Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File: tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier: YPv5LcaK+FJN8Tw2o4M+fWFpfn3KWKqQQcufagZqiSo=
Subject key identifier: BB:76:AE:72:FE:C3:C1:06:74:1E:A6:AA:26:A1:89:6B:C3:83:13:BB
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer: /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial: 019672D40B3112ABA23818920467E5132B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number: 1350
Signing time: Sat 26 Apr 2025 16:00:21 +0000
Manifest this update: Sat 26 Apr 2025 16:00:21 +0000
Manifest next update: Sun 27 Apr 2025 16:00:21 +0000
Files and hashes: 1: 28g4Blr7nuSyJeVmwy4cGLK9eb8.roa (hash: Q3uRjW4ymMVkt8l5TduM8mGnhXb4GzyvEHZ5j93is8c=)
2: psNnDsOb3MJQFpyT8HfsVNSnwog.roa (hash: KJkUgz1VxvV5lZj00xJ9seKTuebHbMbR6MJlSYq/h5Q=)
3: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: cs+Uer58RzWxFsDwuh5wfZuH6HnwqjVA+8eMGmCsFmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:0b:31:12:ab:a2:38:18:92:04:67:e5:13:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Validity
Not Before: Apr 26 16:00:21 2025 GMT
Not After : Apr 27 16:00:21 2025 GMT
Subject: CN=bb76ae72fec3c106741ea6aa26a1896bc38313bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:1a:db:c6:44:74:96:33:4d:2d:e4:ea:4a:
38:cf:d9:ea:ca:59:87:7c:0c:88:21:5c:fc:5f:b5:
b8:6e:24:9f:2a:18:2d:bc:a8:f4:42:54:69:7e:f0:
48:ce:70:dc:15:5b:55:af:65:a4:ff:b3:7e:88:02:
e9:fc:f5:d1:9b:f3:32:f8:7c:9b:dc:c1:57:92:22:
33:ef:47:9f:8c:ac:21:20:d8:a5:49:67:85:f0:fe:
22:30:50:54:ce:4a:62:72:e2:49:68:c1:7d:ae:a0:
06:a3:62:c2:3f:ef:40:3d:54:50:3d:07:28:b2:2c:
8d:73:b1:75:19:96:36:0c:83:78:08:83:76:c4:2f:
7b:72:66:d2:5c:4b:60:ec:00:cf:32:6b:ba:8d:36:
b1:94:0f:b3:9f:a3:66:93:0a:eb:34:f3:df:f9:b2:
26:74:99:62:4f:a8:24:e2:1e:93:0e:c2:ad:6a:d5:
00:50:d9:09:ce:b3:7c:84:6b:fa:05:70:ac:f8:d2:
6a:54:e1:b4:55:86:0d:a5:b6:44:85:cc:8a:ad:49:
51:d5:e9:82:dd:08:bd:33:c5:a9:ac:e1:3a:ef:30:
1d:a6:cb:3f:42:14:80:f4:19:cd:c9:9b:2d:7b:e9:
03:27:cb:a8:62:3d:26:df:d3:e9:15:22:4e:e4:86:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:AE:72:FE:C3:C1:06:74:1E:A6:AA:26:A1:89:6B:C3:83:13:BB
X509v3 Authority Key Identifier:
keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bf:ae:4a:91:28:ce:f4:4a:b5:46:5c:40:6e:02:4d:60:85:
0a:73:3f:77:86:b9:ba:31:90:0c:d7:53:49:ff:62:99:ef:b6:
88:74:ca:cf:3b:79:93:91:13:ee:71:3b:c0:c6:f6:9b:b3:94:
e6:e3:45:7b:51:e5:ff:0f:e9:f7:2a:91:98:16:9c:a7:32:aa:
d2:34:e4:32:6d:25:b5:23:22:3f:7e:87:48:c9:f1:be:4a:a8:
ec:6a:a8:1a:56:31:a8:5f:64:22:bc:51:6c:d1:3d:80:5a:eb:
cd:a9:d1:32:78:a5:86:1e:56:9c:4e:e3:97:72:a1:cd:d3:f6:
71:f3:be:5c:06:2f:89:df:7d:2d:25:44:05:d5:59:72:13:f3:
9b:11:75:47:47:68:67:6b:ad:77:66:9c:80:74:7a:1c:59:98:
3b:b9:78:d9:2c:cd:14:b8:c6:84:89:4e:c2:fb:5d:69:fb:fd:
85:c0:eb:b1:3f:19:e3:08:71:55:4b:d9:bd:13:cc:75:d9:3c:
4f:9a:94:2b:c8:33:ca:0e:14:40:79:a1:32:62:9c:fd:e0:8c:
1e:a5:88:e8:f8:f8:42:61:d1:8d:34:0c:cc:9c:9c:be:3b:2d:
2f:8b:1a:02:af:05:5a:86:99:67:ec:ec:2f:8b:dc:7f:4e:08:
3f:65:b4:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZy1AsxEquiOBiSBGflEytxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzI1OGExOGNmNGQxMjI4ZTVjNzkwNzBkZmE2MzMxMTY4
MzIwYzUwHhcNMjUwNDI2MTYwMDIxWhcNMjUwNDI3MTYwMDIxWjAzMTEwLwYDVQQD
EyhiYjc2YWU3MmZlYzNjMTA2NzQxZWE2YWEyNmExODk2YmMzODMxM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nYa28ZEdJYzTS3k6ko4z9nqylmH
fAyIIVz8X7W4biSfKhgtvKj0QlRpfvBIznDcFVtVr2Wk/7N+iALp/PXRm/My+Hyb
3MFXkiIz70efjKwhINilSWeF8P4iMFBUzkpicuJJaMF9rqAGo2LCP+9APVRQPQco
siyNc7F1GZY2DIN4CIN2xC97cmbSXEtg7ADPMmu6jTaxlA+zn6NmkwrrNPPf+bIm
dJliT6gk4h6TDsKtatUAUNkJzrN8hGv6BXCs+NJqVOG0VYYNpbZEhcyKrUlR1emC
3Qi9M8WprOE67zAdpss/QhSA9BnNyZste+kDJ8uoYj0m39PpFSJO5IY7TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLt2rnL+w8EGdB6mqiahiWvDgxO7MB8GA1UdIwQY
MBaAFLQyWKGM9NEijlx5Bw36YzEWgyDFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMt
NTcyOGZiMjRiZjBlLzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wM2EzMjUtYTE2OS00NGNlLTg0ZWMtNTcyOGZiMjRiZjBl
LzEvdERKWW9ZejAwU0tPWEhrSERmcGpNUmFESU1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANr+uSpEo
zvRKtUZcQG4CTWCFCnM/d4a5ujGQDNdTSf9ime+2iHTKzzt5k5ET7nE7wMb2m7OU
5uNFe1Hl/w/p9yqRmBacpzKq0jTkMm0ltSMiP36HSMnxvkqo7GqoGlYxqF9kIrxR
bNE9gFrrzanRMnilhh5WnE7jl3KhzdP2cfO+XAYvid99LSVEBdVZchPzmxF1R0do
Z2utd2acgHR6HFmYO7l42SzNFLjGhIlOwvtdafv9hcDrsT8Z4whxVUvZvRPMddk8
T5qUK8gzyg4UQHmhMmKc/eCMHqWI6Pj4QmHRjTQMzJycvjstL4saAq8FWoaZZ+zs
L4vcf04IP2W0aQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:20 2025 by rpki-client