Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
File: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft (raw, json)
Hash identifier: L1CQ8wLlpY+pQvfsxthuL94PpBDbruiT48skX/SCSM4=
Subject key identifier: E7:B6:F2:2A:3C:1B:4C:82:F2:09:6A:05:5A:3D:5C:D4:7B:9D:51:94
Authority key identifier: D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
Certificate issuer: /CN=d223093ce150874016d793f439f43d2e6440c3f2
Certificate serial: 01967153FF1B79ADC92FBA0D1CB9F1E1BB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
Manifest number: 150A
Signing time: Sat 26 Apr 2025 09:00:52 +0000
Manifest this update: Sat 26 Apr 2025 09:00:52 +0000
Manifest next update: Sun 27 Apr 2025 09:00:52 +0000
Files and hashes: 1: 0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl (hash: OEzlzMjVEoTMZ7604FYXvmW+vrOW2zkp2/kHWn2R0bk=)
2: 8foZPawfC4Bge_VpnjQP50GOAg8.roa (hash: GRqVhwrx6ASLBDj77rYjcJvDM0QCQ1bVWMj8DIm3F+M=)
3: Qvc8RSbEXXaKTVJ-2F_YzL6RWqQ.roa (hash: a+7CPhduNeCdLfwErr+aJ4N+Kny/SpDPIbHNdyGUm+I=)
4: Yav_wTnthnhUJgVUNCqahhzwsSo.roa (hash: JhocbRWhMTwMsID+n4FCpeOKgy5OrWytCdlYeicraA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:53:ff:1b:79:ad:c9:2f:ba:0d:1c:b9:f1:e1:bb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d223093ce150874016d793f439f43d2e6440c3f2
Validity
Not Before: Apr 26 09:00:52 2025 GMT
Not After : Apr 27 09:00:52 2025 GMT
Subject: CN=e7b6f22a3c1b4c82f2096a055a3d5cd47b9d5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c9:4b:29:29:4b:af:b1:76:dc:10:ca:ed:cc:
73:4b:aa:91:0a:87:07:57:c6:7b:f6:44:63:f7:66:
59:01:08:5d:6c:de:f0:9c:47:92:81:6e:48:88:52:
05:10:0e:9c:0a:cb:f0:f9:12:5e:2e:84:9e:1c:8c:
30:53:4d:47:f5:f8:63:30:a6:11:9c:33:ae:eb:98:
ac:ed:3e:0d:8d:a4:a9:11:28:c8:67:42:d6:87:de:
ea:4d:8e:70:4b:bb:f8:a8:81:a0:a2:f6:ec:0d:b1:
79:3d:c9:de:eb:3b:cc:f2:57:ac:2c:b6:7b:3b:35:
07:06:72:69:9a:c7:00:3f:2d:44:0b:95:80:2d:c7:
76:a4:3b:e1:6d:e3:0e:92:a6:51:4e:67:85:28:68:
0d:90:cb:3a:ad:86:aa:b0:75:05:e1:94:34:76:de:
80:f6:3d:5d:af:e4:29:84:2c:be:16:7e:39:d9:a6:
48:fd:fa:cb:c7:23:4d:d4:f6:11:e5:d9:15:2e:71:
02:a4:cb:d9:89:1d:af:8f:3f:57:0c:29:bb:12:82:
cf:49:af:c4:af:e2:9e:72:5d:b8:c8:21:16:ea:b1:
8c:69:43:b7:dc:76:c0:03:16:67:57:37:ff:fd:d1:
d0:b5:fb:92:87:df:34:28:e4:89:49:8c:e0:a6:d4:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B6:F2:2A:3C:1B:4C:82:F2:09:6A:05:5A:3D:5C:D4:7B:9D:51:94
X509v3 Authority Key Identifier:
