Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json)
Hash identifier: tZjLfBdPF4uFsq2n+j5NvngNggLe9eaodsTgB4KFxTo=
Subject key identifier: B7:A1:D2:81:29:5B:B4:CB:CC:4D:37:C7:5D:B1:B9:1E:E5:6C:E4:81
Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822
Certificate serial: 019682475DA9C19674487F2C70216CB95FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
Manifest number: 08A8
Signing time: Tue 29 Apr 2025 16:00:37 +0000
Manifest this update: Tue 29 Apr 2025 16:00:37 +0000
Manifest next update: Wed 30 Apr 2025 16:00:37 +0000
Files and hashes: 1: 5uh-8NvfQB_oZowhRUdfu_0v2fA.roa (hash: gCC1UC6wWvqsz5JLnyhaum++DmlgyZmiMdDqSAXaOG4=)
2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: dcrVM5dxpKyE4T448njWROsMkCo7dWTSL9oiP02aVdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:5d:a9:c1:96:74:48:7f:2c:70:21:6c:b9:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822
Validity
Not Before: Apr 29 16:00:37 2025 GMT
Not After : Apr 30 16:00:37 2025 GMT
Subject: CN=b7a1d281295bb4cbcc4d37c75db1b91ee56ce481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:9a:e0:68:05:82:5d:17:45:f6:ba:79:17:
ce:73:43:85:d3:ef:8d:9d:14:ae:03:1e:fb:7d:83:
7d:a2:30:c6:6d:d6:eb:71:64:82:45:0d:80:73:71:
26:14:67:37:b4:74:01:bd:04:9b:16:e9:c2:d7:a7:
9f:c6:43:87:6a:bd:0f:5d:ea:8c:99:fb:ed:96:67:
6b:fc:14:60:42:0d:3d:63:20:19:3e:7e:5a:1c:8c:
7f:30:dd:c0:26:07:97:63:2b:7a:04:83:df:22:66:
ed:44:28:dd:e5:b2:ac:36:88:c0:e0:de:c7:d2:7b:
45:45:58:17:f3:c1:2a:b8:4c:f0:4d:a0:82:7d:b4:
b8:cc:7f:68:84:1e:06:d0:79:0c:1f:43:f5:31:e8:
39:96:79:29:35:e8:99:a4:c2:19:8e:5a:58:2c:1c:
0c:f0:24:12:41:27:50:de:e4:01:26:98:d4:13:78:
c9:ae:25:3b:e3:fa:8a:55:d7:6e:4d:a9:06:08:c3:
18:63:49:00:cf:1b:2f:ed:68:7a:de:f9:31:4a:52:
aa:0d:8e:3c:51:78:b3:01:bf:1e:8f:f9:d6:8f:9d:
e5:cb:f9:c1:2e:04:04:b0:20:6f:8e:f7:25:1f:f9:
ad:fd:0a:45:7e:0e:a7:c5:28:18:1f:77:55:b8:65:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A1:D2:81:29:5B:B4:CB:CC:4D:37:C7:5D:B1:B9:1E:E5:6C:E4:81
X509v3 Authority Key Identifier:
keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:98:ee:93:7b:62:22:ae:df:9a:35:7e:6b:8f:f5:89:c1:
e1:66:0a:ce:44:32:3e:41:0e:c5:52:8c:5a:4f:27:4d:30:65:
bf:7f:eb:ce:3c:22:55:db:eb:88:05:5d:8a:94:c8:c7:cf:52:
06:d7:65:95:69:57:0a:d2:1c:05:9d:2d:a5:94:d1:4d:ab:eb:
d1:9e:11:ef:f6:ff:ea:2e:30:aa:9a:9e:36:1d:53:19:4f:ca:
ef:23:58:8a:b6:dd:61:af:d5:d2:98:1f:32:6a:01:dd:a7:4e:
a8:90:fc:d7:09:59:f4:5f:c1:50:de:ea:97:f9:e7:29:4c:e3:
c8:78:03:ef:0f:50:95:60:24:b7:89:36:e8:c8:8b:48:ea:a5:
15:b0:d6:84:d6:52:d1:11:4f:26:0d:24:bc:09:1f:db:ef:c5:
46:be:64:06:4d:80:b8:f1:16:7a:4f:a6:33:84:c3:c4:d0:56:
83:20:13:57:fa:f6:73:00:37:b5:41:50:50:a5:63:8f:7d:e4:
2b:67:b1:7d:e3:1a:9d:f3:8c:4f:7d:30:30:eb:0d:fd:2d:46:
4e:ad:29:08:0b:a5:0e:ef:18:ca:a3:e5:e7:34:c5:3f:9e:ee:
c7:36:a8:e6:9a:c5:ca:09:1e:d0:72:8d:86:f3:c1:ab:67:f1:
5d:a6:bd:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR12pwZZ0SH8scCFsuV+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmYwYjMzNjUwYjdkNjQ5OGI5ZjU4YWFjNWEyOTdlOTI2
MTQ4MjIwHhcNMjUwNDI5MTYwMDM3WhcNMjUwNDMwMTYwMDM3WjAzMTEwLwYDVQQD
EyhiN2ExZDI4MTI5NWJiNGNiY2M0ZDM3Yzc1ZGIxYjkxZWU1NmNlNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Oa4GgFgl0XRfa6eRfOc0OF0++N
nRSuAx77fYN9ojDGbdbrcWSCRQ2Ac3EmFGc3tHQBvQSbFunC16efxkOHar0PXeqM
mfvtlmdr/BRgQg09YyAZPn5aHIx/MN3AJgeXYyt6BIPfImbtRCjd5bKsNojA4N7H
0ntFRVgX88EquEzwTaCCfbS4zH9ohB4G0HkMH0P1Meg5lnkpNeiZpMIZjlpYLBwM
8CQSQSdQ3uQBJpjUE3jJriU74/qKVdduTakGCMMYY0kAzxsv7Wh63vkxSlKqDY48
UXizAb8ej/nWj53ly/nBLgQEsCBvjvclH/mt/QpFfg6nxSgYH3dVuGXZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeh0oEpW7TLzE03x12xuR7lbOSBMB8GA1UdIwQY
MBaAFHIvCzNlC31kmLn1iqxaKX6SYUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgt
NjQ3Mjg5YWQ1YTIyLzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgtNjQ3Mjg5YWQ1YTIy
LzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSSY7pN7
YiKu35o1fmuP9YnB4WYKzkQyPkEOxVKMWk8nTTBlv3/rzjwiVdvriAVdipTIx89S
BtdllWlXCtIcBZ0tpZTRTavr0Z4R7/b/6i4wqpqeNh1TGU/K7yNYirbdYa/V0pgf
MmoB3adOqJD81wlZ9F/BUN7ql/nnKUzjyHgD7w9QlWAkt4k26MiLSOqlFbDWhNZS
0RFPJg0kvAkf2+/FRr5kBk2AuPEWek+mM4TDxNBWgyATV/r2cwA3tUFQUKVjj33k
K2exfeManfOMT30wMOsN/S1GTq0pCAulDu8YyqPl5zTFP57uxzao5prFygke0HKN
hvPBq2fxXaa9VA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:11:17 2025 by rpki-client