Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: Tqc1LR4C/gzdf3CZcuA6DrZ9CUWDShA9PajBJDeWquk=
Subject key identifier: A9:28:AB:B0:D4:CE:D9:36:35:BB:9C:85:AF:C2:A9:0A:66:93:A6:06
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019677C36B74FBF0F083909EB3A0FB0651C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 15:00:17 +0000
Manifest this update: Sun 27 Apr 2025 15:00:17 +0000
Manifest next update: Mon 28 Apr 2025 15:00:17 +0000
Files and hashes: 1: 9y87QXHvPreUOvjZ1Oe2QvXling.roa (hash: THAUh6ARfmUeBlEORlfxrZB6XW0KTPM4GpL4IBGKtq4=)
2: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: jxPhOM0vOK4YCYaFpUn7A39CNBLtd/7Sgjrk42cFeZo=)
3: dagjZoA2cgv7IOwssRcqkxBEGlA.roa (hash: MlQsKiZwSfxtbg0qv4PHAKQxosBgQWpaFiAz9StErlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:6b:74:fb:f0:f0:83:90:9e:b3:a0:fb:06:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Apr 27 15:00:17 2025 GMT
Not After : Apr 28 15:00:17 2025 GMT
Subject: CN=a928abb0d4ced93635bb9c85afc2a90a6693a606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:08:aa:e3:aa:67:da:f0:26:98:d2:0c:9b:
27:61:82:27:ea:7f:84:64:a0:77:05:9a:65:19:e6:
1d:7a:eb:c0:93:5c:e6:6c:b1:5e:b4:f5:ab:90:ec:
71:fc:cc:8f:d2:0f:4a:13:dd:22:02:75:36:a6:52:
80:5d:62:4b:2b:e0:7b:a8:9c:e4:2c:e7:0e:c6:40:
a5:b2:01:0c:c0:f4:a3:eb:45:4c:8a:24:f0:be:d7:
63:4d:24:65:d7:c1:4b:54:ea:98:8f:45:7e:c1:bb:
83:d0:e4:aa:60:40:1f:d4:b4:3b:30:e4:99:0c:e1:
c9:7c:09:67:60:60:6a:8d:7f:f0:92:d1:2e:45:94:
e1:28:4e:ef:20:19:4b:99:d7:c8:ae:38:c0:05:b2:
3b:ad:e0:b8:81:83:d8:ac:c1:ff:ae:d8:e4:bc:94:
6c:b5:43:d9:ec:16:d1:b2:90:d1:fe:c4:00:9f:b1:
43:b5:4e:d4:60:de:ce:3b:37:ab:f9:20:b6:cb:05:
a5:7e:a1:40:49:75:0a:74:49:d1:85:3f:22:c7:50:
67:aa:b3:89:05:20:e9:c7:1f:b7:90:3e:c9:38:da:
f3:9b:b4:b6:a0:8f:f0:18:88:69:6c:b5:2f:ae:9d:
14:6c:d6:73:0b:9b:e2:f4:dc:e0:e5:62:50:30:5d:
bd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:AB:B0:D4:CE:D9:36:35:BB:9C:85:AF:C2:A9:0A:66:93:A6:06
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6c:73:00:3e:2b:5a:05:22:13:ed:2f:91:cc:af:a3:5e:57:
46:29:8e:4e:85:e2:e3:54:83:13:df:c5:15:eb:65:0d:3b:da:
4d:75:45:0b:a2:7c:0a:7d:e0:35:a0:75:22:21:d5:bd:c7:94:
04:8a:c9:f2:96:7a:78:fd:71:95:e9:74:a5:c9:48:32:63:bc:
30:74:2c:35:e8:9b:38:8b:80:17:d1:15:2e:d0:2e:d4:a9:c7:
2f:99:19:f6:a5:79:59:4e:f7:ea:3a:e4:ed:dd:f0:7c:98:85:
4a:e8:cd:79:7c:46:7f:d1:6c:1d:87:01:34:7f:85:18:77:da:
ef:05:52:14:d2:4b:91:e1:68:ab:bc:d6:74:8a:a4:dd:50:85:
af:cc:d0:6d:f8:84:44:db:45:34:fd:2f:62:14:73:e5:ae:2a:
66:a8:7d:61:e6:de:ce:c7:1e:b3:b3:d7:c6:c8:70:5d:42:3b:
07:09:78:e4:62:e3:04:11:1a:77:37:48:1c:06:d4:c0:f6:1a:
b9:2b:97:c2:d2:59:71:c5:03:27:65:bc:aa:fc:56:29:1f:46:
75:67:86:44:2b:92:0b:b0:c0:07:5e:64:e2:c1:7e:ed:ef:d5:
10:17:4e:7b:3e:8c:a9:b1:d5:e6:30:18:1f:a4:c5:34:7b:f7:
43:d0:a2:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w2t0+/Dwg5Ces6D7BlHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWQ2OTk1N2QzMzM0MzJhY2NhYzgxMDIzMWUyODkzODhl
MzAyZTIwHhcNMjUwNDI3MTUwMDE3WhcNMjUwNDI4MTUwMDE3WjAzMTEwLwYDVQQD
EyhhOTI4YWJiMGQ0Y2VkOTM2MzViYjljODVhZmMyYTkwYTY2OTNhNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWkIquOqZ9rwJpjSDJsnYYIn6n+E
ZKB3BZplGeYdeuvAk1zmbLFetPWrkOxx/MyP0g9KE90iAnU2plKAXWJLK+B7qJzk
LOcOxkClsgEMwPSj60VMiiTwvtdjTSRl18FLVOqYj0V+wbuD0OSqYEAf1LQ7MOSZ
DOHJfAlnYGBqjX/wktEuRZThKE7vIBlLmdfIrjjABbI7reC4gYPYrMH/rtjkvJRs
tUPZ7BbRspDR/sQAn7FDtU7UYN7OOzer+SC2ywWlfqFASXUKdEnRhT8ix1BnqrOJ
BSDpxx+3kD7JONrzm7S2oI/wGIhpbLUvrp0UbNZzC5vi9Nzg5WJQMF29rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkoq7DUztk2Nbucha/CqQpmk6YGMB8GA1UdIwQY
MBaAFHCdaZV9MzQyrMrIECMeKJOI4wLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQt
MDhhNjg2MzJhNjNhLzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81M2Q1NmEtMDk2ZS00NThhLTlhOTQtMDhhNjg2MzJhNjNh
LzEvY0oxcGxYMHpOREtzeXNnUUl4NG9rNGpqQXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomxzAD4r
WgUiE+0vkcyvo15XRimOToXi41SDE9/FFetlDTvaTXVFC6J8Cn3gNaB1IiHVvceU
BIrJ8pZ6eP1xlel0pclIMmO8MHQsNeibOIuAF9EVLtAu1KnHL5kZ9qV5WU736jrk
7d3wfJiFSujNeXxGf9FsHYcBNH+FGHfa7wVSFNJLkeFoq7zWdIqk3VCFr8zQbfiE
RNtFNP0vYhRz5a4qZqh9Yebezsces7PXxshwXUI7Bwl45GLjBBEadzdIHAbUwPYa
uSuXwtJZccUDJ2W8qvxWKR9GdWeGRCuSC7DAB15k4sF+7e/VEBdOez6MqbHV5jAY
H6TFNHv3Q9Ci0g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:35:14 2025 by rpki-client