Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
File: u4N41EQt9p9H3A6lgqErKrUUvg8.mft (raw, json)
Hash identifier: ylFnXEaNh59NDPqeKkW9rDIPGIZqweAGfIAPsDboTxk=
Subject key identifier: 39:D3:2A:A9:89:DB:06:25:3B:50:4E:62:95:BA:5B:FE:24:38:3A:EE
Authority key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Certificate issuer: /CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Certificate serial: 01968A0129D5FFE1A42F8CCDD0260B171F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
Manifest number: 17
Signing time: Thu 01 May 2025 04:00:54 +0000
Manifest this update: Thu 01 May 2025 04:00:54 +0000
Manifest next update: Fri 02 May 2025 04:00:54 +0000
Files and hashes: 1: u4N41EQt9p9H3A6lgqErKrUUvg8.crl (hash: qX1kzl7n1VJtOwmZIit934xBCaaT333V6jhqFw9i9eI=)
2: wtPW8rjnB4NENZEIpc5mDSX_MnA.roa (hash: 2y63dYWO6V1/po4xW8CvZ0E3YT0MzqdNzzTlTFQ0Gb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:01:29:d5:ff:e1:a4:2f:8c:cd:d0:26:0b:17:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Validity
Not Before: May 1 04:00:54 2025 GMT
Not After : May 2 04:00:54 2025 GMT
Subject: CN=39d32aa989db06253b504e6295ba5bfe24383aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:c4:89:8a:ab:da:e5:20:70:da:13:97:73:
f0:dd:90:92:31:fa:29:cd:4d:a6:2d:52:54:da:c9:
da:fb:c0:79:46:95:61:07:dd:ca:eb:60:f7:4c:f0:
cd:c2:8f:00:07:f1:8e:5f:f2:c7:7f:81:1b:21:fd:
b1:3d:0e:49:41:d1:48:38:97:db:5f:fd:2c:f6:42:
07:f4:da:7c:b5:b4:59:32:3a:d9:6b:33:d9:3f:17:
ba:18:40:a2:6e:82:22:6a:9a:bb:ab:0d:9e:21:f5:
3b:50:c0:94:cb:d5:e2:b4:2c:e7:08:fe:1c:19:f2:
84:4c:4a:0b:1b:35:3f:f7:df:db:82:3a:f6:72:05:
98:68:7f:77:24:66:b3:9a:d6:c5:65:f7:17:03:2c:
b5:c2:47:4a:19:2d:e9:4b:be:b2:b6:cd:f6:7a:a6:
b8:5e:d4:fc:73:14:62:cc:da:d5:10:c1:ed:61:f6:
d5:a0:9e:a6:11:ed:e2:0a:18:79:a0:1c:f2:95:0f:
e6:76:94:87:0f:83:d5:9f:a3:8b:9b:0d:36:56:d8:
bb:ac:07:e8:3f:1d:cd:ee:dc:48:9a:a7:67:5c:96:
1f:9b:5e:35:dc:f9:91:b3:d9:4a:ab:87:6d:77:a5:
ae:23:c4:03:40:c6:60:c4:a9:9e:bb:a8:e8:4c:2d:
0c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D3:2A:A9:89:DB:06:25:3B:50:4E:62:95:BA:5B:FE:24:38:3A:EE
X509v3 Authority Key Identifier:
keyid:BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ff:76:0f:e9:be:3c:b8:9b:42:aa:d9:80:57:bb:ea:c9:02:
b7:50:ed:bc:71:84:50:d2:1d:8b:30:ed:18:db:11:0e:42:3f:
64:c0:ff:82:e5:a3:d8:f8:ef:8e:46:e2:a8:1b:6e:b7:7b:58:
63:76:7c:ec:4e:29:66:c0:51:e9:83:7b:c0:57:de:b0:e5:1b:
9e:53:e1:90:27:b2:d4:56:cf:0d:62:53:d4:71:6f:8c:a7:0d:
cd:c1:88:1a:28:05:2f:8d:92:86:ca:cb:b9:e4:42:a2:e5:24:
5c:15:81:74:ec:5f:3d:5d:bf:0a:de:1b:ab:6e:11:0f:e9:b2:
9d:c8:c6:05:c1:e7:fb:57:d4:29:11:87:7e:7b:06:a5:5f:14:
b0:f2:d5:45:2c:d8:ae:9a:85:9f:2f:34:a3:e2:ae:cf:14:70:
16:50:81:c5:62:c7:26:65:f6:ab:68:2e:7c:61:98:af:4e:e8:
fc:1c:57:e7:74:4d:27:b2:13:1f:c1:02:16:81:2c:c6:60:da:
6a:e2:08:b0:57:e0:7f:22:6e:b4:55:40:f8:a6:73:ec:64:27:
e8:7b:f0:28:71:05:54:38:c6:48:ce:12:05:fd:05:66:4d:ad:
fb:95:e1:d5:af:1b:8f:12:b3:56:02:a9:46:09:1f:ef:53:3e:
30:09:e1:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKASnV/+GkL4zN0CYLFx8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiODM3OGQ0NDQyZGY2OWY0N2RjMGVhNTgyYTEyYjJhYjUx
NGJlMGYwHhcNMjUwNTAxMDQwMDU0WhcNMjUwNTAyMDQwMDU0WjAzMTEwLwYDVQQD
EygzOWQzMmFhOTg5ZGIwNjI1M2I1MDRlNjI5NWJhNWJmZTI0MzgzYWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF7EiYqr2uUgcNoTl3Pw3ZCSMfop
zU2mLVJU2sna+8B5RpVhB93K62D3TPDNwo8AB/GOX/LHf4EbIf2xPQ5JQdFIOJfb
X/0s9kIH9Np8tbRZMjrZazPZPxe6GECiboIiapq7qw2eIfU7UMCUy9XitCznCP4c
GfKETEoLGzU/99/bgjr2cgWYaH93JGazmtbFZfcXAyy1wkdKGS3pS76yts32eqa4
XtT8cxRizNrVEMHtYfbVoJ6mEe3iChh5oBzylQ/mdpSHD4PVn6OLmw02Vti7rAfo
Px3N7txImqdnXJYfm1413PmRs9lKq4dtd6WuI8QDQMZgxKmeu6joTC0MJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnTKqmJ2wYlO1BOYpW6W/4kODruMB8GA1UdIwQY
MBaAFLuDeNRELfafR9wOpYKhKyq1FL4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODkt
ZDhhNTU1YzY0MjE0LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZGIwZDEtYWE5My00NWMwLTk4ODktZDhhNTU1YzY0MjE0
LzEvdTRONDFFUXQ5cDlIM0E2bGdxRXJLclVVdmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVP92D+m+
PLibQqrZgFe76skCt1DtvHGEUNIdizDtGNsRDkI/ZMD/guWj2PjvjkbiqBtut3tY
Y3Z87E4pZsBR6YN7wFfesOUbnlPhkCey1FbPDWJT1HFvjKcNzcGIGigFL42ShsrL
ueRCouUkXBWBdOxfPV2/Ct4bq24RD+myncjGBcHn+1fUKRGHfnsGpV8UsPLVRSzY
rpqFny80o+KuzxRwFlCBxWLHJmX2q2gufGGYr07o/BxX53RNJ7ITH8ECFoEsxmDa
auIIsFfgfyJutFVA+KZz7GQn6HvwKHEFVDjGSM4SBf0FZk2t+5Xh1a8bjxKzVgKp
Rgkf71M+MAnhlg==
-----END CERTIFICATE-----
Generated at Thu May 1 12:55:11 2025 by rpki-client