Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: T3Atg0S5HZJommjG8H93TlzI1KKqnBfC+fk8gv8F2yY=
Subject key identifier: 7F:48:85:6E:E1:40:A1:C0:54:3F:8A:45:5C:9A:1A:13:F8:BF:E2:B3
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 019699AAD941806892792ACD2AB11EA4A131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 1227
Signing time: Sun 04 May 2025 05:00:32 +0000
Manifest this update: Sun 04 May 2025 05:00:32 +0000
Manifest next update: Mon 05 May 2025 05:00:32 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: TOyoPZ+Ae8bqjMpP7B+kixorDFTJDPSV/MqUbymdap8=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: P2hEWY-aar-dzWHdyJ4OOTkwmBc.roa (hash: +j7M+pZlJGOmKDr8VwAwOw7PlY+S6nVr/7YwvIROH/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:aa:d9:41:80:68:92:79:2a:cd:2a:b1:1e:a4:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: May 4 05:00:32 2025 GMT
Not After : May 5 05:00:32 2025 GMT
Subject: CN=7f48856ee140a1c0543f8a455c9a1a13f8bfe2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:e3:0e:72:10:61:e9:32:99:93:9a:c5:65:
a0:42:92:2c:bd:97:81:41:dc:fe:60:48:9c:0c:9d:
25:78:84:e2:2a:1a:56:71:47:2d:42:a2:19:08:86:
b7:3f:2d:65:23:33:89:36:d7:70:9b:e1:1d:28:de:
49:90:35:54:c6:fa:71:3a:a5:08:f6:77:95:c5:3a:
e2:bd:0c:55:ac:bc:1a:bd:78:c8:29:3d:b1:f9:8e:
7c:dc:e8:6a:98:fe:59:23:11:08:0c:33:a4:74:db:
05:6b:a9:eb:1e:15:c1:66:c0:a4:05:d6:f8:b4:df:
f8:48:c1:9a:8b:41:7f:c4:ab:53:3d:c9:d3:dc:2f:
65:46:ae:ab:e4:3c:73:0f:7b:cd:8c:6f:39:14:2c:
48:73:1f:c9:4b:4b:3e:3c:e2:55:ed:0a:84:2f:67:
72:29:d5:d1:9e:00:de:f1:12:23:5e:90:ef:af:13:
48:83:d5:d2:ba:64:bb:61:6e:8f:ed:2a:00:9c:6d:
39:99:55:98:eb:6f:5b:be:19:e0:69:a5:7c:09:7f:
90:42:e5:81:46:5c:2d:cd:39:76:56:15:32:57:66:
b8:06:af:8b:7d:69:11:3c:dc:cd:18:7a:70:85:f6:
32:2e:6e:c5:a6:32:89:bb:da:40:77:73:92:ea:e3:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:85:6E:E1:40:A1:C0:54:3F:8A:45:5C:9A:1A:13:F8:BF:E2:B3
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ec:61:39:75:75:9e:2a:ce:d3:3e:ca:ac:ee:45:39:e1:b0:
86:4b:89:ef:cd:91:6c:b3:ee:75:b8:24:a9:4b:4e:65:5a:bc:
38:b9:4d:ee:b2:b9:c9:e3:15:5d:8e:da:d6:37:51:f9:68:b3:
25:4d:e8:fe:fb:c9:3a:54:19:24:d4:8a:30:98:5b:b3:b3:47:
8a:bb:84:80:f8:51:47:83:62:ec:fe:23:ab:73:fb:a7:cb:d0:
71:e2:b5:3c:e4:6e:b0:d0:f2:0d:86:74:a0:9c:07:c4:44:43:
ce:39:b2:e7:f8:af:d9:dd:e6:2b:7b:3c:55:7d:75:10:ee:ba:
53:d8:54:32:cf:4f:00:91:af:a0:4d:04:01:03:64:e1:a7:9f:
c2:d7:3a:2f:38:21:be:43:53:a7:55:9b:9a:9c:4d:9b:1a:dc:
7f:50:7b:a8:52:d0:f1:1e:dd:81:c1:36:b8:2b:19:88:80:b8:
bd:cd:0c:cd:03:cc:d1:c4:c9:4c:d3:bf:e2:09:bc:43:cf:6a:
53:79:08:12:15:b0:7f:13:55:d7:df:70:17:65:5f:c4:c6:a3:
72:4d:66:cb:0c:aa:e6:54:65:6e:91:2a:74:52:3b:8d:a8:df:
71:d6:70:a6:45:ad:be:02:04:a1:69:83:b5:6f:98:aa:f4:47:
a7:06:17:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaZqtlBgGiSeSrNKrEepKExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzIzMTAxYjI5NTk2ZmY0NDJkMzc0OTM3M2I4ZTk5ODMz
NTQ2NzAwHhcNMjUwNTA0MDUwMDMyWhcNMjUwNTA1MDUwMDMyWjAzMTEwLwYDVQQD
Eyg3ZjQ4ODU2ZWUxNDBhMWMwNTQzZjhhNDU1YzlhMWExM2Y4YmZlMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovrjDnIQYekymZOaxWWgQpIsvZeB
Qdz+YEicDJ0leITiKhpWcUctQqIZCIa3Py1lIzOJNtdwm+EdKN5JkDVUxvpxOqUI
9neVxTrivQxVrLwavXjIKT2x+Y583OhqmP5ZIxEIDDOkdNsFa6nrHhXBZsCkBdb4
tN/4SMGai0F/xKtTPcnT3C9lRq6r5DxzD3vNjG85FCxIcx/JS0s+POJV7QqEL2dy
KdXRngDe8RIjXpDvrxNIg9XSumS7YW6P7SoAnG05mVWY629bvhngaaV8CX+QQuWB
RlwtzTl2VhUyV2a4Bq+LfWkRPNzNGHpwhfYyLm7FpjKJu9pAd3OS6uP55wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9IhW7hQKHAVD+KRVyaGhP4v+KzMB8GA1UdIwQY
MBaAFNIyMQGylZb/RC03STc7jpmDNUZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzct
NmE2YWY1Yjc0ZDM4LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YjQxODUtYjA4MC00OThlLThjYzctNmE2YWY1Yjc0ZDM4
LzEvMGpJeEFiS1ZsdjlFTFRkSk56dU9tWU0xUm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+xhOXV1
nirO0z7KrO5FOeGwhkuJ782RbLPudbgkqUtOZVq8OLlN7rK5yeMVXY7a1jdR+Wiz
JU3o/vvJOlQZJNSKMJhbs7NHiruEgPhRR4Ni7P4jq3P7p8vQceK1PORusNDyDYZ0
oJwHxERDzjmy5/iv2d3mK3s8VX11EO66U9hUMs9PAJGvoE0EAQNk4aefwtc6Lzgh
vkNTp1WbmpxNmxrcf1B7qFLQ8R7dgcE2uCsZiIC4vc0MzQPM0cTJTNO/4gm8Q89q
U3kIEhWwfxNV199wF2VfxMajck1mywyq5lRlbpEqdFI7jajfcdZwpkWtvgIEoWmD
tW+YqvRHpwYXlg==
-----END CERTIFICATE-----
Generated at Sun May 4 12:34:57 2025 by rpki-client