Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: KmizNrJ9D0sx2h9hCdN7mOLWrXEA7UCRgpsuE3gD57Y=
Subject key identifier: B6:D6:B2:A8:C6:CD:F2:49:0D:A5:B0:91:7F:8D:66:9C:96:2C:AF:00
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019682B53BB9A0BC2BBEC8399AEEEC730DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 0F05
Signing time: Tue 29 Apr 2025 18:00:37 +0000
Manifest this update: Tue 29 Apr 2025 18:00:37 +0000
Manifest next update: Wed 30 Apr 2025 18:00:37 +0000
Files and hashes: 1: 03LlpQC3OthhaMKAkoHkTsK5DvM.roa (hash: MXfk52dc+50VpTuEktAwLc5jK+27W4bau786/NbUnKQ=)
2: FDaJnwtdKIaCGJVg6QNctNX3wpA.roa (hash: nG1/6+0MejULa30YNNdRkzBTjiM/zpm9raBFToCey7o=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: rTUr4BiCKYLfqJ3+ibMchOmd/C2IsRw1NL4PDRobHlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:3b:b9:a0:bc:2b:be:c8:39:9a:ee:ec:73:0d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Apr 29 18:00:37 2025 GMT
Not After : Apr 30 18:00:37 2025 GMT
Subject: CN=b6d6b2a8c6cdf2490da5b0917f8d669c962caf00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:28:ef:47:d6:6b:49:cd:a4:b8:80:94:90:
5e:c6:f3:00:74:2a:6d:60:8c:2c:06:6a:c1:54:96:
b5:06:87:40:0f:92:68:6e:f3:9f:94:cf:f8:82:42:
7b:eb:a3:60:68:9b:26:ed:d6:9e:43:67:0a:a1:28:
6a:81:91:36:ce:ac:03:7d:dd:58:e7:0d:8c:25:2f:
04:11:4d:06:56:5e:82:7a:0d:01:3d:d2:74:df:78:
8f:8c:98:2a:68:69:f1:d4:38:f9:27:7f:63:b6:3b:
ab:b0:f8:eb:f7:8b:7d:e3:5d:c8:bd:a3:fb:4a:63:
0d:b6:42:6f:d0:a3:02:69:55:3b:19:1b:f6:c3:4f:
6d:ba:59:43:55:00:1a:b8:18:2c:14:7c:14:ac:59:
5e:c9:31:2a:bc:15:c4:96:a0:e7:63:9c:5e:bb:d2:
ad:6c:3a:99:91:0a:f7:5d:69:b8:64:bd:7b:5d:23:
fe:4a:20:d1:9b:72:58:38:63:c5:8c:eb:21:d7:1c:
a7:27:2c:81:fc:f3:d1:df:98:9a:78:6a:f6:12:c2:
58:be:00:b8:ff:a0:14:25:ae:06:b0:af:85:d8:0c:
ee:0c:df:cf:0e:d7:56:28:be:76:c6:09:f5:4f:4d:
e0:27:62:06:95:dd:0d:91:a4:79:16:b8:57:57:76:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D6:B2:A8:C6:CD:F2:49:0D:A5:B0:91:7F:8D:66:9C:96:2C:AF:00
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ed:d2:82:24:bb:fc:d3:75:4d:d5:56:ee:0a:8c:e3:cf:95:
37:5c:4e:4f:db:d8:08:c2:ad:66:e9:c5:b4:86:e3:e9:9e:08:
c7:0e:d8:5f:ca:7e:17:94:7b:61:70:12:c4:c3:6f:83:09:52:
0f:e5:2a:f7:9d:48:1d:45:a5:09:ba:7c:dd:e6:0b:98:b3:af:
e1:df:f5:33:4a:7a:7d:52:0e:d0:62:4e:2a:92:3f:68:80:15:
49:a1:fe:db:04:fc:bd:5d:41:63:c3:81:9a:24:86:ab:fe:e3:
1b:66:27:e0:91:3d:12:03:7f:63:60:76:9f:0f:f9:02:a3:aa:
f8:e8:b4:f1:68:26:e5:89:8f:08:b9:c4:b2:49:5c:3c:d0:bb:
90:c3:0d:68:a5:b9:4e:7c:b6:7c:24:da:6a:b2:cd:33:f7:ee:
dd:26:c8:ad:aa:49:20:e8:2a:57:ca:81:f9:7d:35:13:07:da:
8a:da:cb:6c:5c:b3:e2:c8:1c:f1:89:1d:76:00:80:3c:b8:2e:
d8:ed:12:8b:c6:1c:90:f9:37:37:7c:dd:59:bc:c0:a9:ca:23:
b5:b6:ce:bf:aa:5e:bb:69:7d:40:2c:bf:67:a2:83:30:93:d0:
81:bf:c9:5a:ee:f8:74:ed:c8:20:6a:25:ac:6f:6e:59:20:cf:
d5:04:19:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCtTu5oLwrvsg5mu7scw25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl
OTVjYWYwHhcNMjUwNDI5MTgwMDM3WhcNMjUwNDMwMTgwMDM3WjAzMTEwLwYDVQQD
EyhiNmQ2YjJhOGM2Y2RmMjQ5MGRhNWIwOTE3ZjhkNjY5Yzk2MmNhZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E0o70fWa0nNpLiAlJBexvMAdCpt
YIwsBmrBVJa1BodAD5JobvOflM/4gkJ766NgaJsm7daeQ2cKoShqgZE2zqwDfd1Y
5w2MJS8EEU0GVl6Ceg0BPdJ033iPjJgqaGnx1Dj5J39jtjursPjr94t9413IvaP7
SmMNtkJv0KMCaVU7GRv2w09tullDVQAauBgsFHwUrFleyTEqvBXElqDnY5xeu9Kt
bDqZkQr3XWm4ZL17XSP+SiDRm3JYOGPFjOsh1xynJyyB/PPR35iaeGr2EsJYvgC4
/6AUJa4GsK+F2AzuDN/PDtdWKL52xgn1T03gJ2IGld0NkaR5FrhXV3ahawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbWsqjGzfJJDaWwkX+NZpyWLK8AMB8GA1UdIwQY
MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt
MjM4YzZkOGE0YzE3LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3
LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+3SgiS7
/NN1TdVW7gqM48+VN1xOT9vYCMKtZunFtIbj6Z4Ixw7YX8p+F5R7YXASxMNvgwlS
D+Uq951IHUWlCbp83eYLmLOv4d/1M0p6fVIO0GJOKpI/aIAVSaH+2wT8vV1BY8OB
miSGq/7jG2Yn4JE9EgN/Y2B2nw/5AqOq+Oi08Wgm5YmPCLnEsklcPNC7kMMNaKW5
Tny2fCTaarLNM/fu3SbIrapJIOgqV8qB+X01EwfaitrLbFyz4sgc8YkddgCAPLgu
2O0Si8YckPk3N3zdWbzAqcojtbbOv6peu2l9QCy/Z6KDMJPQgb/JWu74dO3IIGol
rG9uWSDP1QQZbQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:10:41 2025 by rpki-client