Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
File: iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft (raw, json)
Hash identifier: thGofZY8Xa2gB0a3kuuwN5eEDbNBFhsu4HmyHkpnK3s=
Subject key identifier: A0:29:B6:C3:45:2A:C9:9F:B4:5A:03:25:CD:C9:2E:18:07:16:CA:61
Authority key identifier: 88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
Certificate issuer: /CN=88fc58875608970d9a728347d05ef00d0f1d5611
Certificate serial: 019679444699B42B9266F20DEDFC07B400EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
Manifest number: 0E7C
Signing time: Sun 27 Apr 2025 22:00:39 +0000
Manifest this update: Sun 27 Apr 2025 22:00:39 +0000
Manifest next update: Mon 28 Apr 2025 22:00:39 +0000
Files and hashes: 1: glHtLecTNUxeR4oxupaJRTlQLos.roa (hash: tjH899kftJHgu4JmkbHHTA84WKPpmWW00cLzLNo7wBg=)
2: iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl (hash: Qx7SWAdMSM4SzoErklVevUlMfy5qQjLOHqLfmj2fuPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:46:99:b4:2b:92:66:f2:0d:ed:fc:07:b4:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fc58875608970d9a728347d05ef00d0f1d5611
Validity
Not Before: Apr 27 22:00:39 2025 GMT
Not After : Apr 28 22:00:39 2025 GMT
Subject: CN=a029b6c3452ac99fb45a0325cdc92e180716ca61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:24:60:68:c4:d8:73:07:b1:2b:16:61:ed:
1c:55:62:2f:f6:a0:9b:0a:5c:14:73:80:ba:59:14:
d9:44:7d:56:3b:e3:d4:17:31:85:50:84:6c:0e:77:
7b:79:25:eb:b8:2a:8b:cb:97:d0:47:93:37:6f:d6:
9c:78:a7:10:dd:a9:a3:9b:41:38:67:6e:64:3c:2b:
31:26:9b:d5:30:eb:be:ed:a1:a0:3f:4c:84:cc:a6:
26:06:0a:60:a6:04:37:b9:a1:d8:98:53:70:7d:36:
b3:e0:0f:ca:86:57:ea:d1:01:09:06:73:d4:a5:96:
55:1e:9c:bc:c4:bf:d9:c2:e8:8b:c5:5c:e1:52:b0:
29:57:10:b6:47:78:72:d3:3c:09:e2:88:25:6e:d3:
41:ac:dc:8c:4c:fa:79:28:31:e6:d0:a4:35:c1:d6:
5d:e3:65:38:ac:7a:85:5c:20:ff:fa:ea:4b:48:7a:
e0:86:38:c9:c2:2e:f6:0f:b6:93:28:fe:05:3e:63:
10:b4:64:35:98:89:59:6f:6d:99:16:9c:0a:f3:e3:
ee:09:5d:5b:9a:79:39:7d:17:4f:a7:1b:ce:a7:a9:
d5:14:17:c4:e7:09:65:a1:e6:fb:20:a2:5b:ee:a6:
a1:3c:3f:c0:9d:b1:a3:e3:e1:25:61:c7:2f:85:59:
b7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:29:B6:C3:45:2A:C9:9F:B4:5A:03:25:CD:C9:2E:18:07:16:CA:61
X509v3 Authority Key Identifier:
keyid:88:FC:58:87:56:08:97:0D:9A:72:83:47:D0:5E:F0:0D:0F:1D:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPxYh1YIlw2acoNH0F7wDQ8dVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a2df79-d4ff-40c7-b4a4-7aec558eb40d/1/iPxYh1YIlw2acoNH0F7wDQ8dVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:55:d8:aa:e9:33:b2:42:b9:df:5c:27:0d:3d:ce:bb:57:94:
