Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File: gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier: HN5An9ZtP4RihE+0dCx8YRKwfYx7cj5rDbDjuHotVN0=
Subject key identifier: 05:46:8B:33:C5:E0:2B:A4:09:BB:6F:94:72:A6:28:1C:F7:51:94:A9
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer: /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial: 019696A9BDB517C217F0D8F7C631986584AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number: 13F7
Signing time: Sat 03 May 2025 15:00:28 +0000
Manifest this update: Sat 03 May 2025 15:00:28 +0000
Manifest next update: Sun 04 May 2025 15:00:28 +0000
Files and hashes: 1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: tEw82GLkoSr/bcf/v7BLlL1NWG9r5EqtZfR9Gv/Kxk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:a9:bd:b5:17:c2:17:f0:d8:f7:c6:31:98:65:84:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Validity
Not Before: May 3 15:00:28 2025 GMT
Not After : May 4 15:00:28 2025 GMT
Subject: CN=05468b33c5e02ba409bb6f9472a6281cf75194a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:2d:60:39:42:42:97:78:5e:b0:38:17:ae:
d8:87:ea:06:c2:ec:ae:2e:27:6a:af:a4:9c:10:5d:
ad:64:43:ba:f6:65:a9:d0:01:5d:9e:62:c3:c4:cc:
13:21:bd:43:0f:b5:e1:e7:45:84:fc:79:ad:fc:00:
74:15:7b:85:58:6a:55:2d:fc:6e:0a:a3:90:1f:aa:
ca:6b:cb:51:64:81:dd:e8:09:e1:2a:6b:87:0e:48:
e1:32:d7:6e:ab:ff:db:37:03:97:56:a5:94:64:e0:
92:99:34:b0:50:f7:38:63:5a:a9:30:5d:96:3a:47:
d0:1c:96:1e:1b:cf:94:f4:b6:cf:b0:54:be:c5:03:
64:fc:cd:f2:cb:af:bc:97:fc:9b:02:20:40:a6:a2:
01:f8:7b:25:75:c8:04:0c:b1:9c:2a:93:4d:a1:09:
a0:5e:a5:bc:88:62:d8:5e:cc:2a:5d:10:29:69:f8:
41:41:d6:e4:31:ac:b9:2b:20:db:53:bb:ac:82:c5:
5e:2b:00:97:13:71:19:9b:07:7d:3d:58:ef:a8:58:
a6:d6:8d:52:ae:bb:0f:b6:1b:fd:2d:62:b8:76:0b:
c7:d6:ea:47:f6:e5:d0:e8:21:b5:fc:35:df:67:4b:
ee:05:1d:9a:bb:5e:1b:a5:49:d4:af:44:00:a4:db:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:8B:33:C5:E0:2B:A4:09:BB:6F:94:72:A6:28:1C:F7:51:94:A9
X509v3 Authority Key Identifier:
keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c7:c2:19:23:8f:08:36:4e:44:83:47:70:53:93:57:55:0a:
4d:eb:e0:2b:25:61:f3:8a:55:dd:70:ca:f5:38:bc:a0:5b:f6:
ab:40:8f:b1:6b:8d:a0:fe:8a:11:2f:53:76:77:ba:91:64:91:
cf:24:9c:21:be:d5:00:a6:28:ed:e0:81:14:69:f3:e2:2b:af:
6e:15:8b:c4:b4:aa:6c:ed:db:6d:e7:04:99:eb:ff:c0:de:a1:
56:8b:88:f0:e5:4c:f8:08:ac:99:70:fc:12:d1:41:d6:aa:71:
06:76:33:19:1b:86:0e:d0:52:32:21:79:e4:f4:cd:1b:40:c6:
d1:6b:a7:81:d6:e4:8a:c5:e9:4d:f8:ac:aa:8d:66:c9:c8:ba:
b2:53:a2:51:f8:6d:2c:f3:86:9a:aa:d5:f8:74:2b:f7:22:c5:
01:dc:3e:54:29:70:f8:e6:c0:c0:20:6f:66:f2:65:52:1e:20:
b1:7f:65:3f:2d:92:ad:3c:79:16:6f:21:f7:b9:8f:67:08:1c:
6a:63:9e:3a:e0:f0:d3:96:ac:7b:d4:d8:cf:d0:68:87:6b:62:
34:61:3e:9a:4b:fc:03:42:64:27:c7:c7:11:07:63:00:a4:aa:
ef:f5:11:99:a2:74:42:90:87:a3:a4:2e:52:d1:2d:a3:a9:56:
9f:08:47:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaWqb21F8IX8Nj3xjGYZYSqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZGYwY2JkZDU1NzFlNTgwZWE1N2UxOGE0NDBjYTJiZWE0
ODA2ZjgwHhcNMjUwNTAzMTUwMDI4WhcNMjUwNTA0MTUwMDI4WjAzMTEwLwYDVQQD
EygwNTQ2OGIzM2M1ZTAyYmE0MDliYjZmOTQ3MmE2MjgxY2Y3NTE5NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw8tYDlCQpd4XrA4F67Yh+oGwuyu
Lidqr6ScEF2tZEO69mWp0AFdnmLDxMwTIb1DD7Xh50WE/Hmt/AB0FXuFWGpVLfxu
CqOQH6rKa8tRZIHd6AnhKmuHDkjhMtduq//bNwOXVqWUZOCSmTSwUPc4Y1qpMF2W
OkfQHJYeG8+U9LbPsFS+xQNk/M3yy6+8l/ybAiBApqIB+HsldcgEDLGcKpNNoQmg
XqW8iGLYXswqXRApafhBQdbkMay5KyDbU7usgsVeKwCXE3EZmwd9PVjvqFim1o1S
rrsPthv9LWK4dgvH1upH9uXQ6CG1/DXfZ0vuBR2au14bpUnUr0QApNtkmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVGizPF4CukCbtvlHKmKBz3UZSpMB8GA1UdIwQY
MBaAFIDfDL3VVx5YDqV+GKRAyivqSAb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMt
YmQ3NWVmOWI1Nzk4LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85MjkxZTEtNTdjYS00YzI5LTllOTMtYmQ3NWVmOWI1Nzk4
LzEvZ044TXZkVlhIbGdPcFg0WXBFREtLLXBJQnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsfCGSOP
CDZORINHcFOTV1UKTevgKyVh84pV3XDK9Ti8oFv2q0CPsWuNoP6KES9Tdne6kWSR
zyScIb7VAKYo7eCBFGnz4iuvbhWLxLSqbO3bbecEmev/wN6hVouI8OVM+AismXD8
EtFB1qpxBnYzGRuGDtBSMiF55PTNG0DG0WungdbkisXpTfisqo1myci6slOiUfht
LPOGmqrV+HQr9yLFAdw+VClw+ObAwCBvZvJlUh4gsX9lPy2SrTx5Fm8h97mPZwgc
amOeOuDw05ase9TYz9Boh2tiNGE+mkv8A0JkJ8fHEQdjAKSq7/URmaJ0QpCHo6Qu
UtEto6lWnwhHAg==
-----END CERTIFICATE-----
Generated at Sat May 3 22:51:46 2025 by rpki-client