Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier: avzsJr1crWjKwRXRLnfCYUC5iphDU42HbNuofpUiuGE=
Subject key identifier: 98:CE:4C:8E:95:C7:F5:64:C9:48:44:AC:00:4D:35:5D:BF:80:0C:96
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer: /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial: 019675308BC81EF137080992C1D950ABBACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number: 02FB
Signing time: Sun 27 Apr 2025 03:00:37 +0000
Manifest this update: Sun 27 Apr 2025 03:00:37 +0000
Manifest next update: Mon 28 Apr 2025 03:00:37 +0000
Files and hashes: 1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: 9EEc8tMExVqNX0GIcdYbP32PRMVlT0Q3x3iDdmetCEY=)
2: yAFTVipgzUq2JehlyXdlgvk4lGA.roa (hash: 4JLBxrRXaq9Ej5PAfStMaFMw5Cw8Ln+aMWKMUmNE/iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:8b:c8:1e:f1:37:08:09:92:c1:d9:50:ab:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
Validity
Not Before: Apr 27 03:00:37 2025 GMT
Not After : Apr 28 03:00:37 2025 GMT
Subject: CN=98ce4c8e95c7f564c94844ac004d355dbf800c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:10:b6:26:e0:71:06:5a:61:7b:87:77:ee:62:
57:80:18:8a:a5:36:95:29:56:10:a0:de:c7:cb:27:
b5:8c:9b:8f:bc:0f:95:3e:5d:cf:e4:6e:fa:bd:71:
2c:04:31:53:23:d8:b9:f6:5d:0f:b6:d3:1b:1e:87:
4a:e7:37:aa:5d:53:6a:90:0a:23:f3:52:f2:53:d8:
35:3e:1c:55:9f:0b:65:2b:58:bb:cc:50:83:2f:9a:
6a:85:36:ef:f7:f6:58:43:49:01:92:52:60:eb:9b:
c5:38:79:52:0c:10:fc:a0:24:f6:16:65:71:ee:52:
90:fb:b3:86:c6:a7:43:f7:f9:f9:f8:8b:e4:1a:41:
1c:08:ab:3e:06:23:79:ce:6a:b0:0a:2d:0e:95:7d:
b8:07:2f:d4:33:04:b4:d2:0e:e4:31:05:41:ea:ce:
80:2c:aa:43:01:37:65:55:ae:cd:84:d8:54:0b:06:
99:8f:6c:e0:87:7c:8b:dc:23:38:77:ca:46:44:9e:
14:29:4b:a7:20:b2:6d:36:4f:ba:bc:50:31:c9:50:
ea:24:c8:75:b5:40:46:1b:87:cd:df:d3:79:fb:45:
aa:a8:67:8a:9e:60:6f:a2:1f:db:1a:d2:75:01:58:
1f:12:3f:a7:b5:f9:53:67:67:00:36:7f:94:6c:7f:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CE:4C:8E:95:C7:F5:64:C9:48:44:AC:00:4D:35:5D:BF:80:0C:96
X509v3 Authority Key Identifier:
keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:80:95:8f:a8:b1:bb:56:66:0b:2c:2d:b8:80:c7:d8:94:a4:
3d:6c:87:17:f6:27:99:56:05:65:09:b5:10:eb:d7:0d:e7:2d:
e4:44:32:ff:55:71:80:90:f0:87:e0:1a:10:f9:44:da:f0:3d:
84:00:5b:f9:56:03:33:e5:f8:12:a5:c2:46:88:f3:e6:2d:73:
0d:47:d0:ca:51:c1:03:3d:0b:28:1d:45:db:a6:32:35:97:0b:
a3:54:2d:96:71:9e:e3:87:d2:cc:49:8d:a1:ea:91:45:d9:7b:
ee:0b:63:9a:d8:58:80:f7:6c:eb:fe:be:68:ca:cf:97:1e:59:
9c:d4:d0:4e:f6:9e:f0:03:06:06:0a:11:9c:c2:f1:f4:00:cb:
fb:75:a8:29:07:cc:d2:b4:0c:0f:aa:e5:7b:30:35:10:9e:65:
13:80:a8:2a:56:51:31:80:14:6d:b8:c1:16:5e:85:6e:c8:db:
5b:98:41:04:3d:03:5e:ff:72:61:53:fe:1d:c4:d1:f7:ab:08:
e8:a0:d7:a9:0f:15:c9:e9:c4:0e:80:39:f9:c6:70:f0:ae:f5:
85:bc:e2:b7:e2:18:6f:c1:98:b3:b6:da:28:c3:e8:e9:dc:d1:
6e:8e:b2:be:94:2f:1f:a0:61:eb:ae:ea:22:1c:c2:02:1b:b5:
e6:74:01:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MIvIHvE3CAmSwdlQq7rNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy
ZTMwM2IwHhcNMjUwNDI3MDMwMDM3WhcNMjUwNDI4MDMwMDM3WjAzMTEwLwYDVQQD
Eyg5OGNlNGM4ZTk1YzdmNTY0Yzk0ODQ0YWMwMDRkMzU1ZGJmODAwYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBC2JuBxBlphe4d37mJXgBiKpTaV
KVYQoN7Hyye1jJuPvA+VPl3P5G76vXEsBDFTI9i59l0PttMbHodK5zeqXVNqkAoj
81LyU9g1PhxVnwtlK1i7zFCDL5pqhTbv9/ZYQ0kBklJg65vFOHlSDBD8oCT2FmVx
7lKQ+7OGxqdD9/n5+IvkGkEcCKs+BiN5zmqwCi0OlX24By/UMwS00g7kMQVB6s6A
LKpDATdlVa7NhNhUCwaZj2zgh3yL3CM4d8pGRJ4UKUunILJtNk+6vFAxyVDqJMh1
tUBGG4fN39N5+0WqqGeKnmBvoh/bGtJ1AVgfEj+ntflTZ2cANn+UbH+/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjOTI6Vx/VkyUhErABNNV2/gAyWMB8GA1UdIwQY
MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt
YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2
LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoCVj6ix
u1ZmCywtuIDH2JSkPWyHF/YnmVYFZQm1EOvXDect5EQy/1VxgJDwh+AaEPlE2vA9
hABb+VYDM+X4EqXCRojz5i1zDUfQylHBAz0LKB1F26YyNZcLo1QtlnGe44fSzEmN
oeqRRdl77gtjmthYgPds6/6+aMrPlx5ZnNTQTvae8AMGBgoRnMLx9ADL+3WoKQfM
0rQMD6rlezA1EJ5lE4CoKlZRMYAUbbjBFl6FbsjbW5hBBD0DXv9yYVP+HcTR96sI
6KDXqQ8VyenEDoA5+cZw8K71hbzit+IYb8GYs7baKMPo6dzRbo6yvpQvH6Bh667q
IhzCAhu15nQBUw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:04:34 2025 by rpki-client