keyid:D2:23:09:3C:E1:50:87:40:16:D7:93:F4:39:F4:3D:2E:64:40:C3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0iMJPOFQh0AW15P0OfQ9LmRAw_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f9a3dd-5a61-4724-a5a3-5b0b05093e0c/1/0iMJPOFQh0AW15P0OfQ9LmRAw_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:54:46:c3:f8:4d:3d:d1:bd:11:d9:6e:6c:2d:6b:1f:ea:4a:
a5:a2:7e:4e:bf:65:df:67:b2:e7:0e:dd:27:ef:8a:2a:ae:f4:
0c:be:29:07:ed:c6:9c:0e:2e:28:d7:a2:b4:fc:1c:f6:3d:27:
13:65:e6:60:8f:21:55:bf:91:e8:d8:70:1f:5e:57:02:57:2c:
29:f7:54:47:16:39:41:78:0f:8d:34:a1:e0:56:e0:a2:a8:7b:
7d:17:79:03:c9:12:53:14:0f:05:38:34:cb:33:2d:35:f7:b2:
20:be:3f:bf:bd:0d:ed:fd:6a:e3:5a:e3:e1:65:45:9a:87:5e:
c0:57:71:8d:fb:6a:ce:f7:fb:62:c3:77:6f:34:74:76:6c:0a:
94:70:18:c6:01:20:53:95:cd:b4:0f:2b:b0:59:b1:db:b9:39:
cd:5a:9f:73:c2:38:e3:8a:d8:a2:d2:b6:3a:a9:72:bb:25:69:
00:96:ab:45:ea:13:5c:22:46:11:48:6c:29:2a:38:d5:92:7e:
02:bc:75:fe:96:f9:7c:5c:f3:0d:e0:4c:75:ed:57:68:84:0c:
5a:cb:2a:07:d0:af:e5:11:3f:c1:ef:ea:59:f2:84:7b:a1:9c:
3a:36:34:97:21:60:a4:f7:77:bc:cb:3b:ac:b0:c0:39:fb:1b:
b7:c1:15:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxU/8bea3JL7oNHLnx4btLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMjMwOTNjZTE1MDg3NDAxNmQ3OTNmNDM5ZjQzZDJlNjQ0
MGMzZjIwHhcNMjUwNDI2MDkwMDUyWhcNMjUwNDI3MDkwMDUyWjAzMTEwLwYDVQQD
EyhlN2I2ZjIyYTNjMWI0YzgyZjIwOTZhMDU1YTNkNWNkNDdiOWQ1MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgclLKSlLr7F23BDK7cxzS6qRCocH
V8Z79kRj92ZZAQhdbN7wnEeSgW5IiFIFEA6cCsvw+RJeLoSeHIwwU01H9fhjMKYR
nDOu65is7T4NjaSpESjIZ0LWh97qTY5wS7v4qIGgovbsDbF5Pcne6zvM8lesLLZ7
OzUHBnJpmscAPy1EC5WALcd2pDvhbeMOkqZRTmeFKGgNkMs6rYaqsHUF4ZQ0dt6A
9j1dr+QphCy+Fn452aZI/frLxyNN1PYR5dkVLnECpMvZiR2vjz9XDCm7EoLPSa/E
r+Kecl24yCEW6rGMaUO33HbAAxZnVzf//dHQtfuSh980KOSJSYzgptRUIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe28io8G0yC8glqBVo9XNR7nVGUMB8GA1UdIwQY
MBaAFNIjCTzhUIdAFteT9Dn0PS5kQMPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMt
NWIwYjA1MDkzZTBjLzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mOWEzZGQtNWE2MS00NzI0LWE1YTMtNWIwYjA1MDkzZTBj
LzEvMGlNSlBPRlFoMEFXMTVQME9mUTlMbVJBd19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVRGw/hN
PdG9EdlubC1rH+pKpaJ+Tr9l32ey5w7dJ++KKq70DL4pB+3GnA4uKNeitPwc9j0n
E2XmYI8hVb+R6NhwH15XAlcsKfdURxY5QXgPjTSh4Fbgoqh7fRd5A8kSUxQPBTg0
yzMtNfeyIL4/v70N7f1q41rj4WVFmodewFdxjftqzvf7YsN3bzR0dmwKlHAYxgEg
U5XNtA8rsFmx27k5zVqfc8I444rYotK2OqlyuyVpAJarReoTXCJGEUhsKSo41ZJ+
Arx1/pb5fFzzDeBMde1XaIQMWssqB9Cv5RE/we/qWfKEe6GcOjY0lyFgpPd3vMs7
rLDAOfsbt8EV3g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:00:06 2025 by rpki-client