12:8e:90:bc:32:71:f4:b2:c5:66:3a:7a:3e:a9:b4:1b:c4:c6:
70:fa:df:2d:ad:24:d7:70:8a:2b:4e:60:ca:dc:f7:40:bf:2d:
2d:4e:5a:1a:56:19:23:f2:c4:a0:af:58:bd:43:35:5c:46:3c:
7d:1e:d0:9c:3c:a1:0b:e0:f1:4b:1b:4d:3d:89:e4:93:1d:ac:
1e:6b:98:47:d2:9a:aa:bd:60:58:51:27:48:af:70:db:c4:5b:
92:64:36:48:87:13:6b:e3:af:df:12:14:20:ac:63:69:04:c7:
e0:06:f1:29:6b:dd:eb:9e:e4:df:38:1e:3d:f0:92:67:3b:61:
be:f8:bf:c5:16:49:aa:f4:06:f6:bd:75:9e:48:0b:c6:d7:e1:
b8:43:8f:c9:1a:fd:6f:18:f8:49:f3:14:3c:5a:f3:b7:d1:b6:
28:08:46:23:1a:7d:91:ac:4b:16:3d:44:a2:d0:2c:cb:50:0f:
a5:4d:c8:02:88:ad:c9:ca:6c:74:d4:08:aa:08:d0:54:71:42:
76:c0:cf:c2:9b:71:7a:64:6f:86:d9:60:68:f4:13:87:16:db:
26:7f:b3:72:4b:59:67:d3:95:51:8f:14:78:dd:4e:7a:eb:1f:
a6:3f:3f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5REaZtCuSZvIN7fwHtADvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZmM1ODg3NTYwODk3MGQ5YTcyODM0N2QwNWVmMDBkMGYx
ZDU2MTEwHhcNMjUwNDI3MjIwMDM5WhcNMjUwNDI4MjIwMDM5WjAzMTEwLwYDVQQD
EyhhMDI5YjZjMzQ1MmFjOTlmYjQ1YTAzMjVjZGM5MmUxODA3MTZjYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkkkYGjE2HMHsSsWYe0cVWIv9qCb
ClwUc4C6WRTZRH1WO+PUFzGFUIRsDnd7eSXruCqLy5fQR5M3b9aceKcQ3amjm0E4
Z25kPCsxJpvVMOu+7aGgP0yEzKYmBgpgpgQ3uaHYmFNwfTaz4A/Khlfq0QEJBnPU
pZZVHpy8xL/ZwuiLxVzhUrApVxC2R3hy0zwJ4oglbtNBrNyMTPp5KDHm0KQ1wdZd
42U4rHqFXCD/+upLSHrghjjJwi72D7aTKP4FPmMQtGQ1mIlZb22ZFpwK8+PuCV1b
mnk5fRdPpxvOp6nVFBfE5wlloeb7IKJb7qahPD/AnbGj4+ElYccvhVm32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAptsNFKsmftFoDJc3JLhgHFsphMB8GA1UdIwQY
MBaAFIj8WIdWCJcNmnKDR9Be8A0PHVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQt
N2FlYzU1OGViNDBkLzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9hMmRmNzktZDRmZi00MGM3LWI0YTQtN2FlYzU1OGViNDBk
LzEvaVB4WWgxWUlsdzJhY29OSDBGN3dEUThkVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVXYqukz
skK531wnDT3Ou1eUEo6QvDJx9LLFZjp6Pqm0G8TGcPrfLa0k13CKK05gytz3QL8t
LU5aGlYZI/LEoK9YvUM1XEY8fR7QnDyhC+DxSxtNPYnkkx2sHmuYR9Kaqr1gWFEn
SK9w28RbkmQ2SIcTa+Ov3xIUIKxjaQTH4AbxKWvd657k3zgePfCSZzthvvi/xRZJ
qvQG9r11nkgLxtfhuEOPyRr9bxj4SfMUPFrzt9G2KAhGIxp9kaxLFj1EotAsy1AP
pU3IAoitycpsdNQIqgjQVHFCdsDPwptxemRvhtlgaPQThxbbJn+zcktZZ9OVUY8U
eN1Oeusfpj8/YA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:51 2025 by rpki-client