Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
File: isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft (raw, json)
Hash identifier: N9WE+dgCkfZUKo6ZzGwDkTX/rS2FentCgAHiIthZHCU=
Subject key identifier: 0B:63:A5:C2:81:1C:DD:DA:70:10:C0:B9:4B:C8:36:79:97:59:27:A3
Authority key identifier: 8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
Certificate issuer: /CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Certificate serial: 01967DFCB6427C65C5142BA35BF2AF1409B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
Manifest number: 11FA
Signing time: Mon 28 Apr 2025 20:00:35 +0000
Manifest this update: Mon 28 Apr 2025 20:00:35 +0000
Manifest next update: Tue 29 Apr 2025 20:00:35 +0000
Files and hashes: 1: MXjGchA1tthe9hBaCTy34XWuIys.roa (hash: m9xSPEOr8P6pGopF9XMr9mPGzbIw3wWqJY/1QxjlC64=)
2: isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl (hash: EpnKXjTM3YXLVfQ+3SJegF8G1qwvVl9cOLcSjNrM6kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:b6:42:7c:65:c5:14:2b:a3:5b:f2:af:14:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac14985cb544c6d23d19bb43ac93711afe91f18
Validity
Not Before: Apr 28 20:00:35 2025 GMT
Not After : Apr 29 20:00:35 2025 GMT
Subject: CN=0b63a5c2811cddda7010c0b94bc83679975927a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:7b:0c:6f:25:e0:ae:35:65:57:8b:45:b7:
13:bc:c3:6d:38:1f:3e:24:14:07:6d:2e:b2:f6:2e:
8f:45:5a:b5:76:63:bb:35:d7:fa:31:3c:4f:2b:5b:
a9:ab:69:28:02:5a:a0:42:66:f3:9e:33:6b:4b:99:
d2:11:c8:d0:86:57:ea:eb:65:d2:1c:4b:7c:47:84:
67:64:f3:13:c5:ed:a1:e0:f3:83:49:59:a6:98:99:
78:8f:8b:0e:a6:88:ae:10:08:03:7b:1f:0d:36:c1:
66:b3:13:c5:2e:42:da:d3:41:84:9a:fd:f8:2b:d2:
5d:24:36:09:df:21:21:c3:c5:78:d8:19:f1:07:2d:
21:22:cd:95:b6:d5:b4:a4:41:fa:d0:79:56:13:95:
0f:22:40:b9:b0:82:9c:59:5b:11:79:e3:95:37:b8:
cd:5b:a2:65:2f:81:b3:ff:59:ab:54:6c:8a:ca:88:
ef:fe:4c:8a:04:6d:08:99:2f:13:33:20:de:f1:b1:
94:89:b1:6a:26:14:16:7a:a1:e4:41:70:67:81:61:
dd:8c:34:f7:b7:6e:e0:30:d7:85:f0:b2:98:64:4e:
3b:06:d8:32:a2:fe:01:6e:0c:82:5c:c2:e8:5a:82:
9f:f9:dc:c2:57:92:4f:97:f7:5b:88:d9:b9:28:44:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:63:A5:C2:81:1C:DD:DA:70:10:C0:B9:4B:C8:36:79:97:59:27:A3
X509v3 Authority Key Identifier:
keyid:8A:C1:49:85:CB:54:4C:6D:23:D1:9B:B4:3A:C9:37:11:AF:E9:1F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isFJhctUTG0j0Zu0Osk3Ea_pHxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/586f77-6f32-4b96-9838-a5894693af10/1/isFJhctUTG0j0Zu0Osk3Ea_pHxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1b:d1:5d:62:b7:3c:ad:7d:3f:0e:43:60:9a:87:54:2c:cf:
