Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
File: fSoBIksdqGSAz-y8tsUt-YEpaOg.mft (raw, json)
Hash identifier: 6qCU9rsxFJmWctms7eyapHR4SlvhYsqE00izVAz9NXo=
Subject key identifier: B2:2E:3D:E0:5D:CA:FC:D7:26:65:9C:00:A0:C6:66:10:D7:4F:0E:D5
Authority key identifier: 7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
Certificate issuer: /CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Certificate serial: 01968D01EDA9C2765B94F2C0A90AE87CB314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
Manifest number: 0EC4
Signing time: Thu 01 May 2025 18:00:35 +0000
Manifest this update: Thu 01 May 2025 18:00:35 +0000
Manifest next update: Fri 02 May 2025 18:00:35 +0000
Files and hashes: 1: 3L4Ds4lPDiLLOvZ8T2NW6fHNbRs.roa (hash: NwLfkOcBti2VO8eJgA/iflwdsDMiN5aPUXSbDozw53I=)
2: Gg8qXyeg-gil2NOkr3thvUZqwIE.roa (hash: pEcvppDB8KUs5+dwI7YABXPT/TWvmUqee92Iz6LzfZk=)
3: fSoBIksdqGSAz-y8tsUt-YEpaOg.crl (hash: xjeOIDO0vdCyLZ66qSnW8g45Q22UstC2HWZusV53GmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:01:ed:a9:c2:76:5b:94:f2:c0:a9:0a:e8:7c:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d2a01224b1da86480cfecbcb6c52df9812968e8
Validity
Not Before: May 1 18:00:35 2025 GMT
Not After : May 2 18:00:35 2025 GMT
Subject: CN=b22e3de05dcafcd726659c00a0c66610d74f0ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:51:3f:6a:00:e1:6b:14:e4:4a:9d:50:fb:
16:8c:dd:63:dd:4a:58:b2:6c:cd:dc:3a:e5:62:ba:
64:aa:90:45:55:c1:4d:47:23:bb:5e:dc:68:36:cc:
e4:f9:53:a5:93:d1:09:25:c0:91:6e:db:98:be:ed:
75:0e:7a:ce:a0:e4:e9:cc:e3:f7:af:c0:f1:b3:0f:
63:e6:b3:2e:b9:0c:54:6f:00:47:e0:34:7f:f4:de:
fc:ea:ff:9b:74:5e:3b:7b:19:4d:c4:6b:eb:c6:c1:
77:24:55:8b:9c:75:67:0d:66:fb:fb:da:59:b1:65:
8e:26:32:12:08:8c:8d:89:0a:bf:e3:8a:82:17:c0:
90:c6:ad:65:8b:ad:f4:63:99:ec:5d:ad:75:56:f2:
2c:12:b5:18:10:9d:7a:ee:3f:0f:15:36:0a:3f:cb:
06:2d:18:ff:45:83:1b:df:6c:f4:82:9a:2c:5d:c7:
3b:8a:e8:8a:87:cd:9b:6e:b3:dd:ac:49:4d:bf:6c:
5d:ea:31:a2:95:75:eb:54:54:98:bd:51:71:fa:b7:
18:02:48:32:e6:59:7f:2f:85:97:da:28:1c:db:da:
cb:b9:b8:19:6d:1c:5d:28:ee:eb:1a:7a:3d:50:59:
77:69:81:e8:c3:8d:d7:5a:6a:b0:a8:1c:33:53:63:
91:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2E:3D:E0:5D:CA:FC:D7:26:65:9C:00:A0:C6:66:10:D7:4F:0E:D5
X509v3 Authority Key Identifier:
