Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
File: Y_peK-wKPseV-PGc1H_sxoBniwg.mft (raw, json)
Hash identifier: /y3Dfp6bNaCIrWJvsfBEnCG/4BUdBNz4DmfF8JZKkmE=
Subject key identifier: 9B:7C:EB:00:77:EC:56:70:E3:81:A6:42:28:86:9A:D3:32:D2:A0:B2
Authority key identifier: 63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
Certificate issuer: /CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Certificate serial: 0196827E76FC4B111AC260B87DB5FD7AD86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
Manifest number: 09E8
Signing time: Tue 29 Apr 2025 17:00:48 +0000
Manifest this update: Tue 29 Apr 2025 17:00:48 +0000
Manifest next update: Wed 30 Apr 2025 17:00:48 +0000
Files and hashes: 1: 67MB3uIiPBNhFM08ZckoWW6iFi8.roa (hash: JV/MdthgHrxhWbvFQASmk0ngMZHEyExozVaoGSmnqvc=)
2: 9kpPUCTW6Qn7TUHtyr9YOj6Odr4.roa (hash: HpbK15QHkCq2yrHDhDOHMvxiVYVvHPgmBjt3qtyByjQ=)
3: Y_peK-wKPseV-PGc1H_sxoBniwg.crl (hash: yRFJ7gTPYjcmApnmdrK5iG9TYzLopYB9qak8vnX9hEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7e:76:fc:4b:11:1a:c2:60:b8:7d:b5:fd:7a:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fa5e2bec0a3ec795f8f19cd47fecc680678b08
Validity
Not Before: Apr 29 17:00:48 2025 GMT
Not After : Apr 30 17:00:48 2025 GMT
Subject: CN=9b7ceb0077ec5670e381a64228869ad332d2a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:5f:03:87:30:44:d6:9d:68:e6:11:1c:d0:
1c:e3:89:3d:db:c4:a6:78:24:d5:d1:38:89:81:62:
dd:21:2c:3e:46:e5:4d:74:41:ec:b6:b5:19:47:6f:
dc:0b:7d:99:72:33:78:c3:0b:cd:23:73:5a:12:5c:
00:b5:04:b2:bf:bd:69:3f:f7:66:a4:d0:fa:4f:2b:
3d:f2:3b:ae:5c:9f:dd:ea:b9:7b:19:1f:3f:2c:96:
ef:3e:e4:ce:26:aa:23:53:d8:bd:fe:12:ad:b7:11:
19:38:9c:fd:7e:a7:f4:d3:34:c9:c8:6d:50:9e:72:
a5:5c:8f:5b:43:6c:77:c9:07:fc:96:5f:5d:26:9d:
c3:09:78:0d:1c:ff:1a:f5:13:f7:13:db:48:ca:4e:
2a:c9:aa:cc:11:fc:fc:45:45:64:79:86:77:61:7b:
b4:bd:8e:fb:ed:13:92:83:81:ac:8b:25:65:9d:6a:
a9:da:53:3d:a6:09:42:45:27:ae:b5:3e:a9:8b:ee:
22:bd:69:08:46:13:19:db:85:f7:37:ee:96:7b:91:
2a:1f:56:39:3f:f4:7e:f4:1b:5f:80:36:22:a9:f9:
a0:02:65:46:d0:fa:47:78:10:bc:79:08:f7:f6:aa:
f9:14:e3:07:62:a7:39:53:22:62:4c:5d:5d:8a:04:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:EB:00:77:EC:56:70:E3:81:A6:42:28:86:9A:D3:32:D2:A0:B2
X509v3 Authority Key Identifier:
