Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: RZSGogZaexkZOfMzMnb89L5aV9zNJcnfxLcfnSpw6I0=
Subject key identifier: 88:FD:92:26:E3:0D:08:CE:97:74:42:B3:82:5E:E1:44:5D:11:8C:06
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019689C9CF6CDEE5F296089A143FBA8A430B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 03:00:26 +0000
Manifest this update: Thu 01 May 2025 03:00:26 +0000
Manifest next update: Fri 02 May 2025 03:00:26 +0000
Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=)
2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: KUxcCNuWUwZNkogWeft7jxEmVmf0qFIQqpJHd1O1l38=)
3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:c9:cf:6c:de:e5:f2:96:08:9a:14:3f:ba:8a:43:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: May 1 03:00:26 2025 GMT
Not After : May 2 03:00:26 2025 GMT
Subject: CN=88fd9226e30d08ce977442b3825ee1445d118c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ca:e8:11:51:3b:b5:d0:63:07:ad:66:09:ef:
39:f4:c6:bd:c9:a7:fa:cb:0d:8f:bd:60:ca:c8:6f:
69:3a:b0:29:11:ab:d8:08:9f:26:ba:ef:a1:52:ed:
b6:fe:4c:0b:92:52:f7:25:a9:1d:01:3e:5f:fb:32:
b9:f2:6d:de:02:eb:18:85:2e:fb:86:e0:22:75:f8:
95:56:13:59:c4:3c:1f:59:98:20:b9:10:d6:cd:f5:
79:5f:e6:45:30:b1:63:5d:9c:d8:d2:59:0f:06:8c:
b1:53:8e:00:c3:ee:fe:cb:9f:39:59:42:03:8b:1f:
8d:02:78:26:f8:cb:cc:92:06:44:51:5f:5a:77:99:
dd:17:bd:c8:b1:84:a0:5d:94:31:aa:f7:78:af:10:
c3:3b:27:cc:0c:e4:8d:4a:82:12:64:2c:b6:2f:5a:
61:88:86:63:74:f7:3b:ae:6a:66:5d:7a:99:47:27:
08:3b:26:8f:ea:ab:58:eb:f1:0a:33:78:10:7b:76:
0f:5d:5b:73:46:24:d0:ff:3a:09:e9:a5:0e:d6:9a:
c0:75:58:fe:ff:7c:e1:5d:eb:4d:de:e1:aa:f5:43:
d7:ef:27:c2:57:1c:57:c1:bc:f9:fc:43:94:ca:78:
6e:08:0a:d1:2e:cc:5a:43:5a:15:8b:49:4c:c7:02:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FD:92:26:E3:0D:08:CE:97:74:42:B3:82:5E:E1:44:5D:11:8C:06
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:75:7d:f8:c2:b5:02:70:08:9b:88:48:49:fb:29:78:bb:5c:
02:1c:b4:08:58:bf:44:06:68:4e:e4:6d:a6:04:fd:c0:53:fd:
84:e4:59:b2:61:59:1c:57:48:6d:c1:51:05:d6:8c:6b:76:74:
b3:5c:0a:62:ea:36:53:7e:a7:1e:9d:0f:24:2e:24:7b:3c:db:
ce:9c:ab:bf:29:a5:45:6b:16:48:68:0a:55:f7:d3:98:61:d7:
95:5c:86:00:06:ce:ca:6b:11:29:ad:63:bf:f8:72:39:21:ac:
3a:8f:4a:e1:18:e8:19:b9:6b:a1:d6:e0:35:39:b0:a5:bf:10:
66:f6:28:80:d7:1f:0e:19:58:a9:cd:bb:32:00:cf:1e:29:32:
8f:30:fa:48:80:73:42:53:24:1b:57:cf:a7:ba:46:69:3e:38:
33:5f:df:e5:37:32:8b:44:1b:23:fb:a3:8e:2c:85:70:ef:25:
d7:1e:63:da:15:3e:c5:05:29:bc:72:e7:e8:6e:66:11:20:5b:
b8:b3:9a:a6:bb:dc:2d:b2:2e:e7:5e:2b:dc:20:52:21:ee:c4:
70:b8:3b:a1:b1:81:2e:a8:eb:e0:e0:56:5a:66:b9:61:ab:72:
3c:d1:ef:86:89:7c:a5:ed:1d:82:52:f5:f3:7a:d1:fb:ce:7a:
b7:33:0c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJyc9s3uXylgiaFD+6ikMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy
MDg0NTcwHhcNMjUwNTAxMDMwMDI2WhcNMjUwNTAyMDMwMDI2WjAzMTEwLwYDVQQD
Eyg4OGZkOTIyNmUzMGQwOGNlOTc3NDQyYjM4MjVlZTE0NDVkMTE4YzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sroEVE7tdBjB61mCe859Ma9yaf6
yw2PvWDKyG9pOrApEavYCJ8muu+hUu22/kwLklL3JakdAT5f+zK58m3eAusYhS77
huAidfiVVhNZxDwfWZgguRDWzfV5X+ZFMLFjXZzY0lkPBoyxU44Aw+7+y585WUID
ix+NAngm+MvMkgZEUV9ad5ndF73IsYSgXZQxqvd4rxDDOyfMDOSNSoISZCy2L1ph
iIZjdPc7rmpmXXqZRycIOyaP6qtY6/EKM3gQe3YPXVtzRiTQ/zoJ6aUO1prAdVj+
/3zhXetN3uGq9UPX7yfCVxxXwbz5/EOUynhuCArRLsxaQ1oVi0lMxwKY9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj9kibjDQjOl3RCs4Je4URdEYwGMB8GA1UdIwQY
MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt
OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw
LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3V9+MK1
AnAIm4hISfspeLtcAhy0CFi/RAZoTuRtpgT9wFP9hORZsmFZHFdIbcFRBdaMa3Z0
s1wKYuo2U36nHp0PJC4kezzbzpyrvymlRWsWSGgKVffTmGHXlVyGAAbOymsRKa1j
v/hyOSGsOo9K4RjoGblrodbgNTmwpb8QZvYogNcfDhlYqc27MgDPHikyjzD6SIBz
QlMkG1fPp7pGaT44M1/f5Tcyi0QbI/ujjiyFcO8l1x5j2hU+xQUpvHLn6G5mESBb
uLOaprvcLbIu514r3CBSIe7EcLg7obGBLqjr4OBWWma5YatyPNHvhol8pe0dglL1
83rR+856tzMM2Q==
-----END CERTIFICATE-----
Generated at Thu May 1 07:14:08 2025 by rpki-client