Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: hp/zZMsEXbvPUbExzrSZIrUI1aFmRDfvTnOCd3cP11k=
Subject key identifier: E4:22:75:43:02:D8:D5:A8:FB:18:07:DF:9D:16:A8:5D:14:D2:C5:F1
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01968247613C2C98B8B8655C346D52801FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 16:00:37 +0000
Manifest this update: Tue 29 Apr 2025 16:00:37 +0000
Manifest next update: Wed 30 Apr 2025 16:00:37 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: v3IuRWmDv0fxm7lOl7gb/W7C621DqsQYKG8K7Qm8VNI=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:61:3c:2c:98:b8:b8:65:5c:34:6d:52:80:1f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Apr 29 16:00:37 2025 GMT
Not After : Apr 30 16:00:37 2025 GMT
Subject: CN=e422754302d8d5a8fb1807df9d16a85d14d2c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:42:b5:64:b4:1f:60:aa:92:f1:35:04:0c:
df:aa:7a:d0:56:53:1d:c4:19:30:5f:12:66:25:06:
50:d8:6a:ff:9c:53:74:8f:d3:3f:bd:6f:6c:a8:82:
e0:66:83:ff:42:99:38:78:6c:59:31:cb:28:7d:5d:
a8:19:6b:f8:34:31:2b:1a:6e:d9:fd:29:84:87:15:
d2:e6:ff:01:be:0e:f9:b3:62:0c:56:7f:35:35:22:
42:c8:2a:b8:4b:b2:35:bd:93:58:d6:5a:ca:30:dc:
94:0f:cf:b8:da:1e:24:48:6b:5e:76:00:c4:c5:e3:
00:35:6f:0a:e5:5e:6e:5c:45:8c:27:3d:bb:c7:1e:
fe:fd:a8:88:3a:8f:10:e4:92:ae:2a:a1:5f:43:f8:
b4:1e:a0:e7:35:c3:d3:f1:a7:d9:5d:86:eb:12:28:
b1:d7:59:95:03:14:10:f1:68:04:65:f6:d7:b4:7b:
9b:45:a9:2b:38:be:5d:e1:3d:1d:c7:ce:a8:12:4b:
83:0b:dc:22:76:2f:cf:f1:d3:da:f1:fe:bd:75:09:
2f:2f:f3:ae:db:27:33:43:44:b9:06:be:dc:c5:a1:
73:b9:9a:b2:73:a3:4c:56:5b:1d:3a:81:76:6e:fe:
56:0e:50:64:29:a0:e0:d0:29:21:8f:8d:98:dd:4c:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:22:75:43:02:D8:D5:A8:FB:18:07:DF:9D:16:A8:5D:14:D2:C5:F1
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:3c:11:d2:62:6a:95:90:09:c9:29:24:9f:f0:ee:f9:5b:01:
42:f3:80:8f:42:3b:3e:ce:3d:a0:a9:80:aa:ea:a8:08:bf:4c:
c1:99:0a:5c:9a:67:7a:72:38:32:9d:6f:af:ab:0b:7f:62:1c:
4d:b5:cc:55:d0:d6:bf:6f:da:7c:af:d2:f5:05:44:04:73:bd:
b3:95:3d:ed:78:55:60:ea:c8:5b:23:50:18:1c:43:29:43:1b:
83:74:10:ca:a1:19:b0:a7:c9:e9:29:57:a6:5b:44:91:de:44:
c4:54:ba:53:d8:bd:da:87:61:48:67:95:2c:34:74:9e:38:f3:
63:1d:3b:b9:c6:9a:86:d3:74:68:a6:ef:bc:ad:f9:43:08:09:
1d:f7:62:98:39:49:00:da:1a:d5:32:4b:ee:a5:b9:dd:fa:50:
a5:e9:35:c3:a9:29:cc:88:8e:67:91:52:07:92:07:9f:9d:34:
d8:c1:de:99:ce:77:29:ca:48:39:b4:e2:e5:14:1d:2d:71:a6:
72:26:94:03:7c:5f:61:7f:80:0e:7b:7f:17:a9:36:25:4b:7b:
b6:c3:60:e4:33:d2:e2:b1:ad:e0:c6:e9:dc:e7:fe:3d:d8:fb:
22:ae:1e:40:cc:a7:8b:86:d4:2c:df:0f:a5:a0:fd:13:31:4a:
a2:80:d3:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCR2E8LJi4uGVcNG1SgB+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx
NmJmNzcwHhcNMjUwNDI5MTYwMDM3WhcNMjUwNDMwMTYwMDM3WjAzMTEwLwYDVQQD
EyhlNDIyNzU0MzAyZDhkNWE4ZmIxODA3ZGY5ZDE2YTg1ZDE0ZDJjNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNVCtWS0H2CqkvE1BAzfqnrQVlMd
xBkwXxJmJQZQ2Gr/nFN0j9M/vW9sqILgZoP/Qpk4eGxZMcsofV2oGWv4NDErGm7Z
/SmEhxXS5v8Bvg75s2IMVn81NSJCyCq4S7I1vZNY1lrKMNyUD8+42h4kSGtedgDE
xeMANW8K5V5uXEWMJz27xx7+/aiIOo8Q5JKuKqFfQ/i0HqDnNcPT8afZXYbrEiix
11mVAxQQ8WgEZfbXtHubRakrOL5d4T0dx86oEkuDC9widi/P8dPa8f69dQkvL/Ou
2yczQ0S5Br7cxaFzuZqyc6NMVlsdOoF2bv5WDlBkKaDg0Ckhj42Y3UybkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQidUMC2NWo+xgH350WqF0U0sXxMB8GA1UdIwQY
MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt
ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm
LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4jwR0mJq
lZAJySkkn/Du+VsBQvOAj0I7Ps49oKmAquqoCL9MwZkKXJpnenI4Mp1vr6sLf2Ic
TbXMVdDWv2/afK/S9QVEBHO9s5U97XhVYOrIWyNQGBxDKUMbg3QQyqEZsKfJ6SlX
pltEkd5ExFS6U9i92odhSGeVLDR0njjzYx07ucaahtN0aKbvvK35QwgJHfdimDlJ
ANoa1TJL7qW53fpQpek1w6kpzIiOZ5FSB5IHn5002MHemc53KcpIObTi5RQdLXGm
ciaUA3xfYX+ADnt/F6k2JUt7tsNg5DPS4rGt4Mbp3Of+Pdj7Iq4eQMyni4bULN8P
paD9EzFKooDT2w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:12:36 2025 by rpki-client