: FB:CC:C7:A2:DD:07:31:5D:AC:74:0E:33:DC:F9:F9:20:84:66:3B:17
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0196C239091E7F962CF2C25D8FCCF6ED7515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 11B7
Signing time: Mon 12 May 2025 02:00:39 +0000
Manifest this update: Mon 12 May 2025 02:00:39 +0000
Manifest next update: Tue 13 May 2025 02:00:39 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: UfFw7YJsw3sNUR7x1+FbrLBRuEgCBJoDe/+E+pJa298=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:09:1e:7f:96:2c:f2:c2:5d:8f:cc:f6:ed:75:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: May 12 02:00:39 2025 GMT
Not After : May 13 02:00:39 2025 GMT
Subject: CN=fbccc7a2dd07315dac740e33dcf9f92084663b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:b6:dc:81:58:0d:80:ff:d7:5b:b0:4a:f4:
a4:ff:3f:99:31:29:4b:f9:e0:19:c8:1b:2a:dd:73:
2c:8c:ef:bf:24:85:b9:08:44:76:79:90:e1:2d:89:
d1:94:55:73:da:63:4b:ba:86:68:bf:37:62:98:0b:
bc:94:9e:f8:e7:a4:c5:dd:f1:9c:7d:b8:5c:cc:9b:
aa:2c:af:04:d6:c8:b8:ec:77:80:df:cd:91:07:e5:
19:41:06:6a:ff:02:6d:a7:8d:d2:10:9b:4c:e4:c3:
d1:9b:02:48:87:1e:b6:27:df:c4:68:00:82:13:c2:
0a:b2:b7:92:b2:5c:c3:c5:81:87:94:4f:a8:b5:f4:
f5:fe:45:66:46:3b:e2:23:73:95:6a:6a:d2:9a:eb:
47:b6:6d:14:b3:b3:fb:7c:d1:f9:ac:12:f9:48:e2:
8d:d9:fb:0f:14:4b:cf:ed:41:a8:4b:a5:7f:8a:db:
c6:6e:81:de:72:c3:3b:8f:d8:5c:e1:e6:23:6e:9f:
61:58:a6:35:f6:ed:0f:42:54:9b:5c:6a:38:0c:e5:
69:35:6b:44:a9:a3:51:4e:35:ca:c1:96:df:a8:eb:
ca:74:01:25:12:e8:0b:6d:56:c7:f9:11:d3:c3:db:
af:fc:02:ef:af:bf:d7:ec:0a:ef:af:c3:22:39:a8:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:C7:A2:DD:07:31:5D:AC:74:0E:33:DC:F9:F9:20:84:66:3B:17
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f4:ba:ab:25:08:17:1a:ee:0b:81:47:cd:d3:5a:68:e9:e1:
29:47:da:82:01:be:0f:ed:4a:e1:26:c8:74:c2:2f:c1:7d:b7:
b2:24:6e:24:aa:68:d7:8b:2c:f0:e8:d6:69:e1:0c:6b:94:22:
d6:de:1c:06:74:8a:fe:17:2e:c0:72:ee:32:2d:52:df:8b:17:
82:91:8d:57:fc:42:ef:e9:5e:7a:86:25:63:01:38:5d:b8:41:
b5:98:04:9f:01:46:05:a6:2f:29:7e:48:33:92:22:51:42:89:
1d:4f:6d:36:8d:a5:11:e2:5c:dc:58:b4:8d:40:62:db:64:91:
c1:1a:ae:a0:73:ea:f9:40:3f:ec:85:0a:df:95:32:7c:2d:ea:
3a:48:f7:89:06:84:4e:cf:f8:dd:de:c7:34:f7:1b:93:30:63:
e4:c9:16:b0:e6:03:23:b6:e1:73:b7:62:0d:40:5c:11:b7:ab:
80:4d:e3:e5:b9:4d:bf:c5:b0:0b:33:e8:9c:75:80:95:79:f7:
7a:bc:0c:a9:6d:e3:de:81:56:be:3b:12:e7:60:8c:ae:c2:e2:
5d:10:29:1c:e1:15:ac:56:c6:b2:c2:89:d1:1b:06:23:46:c7:
81:b5:e8:7a:3a:51:d7:ce:36:dd:3f:6a:06:fd:77:23:e4:5b:
56:eb:82:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOQkef5Ys8sJdj8z27XUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNTU3MTZhYTFmNGMzYzEwMjg3MThhMWMzMzFlMjJiMzM5
ZWFkN2MwHhcNMjUwNTEyMDIwMDM5WhcNMjUwNTEzMDIwMDM5WjAzMTEwLwYDVQQD
EyhmYmNjYzdhMmRkMDczMTVkYWM3NDBlMzNkY2Y5ZjkyMDg0NjYzYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12C23IFYDYD/11uwSvSk/z+ZMSlL
+eAZyBsq3XMsjO+/JIW5CER2eZDhLYnRlFVz2mNLuoZovzdimAu8lJ7456TF3fGc
fbhczJuqLK8E1si47HeA382RB+UZQQZq/wJtp43SEJtM5MPRmwJIhx62J9/EaACC
E8IKsreSslzDxYGHlE+otfT1/kVmRjviI3OVamrSmutHtm0Us7P7fNH5rBL5SOKN
2fsPFEvP7UGoS6V/itvGboHecsM7j9hc4eYjbp9hWKY19u0PQlSbXGo4DOVpNWtE
qaNRTjXKwZbfqOvKdAElEugLbVbH+RHTw9uv/ALvr7/X7Arvr8MiOajq+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvMx6LdBzFdrHQOM9z5+SCEZjsXMB8GA1UdIwQY
MBaAFCJVcWqh9MPBAocYocMx4isznq18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgt
MDczNjllMTRjYWRlLzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYmY2N2ItYTY1YS00MmEzLTg5MDgtMDczNjllMTRjYWRl
LzEvSWxWeGFxSDB3OEVDaHhpaHd6SGlLek9lclh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvS6qyUI
FxruC4FHzdNaaOnhKUfaggG+D+1K4SbIdMIvwX23siRuJKpo14ss8OjWaeEMa5Qi
1t4cBnSK/hcuwHLuMi1S34sXgpGNV/xC7+leeoYlYwE4XbhBtZgEnwFGBaYvKX5I
M5IiUUKJHU9tNo2lEeJc3Fi0jUBi22SRwRquoHPq+UA/7IUK35UyfC3qOkj3iQaE
Ts/43d7HNPcbkzBj5MkWsOYDI7bhc7diDUBcEbergE3j5blNv8WwCzPonHWAlXn3
erwMqW3j3oFWvjsS52CMrsLiXRApHOEVrFbGssKJ0RsGI0bHgbXoejpR18423T9q
Bv13I+RbVuuCJw==
-----END CERTIFICATE-----
Generated at Mon May 12 04:40:03 2025 by rpki-client