Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
File: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft (raw, json)
Hash identifier: A4LUgjrJybcvsye+07xHhKSKqiYyt/pYGinTRBbnV2s=
Subject key identifier: 8F:F8:33:57:A8:0C:B2:97:44:F2:63:EC:46:A4:38:EC:B9:12:D3:C2
Authority key identifier: FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
Certificate issuer: /CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Certificate serial: 019683C78CF41AADC1FF4247DE4B6EC492B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 23:00:14 +0000
Manifest this update: Tue 29 Apr 2025 23:00:14 +0000
Manifest next update: Wed 30 Apr 2025 23:00:14 +0000
Files and hashes: 1: _j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl (hash: rbj0uTghjUUdn1vJWtQiX5n+3i2/R/zdq+UncImJscM=)
2: jvYIR4cGI1xTBTMHiHmlslGT8ss.roa (hash: XYWrze0y1RSFOkB9yC9oozCL7v1si1KQCdXxbKpu5VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:8c:f4:1a:ad:c1:ff:42:47:de:4b:6e:c4:92:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3ecfb35993217c36743bcafaa7b0259d2e476a
Validity
Not Before: Apr 29 23:00:14 2025 GMT
Not After : Apr 30 23:00:14 2025 GMT
Subject: CN=8ff83357a80cb29744f263ec46a438ecb912d3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:f4:9b:e1:41:90:f5:30:c8:64:a9:51:79:
ba:c2:83:ae:83:1f:ea:93:8e:5c:1b:13:93:41:cb:
0c:af:67:c2:53:4a:ad:b0:28:24:ff:a4:6e:6f:50:
d3:99:20:3a:4a:96:a4:5f:cf:dc:69:73:d7:0e:3b:
2c:7f:bd:1e:0e:4f:93:62:eb:98:ea:30:ad:03:61:
98:b4:25:80:b9:2d:ee:7e:f3:8b:2a:10:84:2e:9c:
26:69:37:7d:62:2c:8d:80:34:ea:84:d7:15:f5:d6:
c5:e4:78:88:3d:21:2b:c3:88:50:c2:8a:cb:7c:2c:
34:cd:be:72:6f:93:d5:88:fe:17:51:10:04:2d:a9:
2d:10:18:ae:9c:cf:4d:3a:44:59:11:19:ca:0a:45:
63:64:ba:e0:22:dd:e6:32:1c:e8:ad:76:07:a9:d1:
b8:3c:bf:eb:20:4e:f9:b7:4d:41:f6:14:6f:17:f2:
1a:2a:7b:e2:71:fc:9b:b4:82:3a:be:32:64:a7:0b:
d4:e6:83:d1:76:dd:49:da:77:e3:f7:b6:f7:5d:fe:
74:3d:32:65:f2:a5:4a:1f:43:a7:e7:27:1a:d8:25:
d5:7f:72:ab:78:8d:c3:14:8c:0c:89:fe:1f:17:29:
b7:c2:9b:8d:57:60:18:17:bb:c7:c5:3c:55:fe:e9:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:33:57:A8:0C:B2:97:44:F2:63:EC:46:A4:38:EC:B9:12:D3:C2
X509v3 Authority Key Identifier:
keyid:FE:3E:CF:B3:59:93:21:7C:36:74:3B:CA:FA:A7:B0:25:9D:2E:47:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b2b221-2ae9-45cc-ad1e-fcd3de868431/1/_j7Ps1mTIXw2dDvK-qewJZ0uR2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:11:25:bf:0a:d4:68:a6:04:80:fd:6e:71:a9:22:93:6f:93:
