Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: uyvi5w4BvRsoIaPZrjL3J0r7rl0N6yVln4tmcZjpjjM=
Subject key identifier: 2F:2D:B1:0F:C3:2F:09:E3:F5:1D:56:33:89:3E:92:C7:A6:50:34:79
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 0196895BDA5583C00F2CE772FB442D64DA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 063B
Signing time: Thu 01 May 2025 01:00:20 +0000
Manifest this update: Thu 01 May 2025 01:00:20 +0000
Manifest next update: Fri 02 May 2025 01:00:20 +0000
Files and hashes: 1: XWaEMNo4oCmJKw7xuT_lUqU1a9o.roa (hash: vlh1Ps1w/BBZ8U+fD5oVlO0yHpfRUnw+NHa2xAJ40qE=)
2: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: ht9AvceXOcy7vEMUshXPXb3p1RI9pV7A/i/ljKT2hbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5b:da:55:83:c0:0f:2c:e7:72:fb:44:2d:64:da:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: May 1 01:00:20 2025 GMT
Not After : May 2 01:00:20 2025 GMT
Subject: CN=2f2db10fc32f09e3f51d5633893e92c7a6503479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:af:0a:61:73:e4:a1:2b:01:c2:58:09:58:
e9:b3:93:fe:e9:45:0e:37:fb:57:12:d6:54:61:dd:
ac:04:70:33:d9:9a:fd:30:5e:1c:53:22:52:a2:10:
42:06:0d:46:cf:74:74:5a:af:77:3e:c1:57:09:88:
f6:95:83:2c:5c:b8:1b:ed:9e:33:cb:53:2a:e8:4b:
73:7f:58:46:d9:9d:7c:5a:ea:82:61:fe:87:ea:2e:
19:48:e0:3c:60:6e:6a:23:89:02:37:b4:0e:eb:fa:
5b:8f:86:f6:ca:1b:3a:a7:e9:a6:97:64:bb:21:53:
85:03:b7:f2:9b:ab:86:ee:1a:55:54:7b:be:e1:87:
2a:77:d6:79:01:74:61:4b:d3:11:bd:39:c5:95:91:
fb:22:4b:8b:04:6d:2b:4a:f3:27:15:92:7c:e2:d2:
64:63:1c:17:b6:ba:d8:ee:92:a2:e0:b4:ca:dc:f4:
22:15:c8:55:c8:e1:d9:42:0b:14:54:30:f1:81:1e:
db:dd:3f:55:ed:6d:d1:6f:dd:b3:fb:65:fa:62:01:
cc:fb:4d:36:45:0c:96:64:b3:55:be:ae:66:5a:6d:
fb:e3:a1:80:a5:29:fe:06:59:be:49:bf:ac:0f:e2:
41:9e:9b:a1:75:69:35:0a:36:40:de:67:60:73:b1:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2D:B1:0F:C3:2F:09:E3:F5:1D:56:33:89:3E:92:C7:A6:50:34:79
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:66:8a:79:9b:d3:fc:aa:ba:26:92:d3:1a:b4:f7:85:77:62:
9f:c5:ad:7d:41:b8:3a:c3:1e:91:7e:8d:8f:84:fd:29:13:b2:
f6:f3:a6:a3:86:c3:f9:3b:8d:fc:ac:b0:5f:29:d4:7a:f3:20:
6c:b5:7e:41:04:04:1b:6a:c1:60:bf:d0:5c:e1:a4:5d:7e:59:
0a:1f:00:c6:15:37:e9:95:34:9f:2c:b4:44:c5:6c:8c:bf:39:
e2:07:c0:24:1f:2f:c7:d2:2e:23:b1:93:d2:18:e5:da:40:d0:
f7:18:90:c1:09:6d:40:69:0f:ca:4e:3a:bf:eb:07:11:83:1a:
26:de:81:b4:c3:e1:57:b4:e7:de:49:0c:cf:cf:4a:a8:9d:88:
27:ee:11:9f:63:44:1b:7b:cf:10:e9:6e:44:69:7f:73:08:20:
96:f6:4c:45:94:4d:ca:8c:0b:a9:01:23:6f:7d:36:0b:72:a0:
77:74:f6:2d:35:c6:fa:89:5c:5a:45:ba:35:a3:6f:5c:0a:3a:
07:1e:7d:3c:10:66:fd:fd:ca:16:43:cb:d4:96:f0:ed:3a:42:
de:19:96:95:21:3e:95:ac:18:a0:c5:0a:32:b3:87:4c:59:4c:
96:f4:ae:ce:2d:f8:f1:b4:c7:0f:03:27:0d:9c:36:33:e6:fa:
c4:c6:18:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJW9pVg8APLOdy+0QtZNpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy
OTM3ODIwHhcNMjUwNTAxMDEwMDIwWhcNMjUwNTAyMDEwMDIwWjAzMTEwLwYDVQQD
EygyZjJkYjEwZmMzMmYwOWUzZjUxZDU2MzM4OTNlOTJjN2E2NTAzNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVKvCmFz5KErAcJYCVjps5P+6UUO
N/tXEtZUYd2sBHAz2Zr9MF4cUyJSohBCBg1Gz3R0Wq93PsFXCYj2lYMsXLgb7Z4z
y1Mq6Etzf1hG2Z18WuqCYf6H6i4ZSOA8YG5qI4kCN7QO6/pbj4b2yhs6p+mml2S7
IVOFA7fym6uG7hpVVHu+4Ycqd9Z5AXRhS9MRvTnFlZH7IkuLBG0rSvMnFZJ84tJk
YxwXtrrY7pKi4LTK3PQiFchVyOHZQgsUVDDxgR7b3T9V7W3Rb92z+2X6YgHM+002
RQyWZLNVvq5mWm3746GApSn+Blm+Sb+sD+JBnpuhdWk1CjZA3mdgc7GghQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8tsQ/DLwnj9R1WM4k+ksemUDR5MB8GA1UdIwQY
MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct
YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm
LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImaKeZvT
/Kq6JpLTGrT3hXdin8WtfUG4OsMekX6Nj4T9KROy9vOmo4bD+TuN/KywXynUevMg
bLV+QQQEG2rBYL/QXOGkXX5ZCh8AxhU36ZU0nyy0RMVsjL854gfAJB8vx9IuI7GT
0hjl2kDQ9xiQwQltQGkPyk46v+sHEYMaJt6BtMPhV7Tn3kkMz89KqJ2IJ+4Rn2NE
G3vPEOluRGl/cwgglvZMRZRNyowLqQEjb302C3Kgd3T2LTXG+olcWkW6NaNvXAo6
Bx59PBBm/f3KFkPL1Jbw7TpC3hmWlSE+lawYoMUKMrOHTFlMlvSuzi348bTHDwMn
DZw2M+b6xMYYCA==
-----END CERTIFICATE-----
Generated at Thu May 1 09:29:31 2025 by rpki-client