Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: w9CRg/5vCHmzH33bp5u3W55Sa7Y+o0A5eifIX6lIOnA=
Subject key identifier: A4:FC:32:3C:F1:CA:66:FF:4D:23:FC:93:C3:29:C0:23:50:07:F0:4C
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 019683C7B60C685C8D408D434507475CA08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 0840
Signing time: Tue 29 Apr 2025 23:00:25 +0000
Manifest this update: Tue 29 Apr 2025 23:00:25 +0000
Manifest next update: Wed 30 Apr 2025 23:00:25 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: QxstnV/md1mHkOJk6hNNqA0ChY1tkZwyu2FE5+mT5ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:b6:0c:68:5c:8d:40:8d:43:45:07:47:5c:a0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Apr 29 23:00:25 2025 GMT
Not After : Apr 30 23:00:25 2025 GMT
Subject: CN=a4fc323cf1ca66ff4d23fc93c329c0235007f04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:7e:26:e7:a8:8c:b8:1d:54:3c:0a:f3:a7:
a3:62:a8:6c:8a:6a:ea:1d:b3:9e:18:0a:3e:32:ec:
18:b4:38:39:9b:82:af:e1:2f:5f:45:a4:c0:34:e5:
0c:04:22:9e:75:af:95:a1:8e:8d:d0:cf:b5:c7:47:
ca:f6:fd:d5:ab:57:59:b8:65:7f:5d:b6:51:61:bc:
f5:33:8c:69:3a:94:cc:04:4c:12:2f:53:08:af:74:
1b:9e:c7:a6:e4:bc:61:5a:62:01:f4:4a:21:bc:c7:
ed:57:6b:c9:0e:0e:ba:fb:bc:0e:30:e5:af:8b:ef:
58:0f:ae:92:b3:f2:26:74:ee:ab:98:a0:03:ab:0f:
d6:f2:87:f4:cd:ea:3d:2d:16:ac:01:d9:11:2a:fc:
7a:9a:76:60:6c:e7:5d:36:13:21:c7:97:70:95:4e:
f3:f7:70:4f:e1:d6:b9:24:1b:b2:da:bf:be:34:d6:
c7:82:16:0b:b8:63:a9:5d:44:99:c5:5e:e9:f4:e3:
58:d0:e7:33:2d:c4:08:90:0e:6e:e5:1f:f0:e5:ca:
9e:09:4a:51:14:d0:25:34:d6:a6:98:70:24:b3:51:
e5:e3:70:90:ac:21:03:19:03:75:94:62:4b:4e:b3:
05:e5:9c:58:b5:23:bd:cb:f4:0b:5a:99:b8:cc:89:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FC:32:3C:F1:CA:66:FF:4D:23:FC:93:C3:29:C0:23:50:07:F0:4C
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ed:40:8a:e6:9c:4e:b8:0b:f4:02:f1:13:53:25:82:81:0c:
07:dd:6f:2d:04:6c:e0:69:41:ce:b6:38:a6:56:59:2b:b3:c7:
5f:47:bc:a7:0f:5c:54:f2:30:6d:de:4e:67:5d:22:4c:0b:ed:
37:22:df:da:b9:9c:96:89:be:6e:72:0c:77:91:b4:23:c9:3c:
30:43:ab:4a:59:64:79:3b:a3:de:22:85:20:90:b7:18:9c:1e:
eb:33:95:4a:62:57:4e:68:ae:e6:6e:51:9c:c4:34:a9:b7:48:
c2:be:13:70:8e:f1:b2:f9:8b:a9:aa:92:46:3a:f4:d5:a2:5d:
fb:e2:33:e7:46:cf:af:f6:04:ae:3f:32:89:7c:bd:20:19:35:
8c:37:8f:2d:6b:78:ec:cb:91:9f:85:7d:80:6d:4c:7a:8b:72:
aa:ac:aa:55:4d:0c:32:5e:6e:00:a9:7f:2e:56:1c:9e:74:cb:
13:c4:53:d0:20:a3:2a:de:a2:e5:21:16:23:4c:ab:11:4a:30:
af:1c:8f:29:f3:93:64:62:04:53:c9:84:01:05:5d:42:60:08:
6a:f3:b7:78:02:42:b1:70:21:35:6a:55:d1:fe:19:0c:dc:96:
1a:fe:2e:e1:7f:7d:41:73:46:f2:b3:69:f0:27:b4:37:3c:ea:
17:aa:26:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx7YMaFyNQI1DRQdHXKCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjUwNDI5MjMwMDI1WhcNMjUwNDMwMjMwMDI1WjAzMTEwLwYDVQQD
EyhhNGZjMzIzY2YxY2E2NmZmNGQyM2ZjOTNjMzI5YzAyMzUwMDdmMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSF+JueojLgdVDwK86ejYqhsimrq
HbOeGAo+MuwYtDg5m4Kv4S9fRaTANOUMBCKeda+VoY6N0M+1x0fK9v3Vq1dZuGV/
XbZRYbz1M4xpOpTMBEwSL1MIr3Qbnsem5LxhWmIB9EohvMftV2vJDg66+7wOMOWv
i+9YD66Ss/ImdO6rmKADqw/W8of0zeo9LRasAdkRKvx6mnZgbOddNhMhx5dwlU7z
93BP4da5JBuy2r++NNbHghYLuGOpXUSZxV7p9ONY0OczLcQIkA5u5R/w5cqeCUpR
FNAlNNammHAks1Hl43CQrCEDGQN1lGJLTrMF5ZxYtSO9y/QLWpm4zIl2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT8Mjzxymb/TSP8k8MpwCNQB/BMMB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARe1Aiuac
TrgL9ALxE1MlgoEMB91vLQRs4GlBzrY4plZZK7PHX0e8pw9cVPIwbd5OZ10iTAvt
NyLf2rmclom+bnIMd5G0I8k8MEOrSllkeTuj3iKFIJC3GJwe6zOVSmJXTmiu5m5R
nMQ0qbdIwr4TcI7xsvmLqaqSRjr01aJd++Iz50bPr/YErj8yiXy9IBk1jDePLWt4
7MuRn4V9gG1MeotyqqyqVU0MMl5uAKl/LlYcnnTLE8RT0CCjKt6i5SEWI0yrEUow
rxyPKfOTZGIEU8mEAQVdQmAIavO3eAJCsXAhNWpV0f4ZDNyWGv4u4X99QXNG8rNp
8Ce0NzzqF6om8A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:49 2025 by rpki-client