Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File: ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier: g5dS5UA32crICAlGpmo+ZKiTpbnOgXE5uF5w0mZprrc=
Subject key identifier: C3:DA:00:DE:CB:2B:51:44:1D:F0:78:C3:34:C4:A9:95:74:5A:4B:DD
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer: /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial: 019678685BD914DA7901F4A1341911BF6260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number: 0212
Signing time: Sun 27 Apr 2025 18:00:27 +0000
Manifest this update: Sun 27 Apr 2025 18:00:27 +0000
Manifest next update: Mon 28 Apr 2025 18:00:27 +0000
Files and hashes: 1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: 9tIeg+c7hkT6dy2kyyjlGmgYIO36z0J6HkBehNiFMX4=)
4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:5b:d9:14:da:79:01:f4:a1:34:19:11:bf:62:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Validity
Not Before: Apr 27 18:00:27 2025 GMT
Not After : Apr 28 18:00:27 2025 GMT
Subject: CN=c3da00decb2b51441df078c334c4a995745a4bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:2d:fd:9b:ae:87:9b:ef:01:a4:cc:00:22:
79:0e:0a:4e:a4:0f:51:d9:75:63:59:2a:11:b6:ba:
7d:f9:09:c1:eb:75:a2:b2:b5:1c:59:f0:9c:5b:3d:
b4:94:82:9f:76:61:b0:31:5c:ef:c6:8d:f2:cb:06:
d6:da:92:48:fc:43:39:bd:0a:67:19:e3:66:22:b5:
c0:34:c3:e1:97:2f:53:73:df:52:15:b6:9b:ec:d4:
0f:78:6e:5f:e4:e3:ac:85:4e:4e:c2:97:4d:12:e3:
50:b4:d2:1d:65:7c:83:ac:40:bb:c4:d3:77:4b:f4:
63:8d:3b:cc:6b:c6:7f:d9:7a:86:f1:97:26:69:db:
cb:88:84:9b:c4:d1:82:81:75:c4:51:46:0a:4a:b7:
83:a8:b4:50:41:45:21:30:f8:36:de:64:ae:d4:1a:
5e:68:5e:48:50:50:a6:a2:60:03:e3:4e:74:f7:96:
f2:06:9f:e4:fe:a3:50:32:f1:f0:d0:bf:1e:50:af:
0a:ee:1b:2e:8f:7c:d2:b8:41:a8:c8:75:67:80:19:
67:3d:dc:96:bc:95:bc:53:52:07:be:75:db:18:11:
2d:d6:a4:72:2e:38:d8:bb:b3:30:c8:bc:37:76:e6:
31:e1:dc:f2:55:1f:49:0f:a6:9b:11:07:98:4c:a3:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DA:00:DE:CB:2B:51:44:1D:F0:78:C3:34:C4:A9:95:74:5A:4B:DD
X509v3 Authority Key Identifier:
keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4a:70:1a:4c:04:4b:95:ba:6a:31:3a:81:cc:24:a3:80:6c:
0f:a0:46:f2:16:99:94:92:1b:79:8a:35:7c:90:3f:86:25:76:
39:2d:4e:85:21:04:20:10:17:fd:53:dd:ba:92:93:c3:df:e4:
9b:a7:cc:d5:9e:67:25:9c:d2:81:24:12:93:ba:a8:7b:76:51:
e9:9c:35:60:22:8b:66:1c:5f:1a:2e:3a:4f:5c:8d:b8:ab:1e:
68:9e:b3:00:e5:7c:4d:83:f9:89:45:d8:ee:eb:8b:62:ba:c8:
de:af:87:95:ff:28:e3:fc:6d:9b:b0:f6:a7:2e:4b:80:4d:0c:
ac:f3:27:d5:0f:b9:64:9a:3d:e5:5f:8c:44:4f:2d:5f:a0:4a:
55:9b:5f:d4:fd:9b:f4:63:82:e1:98:f8:89:3c:c0:c3:ae:6e:
5d:0e:85:8c:0e:3a:d0:4a:79:e9:37:54:0c:6d:e5:ee:e9:39:
bd:88:63:60:cc:ef:3b:0a:cb:ef:01:6b:26:42:a5:0b:1f:07:
2c:ce:10:3c:13:a3:20:3b:82:e9:52:b7:7e:1f:47:35:7a:f0:
24:19:0f:66:41:bc:fc:f4:6e:fb:15:f2:b8:93:66:14:c9:64:
47:33:3c:0a:63:2e:cf:1a:32:f9:41:e5:89:24:f9:3e:d2:97:
66:dc:52:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aFvZFNp5AfShNBkRv2JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDlmYzgxNWU5MGNhODc5Mjc5MDdjNWVhYjNmZTc5Y2Ey
MTVlYWEwHhcNMjUwNDI3MTgwMDI3WhcNMjUwNDI4MTgwMDI3WjAzMTEwLwYDVQQD
EyhjM2RhMDBkZWNiMmI1MTQ0MWRmMDc4YzMzNGM0YTk5NTc0NWE0YmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmswt/Zuuh5vvAaTMACJ5DgpOpA9R
2XVjWSoRtrp9+QnB63WisrUcWfCcWz20lIKfdmGwMVzvxo3yywbW2pJI/EM5vQpn
GeNmIrXANMPhly9Tc99SFbab7NQPeG5f5OOshU5OwpdNEuNQtNIdZXyDrEC7xNN3
S/RjjTvMa8Z/2XqG8ZcmadvLiISbxNGCgXXEUUYKSreDqLRQQUUhMPg23mSu1Bpe
aF5IUFCmomAD405095byBp/k/qNQMvHw0L8eUK8K7hsuj3zSuEGoyHVngBlnPdyW
vJW8U1IHvnXbGBEt1qRyLjjYu7MwyLw3duYx4dzyVR9JD6abEQeYTKNWbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPaAN7LK1FEHfB4wzTEqZV0WkvdMB8GA1UdIwQY
MBaAFJXZ/IFekMqHknkHxeqz/nnKIV6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODkt
OGNlNDE3OTIzMmM4LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85Y2FhNTAtYTUxMC00MTdhLWI1ODktOGNlNDE3OTIzMmM4
LzEvbGRuOGdWNlF5b2VTZVFmRjZyUC1lY29oWHFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0pwGkwE
S5W6ajE6gcwko4BsD6BG8haZlJIbeYo1fJA/hiV2OS1OhSEEIBAX/VPdupKTw9/k
m6fM1Z5nJZzSgSQSk7qoe3ZR6Zw1YCKLZhxfGi46T1yNuKseaJ6zAOV8TYP5iUXY
7uuLYrrI3q+Hlf8o4/xtm7D2py5LgE0MrPMn1Q+5ZJo95V+MRE8tX6BKVZtf1P2b
9GOC4Zj4iTzAw65uXQ6FjA460Ep56TdUDG3l7uk5vYhjYMzvOwrL7wFrJkKlCx8H
LM4QPBOjIDuC6VK3fh9HNXrwJBkPZkG8/PRu+xXyuJNmFMlkRzM8CmMuzxoy+UHl
iST5PtKXZtxSfg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:33:56 2025 by rpki-client