keyid:7D:2A:01:22:4B:1D:A8:64:80:CF:EC:BC:B6:C5:2D:F9:81:29:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSoBIksdqGSAz-y8tsUt-YEpaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c41f77-b6a2-4494-a074-4fae84fa158e/1/fSoBIksdqGSAz-y8tsUt-YEpaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a7:70:08:0e:f3:b2:8d:4e:a2:52:d7:2f:7b:9b:10:aa:b9:
bc:d2:37:ee:80:73:7c:45:e7:4f:4c:bd:1d:68:95:fe:6c:b0:
30:4a:e3:80:a0:38:a8:d9:28:4f:cd:ee:6c:45:dc:4f:57:1f:
3e:d6:f9:7c:23:6a:ce:de:c9:bf:4f:43:fc:40:c7:0f:45:5f:
a8:9e:cb:ab:a3:fa:17:eb:1f:2c:32:59:a6:b7:8a:35:3f:04:
9b:72:e6:29:da:51:13:5b:8c:14:a3:24:01:5f:f1:c8:a5:8e:
81:3d:de:11:da:a4:bb:63:db:14:c3:71:dd:9e:ae:7d:8a:1e:
c3:25:4f:4f:3c:d1:08:3a:eb:59:fd:96:76:a3:8b:35:80:7e:
80:13:9a:6f:d5:2f:0d:80:02:83:12:54:cd:52:eb:0d:2b:38:
70:2c:a7:3c:8a:d5:0d:89:e1:27:28:d1:4a:5c:af:91:d4:49:
59:15:ff:66:b8:9f:c7:e2:f3:40:64:b4:c4:c0:b0:db:03:82:
b3:86:20:bd:fb:37:cc:0f:cc:d2:ed:0b:a6:b1:37:44:98:3c:
2c:2a:e1:7b:a6:13:7b:58:0e:55:9e:87:bf:97:12:4b:5a:6e:
8b:82:49:36:56:20:0a:f0:b3:32:eb:73:57:9b:b4:e8:af:76:
a6:87:8b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNAe2pwnZblPLAqQrofLMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMmEwMTIyNGIxZGE4NjQ4MGNmZWNiY2I2YzUyZGY5ODEy
OTY4ZTgwHhcNMjUwNTAxMTgwMDM1WhcNMjUwNTAyMTgwMDM1WjAzMTEwLwYDVQQD
EyhiMjJlM2RlMDVkY2FmY2Q3MjY2NTljMDBhMGM2NjYxMGQ3NGYwZWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArldRP2oA4WsU5EqdUPsWjN1j3UpY
smzN3DrlYrpkqpBFVcFNRyO7XtxoNszk+VOlk9EJJcCRbtuYvu11DnrOoOTpzOP3
r8Dxsw9j5rMuuQxUbwBH4DR/9N786v+bdF47exlNxGvrxsF3JFWLnHVnDWb7+9pZ
sWWOJjISCIyNiQq/44qCF8CQxq1li630Y5nsXa11VvIsErUYEJ167j8PFTYKP8sG
LRj/RYMb32z0gposXcc7iuiKh82bbrPdrElNv2xd6jGilXXrVFSYvVFx+rcYAkgy
5ll/L4WX2igc29rLubgZbRxdKO7rGno9UFl3aYHow43XWmqwqBwzU2ORowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIuPeBdyvzXJmWcAKDGZhDXTw7VMB8GA1UdIwQY
MBaAFH0qASJLHahkgM/svLbFLfmBKWjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQt
NGZhZTg0ZmExNThlLzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9jNDFmNzctYjZhMi00NDk0LWEwNzQtNGZhZTg0ZmExNThl
LzEvZlNvQklrc2RxR1NBei15OHRzVXQtWUVwYU9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKdwCA7z
so1OolLXL3ubEKq5vNI37oBzfEXnT0y9HWiV/mywMErjgKA4qNkoT83ubEXcT1cf
Ptb5fCNqzt7Jv09D/EDHD0VfqJ7Lq6P6F+sfLDJZpreKNT8Em3LmKdpRE1uMFKMk
AV/xyKWOgT3eEdqku2PbFMNx3Z6ufYoewyVPTzzRCDrrWf2WdqOLNYB+gBOab9Uv
DYACgxJUzVLrDSs4cCynPIrVDYnhJyjRSlyvkdRJWRX/Zrifx+LzQGS0xMCw2wOC
s4Ygvfs3zA/M0u0LprE3RJg8LCrhe6YTe1gOVZ6Hv5cSS1pui4JJNlYgCvCzMutz
V5u06K92poeL/A==
-----END CERTIFICATE-----
Generated at Thu May 1 21:38:56 2025 by rpki-client