Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: b8NAm4rz5sb+XZbdAkihPZSkbJN4TRjacuXsutUC1iM=
Subject key identifier: 75:25:FB:65:6C:55:C1:6B:5D:DD:CD:2F:D3:F0:55:EF:7F:3F:02:CB
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 01968D6FD758B73589EE146F399F97F29247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 0FA6
Signing time: Thu 01 May 2025 20:00:39 +0000
Manifest this update: Thu 01 May 2025 20:00:39 +0000
Manifest next update: Fri 02 May 2025 20:00:39 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: ExVz8RamgxOWOHrWaGWOTS7G/90vUiLQjwwF4AtW/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:d7:58:b7:35:89:ee:14:6f:39:9f:97:f2:92:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: May 1 20:00:39 2025 GMT
Not After : May 2 20:00:39 2025 GMT
Subject: CN=7525fb656c55c16b5dddcd2fd3f055ef7f3f02cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:01:1e:0d:d5:c7:52:ec:4f:a8:10:2c:b2:ab:
77:7a:65:63:17:41:31:d5:29:b3:16:71:22:a2:0c:
b9:a2:a4:9c:bd:22:36:eb:08:0a:3f:bf:ec:26:f1:
5e:1e:1e:d0:4f:a4:fb:4c:1f:45:7f:96:54:d5:e7:
1c:d9:2c:bc:01:e6:a5:6c:7c:75:91:98:fb:7e:25:
f1:78:7f:83:95:c6:af:ca:e1:36:dc:bf:a1:52:81:
ab:fd:13:90:4f:f0:6d:2d:db:ed:71:c0:e9:b4:a7:
7f:85:24:c9:1a:83:d6:0f:b3:b4:d9:9c:0a:5c:6f:
2a:c7:f3:1a:7d:11:a4:f1:e6:47:83:cd:28:e1:cf:
5b:42:43:26:2f:0f:eb:a3:2b:10:b6:57:b4:d4:96:
b1:42:70:74:97:14:c5:fe:28:56:1c:b8:26:6c:3f:
70:d3:fc:be:ef:0b:d0:4a:ca:0e:e9:32:37:82:27:
3d:fe:51:32:d4:85:b5:f3:5e:24:15:b6:f7:fd:b7:
b2:6c:ac:24:64:37:d6:87:cf:a8:09:f8:10:e7:0a:
2d:33:0c:33:ce:03:f3:32:d9:2b:a1:ac:21:07:f5:
6d:6f:c4:17:b6:13:40:ec:5a:f3:6e:88:57:4c:29:
3e:d7:8a:ea:05:89:24:a7:2f:0e:88:94:ba:73:76:
2f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:FB:65:6C:55:C1:6B:5D:DD:CD:2F:D3:F0:55:EF:7F:3F:02:CB
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d7:81:fa:b2:b7:8d:25:af:38:63:9e:2c:f3:91:44:1a:a4:
7a:6a:fc:53:7e:2e:50:91:d4:ec:f0:f0:95:6c:ab:de:94:88:
77:ac:4a:42:2a:f3:9a:f5:8a:90:63:cf:a3:af:49:07:45:22:
db:41:48:a1:d1:9a:5f:1d:0a:02:da:d4:b0:24:d2:b1:ac:e4:
77:f4:95:76:14:43:2f:33:4a:0a:05:62:01:56:80:2b:7d:2a:
d0:22:65:26:bf:a3:f6:61:1c:77:06:d8:25:62:91:8f:a8:50:
a2:42:39:37:5c:be:2b:b8:d9:16:2a:9d:23:55:93:3e:59:dc:
32:9c:7a:c1:8e:5e:19:2b:9a:f9:80:39:17:65:69:c7:c6:d4:
88:29:71:83:2a:76:fd:57:dd:e5:c4:53:4e:a6:28:bd:7b:3c:
18:44:9d:c2:b2:6e:d4:df:f4:ef:e9:65:ca:b9:0c:98:ed:81:
45:cc:b4:d1:d2:bb:0b:dd:b7:5a:26:be:a0:f0:96:4b:90:a0:
c0:72:5c:a9:be:4a:6e:25:52:3f:cd:bf:6a:f0:15:59:9f:84:
a8:58:ea:b4:67:b3:ee:40:a1:dc:2a:6f:93:b4:57:b8:19:a6:
bf:a1:4f:c5:4c:4c:5d:a8:37:c1:7b:e2:78:5f:49:d4:50:7c:
16:7a:19:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNb9dYtzWJ7hRvOZ+X8pJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1N2I2MDhmY2NmMzIzMGU0NDVjOTgzZjllMzZiNTBlMTFm
NzJjZjIwHhcNMjUwNTAxMjAwMDM5WhcNMjUwNTAyMjAwMDM5WjAzMTEwLwYDVQQD
Eyg3NTI1ZmI2NTZjNTVjMTZiNWRkZGNkMmZkM2YwNTVlZjdmM2YwMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAEeDdXHUuxPqBAssqt3emVjF0Ex
1SmzFnEiogy5oqScvSI26wgKP7/sJvFeHh7QT6T7TB9Ff5ZU1ecc2Sy8AealbHx1
kZj7fiXxeH+DlcavyuE23L+hUoGr/ROQT/BtLdvtccDptKd/hSTJGoPWD7O02ZwK
XG8qx/MafRGk8eZHg80o4c9bQkMmLw/roysQtle01JaxQnB0lxTF/ihWHLgmbD9w
0/y+7wvQSsoO6TI3gic9/lEy1IW1814kFbb3/beybKwkZDfWh8+oCfgQ5wotMwwz
zgPzMtkroawhB/Vtb8QXthNA7FrzbohXTCk+14rqBYkkpy8OiJS6c3YvBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUl+2VsVcFrXd3NL9PwVe9/PwLLMB8GA1UdIwQY
MBaAFKV7YI/M8yMORFyYP542tQ4R9yzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzkt
ODVhMzdjZjFiMmVhLzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82MjE2MjktZWQzZC00OWFmLWJmMzktODVhMzdjZjFiMmVh
LzEvcFh0Z2o4enpJdzVFWEpnX25qYTFEaEgzTFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9eB+rK3
jSWvOGOeLPORRBqkemr8U34uUJHU7PDwlWyr3pSId6xKQirzmvWKkGPPo69JB0Ui
20FIodGaXx0KAtrUsCTSsazkd/SVdhRDLzNKCgViAVaAK30q0CJlJr+j9mEcdwbY
JWKRj6hQokI5N1y+K7jZFiqdI1WTPlncMpx6wY5eGSua+YA5F2Vpx8bUiClxgyp2
/Vfd5cRTTqYovXs8GESdwrJu1N/07+llyrkMmO2BRcy00dK7C923Wia+oPCWS5Cg
wHJcqb5KbiVSP82/avAVWZ+EqFjqtGez7kCh3Cpvk7RXuBmmv6FPxUxMXag3wXvi
eF9J1FB8FnoZ1Q==
-----END CERTIFICATE-----
Generated at Fri May 2 06:41:59 2025 by rpki-client