Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier: wqEzZ9AIx28DFB0BaNcdAzrbzN0GPl4LNTvmH2NOH58=
Subject key identifier: A2:81:2A:60:F7:30:A5:8D:C1:66:CC:2A:E6:69:55:BC:30:89:21:69
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial: 01967ED8CB10BB1F043BE86FD9AF65B9D08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number: 028B
Signing time: Tue 29 Apr 2025 00:00:58 +0000
Manifest this update: Tue 29 Apr 2025 00:00:58 +0000
Manifest next update: Wed 30 Apr 2025 00:00:58 +0000
Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: X8VTb3EPGdUI/MdTbttU5iiEof8FrRAnbRfXDadsbPs=)
2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:cb:10:bb:1f:04:3b:e8:6f:d9:af:65:b9:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Validity
Not Before: Apr 29 00:00:58 2025 GMT
Not After : Apr 30 00:00:58 2025 GMT
Subject: CN=a2812a60f730a58dc166cc2ae66955bc30892169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:28:02:fb:4d:c4:ba:60:77:b8:9f:99:2b:
be:a2:64:ff:99:d1:45:49:de:66:fa:7a:5f:0f:e6:
38:c9:73:97:a5:e3:b7:e6:a9:dc:d0:9c:de:27:fb:
c5:22:cc:a7:b3:7f:82:a4:fc:ac:a3:69:09:ba:03:
51:90:3c:05:fe:ae:9a:3d:9d:0c:84:ec:85:4f:42:
0e:4d:e9:2d:64:52:01:d6:ad:77:bb:d7:c3:0b:51:
e7:b5:0e:13:dc:b0:cc:93:b3:22:ec:65:13:6f:cb:
75:64:77:b3:dc:2b:31:2c:78:63:49:53:38:55:16:
c9:9e:94:2e:1b:51:cb:cd:00:65:57:85:b0:02:17:
74:67:c2:5e:69:04:21:36:7c:0a:72:e8:52:a8:29:
e7:8e:a0:a9:c8:44:6e:8d:7e:bc:0b:10:e8:61:2b:
ac:57:c7:76:a9:ed:74:cf:a5:7a:bb:cf:6f:16:58:
67:56:68:b4:12:0e:43:bd:9a:d7:fc:cc:fa:bc:1c:
ed:59:29:ab:88:84:49:5a:3a:8a:93:45:53:1a:1a:
93:9f:23:a4:b1:1a:6b:3f:78:cb:cc:3e:4b:30:74:
6a:16:96:0b:6a:c1:a4:0f:21:20:c4:8e:ca:e9:81:
71:a5:0a:e0:0d:f6:78:51:cb:3c:82:b8:b0:80:4d:
7a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:81:2A:60:F7:30:A5:8D:C1:66:CC:2A:E6:69:55:BC:30:89:21:69
X509v3 Authority Key Identifier:
keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a4:a7:66:fa:fd:ae:6c:12:70:78:3a:75:0b:73:25:9a:83:
3d:ab:ce:f3:de:0b:4f:f9:22:0f:05:23:b3:d0:c2:59:d4:2a:
e0:08:0d:96:72:36:5c:50:96:7b:06:28:a4:2a:fe:73:75:ba:
86:c7:cf:6a:ba:fa:15:b0:a0:69:a2:38:3d:c1:33:e9:b0:eb:
c0:39:6d:f4:30:93:f7:5d:91:16:d0:6a:a9:fb:79:a5:b5:ee:
d4:74:3e:93:8d:39:f2:4d:21:b0:27:64:d1:a0:ca:dd:29:f4:
8f:4a:d6:e9:06:98:af:c3:ed:f9:a7:a1:bc:3d:62:a4:cf:c3:
2f:5d:b6:ff:22:83:90:9b:d8:07:7b:2e:84:7f:81:8a:66:fa:
4e:4b:4c:49:25:2e:0b:8b:72:91:2d:b8:ae:03:7c:83:93:b3:
ef:ac:96:79:66:e8:c9:6c:34:f4:4d:89:8d:a3:04:02:46:cb:
71:2d:05:37:4b:7f:fa:98:d7:b5:3a:a5:33:bd:ea:e9:b8:dd:
f8:8b:e3:e5:6c:a4:c2:bb:a7:f3:31:ef:b9:32:c0:2a:f5:3b:
4b:52:00:71:6a:49:dd:80:40:6f:4b:3b:57:41:1f:cc:5d:ac:
f0:f5:c7:ba:45:9a:cf:36:40:d3:ed:4a:a9:0d:26:30:2c:5e:
d5:93:14:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+2MsQux8EO+hv2a9ludCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3
ZTY5ZTAwHhcNMjUwNDI5MDAwMDU4WhcNMjUwNDMwMDAwMDU4WjAzMTEwLwYDVQQD
EyhhMjgxMmE2MGY3MzBhNThkYzE2NmNjMmFlNjY5NTViYzMwODkyMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AooAvtNxLpgd7ifmSu+omT/mdFF
Sd5m+npfD+Y4yXOXpeO35qnc0JzeJ/vFIsyns3+CpPyso2kJugNRkDwF/q6aPZ0M
hOyFT0IOTektZFIB1q13u9fDC1HntQ4T3LDMk7Mi7GUTb8t1ZHez3CsxLHhjSVM4
VRbJnpQuG1HLzQBlV4WwAhd0Z8JeaQQhNnwKcuhSqCnnjqCpyERujX68CxDoYSus
V8d2qe10z6V6u89vFlhnVmi0Eg5DvZrX/Mz6vBztWSmriIRJWjqKk0VTGhqTnyOk
sRprP3jLzD5LMHRqFpYLasGkDyEgxI7K6YFxpQrgDfZ4Ucs8griwgE16xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKBKmD3MKWNwWbMKuZpVbwwiSFpMB8GA1UdIwQY
MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt
MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi
LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKSnZvr9
rmwScHg6dQtzJZqDPavO894LT/kiDwUjs9DCWdQq4AgNlnI2XFCWewYopCr+c3W6
hsfParr6FbCgaaI4PcEz6bDrwDlt9DCT912RFtBqqft5pbXu1HQ+k4058k0hsCdk
0aDK3Sn0j0rW6QaYr8Pt+aehvD1ipM/DL122/yKDkJvYB3suhH+Bimb6TktMSSUu
C4tykS24rgN8g5Oz76yWeWboyWw09E2JjaMEAkbLcS0FN0t/+pjXtTqlM73q6bjd
+Ivj5Wykwrun8zHvuTLAKvU7S1IAcWpJ3YBAb0s7V0EfzF2s8PXHukWazzZA0+1K
qQ0mMCxe1ZMUUg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:44 2025 by rpki-client