Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: clQXKHGPjkPQTioAeQOP+3xkspiOK2vd6rhVRXBr00E=
Subject key identifier: AA:C2:00:C7:91:2C:BC:85:B2:37:24:8B:5C:2F:3A:E3:E2:66:76:DB
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019674FA1C01044A4B20D452A017B131E375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 094B
Signing time: Sun 27 Apr 2025 02:01:10 +0000
Manifest this update: Sun 27 Apr 2025 02:01:10 +0000
Manifest next update: Mon 28 Apr 2025 02:01:10 +0000
Files and hashes: 1: IDl9kroYhzoJI3fNYZt14M849Mw.roa (hash: QNB7O1WZxj1n2YGUs6WaUGgoWKZNY20yWJ5q+ijsbDA=)
2: ba5LTz6E_24Z-FWHvFExip3Bfu8.roa (hash: 78/BEK6gt2JG+WEEQwBhHL/YE4AHR9z4L0gDnYa5BSM=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: uNUnVl0DrIP2Tw5skThFuK7Qgg+vwfjosLrJsBqcn0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:1c:01:04:4a:4b:20:d4:52:a0:17:b1:31:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Apr 27 02:01:10 2025 GMT
Not After : Apr 28 02:01:10 2025 GMT
Subject: CN=aac200c7912cbc85b237248b5c2f3ae3e26676db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:90:12:68:2b:3f:4c:82:97:a8:9f:a1:d5:
63:1c:be:1c:2d:b7:c8:7e:75:de:52:69:07:12:d1:
02:3f:b7:b6:3f:75:fb:51:f4:5a:92:4c:1e:45:75:
34:44:40:bb:11:1b:5f:0b:92:bb:23:69:23:4f:36:
07:91:5d:c5:2a:8c:7c:c5:f4:17:53:fd:db:8d:9b:
0c:0e:70:22:4e:b1:ba:e4:ad:29:e1:72:3c:34:2f:
80:36:88:e8:0b:41:e6:ac:cd:f6:68:55:cd:d5:11:
90:db:5a:c0:71:13:9e:8a:3e:7f:0e:37:38:84:2a:
af:75:52:31:d1:ce:89:b0:d6:3a:ce:9c:74:27:3e:
d0:d5:1b:4f:98:a0:c1:9f:39:e0:b8:46:14:bc:ae:
47:8b:78:07:ff:05:07:f3:88:0b:a5:f8:95:f7:dd:
2b:56:73:6b:8f:ef:65:91:10:ef:34:c6:5a:67:84:
ed:d7:34:4b:ac:4c:d3:12:22:22:d5:50:7b:3d:68:
62:6b:f8:5a:fb:c4:72:cf:68:36:c7:a3:d6:55:85:
f8:05:39:5d:11:7a:68:53:d3:d2:49:35:92:dc:c8:
2b:1c:87:bd:09:16:0b:b2:7e:be:7b:17:e2:03:7e:
bb:ad:d6:3c:df:4c:d4:33:67:22:05:98:24:39:db:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:00:C7:91:2C:BC:85:B2:37:24:8B:5C:2F:3A:E3:E2:66:76:DB
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6b:8f:b2:9c:3e:d8:d0:91:53:d7:65:e3:55:96:57:d4:27:
73:74:b7:9f:bd:ee:d7:59:22:a5:bf:ad:91:6f:73:1d:a1:28:
db:f0:e4:6e:d7:b3:bb:6d:02:6a:49:fe:d6:b6:0a:3e:35:42:
9b:2a:08:e8:0e:84:d4:7b:80:5b:bd:32:e9:5c:62:56:32:19:
7b:5c:c4:18:c2:4a:a6:af:74:d6:d4:00:33:a0:f2:2e:97:d6:
39:7a:3d:40:28:b4:7b:f2:79:be:5e:5d:74:d2:37:34:ed:32:
48:6f:3f:2d:0a:33:6e:07:a5:67:bb:e7:de:fa:2f:03:af:a1:
fd:86:7c:52:55:a4:fa:e8:c9:8f:c9:7c:b6:32:ff:d8:87:10:
3e:4f:61:84:40:2d:81:f5:2d:3e:ed:44:f6:09:60:ec:fd:65:
30:9c:59:ee:d8:b6:3b:63:93:a8:1e:c4:20:7e:e1:31:6c:4c:
0d:5d:1e:b6:b0:b1:00:64:6b:04:3d:2c:ef:39:33:6d:d5:0d:
2b:da:c8:a0:a6:ea:37:00:f6:f0:98:e5:d6:c1:a4:3a:29:15:
06:a3:61:33:0b:cb:3d:5f:72:f1:ec:a0:15:d8:d3:9c:d3:af:
df:a5:62:84:d7:21:47:32:5d:fa:d6:7f:c5:22:39:aa:95:86:
f6:16:c7:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0+hwBBEpLINRSoBexMeN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkM2I1MjljOWRjOTUyNmYwOTliZjE2YWM4OWRjYzhhZGZl
MTgyNDAwHhcNMjUwNDI3MDIwMTEwWhcNMjUwNDI4MDIwMTEwWjAzMTEwLwYDVQQD
EyhhYWMyMDBjNzkxMmNiYzg1YjIzNzI0OGI1YzJmM2FlM2UyNjY3NmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH2QEmgrP0yCl6ifodVjHL4cLbfI
fnXeUmkHEtECP7e2P3X7UfRakkweRXU0REC7ERtfC5K7I2kjTzYHkV3FKox8xfQX
U/3bjZsMDnAiTrG65K0p4XI8NC+ANojoC0HmrM32aFXN1RGQ21rAcROeij5/Djc4
hCqvdVIx0c6JsNY6zpx0Jz7Q1RtPmKDBnznguEYUvK5Hi3gH/wUH84gLpfiV990r
VnNrj+9lkRDvNMZaZ4Tt1zRLrEzTEiIi1VB7PWhia/ha+8Ryz2g2x6PWVYX4BTld
EXpoU9PSSTWS3MgrHIe9CRYLsn6+exfiA367rdY830zUM2ciBZgkOdsziwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrCAMeRLLyFsjcki1wvOuPiZnbbMB8GA1UdIwQY
MBaAFK07UpydyVJvCZvxasidzIrf4YJAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTIt
YjIwZWJlNTk1NDc1LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hNjNmZDgtOWIzNi00OTZkLWI2ZTItYjIwZWJlNTk1NDc1
LzEvclR0U25KM0pVbThKbV9GcXlKM01pdF9oZ2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMWuPspw+
2NCRU9dl41WWV9Qnc3S3n73u11kipb+tkW9zHaEo2/Dkbtezu20Cakn+1rYKPjVC
myoI6A6E1HuAW70y6VxiVjIZe1zEGMJKpq901tQAM6DyLpfWOXo9QCi0e/J5vl5d
dNI3NO0ySG8/LQozbgelZ7vn3vovA6+h/YZ8UlWk+ujJj8l8tjL/2IcQPk9hhEAt
gfUtPu1E9glg7P1lMJxZ7ti2O2OTqB7EIH7hMWxMDV0etrCxAGRrBD0s7zkzbdUN
K9rIoKbqNwD28Jjl1sGkOikVBqNhMwvLPV9y8eygFdjTnNOv36VihNchRzJd+tZ/
xSI5qpWG9hbHjw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:12 2025 by rpki-client