Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
File: exExjUvdPsWUM4bnAdfQK9aDAK0.mft (raw, json)
Hash identifier: HJKw3QSGEwtirlgHL0gyu4QbHy4WYy4eYsTSvcvS9Ng=
Subject key identifier: FC:58:22:12:20:A0:4C:C0:CF:39:C2:B7:5F:2D:7A:45:66:48:8A:A7
Authority key identifier: 7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
Certificate issuer: /CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Certificate serial: 01967A8DD8A1D9FB16563BB5755994873D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
Manifest number: 02BE
Signing time: Mon 28 Apr 2025 04:00:38 +0000
Manifest this update: Mon 28 Apr 2025 04:00:38 +0000
Manifest next update: Tue 29 Apr 2025 04:00:38 +0000
Files and hashes: 1: exExjUvdPsWUM4bnAdfQK9aDAK0.crl (hash: WKflS0oow3YrF34QUB92HkERafzEjKMIUiOPC08Z564=)
2: ldyV_EpqT2oKvf1QJeErhcsDNrU.roa (hash: 5odg+3w026oemslVSdfJUXV6ifzJkymRShy49z+o09k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:d8:a1:d9:fb:16:56:3b:b5:75:59:94:87:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b11318d4bdd3ec5943386e701d7d02bd68300ad
Validity
Not Before: Apr 28 04:00:38 2025 GMT
Not After : Apr 29 04:00:38 2025 GMT
Subject: CN=fc58221220a04cc0cf39c2b75f2d7a4566488aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:bb:56:a6:c8:db:20:39:07:6d:71:8f:6c:
32:20:17:87:c0:6b:a3:50:75:be:09:3a:62:90:8c:
e2:ba:c7:6c:0f:8a:53:39:a3:88:8c:31:73:9d:9c:
fd:c6:2d:01:aa:fc:23:b0:de:78:a0:32:5f:d2:5f:
8b:1b:c7:8b:f1:b1:29:3f:cc:69:aa:9b:ce:fd:f1:
04:13:b5:a9:b2:db:94:ae:e3:0b:35:b3:8c:f7:a2:
c3:2f:0a:29:de:22:93:6a:43:7e:ca:f1:a8:30:24:
62:bf:ef:8b:7c:f4:78:0b:e0:9b:33:ff:bb:b2:50:
b0:de:2b:59:a5:48:62:1c:36:6d:22:5f:d6:3b:57:
87:a9:ba:fc:95:f7:c9:cb:d5:0a:a1:77:34:a6:f3:
41:f4:db:a7:4f:cb:8f:fb:99:6a:41:ce:3e:e6:e0:
58:f7:2c:f4:b1:4e:6f:42:7b:6e:4e:f7:bc:48:51:
e8:59:63:bc:28:de:b5:fa:a4:b5:2a:ad:0d:ee:b1:
62:0d:48:6b:8c:70:e9:74:e6:e1:1d:84:b1:9d:cb:
83:5a:db:e5:af:ad:a8:78:1a:1a:12:95:98:d8:38:
02:0e:09:ed:60:09:09:2b:a2:2e:94:ab:50:cb:31:
3b:1e:c0:ac:23:12:11:09:ce:bc:d3:e4:e0:f0:f6:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:22:12:20:A0:4C:C0:CF:39:C2:B7:5F:2D:7A:45:66:48:8A:A7
X509v3 Authority Key Identifier:
keyid:7B:11:31:8D:4B:DD:3E:C5:94:33:86:E7:01:D7:D0:2B:D6:83:00:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exExjUvdPsWUM4bnAdfQK9aDAK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c9c370-7123-4081-b956-88ec579f88ca/1/exExjUvdPsWUM4bnAdfQK9aDAK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:cb:c9:5a:16:26:ac:41:d2:dd:a6:36:1a:47:e1:5a:7c:e2:
