Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: qC+95j76SjtlnLvgjoosWSnAMk9vY+bDk0vTgzNdyI4=
Subject key identifier: 9F:05:B6:0C:87:EB:7C:5E:14:16:09:E1:B4:5A:AB:F6:FD:2B:7E:15
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 01968C266D4CCD9A1C33CD48A8594EEB02D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 151F
Signing time: Thu 01 May 2025 14:00:50 +0000
Manifest this update: Thu 01 May 2025 14:00:50 +0000
Manifest next update: Fri 02 May 2025 14:00:50 +0000
Files and hashes: 1: Y-ORdAusYkZsKOUTFP8lOiqiHAs.roa (hash: VsoWMS+G3RdpKa8Z+B6s882TzbmXTjisQIhsADrOhSU=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: W18tX1LGQCbLPb+GLyNbMFOM/RQ+6QGjnFILVXRuEow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:26:6d:4c:cd:9a:1c:33:cd:48:a8:59:4e:eb:02:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: May 1 14:00:50 2025 GMT
Not After : May 2 14:00:50 2025 GMT
Subject: CN=9f05b60c87eb7c5e141609e1b45aabf6fd2b7e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:aa:0e:ae:9e:ca:3f:fb:fa:2b:a6:e5:84:40:
bb:bc:b6:43:2c:88:57:1a:ad:b2:38:19:e8:7c:30:
b7:ee:22:48:18:84:d3:44:76:2a:58:85:af:23:3d:
b9:43:7f:83:86:48:d2:99:a5:23:bf:01:b5:0e:e4:
19:70:79:eb:ee:bd:f0:fe:13:e4:ee:69:d9:31:a0:
c3:55:b4:16:b1:50:08:f6:e7:b3:4e:d0:17:dc:be:
aa:b9:d5:24:33:4b:56:68:95:4f:58:29:15:d6:33:
7f:40:36:fa:7b:51:12:4d:54:41:3e:b4:bc:13:f0:
85:76:6d:9e:14:c1:f5:3d:12:11:df:5f:66:18:65:
60:68:91:0c:dd:6e:e1:2b:34:96:fb:10:f6:37:e1:
62:5b:95:33:6d:73:d0:fc:46:00:83:8e:f6:91:c2:
aa:c5:11:7b:17:46:1c:f6:90:94:d9:12:3d:a0:cb:
97:d7:e0:38:9a:06:43:a1:5f:53:5e:85:24:90:63:
df:46:b5:43:5f:8f:fe:9a:f1:98:ae:f3:12:e7:1e:
b5:44:a4:48:ee:2f:5f:8a:4c:c1:89:b9:e9:a8:65:
56:4d:1e:85:17:3f:40:91:12:70:25:a6:e4:7e:36:
8d:7b:7a:27:63:b3:1a:0f:03:26:a7:ce:6c:7b:24:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:05:B6:0C:87:EB:7C:5E:14:16:09:E1:B4:5A:AB:F6:FD:2B:7E:15
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6d:19:95:fc:1d:96:a7:02:5a:45:01:1c:59:f3:8b:9d:19:
ea:57:69:64:55:19:2a:fa:4b:d0:b9:70:49:8f:6e:87:d4:47:
a8:e1:48:08:21:d6:9e:bc:9b:a0:85:4c:13:68:b6:5f:87:db:
6c:8c:fb:21:2e:60:56:1e:07:11:bc:fb:fa:6d:f0:60:13:e6:
a4:bc:d2:ed:1c:92:c9:b2:59:a8:6a:eb:f2:1f:e4:93:74:b5:
f1:4c:23:22:4f:a3:c3:6e:00:14:e4:44:96:27:c4:62:88:d1:
42:fe:c4:8b:57:8c:9f:78:10:9c:8a:a9:f4:1c:51:53:30:ff:
d7:a1:46:8b:fe:43:ed:73:01:1b:cb:f7:1b:a5:30:ac:7e:d9:
53:ae:1b:1d:28:d0:6a:ca:09:72:8c:39:75:ea:96:33:1f:b2:
76:13:6e:d9:3e:25:57:db:a3:a2:7a:39:e1:c4:2c:6b:f8:10:
53:87:a0:95:3c:18:03:eb:15:73:79:ce:86:0a:6a:4a:cd:60:
e9:91:8c:ff:c4:76:d3:a7:d6:08:4c:25:d1:c7:f2:59:37:6f:
e8:00:fd:87:3d:ad:59:f2:e0:cb:64:da:e3:cf:3d:87:9e:95:
d0:5c:a5:18:7d:55:6c:4e:42:f2:eb:1a:3e:c9:3a:ba:eb:0a:
18:e3:05:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaMJm1MzZocM81IqFlO6wLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNWU3NWRiY2NlNWZjZGQ5MWQ4YTk5ZTVhMWIyYzk5NWI4
MTI3NzUwHhcNMjUwNTAxMTQwMDUwWhcNMjUwNTAyMTQwMDUwWjAzMTEwLwYDVQQD
Eyg5ZjA1YjYwYzg3ZWI3YzVlMTQxNjA5ZTFiNDVhYWJmNmZkMmI3ZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaoOrp7KP/v6K6blhEC7vLZDLIhX
Gq2yOBnofDC37iJIGITTRHYqWIWvIz25Q3+DhkjSmaUjvwG1DuQZcHnr7r3w/hPk
7mnZMaDDVbQWsVAI9uezTtAX3L6qudUkM0tWaJVPWCkV1jN/QDb6e1ESTVRBPrS8
E/CFdm2eFMH1PRIR319mGGVgaJEM3W7hKzSW+xD2N+FiW5UzbXPQ/EYAg472kcKq
xRF7F0Yc9pCU2RI9oMuX1+A4mgZDoV9TXoUkkGPfRrVDX4/+mvGYrvMS5x61RKRI
7i9fikzBibnpqGVWTR6FFz9AkRJwJabkfjaNe3onY7MaDwMmp85seyRwswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8FtgyH63xeFBYJ4bRaq/b9K34VMB8GA1UdIwQY
MBaAFHBeddvM5fzdkdipnlobLJlbgSd1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEt
ZjhiNDhiYWNjZDliLzEvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9jMWY0NDgtODgwOC00YTJmLWJmZmEtZjhiNDhiYWNjZDli
LzEvY0Y1MTI4emxfTjJSMkttZVdoc3NtVnVCSjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJW0Zlfwd
lqcCWkUBHFnzi50Z6ldpZFUZKvpL0LlwSY9uh9RHqOFICCHWnryboIVME2i2X4fb
bIz7IS5gVh4HEbz7+m3wYBPmpLzS7RySybJZqGrr8h/kk3S18UwjIk+jw24AFORE
lifEYojRQv7Ei1eMn3gQnIqp9BxRUzD/16FGi/5D7XMBG8v3G6UwrH7ZU64bHSjQ
asoJcow5deqWMx+ydhNu2T4lV9ujono54cQsa/gQU4eglTwYA+sVc3nOhgpqSs1g
6ZGM/8R206fWCEwl0cfyWTdv6AD9hz2tWfLgy2Ta4889h56V0FylGH1VbE5C8usa
Psk6uusKGOMFmg==
-----END CERTIFICATE-----
Generated at Fri May 2 00:51:17 2025 by rpki-client