Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: KiUB7vcSWEhTtOvZJLbMh8gSITEUDZSwPrjYIaQkfV8=
Subject key identifier: 9B:7D:F4:4E:6E:48:8A:70:BA:BC:C4:87:B5:5D:FA:FA:1B:0C:43:1E
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 0196914C43B16EFB6570FC19C4CC9019D664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 151D
Signing time: Fri 02 May 2025 14:00:16 +0000
Manifest this update: Fri 02 May 2025 14:00:16 +0000
Manifest next update: Sat 03 May 2025 14:00:16 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: HJnNY5zhYMb/w6b3hcpu4C01RViHwQIAYxZr3oD/ChM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:43:b1:6e:fb:65:70:fc:19:c4:cc:90:19:d6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: May 2 14:00:16 2025 GMT
Not After : May 3 14:00:16 2025 GMT
Subject: CN=9b7df44e6e488a70babcc487b55dfafa1b0c431e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:e0:ba:9e:8e:55:11:22:40:9e:19:34:57:
4c:51:09:5e:02:97:88:ec:a2:e0:d4:5b:ba:12:b0:
7e:c3:66:0a:88:27:4a:b3:58:89:45:93:f0:53:32:
8f:bd:ad:d8:ef:40:7a:ca:b9:22:96:2a:bf:5b:32:
f8:56:4e:39:53:c6:e8:a8:c0:62:4d:fc:64:43:1d:
16:d9:2a:52:19:c8:b7:1d:93:ec:06:bf:e3:53:ec:
20:44:70:57:94:16:1f:6b:a2:90:a6:4e:cf:11:06:
6d:99:af:61:c5:22:ed:09:da:3c:85:34:bd:33:49:
70:b5:e2:4a:b1:a3:22:c2:0a:39:f6:e0:57:92:34:
7b:a6:b6:79:61:79:ff:8c:8b:90:0f:1a:cf:37:7f:
85:61:0d:61:75:b6:0b:68:18:09:3f:7a:cc:46:9d:
e3:30:7f:35:33:93:a8:29:41:3f:af:0f:fb:82:e9:
62:4b:d7:27:60:e1:d9:a6:48:c4:26:72:b2:45:9d:
6e:d3:35:46:f0:0b:b0:98:2c:9e:cd:c5:8d:63:16:
a4:4b:5d:ab:04:d9:7d:09:30:b8:fe:7e:6c:87:c2:
1a:c0:a7:51:a1:8f:58:3e:fa:bf:ef:01:60:58:ba:
26:61:1a:49:66:52:32:f5:9d:41:2d:a3:a0:4d:1b:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:F4:4E:6E:48:8A:70:BA:BC:C4:87:B5:5D:FA:FA:1B:0C:43:1E
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:20:9c:8b:0e:6f:6c:e3:7c:7a:01:0f:f5:cd:02:05:6e:5f:
cf:67:a6:54:db:dc:32:e4:c4:37:b1:45:cc:f9:ac:05:3a:f2:
e8:73:6f:b2:92:54:ee:cc:d5:8a:97:62:30:f8:b7:da:f7:2a:
75:2f:b0:8e:93:32:79:f2:78:66:e7:08:b2:fd:4e:f7:9b:7b:
a5:01:7f:3b:94:d5:72:dc:4b:a5:bb:f1:8c:29:ed:36:74:ad:
e0:5c:d5:70:fa:96:2d:e6:32:09:7d:82:a7:89:70:53:a1:74:
fc:74:ac:03:3c:7a:6d:f8:e3:bf:00:87:b9:94:12:39:23:19:
27:45:5e:46:01:2b:b7:bc:72:97:f3:8d:49:96:80:a3:8a:44:
a9:6d:48:1a:be:93:57:3a:f9:fa:2f:9e:5a:20:f0:7a:01:97:
79:cf:ac:c8:ad:bb:01:1c:65:c4:f4:42:ea:95:9f:dd:e2:ed:
b2:1e:d1:a5:46:57:7a:b0:8e:75:3a:80:cc:b6:da:aa:0c:31:
66:7f:ce:1f:77:96:fc:f3:78:ef:19:33:d9:a8:7d:6e:6c:20:
61:43:c7:b9:58:54:73:fb:e7:2a:97:10:e2:fe:5c:20:32:bd:
6e:33:6b:09:3e:51:f5:82:70:ee:75:f3:28:24:5d:a6:86:0f:
8c:db:7f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaRTEOxbvtlcPwZxMyQGdZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4
OTRkZjEwHhcNMjUwNTAyMTQwMDE2WhcNMjUwNTAzMTQwMDE2WjAzMTEwLwYDVQQD
Eyg5YjdkZjQ0ZTZlNDg4YTcwYmFiY2M0ODdiNTVkZmFmYTFiMGM0MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqHgup6OVREiQJ4ZNFdMUQleApeI
7KLg1Fu6ErB+w2YKiCdKs1iJRZPwUzKPva3Y70B6yrkiliq/WzL4Vk45U8boqMBi
TfxkQx0W2SpSGci3HZPsBr/jU+wgRHBXlBYfa6KQpk7PEQZtma9hxSLtCdo8hTS9
M0lwteJKsaMiwgo59uBXkjR7prZ5YXn/jIuQDxrPN3+FYQ1hdbYLaBgJP3rMRp3j
MH81M5OoKUE/rw/7guliS9cnYOHZpkjEJnKyRZ1u0zVG8AuwmCyezcWNYxakS12r
BNl9CTC4/n5sh8IawKdRoY9YPvq/7wFgWLomYRpJZlIy9Z1BLaOgTRvqWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt99E5uSIpwurzEh7Vd+vobDEMeMB8GA1UdIwQY
MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt
ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4
LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyCciw5v
bON8egEP9c0CBW5fz2emVNvcMuTEN7FFzPmsBTry6HNvspJU7szVipdiMPi32vcq
dS+wjpMyefJ4ZucIsv1O95t7pQF/O5TVctxLpbvxjCntNnSt4FzVcPqWLeYyCX2C
p4lwU6F0/HSsAzx6bfjjvwCHuZQSOSMZJ0VeRgErt7xyl/ONSZaAo4pEqW1IGr6T
Vzr5+i+eWiDwegGXec+syK27ARxlxPRC6pWf3eLtsh7RpUZXerCOdTqAzLbaqgwx
Zn/OH3eW/PN47xkz2ah9bmwgYUPHuVhUc/vnKpcQ4v5cIDK9bjNrCT5R9YJw7nXz
KCRdpoYPjNt/pQ==
-----END CERTIFICATE-----
Generated at Fri May 2 19:20:42 2025 by rpki-client