Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: h62icTyoecCFVTmu4kNAdvPxlpYpFl3umShG/b3TTAc=
Subject key identifier: 25:CF:B1:1D:1B:43:7F:E9:7D:45:19:D5:5F:3E:78:EE:3C:48:CA:7E
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 01968B81A4847C24F334EDBDE0CF2B61AB98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 098E
Signing time: Thu 01 May 2025 11:00:51 +0000
Manifest this update: Thu 01 May 2025 11:00:51 +0000
Manifest next update: Fri 02 May 2025 11:00:51 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: Cgnw6kVdwhy/qef9LtTg/wQMA4/VxUEFwZU2q0++0Pg=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:81:a4:84:7c:24:f3:34:ed:bd:e0:cf:2b:61:ab:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: May 1 11:00:51 2025 GMT
Not After : May 2 11:00:51 2025 GMT
Subject: CN=25cfb11d1b437fe97d4519d55f3e78ee3c48ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:9b:5b:7d:07:cc:87:79:1d:4e:b2:2c:8c:
6a:12:70:37:10:2f:96:42:4d:bf:ba:fe:e6:03:e8:
b9:5b:62:9a:71:ce:9e:65:4d:10:2a:20:51:fe:a9:
ce:64:0d:c6:b5:1b:de:e1:87:2f:ec:5d:a9:6c:ee:
3e:8e:76:99:bf:55:44:8c:0f:11:24:2f:70:9f:f7:
01:05:99:a6:a0:76:f3:5e:e2:6f:9e:5a:87:4c:0a:
fe:dd:28:cc:41:69:db:70:7e:a2:5d:e4:fd:9b:ef:
ce:37:2b:ac:00:87:d9:58:79:2f:b8:2d:68:87:bd:
14:62:94:ab:55:80:de:3b:45:a5:52:a4:ec:2e:eb:
56:70:e4:93:c1:6b:bc:84:d5:92:7c:e7:1d:0b:0f:
21:f0:ac:a0:fd:1d:8b:cd:a4:21:d7:e8:c6:2b:3e:
0f:ed:f5:37:86:82:92:d5:7f:e0:d2:f2:c5:b7:91:
e9:86:d5:da:ca:e0:4a:68:ca:83:cb:62:d3:14:2f:
de:bf:dd:83:68:81:13:c0:43:48:15:7a:fe:fb:bd:
cd:8a:60:c3:a3:2a:34:d2:ab:0b:4b:a1:79:4d:00:
a0:41:b5:b9:8c:51:74:2e:24:94:c4:74:18:58:da:
79:be:df:27:f4:a2:75:be:e2:3d:17:8d:36:cc:97:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CF:B1:1D:1B:43:7F:E9:7D:45:19:D5:5F:3E:78:EE:3C:48:CA:7E
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:ef:d3:a3:d7:1a:c3:cd:78:65:68:20:33:1c:dc:d9:04:
5e:da:aa:5c:c1:12:6a:2b:dc:9b:d9:4d:a5:44:9e:5b:5b:f5:
65:f3:cc:71:88:49:7d:57:b4:ac:48:19:d6:7d:3e:b5:52:d8:
6e:6a:11:bd:8b:1c:07:44:2b:ee:d4:f6:9c:cf:27:19:3e:02:
42:29:aa:fe:4a:5d:ef:51:df:dd:cf:1c:75:bb:69:88:58:da:
cf:e2:8c:3d:f0:63:8a:71:c1:6c:46:ea:9c:b0:31:d5:b5:df:
80:a3:1d:f2:3a:67:9c:18:8a:0d:e4:5f:02:02:99:77:35:c8:
f0:16:5d:69:b3:30:16:7a:5c:a0:b2:7f:ba:f6:ab:e7:a9:c2:
29:49:2f:3b:5b:70:14:dd:b5:7f:5c:66:b4:2e:e8:92:10:4f:
bd:53:f4:d0:d1:9e:16:bc:a0:eb:85:20:2d:9a:df:c0:28:a9:
d0:a0:04:f3:43:84:76:35:49:62:3d:36:d7:ce:da:6c:a5:9c:
9d:8e:ce:48:4a:be:d6:ae:80:63:d1:67:31:ac:99:fc:1a:f3:
37:ae:9b:18:ab:3b:cb:cb:00:f2:eb:f0:89:45:ed:04:e7:62:
d0:f9:60:da:bc:23:55:eb:bc:4c:de:98:7f:19:79:44:ff:86:
4f:17:e0:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaLgaSEfCTzNO294M8rYauYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjUwNTAxMTEwMDUxWhcNMjUwNTAyMTEwMDUxWjAzMTEwLwYDVQQD
EygyNWNmYjExZDFiNDM3ZmU5N2Q0NTE5ZDU1ZjNlNzhlZTNjNDhjYTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaubW30HzId5HU6yLIxqEnA3EC+W
Qk2/uv7mA+i5W2Kacc6eZU0QKiBR/qnOZA3GtRve4Ycv7F2pbO4+jnaZv1VEjA8R
JC9wn/cBBZmmoHbzXuJvnlqHTAr+3SjMQWnbcH6iXeT9m+/ONyusAIfZWHkvuC1o
h70UYpSrVYDeO0WlUqTsLutWcOSTwWu8hNWSfOcdCw8h8Kyg/R2LzaQh1+jGKz4P
7fU3hoKS1X/g0vLFt5HphtXayuBKaMqDy2LTFC/ev92DaIETwENIFXr++73NimDD
oyo00qsLS6F5TQCgQbW5jFF0LiSUxHQYWNp5vt8n9KJ1vuI9F402zJfewwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXPsR0bQ3/pfUUZ1V8+eO48SMp+MB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3nv06PX
GsPNeGVoIDMc3NkEXtqqXMESaivcm9lNpUSeW1v1ZfPMcYhJfVe0rEgZ1n0+tVLY
bmoRvYscB0Qr7tT2nM8nGT4CQimq/kpd71Hf3c8cdbtpiFjaz+KMPfBjinHBbEbq
nLAx1bXfgKMd8jpnnBiKDeRfAgKZdzXI8BZdabMwFnpcoLJ/uvar56nCKUkvO1tw
FN21f1xmtC7okhBPvVP00NGeFryg64UgLZrfwCip0KAE80OEdjVJYj02187abKWc
nY7OSEq+1q6AY9FnMayZ/BrzN66bGKs7y8sA8uvwiUXtBOdi0Plg2rwjVeu8TN6Y
fxl5RP+GTxfgAg==
-----END CERTIFICATE-----
Generated at Thu May 1 13:55:17 2025 by rpki-client