Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.mft (raw, json)
Hash identifier: ZZOsKXvCaWd4/+ZRTm/l+Llehm8J4bKM+8XTQuYwst4=
Subject key identifier: 52:34:4A:6E:46:96:8B:20:E6:5C:A5:35:D7:A2:EF:4B:C3:DE:36:91
Authority key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Certificate issuer: /CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Certificate serial: 01969B2BC362BB4F5AA3C3DA93068BAF8B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
Manifest number: 0CDE
Signing time: Sun 04 May 2025 12:00:58 +0000
Manifest this update: Sun 04 May 2025 12:00:58 +0000
Manifest next update: Mon 05 May 2025 12:00:58 +0000
Files and hashes: 1: M29qyC9vKOPT5bZkdVlNgxjnWrM.crl (hash: tqMd3IW83bjwP18gLgmwbjDwsN8zmV9nh16aErDFAE4=)
2: dEZ5raqBPXnkqzr9_S0vwZwMrcc.roa (hash: A8CtSs9BqkWswlRrqESpgq4uIozS5L7wmlKnC6IFKQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9b:2b:c3:62:bb:4f:5a:a3:c3:da:93:06:8b:af:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Validity
Not Before: May 4 12:00:58 2025 GMT
Not After : May 5 12:00:58 2025 GMT
Subject: CN=52344a6e46968b20e65ca535d7a2ef4bc3de3691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b5:88:82:aa:94:1f:53:e4:4d:91:38:5b:af:
ba:95:36:a8:d2:6e:26:40:16:cc:d7:70:22:f0:a5:
e5:cc:51:bb:b4:0f:9a:70:14:c2:34:92:99:45:bf:
d1:a4:7e:ba:cd:02:a3:6e:db:90:f5:18:c0:25:07:
a5:c3:fd:b6:24:77:5f:c2:97:49:a3:28:f0:ac:e2:
cf:95:6a:aa:ca:6a:59:0d:29:f2:4a:6e:4b:1f:85:
95:22:4b:fe:aa:28:96:b1:2e:c4:74:f9:fe:04:de:
7d:a0:9e:d2:13:59:e2:5f:41:cd:eb:bd:f3:78:06:
dd:79:0b:6c:29:33:60:cd:a8:81:ae:db:71:e4:20:
44:c2:9c:57:26:17:b0:ef:42:5c:70:a3:53:10:32:
85:ba:58:3b:e6:17:bd:36:dd:9d:9a:5f:ad:da:19:
ce:48:02:36:b9:a3:9a:2a:f2:ee:28:29:ec:5d:00:
61:67:0d:ed:f0:aa:51:c6:0d:d0:41:43:53:05:43:
06:6d:75:b9:51:a8:dd:51:0b:cf:d7:b0:5f:38:87:
29:87:1f:73:8d:23:b3:4a:8c:f0:fb:66:59:27:3d:
85:9a:7e:7b:a4:9b:9f:a2:41:6a:31:03:0b:02:b6:
1c:d6:d1:e2:a0:b7:80:50:8b:4d:37:57:57:05:1d:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:34:4A:6E:46:96:8B:20:E6:5C:A5:35:D7:A2:EF:4B:C3:DE:36:91
X509v3 Authority Key Identifier:
keyid:33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:88:ab:dd:a1:f1:e0:60:c3:63:ae:ed:3f:9b:ab:5d:b3:66:
04:db:f6:13:a9:5b:df:35:19:3d:38:6c:4f:c8:6f:d4:0f:fc:
ae:d8:7a:a0:32:23:22:6a:be:dc:38:fa:d7:cb:de:5f:29:fe:
ed:b3:39:a6:ad:e1:d1:bd:64:6a:ef:7d:b1:c6:5e:87:06:00:
ba:2c:9a:b2:a5:50:85:be:3b:99:9b:6e:06:71:bd:a2:11:8f:
e5:8d:67:52:8f:fa:61:85:02:a1:e0:f3:7f:ae:66:36:56:4d:
6a:a1:9e:f9:11:0f:61:3a:8a:ba:c1:7c:37:e9:23:c3:e1:92:
12:cb:a4:62:b4:78:3f:3e:c8:50:e3:57:4f:9d:a3:25:c5:a6:
79:35:33:99:a9:de:76:3a:dd:5d:a6:4b:d0:ea:7c:00:a7:d3:
8d:0b:ff:22:e6:da:3f:7c:e5:05:17:14:bd:35:2d:84:33:6e:
f6:9e:2a:de:4a:00:12:64:bd:a3:b8:33:d3:33:61:70:89:8f:
6e:40:99:ca:76:e8:c9:1c:a6:c3:12:a2:e1:2b:01:e9:bc:83:
86:a9:6d:b1:eb:75:7c:ec:fe:50:27:e8:bf:79:f1:ae:69:e8:
fb:ba:cb:2a:e1:d1:ad:96:f7:ed:3f:d8:b0:2c:c0:17:f4:f7:
3f:cb:e4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZabK8Niu09ao8PakwaLr4ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNmY2YWM4MmY2ZjI4ZTNkM2U1YjY2NDc1NTk0ZDgzMThl
NzVhYjMwHhcNMjUwNTA0MTIwMDU4WhcNMjUwNTA1MTIwMDU4WjAzMTEwLwYDVQQD
Eyg1MjM0NGE2ZTQ2OTY4YjIwZTY1Y2E1MzVkN2EyZWY0YmMzZGUzNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LWIgqqUH1PkTZE4W6+6lTao0m4m
QBbM13Ai8KXlzFG7tA+acBTCNJKZRb/RpH66zQKjbtuQ9RjAJQelw/22JHdfwpdJ
oyjwrOLPlWqqympZDSnySm5LH4WVIkv+qiiWsS7EdPn+BN59oJ7SE1niX0HN673z
eAbdeQtsKTNgzaiBrttx5CBEwpxXJhew70JccKNTEDKFulg75he9Nt2dml+t2hnO
SAI2uaOaKvLuKCnsXQBhZw3t8KpRxg3QQUNTBUMGbXW5UajdUQvP17BfOIcphx9z
jSOzSozw+2ZZJz2Fmn57pJufokFqMQMLArYc1tHioLeAUItNN1dXBR2GcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFI0Sm5Glosg5lylNdei70vD3jaRMB8GA1UdIwQY
MBaAFDNvasgvbyjj0+W2ZHVZTYMY51qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAt
Y2NiMDE2YWUxNTEzLzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85MTVjYmItNTY4YS00ZjQyLThiODAtY2NiMDE2YWUxNTEz
LzEvTTI5cXlDOXZLT1BUNWJaa2RWbE5neGpuV3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYir3aHx
4GDDY67tP5urXbNmBNv2E6lb3zUZPThsT8hv1A/8rth6oDIjImq+3Dj618veXyn+
7bM5pq3h0b1kau99scZehwYAuiyasqVQhb47mZtuBnG9ohGP5Y1nUo/6YYUCoeDz
f65mNlZNaqGe+REPYTqKusF8N+kjw+GSEsukYrR4Pz7IUONXT52jJcWmeTUzmane
djrdXaZL0Op8AKfTjQv/IubaP3zlBRcUvTUthDNu9p4q3koAEmS9o7gz0zNhcImP
bkCZynboyRymwxKi4SsB6byDhqltset1fOz+UCfov3nxrmno+7rLKuHRrZb37T/Y
sCzAF/T3P8vkTQ==
-----END CERTIFICATE-----
Generated at Sun May 4 22:00:35 2025 by rpki-client