Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: 3iJbeNHSp/4c/0hi9uxMGmVHEtvfAqE1Dfr3tTJi07Y=
Subject key identifier: 89:94:CD:73:0F:DA:45:0E:20:39:1C:6E:B2:B0:45:7D:3D:2D:7F:2E
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 0196759E6D979C14AB3D660CF490A2B3B422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 05:00:39 +0000
Manifest this update: Sun 27 Apr 2025 05:00:39 +0000
Manifest next update: Mon 28 Apr 2025 05:00:39 +0000
Files and hashes: 1: Sk4x_HD1LPLgRyf7btPjY4ncmxU.roa (hash: +rugmwU9Eq5brIUvEJKCQXzHVBLNVvEt2u6gto3U47Q=)
2: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: fvygZqakEpQNDB1IokM4t8mxmFVfB24CBzSgVzZyLNc=)
3: xNwSYwAbBI1je8GEBcLJwVabZvM.roa (hash: rsROgVJBvuKbZk2mF1z0pX159BnG002ygt7Nhxzcdxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:6d:97:9c:14:ab:3d:66:0c:f4:90:a2:b3:b4:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Apr 27 05:00:39 2025 GMT
Not After : Apr 28 05:00:39 2025 GMT
Subject: CN=8994cd730fda450e20391c6eb2b0457d3d2d7f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b5:60:b7:34:ef:e6:d3:f1:9a:71:e1:da:87:
de:46:00:cb:15:9d:6b:7c:23:22:10:98:74:3f:30:
3b:2f:16:2c:7b:c0:4f:75:3f:2e:c0:29:77:fc:8a:
1b:e8:2e:f9:b0:1e:41:65:f3:e9:a2:fd:b2:dc:ad:
9b:7e:70:90:33:06:02:98:7e:55:ca:d1:dc:f0:8c:
f2:1e:2c:d1:67:b9:35:5b:2a:90:d8:21:57:3e:d8:
76:b4:5f:cf:fb:e4:43:47:32:9f:55:cc:7e:e3:3c:
30:5c:3f:f1:dc:16:d4:ba:3b:11:e0:84:3b:64:59:
ae:11:17:32:a4:e5:8a:95:3c:2a:d1:2b:c9:c9:a9:
29:0f:3d:41:f5:54:d0:57:f4:5d:91:82:d6:e2:b4:
0f:fb:d3:b8:e8:b3:d3:ee:f3:57:f1:f9:e3:95:74:
80:d7:c9:e1:c1:c5:1f:f9:fa:df:5a:5e:36:60:42:
5e:1e:51:28:8b:33:06:cb:d8:74:f7:41:cc:70:98:
d7:9a:bc:86:f9:50:3b:03:b2:e7:67:df:c5:78:2d:
03:f1:2c:61:1a:ab:86:b7:11:d3:c8:2d:ab:2d:a7:
f1:87:9a:9a:34:6d:07:13:51:e0:bc:b4:7e:b5:6e:
41:d1:b8:d3:32:6f:ca:4f:84:67:17:3d:64:9c:55:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:CD:73:0F:DA:45:0E:20:39:1C:6E:B2:B0:45:7D:3D:2D:7F:2E
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:84:9a:37:54:80:4a:8a:03:a2:64:e2:4b:d6:d5:84:15:83:
13:b2:01:5f:14:94:38:44:e8:14:17:53:14:8a:b7:92:70:31:
ba:61:4e:68:f7:ce:d1:3f:2a:46:71:25:0b:cf:a0:2c:a3:4f:
4f:75:ad:f2:ed:6d:48:34:5f:b6:06:40:e3:e5:54:1f:e0:5a:
88:ec:74:06:66:8f:96:cf:4b:b3:c2:07:64:77:1f:bd:22:06:
75:0b:5c:e8:56:a2:6e:72:39:5f:d5:35:b9:f7:e0:74:2b:af:
8f:29:7d:ce:07:ad:44:3f:02:25:29:68:7d:e4:19:6d:52:cb:
f6:7b:a9:2b:37:8a:41:87:82:71:75:f1:a9:35:6a:48:ff:1a:
b0:ab:f5:7e:0b:1f:e4:7d:15:81:36:2d:c3:8c:99:ce:b3:c0:
0e:38:73:11:81:a4:a4:bd:59:ed:b3:8b:cd:7e:b8:94:3a:8f:
bc:9d:b3:ef:10:b8:c6:a4:e1:38:66:b1:12:06:37:14:cc:18:
5a:2a:42:e8:a7:29:69:4d:e8:80:6b:55:e1:9b:68:32:7e:ff:
83:ca:f2:d6:a9:bc:eb:d7:e9:b8:f6:28:62:ec:9e:3b:96:75:
6e:25:d8:f8:60:62:ca:33:bf:4d:28:93:0d:3c:10:35:79:42:
5d:f4:90:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nm2XnBSrPWYM9JCis7QiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjUwNDI3MDUwMDM5WhcNMjUwNDI4MDUwMDM5WjAzMTEwLwYDVQQD
Eyg4OTk0Y2Q3MzBmZGE0NTBlMjAzOTFjNmViMmIwNDU3ZDNkMmQ3ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurVgtzTv5tPxmnHh2ofeRgDLFZ1r
fCMiEJh0PzA7LxYse8BPdT8uwCl3/Iob6C75sB5BZfPpov2y3K2bfnCQMwYCmH5V
ytHc8IzyHizRZ7k1WyqQ2CFXPth2tF/P++RDRzKfVcx+4zwwXD/x3BbUujsR4IQ7
ZFmuERcypOWKlTwq0SvJyakpDz1B9VTQV/RdkYLW4rQP+9O46LPT7vNX8fnjlXSA
18nhwcUf+frfWl42YEJeHlEoizMGy9h090HMcJjXmryG+VA7A7LnZ9/FeC0D8Sxh
GquGtxHTyC2rLafxh5qaNG0HE1HgvLR+tW5B0bjTMm/KT4RnFz1knFV6cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImUzXMP2kUOIDkcbrKwRX09LX8uMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoSaN1SA
SooDomTiS9bVhBWDE7IBXxSUOEToFBdTFIq3knAxumFOaPfO0T8qRnElC8+gLKNP
T3Wt8u1tSDRftgZA4+VUH+BaiOx0BmaPls9Ls8IHZHcfvSIGdQtc6FaibnI5X9U1
uffgdCuvjyl9zgetRD8CJSlofeQZbVLL9nupKzeKQYeCcXXxqTVqSP8asKv1fgsf
5H0VgTYtw4yZzrPADjhzEYGkpL1Z7bOLzX64lDqPvJ2z7xC4xqThOGaxEgY3FMwY
WipC6KcpaU3ogGtV4ZtoMn7/g8ry1qm869fpuPYoYuyeO5Z1biXY+GBiyjO/TSiT
DTwQNXlCXfSQ/g==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:54:24 2025 by rpki-client