Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File: edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier: BKFftWaIJHx8xUXcIHSZ98QWK4vpYzb4ILQeGZuwB6s=
Subject key identifier: 0C:AB:9D:C1:96:8D:1B:BE:B1:43:6A:24:88:A6:5F:3B:F2:38:BA:87
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 01968021B3C10A3505C3E9B91F6700F02928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number: 0C38
Signing time: Tue 29 Apr 2025 06:00:14 +0000
Manifest this update: Tue 29 Apr 2025 06:00:14 +0000
Manifest next update: Wed 30 Apr 2025 06:00:14 +0000
Files and hashes: 1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: Ft81aJWyoTqviX+DTtfOrCbJ56K5hAg1h4Li8rdyqpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:21:b3:c1:0a:35:05:c3:e9:b9:1f:67:00:f0:29:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Apr 29 06:00:14 2025 GMT
Not After : Apr 30 06:00:14 2025 GMT
Subject: CN=0cab9dc1968d1bbeb1436a2488a65f3bf238ba87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:44:98:25:27:42:88:2b:4a:32:86:4a:73:
36:fe:47:49:4f:18:62:ed:31:27:28:fa:40:c0:9f:
83:74:de:80:8c:08:2c:89:01:26:2a:45:cb:0d:b4:
88:c0:0b:d8:81:c8:7d:69:b3:f2:b4:7b:15:6a:9e:
5f:f0:4d:f8:95:ec:0e:ef:92:7a:b1:dd:26:a1:b7:
4a:97:44:7a:d4:b2:bf:16:ca:1d:21:43:5d:8c:67:
17:a1:fc:6f:7d:01:e2:b7:e4:dc:67:93:69:ee:5b:
de:78:20:8f:fc:4c:de:49:11:30:85:3b:25:a7:50:
d2:6d:18:02:5a:9b:de:0e:04:af:b3:1b:ac:51:94:
41:6a:b0:b1:63:78:c5:bd:5f:46:a4:d9:ea:14:3a:
e8:62:e2:0a:74:de:41:f1:34:be:8f:a0:7d:38:33:
35:50:d8:41:a8:6a:4c:ab:c5:13:90:0e:e3:49:4f:
04:b3:33:08:5d:94:2d:d3:80:79:21:0c:db:67:78:
42:16:3f:8f:c6:80:94:09:22:32:78:5d:1b:36:05:
f9:29:fc:2e:a9:0f:dc:17:99:ea:ad:1a:e8:f4:65:
2f:ef:94:24:95:08:9c:dc:b6:c4:c3:af:ed:c1:b1:
3e:08:95:be:58:c1:de:cb:7c:2b:53:fa:fb:6a:34:
28:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:9D:C1:96:8D:1B:BE:B1:43:6A:24:88:A6:5F:3B:F2:38:BA:87
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fc:ad:8d:7b:bb:73:4c:a9:83:f3:95:d4:d4:11:96:8d:9c:
5a:a0:f6:43:a1:03:af:03:26:e1:2f:e6:f2:b9:8a:26:69:95:
b3:d6:28:7a:6a:b2:10:ed:2e:86:44:7a:1e:24:e2:2f:c6:9a:
14:52:70:df:75:13:93:a0:3f:de:7f:9c:8b:e9:ac:e5:24:2c:
e1:54:a7:88:b9:f3:81:45:19:ea:ab:be:b3:51:a4:2f:48:fe:
05:b7:d8:72:e3:18:4c:14:69:d2:b2:9b:b6:1a:19:0a:ea:92:
d4:7d:2e:cc:16:e6:aa:c5:1d:03:a0:6d:f7:f1:2c:72:e7:68:
3a:d9:b0:12:9a:81:e8:47:92:c7:f6:59:0d:06:bd:d0:ed:e8:
f8:9d:fc:ab:fb:e6:79:21:89:13:08:96:a2:e2:61:42:9b:b8:
fa:c6:84:4b:e0:51:3c:4e:59:9c:ca:99:18:09:60:e4:4d:06:
36:d9:1a:54:50:0f:dd:f5:90:a1:b3:c3:96:21:42:a5:83:17:
0e:98:20:97:88:ad:21:a5:03:c4:f8:6c:0c:9b:a5:c5:bb:55:
7e:ae:81:42:c6:8d:07:d4:a9:85:43:e0:a3:88:65:c8:12:fd:
a4:48:43:4a:a3:2a:c8:71:5a:8c:2b:f4:51:3b:df:75:65:68:
11:c9:17:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaAIbPBCjUFw+m5H2cA8CkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjUwNDI5MDYwMDE0WhcNMjUwNDMwMDYwMDE0WjAzMTEwLwYDVQQD
EygwY2FiOWRjMTk2OGQxYmJlYjE0MzZhMjQ4OGE2NWYzYmYyMzhiYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgNEmCUnQogrSjKGSnM2/kdJTxhi
7TEnKPpAwJ+DdN6AjAgsiQEmKkXLDbSIwAvYgch9abPytHsVap5f8E34lewO75J6
sd0mobdKl0R61LK/FsodIUNdjGcXofxvfQHit+TcZ5Np7lveeCCP/EzeSREwhTsl
p1DSbRgCWpveDgSvsxusUZRBarCxY3jFvV9GpNnqFDroYuIKdN5B8TS+j6B9ODM1
UNhBqGpMq8UTkA7jSU8EszMIXZQt04B5IQzbZ3hCFj+PxoCUCSIyeF0bNgX5Kfwu
qQ/cF5nqrRro9GUv75QklQic3LbEw6/twbE+CJW+WMHey3wrU/r7ajQoZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyrncGWjRu+sUNqJIimXzvyOLqHMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPytjXu7
c0ypg/OV1NQRlo2cWqD2Q6EDrwMm4S/m8rmKJmmVs9YoemqyEO0uhkR6HiTiL8aa
FFJw33UTk6A/3n+ci+ms5SQs4VSniLnzgUUZ6qu+s1GkL0j+BbfYcuMYTBRp0rKb
thoZCuqS1H0uzBbmqsUdA6Bt9/EscudoOtmwEpqB6EeSx/ZZDQa90O3o+J38q/vm
eSGJEwiWouJhQpu4+saES+BRPE5ZnMqZGAlg5E0GNtkaVFAP3fWQobPDliFCpYMX
Dpggl4itIaUDxPhsDJulxbtVfq6BQsaNB9SphUPgo4hlyBL9pEhDSqMqyHFajCv0
UTvfdWVoEckXFg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:25 2025 by rpki-client