Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File: B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier: b0gPfyR5lE2QzN36HH6ncHBIfOvw736dRQU9M2DAqLc=
Subject key identifier: 92:3F:39:A9:EE:58:F8:5F:E0:04:9D:37:5B:46:53:A5:4A:A0:9F:34
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 019693DFB53B9FA5D8F5EA113F8B231AF589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number: 0CA8
Signing time: Sat 03 May 2025 02:00:33 +0000
Manifest this update: Sat 03 May 2025 02:00:33 +0000
Manifest next update: Sun 04 May 2025 02:00:33 +0000
Files and hashes: 1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: LURYvBm2Kp4hzXLh+cfWg4Hk6OByHykss9Zpo1DiVz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:df:b5:3b:9f:a5:d8:f5:ea:11:3f:8b:23:1a:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: May 3 02:00:33 2025 GMT
Not After : May 4 02:00:33 2025 GMT
Subject: CN=923f39a9ee58f85fe0049d375b4653a54aa09f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bd:09:4b:56:d4:c6:33:39:a8:7e:b2:6e:90:
44:7f:9f:ba:82:25:18:b7:26:a1:9b:33:9d:39:26:
8a:d5:93:e7:d6:cf:54:8f:ad:6f:ae:2a:7b:45:2b:
f4:96:5e:7a:6a:55:10:93:1a:a1:f8:f8:25:a4:72:
4a:cf:db:08:7d:35:27:c3:7f:2f:27:08:2f:81:f9:
fb:43:a6:e0:32:5e:c0:97:11:35:e6:da:12:8b:98:
9f:f8:77:2e:ee:3f:6b:d7:8d:66:ee:55:bf:cc:3a:
cf:0e:ca:10:6c:cc:be:6e:aa:10:0a:53:d4:a5:6b:
6e:44:f2:00:2e:a7:22:67:b0:0a:55:7a:32:74:a1:
a9:99:f0:7d:62:f0:44:07:f6:ac:a2:2d:f7:0a:e6:
0d:f6:79:2c:e9:6e:8b:49:5d:41:11:16:24:d7:f9:
71:bf:f6:c1:f2:8e:3e:45:87:f2:d6:1e:f5:18:07:
13:b4:61:7f:3b:b5:f0:22:9e:7d:53:84:c2:ce:2a:
3b:8c:1e:76:c6:69:c3:af:77:48:c5:1b:3c:6d:22:
d9:04:87:24:4e:52:78:4d:c5:0e:5c:cf:68:c4:4a:
90:f2:29:38:63:7e:26:98:16:d3:8c:67:ee:de:41:
67:e1:78:7a:11:85:16:bf:7a:f5:6b:e9:c1:08:0c:
7f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3F:39:A9:EE:58:F8:5F:E0:04:9D:37:5B:46:53:A5:4A:A0:9F:34
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:a9:62:76:5a:e5:98:8c:f0:80:10:8a:02:d8:50:c1:9a:
13:87:c1:ed:33:02:2e:e7:30:b3:ee:5c:a9:66:76:2f:42:ad:
ae:19:3e:d0:79:98:93:fd:9c:3c:d2:ca:d6:b7:fe:6f:5b:88:
4d:90:a8:96:39:b4:d2:0b:2d:27:9e:b6:dc:94:3f:41:02:1e:
a5:e6:70:a4:10:87:e1:cc:00:51:35:40:ff:6e:05:a5:92:7e:
16:fd:1a:b4:bc:d7:43:47:f5:5b:8e:df:04:cb:81:fc:83:9d:
9e:25:60:e2:68:10:ab:f8:01:d2:67:9f:db:9d:10:54:a0:3b:
60:47:ee:5b:ed:90:78:e7:07:fb:e4:8e:98:4c:25:99:51:ef:
83:59:9c:19:ed:10:59:b1:ca:8a:3d:88:77:65:c0:d8:6e:f8:
10:7e:00:f1:b6:98:50:95:68:50:45:a4:ab:65:09:2b:af:ef:
1e:a0:5e:1a:cb:b0:67:f4:7d:a4:5d:79:d2:2f:13:53:14:0b:
92:2c:65:93:06:c7:0e:f1:31:87:99:bc:8e:1e:cc:2f:12:02:
00:88:fa:d0:57:1a:bc:eb:38:a2:9f:ac:43:55:e8:2f:0d:5c:
48:57:94:ed:3d:7c:45:cf:22:f1:7c:10:7d:4b:dd:cc:9d:6c:
41:5c:24:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaT37U7n6XY9eoRP4sjGvWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWJiNDEzMjVmZDYwNWUyMGJhZmMyZjA2NTk0NTQzOWVj
MDVmZTAwHhcNMjUwNTAzMDIwMDMzWhcNMjUwNTA0MDIwMDMzWjAzMTEwLwYDVQQD
Eyg5MjNmMzlhOWVlNThmODVmZTAwNDlkMzc1YjQ2NTNhNTRhYTA5ZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA170JS1bUxjM5qH6ybpBEf5+6giUY
tyahmzOdOSaK1ZPn1s9Uj61vrip7RSv0ll56alUQkxqh+PglpHJKz9sIfTUnw38v
Jwgvgfn7Q6bgMl7AlxE15toSi5if+Hcu7j9r141m7lW/zDrPDsoQbMy+bqoQClPU
pWtuRPIALqciZ7AKVXoydKGpmfB9YvBEB/asoi33CuYN9nks6W6LSV1BERYk1/lx
v/bB8o4+RYfy1h71GAcTtGF/O7XwIp59U4TCzio7jB52xmnDr3dIxRs8bSLZBIck
TlJ4TcUOXM9oxEqQ8ik4Y34mmBbTjGfu3kFn4Xh6EYUWv3r1a+nBCAx/JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJI/OanuWPhf4ASdN1tGU6VKoJ80MB8GA1UdIwQY
MBaAFAdbtBMl/WBeILr8LwZZRUOewF/gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85ODVhMjctMDgxOC00Y2E1LWEzNzct
MDYxZjVjYzZhZDUyLzEvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85ODVhMjctMDgxOC00Y2E1LWEzNzctMDYxZjVjYzZhZDUy
LzEvQjF1MEV5WDlZRjRndXZ3dkJsbEZRNTdBWC1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHCpYnZa
5ZiM8IAQigLYUMGaE4fB7TMCLucws+5cqWZ2L0Ktrhk+0HmYk/2cPNLK1rf+b1uI
TZColjm00gstJ5623JQ/QQIepeZwpBCH4cwAUTVA/24FpZJ+Fv0atLzXQ0f1W47f
BMuB/IOdniVg4mgQq/gB0mef250QVKA7YEfuW+2QeOcH++SOmEwlmVHvg1mcGe0Q
WbHKij2Id2XA2G74EH4A8baYUJVoUEWkq2UJK6/vHqBeGsuwZ/R9pF150i8TUxQL
kixlkwbHDvExh5m8jh7MLxICAIj60FcavOs4op+sQ1XoLw1cSFeU7T18Rc8i8XwQ
fUvdzJ1sQVwk8Q==
-----END CERTIFICATE-----
Generated at Sat May 3 05:07:49 2025 by rpki-client