Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File: U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier: bU2kTC1sV5Xs713/iX+czJNOPjaMgVy/q5v6F0oqXY8=
Subject key identifier: 44:E6:41:35:45:B8:7C:70:C5:31:E6:55:63:38:D4:90:AF:5D:EE:AD
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer: /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial: 0196918350CDD3DC897D21653E1B21C89C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number: 0203
Signing time: Fri 02 May 2025 15:00:24 +0000
Manifest this update: Fri 02 May 2025 15:00:24 +0000
Manifest next update: Sat 03 May 2025 15:00:24 +0000
Files and hashes: 1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: 8lMl7MCQdr8haO3pu8kLJJ7WXeifxgUbKctRsOe55yI=)
2: Uug84sytKC8kkK1Rr2IkRJKpHOE.roa (hash: AF85GnR/Tasw2A05JHhZPxVHlXBJOl2ToM5QI44AuPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:50:cd:d3:dc:89:7d:21:65:3e:1b:21:c8:9c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Validity
Not Before: May 2 15:00:24 2025 GMT
Not After : May 3 15:00:24 2025 GMT
Subject: CN=44e6413545b87c70c531e6556338d490af5deead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5b:1a:20:75:53:8e:2f:de:b1:c4:ef:6e:92:
d4:82:62:eb:d3:e1:ea:83:0b:6a:2b:c3:fe:a3:f3:
50:84:1f:b6:4e:be:2a:f6:90:e0:4f:cd:ce:d6:ab:
ab:ac:d3:9b:90:9e:1a:00:d2:3b:75:f8:48:cd:2d:
26:37:16:4c:dd:46:82:c0:f2:16:7e:28:84:49:70:
58:b0:91:22:df:14:f9:94:a2:6f:9f:ec:7a:c0:02:
9d:d0:b0:3d:63:45:70:8b:fe:3e:65:c0:a2:86:5f:
30:d9:4b:82:a5:30:fe:4d:f3:b6:ee:28:72:32:f7:
75:ee:10:3d:54:be:93:4b:e2:38:e8:23:b3:f7:77:
b7:37:99:91:05:99:71:aa:93:2d:11:3f:9a:db:b1:
08:fa:ee:1a:f6:93:93:02:b1:4b:1f:57:48:8b:39:
0f:db:90:42:8d:95:a9:69:e2:f0:e9:db:0f:28:84:
b6:ff:15:13:08:1a:20:24:dd:eb:46:0d:a0:7d:b3:
b8:82:eb:8f:19:05:41:89:b6:99:5a:38:aa:e3:5a:
2a:9c:e0:7c:fd:95:dd:7a:ad:c3:d0:67:b8:92:0b:
f1:51:2c:ab:e1:0e:34:33:96:9a:32:d5:bf:1f:f5:
b0:62:9e:f8:3d:bb:aa:06:0e:d8:8f:18:bf:eb:86:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:41:35:45:B8:7C:70:C5:31:E6:55:63:38:D4:90:AF:5D:EE:AD
X509v3 Authority Key Identifier:
keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:3b:7e:c2:d0:d2:80:cd:54:82:c7:89:89:fc:74:43:05:
45:7a:24:f3:2a:5a:c9:2a:9f:ef:bb:a5:13:78:26:eb:1c:e3:
40:17:b5:93:67:e2:e5:ec:15:33:9e:e5:86:88:b4:95:51:53:
bd:11:37:51:a2:94:30:c0:d2:1b:8b:95:01:1b:96:a3:b3:3f:
c5:b1:5d:0b:40:7a:96:f5:34:38:af:f1:c7:dc:cf:7c:93:7d:
5b:09:6a:17:95:75:69:14:c7:4d:e8:e1:ca:d9:0f:f5:d6:dc:
04:11:4d:f3:1f:21:12:b4:f5:70:03:4a:6b:e5:de:34:c0:a1:
4e:a7:9a:a1:39:92:3a:bb:51:7e:b7:12:97:8f:60:0d:2a:8f:
40:32:bd:e5:72:86:72:1a:79:18:66:aa:46:e5:fc:a2:11:f4:
93:f1:2f:be:b2:f2:3c:4d:45:72:7c:9d:96:91:ba:17:f6:ae:
94:8f:8b:6e:03:2c:b4:b3:75:94:88:64:99:e2:54:fe:e9:e4:
5c:f7:9e:60:e2:26:ee:55:f2:c3:be:dc:89:82:50:f3:3d:29:
8e:f0:bc:04:92:23:b7:10:5c:d1:71:aa:0e:dc:7b:3c:0d:12:
21:05:bc:54:e4:15:3b:01:f2:6e:bb:ac:e7:55:5d:31:43:3b:
ca:3e:cc:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRg1DN09yJfSFlPhshyJxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWIxY2Q1ZWU1ZWIwM2RmYmY2ZDQyNWQ2OTc5ZThkNTM1
MDE1YmMwHhcNMjUwNTAyMTUwMDI0WhcNMjUwNTAzMTUwMDI0WjAzMTEwLwYDVQQD
Eyg0NGU2NDEzNTQ1Yjg3YzcwYzUzMWU2NTU2MzM4ZDQ5MGFmNWRlZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFsaIHVTji/escTvbpLUgmLr0+Hq
gwtqK8P+o/NQhB+2Tr4q9pDgT83O1qurrNObkJ4aANI7dfhIzS0mNxZM3UaCwPIW
fiiESXBYsJEi3xT5lKJvn+x6wAKd0LA9Y0Vwi/4+ZcCihl8w2UuCpTD+TfO27ihy
Mvd17hA9VL6TS+I46COz93e3N5mRBZlxqpMtET+a27EI+u4a9pOTArFLH1dIizkP
25BCjZWpaeLw6dsPKIS2/xUTCBogJN3rRg2gfbO4guuPGQVBibaZWjiq41oqnOB8
/ZXdeq3D0Ge4kgvxUSyr4Q40M5aaMtW/H/WwYp74PbuqBg7Yjxi/64YitwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETmQTVFuHxwxTHmVWM41JCvXe6tMB8GA1UdIwQY
MBaAFFNbHNXuXrA9+/bUJdaXno1TUBW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2Zjkt
ZTJiOWY2ZGJlMDAwLzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2ZjktZTJiOWY2ZGJlMDAw
LzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNE7fsLQ
0oDNVILHiYn8dEMFRXok8ypaySqf77ulE3gm6xzjQBe1k2fi5ewVM57lhoi0lVFT
vRE3UaKUMMDSG4uVARuWo7M/xbFdC0B6lvU0OK/xx9zPfJN9WwlqF5V1aRTHTejh
ytkP9dbcBBFN8x8hErT1cANKa+XeNMChTqeaoTmSOrtRfrcSl49gDSqPQDK95XKG
chp5GGaqRuX8ohH0k/EvvrLyPE1FcnydlpG6F/aulI+LbgMstLN1lIhkmeJU/unk
XPeeYOIm7lXyw77ciYJQ8z0pjvC8BJIjtxBc0XGqDtx7PA0SIQW8VOQVOwHybrus
51VdMUM7yj7Mtg==
-----END CERTIFICATE-----
Generated at Fri May 2 22:28:46 2025 by rpki-client