Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: bLxLnb8MsOXrQ0HUftU8XwfN1iAta/rHcBfLB5ygcsw=
Subject key identifier: 8E:AA:14:F8:8C:71:78:46:4D:E9:E6:5E:13:C2:A5:7C:ED:40:8C:67
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 0196B44638C8A6C0C3096A4C6A41F492E45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 013D
Signing time: Fri 09 May 2025 09:00:22 +0000
Manifest this update: Fri 09 May 2025 09:00:22 +0000
Manifest next update: Sat 10 May 2025 09:00:22 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: oa/xzhe63RCClrpGIFcfS2XLtbbiDhEv5SPnqDFcd1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:46:38:c8:a6:c0:c3:09:6a:4c:6a:41:f4:92:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: May 9 09:00:22 2025 GMT
Not After : May 10 09:00:22 2025 GMT
Subject: CN=8eaa14f88c7178464de9e65e13c2a57ced408c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7c:ca:75:28:bc:b4:65:14:a9:03:48:56:c3:
ad:a2:0c:c5:dd:30:37:09:4b:e9:3e:c1:c8:e3:ed:
ce:ad:52:2f:43:b8:a7:02:99:8c:ac:50:b4:af:ee:
a4:ef:fb:8f:92:f9:b3:97:54:8f:a0:f4:9b:77:eb:
b4:c8:f8:d8:a0:76:17:c9:a8:82:7d:02:d3:c1:89:
84:61:cd:9d:1b:f4:fd:c2:96:fc:d3:eb:36:9e:0e:
3c:07:54:46:0d:32:96:72:3b:72:7f:46:b4:1d:19:
d5:7f:d3:bd:17:4b:d9:58:ad:b2:e6:e3:5e:0c:47:
06:4f:0b:93:5e:95:07:87:4f:03:6e:b6:8b:ad:2b:
b1:f5:38:5a:ab:19:39:b0:53:07:c5:d9:4c:c2:1d:
91:e8:4b:8a:e9:c2:46:87:a6:47:e1:46:00:95:be:
d3:5a:30:1d:f2:75:1c:1a:73:af:55:80:f3:35:4a:
52:da:10:f5:17:26:d7:7a:cd:c8:9d:71:de:8b:ab:
8b:e6:55:b7:1e:09:27:ab:5f:4b:9c:87:04:9a:cc:
d8:f4:06:e6:d1:d2:9d:86:b6:e6:d2:c3:2a:9f:6a:
2f:a4:d4:a0:29:ce:3d:47:6c:96:63:d7:46:e3:cf:
42:93:bf:0b:72:49:74:99:69:25:40:7b:93:08:ff:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:14:F8:8C:71:78:46:4D:E9:E6:5E:13:C2:A5:7C:ED:40:8C:67
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:19:8f:68:ba:b1:1a:d1:a8:cb:41:07:87:9b:22:95:9a:38:
68:f6:88:ee:d0:d2:26:ca:06:2e:98:96:df:55:08:a1:a5:f4:
82:a4:d0:28:e8:24:c7:3b:ad:51:60:e0:01:af:cd:2f:4a:1d:
34:e6:3b:6e:c5:98:dd:c2:fd:cd:de:bb:0b:e0:4c:79:68:ab:
7c:1a:48:81:d3:7d:2f:e3:35:a8:e8:c1:2c:5c:8a:97:b4:9e:
aa:2f:e9:e3:18:5b:ac:62:63:fb:f3:6d:cd:b4:92:64:c3:e2:
e1:d1:cf:44:3a:4f:16:e2:23:d8:f8:e9:f7:e7:22:26:28:df:
1b:d6:21:a5:21:65:f3:f1:cd:9a:39:f8:75:ce:34:f9:65:a6:
b1:10:41:39:2b:74:cc:07:a0:e6:91:ef:5c:68:6f:54:a5:d8:
1a:43:d1:b5:e4:ed:ea:3e:96:3f:66:9f:25:6f:8c:16:2f:8c:
f2:3d:f1:ef:ee:b0:57:b3:de:35:54:6b:cf:ec:95:26:51:cd:
f2:c7:6f:a8:4e:59:59:91:56:b5:7c:39:0b:ec:07:a9:92:bd:
91:fb:8c:31:ef:2f:de:ca:26:40:cb:bc:95:3b:e3:49:cc:c7:
a2:1d:90:56:7d:44:39:5e:c8:66:e0:a8:01:c4:3f:bd:67:a1:
70:53:35:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa0RjjIpsDDCWpMakH0kuRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjUwNTA5MDkwMDIyWhcNMjUwNTEwMDkwMDIyWjAzMTEwLwYDVQQD
Eyg4ZWFhMTRmODhjNzE3ODQ2NGRlOWU2NWUxM2MyYTU3Y2VkNDA4YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nzKdSi8tGUUqQNIVsOtogzF3TA3
CUvpPsHI4+3OrVIvQ7inApmMrFC0r+6k7/uPkvmzl1SPoPSbd+u0yPjYoHYXyaiC
fQLTwYmEYc2dG/T9wpb80+s2ng48B1RGDTKWcjtyf0a0HRnVf9O9F0vZWK2y5uNe
DEcGTwuTXpUHh08DbraLrSux9Thaqxk5sFMHxdlMwh2R6EuK6cJGh6ZH4UYAlb7T
WjAd8nUcGnOvVYDzNUpS2hD1FybXes3InXHei6uL5lW3Hgknq19LnIcEmszY9Abm
0dKdhrbm0sMqn2ovpNSgKc49R2yWY9dG489Ck78Lckl0mWklQHuTCP+PbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6qFPiMcXhGTenmXhPCpXztQIxnMB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBmPaLqx
GtGoy0EHh5silZo4aPaI7tDSJsoGLpiW31UIoaX0gqTQKOgkxzutUWDgAa/NL0od
NOY7bsWY3cL9zd67C+BMeWirfBpIgdN9L+M1qOjBLFyKl7Seqi/p4xhbrGJj+/Nt
zbSSZMPi4dHPRDpPFuIj2Pjp9+ciJijfG9YhpSFl8/HNmjn4dc40+WWmsRBBOSt0
zAeg5pHvXGhvVKXYGkPRteTt6j6WP2afJW+MFi+M8j3x7+6wV7PeNVRrz+yVJlHN
8sdvqE5ZWZFWtXw5C+wHqZK9kfuMMe8v3somQMu8lTvjSczHoh2QVn1EOV7IZuCo
AcQ/vWehcFM18w==
-----END CERTIFICATE-----
Generated at Fri May 9 18:54:12 2025 by rpki-client