Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: SS+tWRBX74le/w8ruVaxIoyVxcdByTkXtVc3W0Ws1xY=
Subject key identifier: FD:3A:EC:8C:42:64:C4:1C:51:FE:82:4B:10:10:00:EC:99:C4:3E:6C
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 0196767A370952859CBE4364CE2D013196F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 04A2
Signing time: Sun 27 Apr 2025 09:00:43 +0000
Manifest this update: Sun 27 Apr 2025 09:00:43 +0000
Manifest next update: Mon 28 Apr 2025 09:00:43 +0000
Files and hashes: 1: 0Z-rzxBLOWIfSfgExnNziFjknFI.roa (hash: WIPxFrkjwE/aiN3DpBiUfgIiKOHJkBOTh5tGpO+hM/Q=)
2: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: R2bbq/Bh5bBmvS5u0+92p7Gt3Rph517XTo9yyrG5AlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:37:09:52:85:9c:be:43:64:ce:2d:01:31:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: Apr 27 09:00:43 2025 GMT
Not After : Apr 28 09:00:43 2025 GMT
Subject: CN=fd3aec8c4264c41c51fe824b101000ec99c43e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:19:d6:27:d7:df:6d:8f:a7:e9:ad:5c:75:
4b:3c:b9:2c:a5:07:7f:89:5e:cb:bd:1d:c5:33:b7:
c2:0f:a9:24:b0:95:fb:ac:80:b0:f1:48:99:ab:64:
f2:ac:d2:6c:4c:de:50:47:fa:bd:cb:3b:b7:ae:42:
e4:78:63:1b:c5:2a:0f:76:2f:2c:24:6c:0c:63:39:
6d:68:2b:eb:0f:f6:d9:c4:a2:64:11:ce:c4:18:a6:
b2:74:9b:c7:3e:78:d1:62:04:79:0f:4d:50:6c:ae:
25:bb:e4:7f:eb:f1:11:52:af:42:fb:06:fc:c2:ea:
78:58:60:8f:9f:32:2c:b8:ea:46:6d:a2:02:d8:2d:
78:8a:27:1a:ec:4e:8f:4e:1b:f0:ae:f1:60:94:60:
9b:65:a5:a5:c4:fe:17:29:95:1c:ce:84:10:5b:28:
92:55:02:01:5a:0d:04:e3:88:3f:61:ad:92:cd:4e:
da:6a:97:5a:93:cd:9a:6d:af:46:ea:ad:0c:a1:28:
18:9b:9a:d2:d0:95:4d:9e:d5:a5:b1:1e:1b:a2:fa:
3a:75:40:8f:e0:50:de:98:03:08:59:bb:aa:b9:6b:
e3:a8:cd:2c:68:55:0b:24:a6:d1:a7:70:6e:96:47:
44:48:b4:62:33:33:e1:23:9d:91:21:1b:1b:33:c3:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:EC:8C:42:64:C4:1C:51:FE:82:4B:10:10:00:EC:99:C4:3E:6C
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:40:e8:4c:db:52:14:8b:67:cb:57:4a:4f:87:b3:1c:00:a3:
19:0b:d5:91:fc:9d:9f:a2:1f:03:dd:d5:0d:ba:69:c6:22:79:
de:f3:ae:46:cc:80:6d:25:35:cc:3b:bd:61:65:36:31:f3:36:
f5:79:49:f5:9e:a8:6c:2a:d9:1e:27:90:b0:b3:f1:c4:ef:d7:
03:0d:af:34:8b:40:2b:0a:30:bf:ed:24:cb:7d:3e:f9:82:43:
66:36:ab:a9:51:cb:70:0c:56:c5:b1:1c:dc:56:fe:79:db:db:
27:15:07:22:a6:0f:44:c0:a7:ae:1a:81:5b:83:97:5f:08:24:
e9:52:70:94:b0:ce:43:5d:4b:d1:a6:54:13:bc:d7:0e:b6:f7:
e9:a5:8a:63:89:be:a1:1d:e4:1b:b2:6e:8d:f7:49:8d:27:56:
46:cd:d7:8c:43:91:e7:d0:7a:ae:3c:cc:5e:9b:73:e1:f5:0a:
ac:78:61:91:22:33:48:8c:46:e6:34:ef:98:a1:59:fc:39:9e:
3b:b2:51:d2:42:b8:f1:b7:07:47:fc:28:13:34:25:5c:1d:cc:
a0:63:be:4d:6a:0d:d3:7d:34:79:4e:d4:23:2c:f8:48:c7:80:
4f:e5:ed:7d:80:42:48:16:2e:13:72:67:1f:e8:d8:88:5c:48:
4f:33:77:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ejcJUoWcvkNkzi0BMZbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0N2U2MmNiZjVmZWYzMzc3ZjllN2NkNTg1NThmNDRlMmVl
YTliY2UwHhcNMjUwNDI3MDkwMDQzWhcNMjUwNDI4MDkwMDQzWjAzMTEwLwYDVQQD
EyhmZDNhZWM4YzQyNjRjNDFjNTFmZTgyNGIxMDEwMDBlYzk5YzQzZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtkZ1ifX322Pp+mtXHVLPLkspQd/
iV7LvR3FM7fCD6kksJX7rICw8UiZq2TyrNJsTN5QR/q9yzu3rkLkeGMbxSoPdi8s
JGwMYzltaCvrD/bZxKJkEc7EGKaydJvHPnjRYgR5D01QbK4lu+R/6/ERUq9C+wb8
wup4WGCPnzIsuOpGbaIC2C14iica7E6PThvwrvFglGCbZaWlxP4XKZUczoQQWyiS
VQIBWg0E44g/Ya2SzU7aapdak82aba9G6q0MoSgYm5rS0JVNntWlsR4bovo6dUCP
4FDemAMIWbuquWvjqM0saFULJKbRp3BulkdESLRiMzPhI52RIRsbM8M73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP067IxCZMQcUf6CSxAQAOyZxD5sMB8GA1UdIwQY
MBaAFNR+Ysv1/vM3f5581YVY9E4u6pvOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEt
NDY5ZDNhNTFkNDdkLzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTlkNGUtMTIyNi00MGU3LWE5YzEtNDY5ZDNhNTFkNDdk
LzEvMUg1aXlfWC04emRfbm56VmhWajBUaTdxbTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEDoTNtS
FItny1dKT4ezHACjGQvVkfydn6IfA93VDbppxiJ53vOuRsyAbSU1zDu9YWU2MfM2
9XlJ9Z6obCrZHieQsLPxxO/XAw2vNItAKwowv+0ky30++YJDZjarqVHLcAxWxbEc
3Fb+edvbJxUHIqYPRMCnrhqBW4OXXwgk6VJwlLDOQ11L0aZUE7zXDrb36aWKY4m+
oR3kG7JujfdJjSdWRs3XjEOR59B6rjzMXptz4fUKrHhhkSIzSIxG5jTvmKFZ/Dme
O7JR0kK48bcHR/woEzQlXB3MoGO+TWoN0300eU7UIyz4SMeAT+XtfYBCSBYuE3Jn
H+jYiFxITzN3zw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:19 2025 by rpki-client