31:9f:cc:02:30:db:59:9c:70:4c:74:c9:dd:26:fd:9a:31:73:
6d:38:5e:cb:5f:68:cf:79:b0:73:c2:c6:0c:64:69:e1:3f:62:
6b:11:93:ad:65:de:f4:13:db:68:6e:c5:9f:01:92:76:a3:86:
3c:b7:4d:ee:73:39:c7:53:ce:35:a7:ef:d1:34:97:18:3a:95:
e7:72:c6:7c:dc:36:36:b0:bf:cd:39:50:00:87:f4:42:be:3a:
61:7c:01:9e:03:53:a7:0b:0b:63:83:e4:fc:c6:66:55:e7:0c:
c4:ca:80:31:ee:56:df:df:32:0a:0b:f2:cb:91:ec:47:b2:63:
3e:7e:89:c5:83:c7:ad:7e:8e:ed:53:0a:22:3d:76:e3:a2:4d:
7f:be:8b:5d:75:45:34:0d:b4:99:42:4c:6a:ef:8d:9b:e4:80:
c8:f8:ee:98:f9:1f:44:7d:be:81:0f:8d:24:38:63:06:23:5c:
b4:6c:80:94:ed:0d:c9:b8:e2:e8:f3:01:bb:34:74:8e:7e:66:
e3:eb:53:eb:d7:85:eb:78:97:48:ea:93:ac:20:20:37:3f:88:
92:86:e6:dd:0f:3d:82:56:d0:34:07:fe:65:09:2e:f8:1b:80:
fb:53:74:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6jdih2fsWVju1dVmUhz2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTEzMThkNGJkZDNlYzU5NDMzODZlNzAxZDdkMDJiZDY4
MzAwYWQwHhcNMjUwNDI4MDQwMDM4WhcNMjUwNDI5MDQwMDM4WjAzMTEwLwYDVQQD
EyhmYzU4MjIxMjIwYTA0Y2MwY2YzOWMyYjc1ZjJkN2E0NTY2NDg4YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcS7VqbI2yA5B21xj2wyIBeHwGuj
UHW+CTpikIziusdsD4pTOaOIjDFznZz9xi0BqvwjsN54oDJf0l+LG8eL8bEpP8xp
qpvO/fEEE7WpstuUruMLNbOM96LDLwop3iKTakN+yvGoMCRiv++LfPR4C+CbM/+7
slCw3itZpUhiHDZtIl/WO1eHqbr8lffJy9UKoXc0pvNB9NunT8uP+5lqQc4+5uBY
9yz0sU5vQntuTve8SFHoWWO8KN61+qS1Kq0N7rFiDUhrjHDpdObhHYSxncuDWtvl
r62oeBoaEpWY2DgCDgntYAkJK6IulKtQyzE7HsCsIxIRCc680+Tg8PbKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxYIhIgoEzAzznCt18tekVmSIqnMB8GA1UdIwQY
MBaAFHsRMY1L3T7FlDOG5wHX0CvWgwCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYt
ODhlYzU3OWY4OGNhLzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jOWMzNzAtNzEyMy00MDgxLWI5NTYtODhlYzU3OWY4OGNh
LzEvZXhFeGpVdmRQc1dVTTRibkFkZlFLOWFEQUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkMvJWhYm
rEHS3aY2GkfhWnziMZ/MAjDbWZxwTHTJ3Sb9mjFzbThey19oz3mwc8LGDGRp4T9i
axGTrWXe9BPbaG7FnwGSdqOGPLdN7nM5x1PONafv0TSXGDqV53LGfNw2NrC/zTlQ
AIf0Qr46YXwBngNTpwsLY4Pk/MZmVecMxMqAMe5W398yCgvyy5HsR7JjPn6JxYPH
rX6O7VMKIj1246JNf76LXXVFNA20mUJMau+Nm+SAyPjumPkfRH2+gQ+NJDhjBiNc
tGyAlO0Nybji6PMBuzR0jn5m4+tT69eF63iXSOqTrCAgNz+Ikobm3Q89glbQNAf+
ZQku+BuA+1N01A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:39:39 2025 by rpki-client