keyid:63:FA:5E:2B:EC:0A:3E:C7:95:F8:F1:9C:D4:7F:EC:C6:80:67:8B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_peK-wKPseV-PGc1H_sxoBniwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/107d3e-fcdc-4767-9cca-e4f2cdc7a411/1/Y_peK-wKPseV-PGc1H_sxoBniwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ef:28:87:4e:32:8f:03:fb:2b:76:5a:fa:74:e4:95:09:1a:
ae:b3:a9:f2:3b:4b:3f:80:88:5f:3c:86:b6:e9:6b:da:96:ce:
0a:76:27:0a:f6:7f:52:65:16:7a:89:95:42:15:04:a0:35:e5:
6e:fd:9f:bd:e0:d1:2e:e4:d0:67:cb:1b:aa:f7:a3:8e:1f:bd:
f4:16:6a:e0:9d:73:0d:46:37:78:4b:a8:68:43:6e:8d:80:e6:
34:9b:50:8f:a7:27:12:7d:d1:13:1b:72:d9:4e:fd:e3:d3:f1:
a9:2c:fe:80:11:1c:01:66:6d:ab:d2:49:ee:ff:fe:0a:3c:46:
6d:8d:6d:85:58:b4:71:f2:7b:87:58:de:61:90:b6:96:7f:a5:
2a:c3:54:f0:5f:7b:b9:97:ec:9f:6c:3a:7a:bf:57:74:8b:f0:
f2:02:a4:73:6f:c7:d8:42:36:32:25:76:63:5f:88:bd:dc:cc:
58:fa:5e:96:27:ba:12:0e:c6:13:3b:86:ff:ef:4a:93:b0:f0:
e7:47:cf:98:e1:82:b3:12:79:5a:56:45:4a:38:29:72:ad:c4:
0e:ca:3f:0f:ca:cf:46:eb:ba:57:41:2c:dd:83:0d:08:d8:bb:
68:34:94:ce:58:1d:7f:50:ee:66:a2:f1:b3:a2:59:c1:85:c0:
48:53:89:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCfnb8SxEawmC4fbX9ethqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmE1ZTJiZWMwYTNlYzc5NWY4ZjE5Y2Q0N2ZlY2M2ODA2
NzhiMDgwHhcNMjUwNDI5MTcwMDQ4WhcNMjUwNDMwMTcwMDQ4WjAzMTEwLwYDVQQD
Eyg5YjdjZWIwMDc3ZWM1NjcwZTM4MWE2NDIyODg2OWFkMzMyZDJhMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvohfA4cwRNadaOYRHNAc44k928Sm
eCTV0TiJgWLdISw+RuVNdEHstrUZR2/cC32ZcjN4wwvNI3NaElwAtQSyv71pP/dm
pND6Tys98juuXJ/d6rl7GR8/LJbvPuTOJqojU9i9/hKttxEZOJz9fqf00zTJyG1Q
nnKlXI9bQ2x3yQf8ll9dJp3DCXgNHP8a9RP3E9tIyk4qyarMEfz8RUVkeYZ3YXu0
vY777ROSg4GsiyVlnWqp2lM9pglCRSeutT6pi+4ivWkIRhMZ24X3N+6We5EqH1Y5
P/R+9BtfgDYiqfmgAmVG0PpHeBC8eQj39qr5FOMHYqc5UyJiTF1digQv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt86wB37FZw44GmQiiGmtMy0qCyMB8GA1UdIwQY
MBaAFGP6XivsCj7HlfjxnNR/7MaAZ4sIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2Et
ZTRmMmNkYzdhNDExLzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMDdkM2UtZmNkYy00NzY3LTljY2EtZTRmMmNkYzdhNDEx
LzEvWV9wZUstd0tQc2VWLVBHYzFIX3N4b0JuaXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+8oh04y
jwP7K3Za+nTklQkarrOp8jtLP4CIXzyGtulr2pbOCnYnCvZ/UmUWeomVQhUEoDXl
bv2fveDRLuTQZ8sbqvejjh+99BZq4J1zDUY3eEuoaENujYDmNJtQj6cnEn3RExty
2U7949PxqSz+gBEcAWZtq9JJ7v/+CjxGbY1thVi0cfJ7h1jeYZC2ln+lKsNU8F97
uZfsn2w6er9XdIvw8gKkc2/H2EI2MiV2Y1+IvdzMWPpelie6Eg7GEzuG/+9Kk7Dw
50fPmOGCsxJ5WlZFSjgpcq3EDso/D8rPRuu6V0Es3YMNCNi7aDSUzlgdf1DuZqLx
s6JZwYXASFOJrQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:08:03 2025 by rpki-client