33:86:2e:0d:e0:12:ad:18:17:48:32:03:a4:94:00:13:53:e0:
89:35:45:3a:a0:de:a6:f6:5b:6d:73:4b:d8:2f:2c:d3:f3:0d:
43:47:61:ca:81:1a:62:34:97:c2:69:4d:bd:91:ff:04:94:8e:
02:bd:43:9e:9b:33:c9:ba:b9:e6:07:d8:3a:02:95:d7:81:d0:
84:b2:3b:95:6f:2d:f0:3d:27:ae:07:82:c2:93:24:de:c1:96:
7f:41:78:61:6d:30:c9:02:e8:ae:b3:c1:ff:24:1a:78:13:d8:
bb:c1:b2:c0:4c:1d:81:30:ba:4d:2d:2b:9c:f5:91:eb:6e:a2:
71:b8:02:16:64:b3:dd:24:fa:f7:d2:9f:34:8f:70:79:9b:9d:
b9:2d:74:ff:d9:18:c3:77:af:a2:fc:67:e4:77:58:8c:e7:fb:
97:33:eb:6d:80:70:28:2a:7e:e6:8d:4b:eb:b3:be:34:09:c2:
ca:8c:ab:16:d3:45:a8:08:0a:d8:a7:90:8d:15:7b:a8:0f:47:
bd:70:5e:58:61:41:aa:79:b2:7d:1c:69:87:f9:fa:8d:ef:89:
a1:84:4f:5a:f5:ac:df:ad:b8:57:3d:f1:7a:dc:3f:03:2b:85:
63:74:78:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9/LZCfGXFFCujW/KvFAm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzE0OTg1Y2I1NDRjNmQyM2QxOWJiNDNhYzkzNzExYWZl
OTFmMTgwHhcNMjUwNDI4MjAwMDM1WhcNMjUwNDI5MjAwMDM1WjAzMTEwLwYDVQQD
EygwYjYzYTVjMjgxMWNkZGRhNzAxMGMwYjk0YmM4MzY3OTk3NTkyN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBN7DG8l4K41ZVeLRbcTvMNtOB8+
JBQHbS6y9i6PRVq1dmO7Ndf6MTxPK1upq2koAlqgQmbznjNrS5nSEcjQhlfq62XS
HEt8R4RnZPMTxe2h4PODSVmmmJl4j4sOpoiuEAgDex8NNsFmsxPFLkLa00GEmv34
K9JdJDYJ3yEhw8V42BnxBy0hIs2VttW0pEH60HlWE5UPIkC5sIKcWVsReeOVN7jN
W6JlL4Gz/1mrVGyKyojv/kyKBG0ImS8TMyDe8bGUibFqJhQWeqHkQXBngWHdjDT3
t27gMNeF8LKYZE47Btgyov4BbgyCXMLoWoKf+dzCV5JPl/dbiNm5KERnmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtjpcKBHN3acBDAuUvINnmXWSejMB8GA1UdIwQY
MBaAFIrBSYXLVExtI9GbtDrJNxGv6R8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4Mzgt
YTU4OTQ2OTNhZjEwLzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS81ODZmNzctNmYzMi00Yjk2LTk4MzgtYTU4OTQ2OTNhZjEw
LzEvaXNGSmhjdFVURzBqMFp1ME9zazNFYV9wSHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BvRXWK3
PK19Pw5DYJqHVCzPM4YuDeASrRgXSDIDpJQAE1PgiTVFOqDepvZbbXNL2C8s0/MN
Q0dhyoEaYjSXwmlNvZH/BJSOAr1Dnpszybq55gfYOgKV14HQhLI7lW8t8D0nrgeC
wpMk3sGWf0F4YW0wyQLorrPB/yQaeBPYu8GywEwdgTC6TS0rnPWR626icbgCFmSz
3ST699KfNI9weZuduS10/9kYw3evovxn5HdYjOf7lzPrbYBwKCp+5o1L67O+NAnC
yoyrFtNFqAgK2KeQjRV7qA9HvXBeWGFBqnmyfRxph/n6je+JoYRPWvWs3624Vz3x
etw/AyuFY3R4Sw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:52:57 2025 by rpki-client