Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File: itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier: 3UVF+ax4D2/B9E9T7WRPIkvTdb3Q4YQmq9T1WP9PJ0o=
Subject key identifier: 67:77:CC:6D:67:95:8A:AE:5B:B2:1F:BB:FF:9C:27:7A:C4:0A:23:F8
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01967FB41FF7D132CA37DAEAA72A1473C01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 04:00:33 +0000
Manifest this update: Tue 29 Apr 2025 04:00:33 +0000
Manifest next update: Wed 30 Apr 2025 04:00:33 +0000
Files and hashes: 1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: qir12+PzPpeMMdWTyLxV/71Gr9ThNB/FzE2ThipnrHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:1f:f7:d1:32:ca:37:da:ea:a7:2a:14:73:c0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Apr 29 04:00:33 2025 GMT
Not After : Apr 30 04:00:33 2025 GMT
Subject: CN=6777cc6d67958aae5bb21fbbff9c277ac40a23f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:17:68:fe:f6:6b:30:a1:72:59:ce:19:d1:
2b:cb:60:5f:e2:05:fe:cf:c7:a3:19:ac:c3:44:95:
8f:72:93:44:a5:ff:62:5a:5c:a6:84:48:77:f8:17:
e2:16:27:17:44:80:d5:84:08:c3:44:7f:f6:26:0d:
15:32:a9:9c:ce:c5:4c:0a:72:44:f8:6c:c6:2d:27:
ff:2a:68:49:93:b8:1e:0c:e8:a8:73:6e:59:23:e1:
4f:c1:c8:10:09:85:5d:70:bb:20:0b:93:eb:69:86:
5d:38:2f:20:77:27:40:82:39:e4:f5:08:c6:89:3b:
0b:bc:81:d7:85:7e:2f:50:4a:1a:82:a5:f3:a3:5b:
36:63:41:da:f8:15:10:6c:6a:b2:7e:a1:8e:4b:66:
a7:28:6b:a7:ab:81:18:b9:fe:c1:2c:17:e8:40:42:
a1:c4:06:a0:1d:48:67:63:38:70:3b:aa:c5:19:c2:
90:80:ae:6e:da:18:72:4a:0f:6f:ec:b2:6e:83:61:
2a:07:8e:08:1d:2c:93:90:35:93:96:01:64:b2:12:
ab:0c:c9:42:5a:ff:9b:06:64:4a:75:20:14:1e:f1:
38:f2:79:d6:c9:bc:0d:9a:c2:ef:c2:6a:c2:78:76:
0f:8f:59:2f:63:6f:43:58:ba:fb:d1:8d:d8:c8:fa:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:CC:6D:67:95:8A:AE:5B:B2:1F:BB:FF:9C:27:7A:C4:0A:23:F8
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:58:14:ca:f5:57:8d:65:66:db:2a:d5:a6:8f:f1:cf:e7:90:
38:67:84:a4:1d:b6:29:0b:80:06:8b:91:1d:7c:e2:37:98:e9:
7c:be:72:09:81:26:f2:81:ac:aa:3b:af:65:63:38:03:15:84:
5d:e2:90:fc:b6:46:8f:f3:da:68:da:8a:6a:4a:b9:63:1b:8b:
b4:15:97:d6:9b:81:c2:68:f6:22:ca:1a:0e:d9:68:b9:83:7c:
5d:b1:84:42:4a:e7:f5:20:65:23:5d:06:a5:3e:a5:f0:2d:4c:
e5:dc:3e:5e:44:d2:27:07:c9:6d:82:17:3d:93:f3:42:32:e6:
d4:4d:07:cb:38:f0:2b:d1:98:6c:0d:99:fe:9a:65:70:ec:8e:
a0:17:e5:76:e6:77:ad:20:42:44:f9:51:6f:33:a5:b4:bc:3b:
3e:6e:72:6c:1d:d3:10:fa:46:9a:3e:a0:96:ad:77:e7:dd:95:
db:30:22:32:8c:b2:ef:3b:6e:d6:1e:23:bf:c6:93:eb:36:13:
b9:6e:fb:55:55:ae:d6:0a:d6:5a:a8:36:c9:04:4d:ef:43:9d:
34:86:7a:22:af:61:e9:bd:57:77:bc:68:92:3e:01:42:97:b4:
3b:6d:47:33:a1:a9:bc:06:eb:19:6f:cf:76:f9:f0:40:fe:08:
0a:61:99:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tB/30TLKN9rqpyoUc8AdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDM3YTk5MzNiMDUyYzJmMTJlZjFiOGYxNGQ3NGYwNWZk
ZGI2MTEwHhcNMjUwNDI5MDQwMDMzWhcNMjUwNDMwMDQwMDMzWjAzMTEwLwYDVQQD
Eyg2Nzc3Y2M2ZDY3OTU4YWFlNWJiMjFmYmJmZjljMjc3YWM0MGEyM2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrMXaP72azChclnOGdEry2Bf4gX+
z8ejGazDRJWPcpNEpf9iWlymhEh3+BfiFicXRIDVhAjDRH/2Jg0VMqmczsVMCnJE
+GzGLSf/KmhJk7geDOioc25ZI+FPwcgQCYVdcLsgC5PraYZdOC8gdydAgjnk9QjG
iTsLvIHXhX4vUEoagqXzo1s2Y0Ha+BUQbGqyfqGOS2anKGunq4EYuf7BLBfoQEKh
xAagHUhnYzhwO6rFGcKQgK5u2hhySg9v7LJug2EqB44IHSyTkDWTlgFkshKrDMlC
Wv+bBmRKdSAUHvE48nnWybwNmsLvwmrCeHYPj1kvY29DWLr70Y3YyPo76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd3zG1nlYquW7Ifu/+cJ3rECiP4MB8GA1UdIwQY
MBaAFIrTepkzsFLC8S7xuPFNdPBf3bYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYt
NWNiMTFhMzY4ZDEwLzEvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZTMxMjYtM2Y0Zi00OGU5LWFiZWYtNWNiMTFhMzY4ZDEw
LzEvaXRONm1UT3dVc0x4THZHNDhVMTA4Rl9kdGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1gUyvVX
jWVm2yrVpo/xz+eQOGeEpB22KQuABouRHXziN5jpfL5yCYEm8oGsqjuvZWM4AxWE
XeKQ/LZGj/PaaNqKakq5YxuLtBWX1puBwmj2IsoaDtlouYN8XbGEQkrn9SBlI10G
pT6l8C1M5dw+XkTSJwfJbYIXPZPzQjLm1E0HyzjwK9GYbA2Z/pplcOyOoBflduZ3
rSBCRPlRbzOltLw7Pm5ybB3TEPpGmj6glq13592V2zAiMoyy7ztu1h4jv8aT6zYT
uW77VVWu1grWWqg2yQRN70OdNIZ6Iq9h6b1Xd7xokj4BQpe0O21HM6GpvAbrGW/P
dvnwQP4ICmGZgA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:13:55 2025 by rpki-client