b1:3c:4f:fe:af:59:4d:6d:03:85:bc:71:eb:a8:b0:8c:fd:b5:
57:88:42:87:9a:6e:24:5f:b0:eb:c0:51:31:e4:b2:b1:da:d7:
10:56:a6:41:60:fe:0c:a8:13:a9:e0:0f:d8:55:67:5f:a7:19:
66:82:c8:2c:65:4b:d7:26:1a:ed:95:a2:5c:22:bb:c7:8a:44:
02:f4:5c:09:64:2a:8f:a1:9b:12:11:cd:46:3a:51:66:8c:d4:
d6:8a:03:d6:2d:83:ac:77:f4:aa:ec:fb:4c:84:ed:bc:ec:5f:
90:3f:a7:6b:5e:79:92:4a:09:0e:91:ae:ca:bb:c6:3d:10:06:
2e:ac:b5:93:47:a7:1c:76:3f:ad:9b:bf:6c:47:12:34:ec:2c:
20:60:41:1e:d1:d9:f8:85:86:e5:6c:05:ae:e2:34:2b:b7:13:
f8:5b:92:65:ac:b4:ac:5f:6b:0d:c5:16:e3:49:a2:d7:1a:1e:
98:03:14:03:cd:2c:4a:3c:3c:00:4a:bd:0d:59:b3:c8:98:86:
ed:56:d4:04:f1:a1:73:9b:2a:55:22:48:9f:05:ce:8b:37:26:
a9:eb:6f:a4:68:2e:d6:df:15:d0:ba:75:ea:d2:99:ae:e1:29:
69:78:23:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDx4z0Gq3B/0JH3ktuxJKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlM2VjZmIzNTk5MzIxN2MzNjc0M2JjYWZhYTdiMDI1OWQy
ZTQ3NmEwHhcNMjUwNDI5MjMwMDE0WhcNMjUwNDMwMjMwMDE0WjAzMTEwLwYDVQQD
Eyg4ZmY4MzM1N2E4MGNiMjk3NDRmMjYzZWM0NmE0MzhlY2I5MTJkM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyP0m+FBkPUwyGSpUXm6woOugx/q
k45cGxOTQcsMr2fCU0qtsCgk/6Rub1DTmSA6SpakX8/caXPXDjssf70eDk+TYuuY
6jCtA2GYtCWAuS3ufvOLKhCELpwmaTd9YiyNgDTqhNcV9dbF5HiIPSErw4hQworL
fCw0zb5yb5PViP4XURAELaktEBiunM9NOkRZERnKCkVjZLrgIt3mMhzorXYHqdG4
PL/rIE75t01B9hRvF/IaKnvicfybtII6vjJkpwvU5oPRdt1J2nfj97b3Xf50PTJl
8qVKH0On5yca2CXVf3KreI3DFIwMif4fFym3wpuNV2AYF7vHxTxV/ulDRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/4M1eoDLKXRPJj7EakOOy5EtPCMB8GA1UdIwQY
MBaAFP4+z7NZkyF8NnQ7yvqnsCWdLkdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUt
ZmNkM2RlODY4NDMxLzEvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9iMmIyMjEtMmFlOS00NWNjLWFkMWUtZmNkM2RlODY4NDMx
LzEvX2o3UHMxbVRJWHcyZER2Sy1xZXdKWjB1UjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghElvwrU
aKYEgP1ucakik2+TsTxP/q9ZTW0Dhbxx66iwjP21V4hCh5puJF+w68BRMeSysdrX
EFamQWD+DKgTqeAP2FVnX6cZZoLILGVL1yYa7ZWiXCK7x4pEAvRcCWQqj6GbEhHN
RjpRZozU1ooD1i2DrHf0quz7TITtvOxfkD+na155kkoJDpGuyrvGPRAGLqy1k0en
HHY/rZu/bEcSNOwsIGBBHtHZ+IWG5WwFruI0K7cT+FuSZay0rF9rDcUW40mi1xoe
mAMUA80sSjw8AEq9DVmzyJiG7VbUBPGhc5sqVSJInwXOizcmqetvpGgu1t8V0Lp1
6tKZruEpaXgjTQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:29 2025 by rpki-client