Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
File: 06v49M34ljoYLaDN-QjDhEf6egk.mft (raw, json)
Hash identifier: 2oUZnYE2QduCvzOyZzXykBK44nzXojNLGz1UfTzB2MU=
Subject key identifier: FE:FF:E0:8F:D9:59:2D:3B:C2:EA:93:D4:B4:D0:27:DE:5B:4B:4B:E9
Authority key identifier: D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
Certificate issuer: /CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Certificate serial: 01968ADCA23F720497BFE69F16F388DA1E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
Manifest number: 0308
Signing time: Thu 01 May 2025 08:00:37 +0000
Manifest this update: Thu 01 May 2025 08:00:37 +0000
Manifest next update: Fri 02 May 2025 08:00:37 +0000
Files and hashes: 1: 06v49M34ljoYLaDN-QjDhEf6egk.crl (hash: MOTgFW3xFBwStLVhbqi5MtUdRrvqaQ5OsGJzNDKPbiQ=)
2: oT2LDF85PY5HdbBLwhoxl8tjz8s.roa (hash: 1EymL80SjeM7RupyG8pGED+B/g9jGLElUsA1V765L5Y=)
3: vGKjbeI63RzXbx2moMgZ88gkL0o.roa (hash: 78K41RNch9PgQsEO5vrAtY0Bw9PWHwlD6lBB0OVTon8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:dc:a2:3f:72:04:97:bf:e6:9f:16:f3:88:da:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3abf8f4cdf8963a182da0cdf908c38447fa7a09
Validity
Not Before: May 1 08:00:37 2025 GMT
Not After : May 2 08:00:37 2025 GMT
Subject: CN=feffe08fd9592d3bc2ea93d4b4d027de5b4b4be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:55:bc:f7:4c:06:c7:ec:a5:18:44:74:15:8b:
e2:14:c3:62:b1:2b:ea:04:31:45:5c:cf:7c:48:d0:
53:a4:a7:c5:25:3e:d7:af:43:df:0e:cf:10:95:9b:
47:ec:4d:2c:96:69:dd:56:ce:34:db:db:0b:b2:4d:
17:8a:3c:e3:5d:e9:0a:b3:59:c1:cf:ab:3c:49:83:
f6:62:2e:c2:e1:d4:19:1c:52:d0:a8:7c:d6:33:e1:
e1:2b:eb:60:f7:ec:76:dc:d6:5d:6d:45:02:d4:19:
41:9b:c6:8c:e0:75:07:92:67:f3:7f:e0:18:1f:76:
b2:f7:c8:2e:8f:53:2e:c7:13:a8:3b:80:9c:8e:43:
5b:67:bd:b2:db:36:27:87:9f:fd:cc:a9:ad:99:b2:
78:f2:c5:37:34:2b:b6:4a:1f:bc:6d:a5:b8:a0:6e:
9d:ad:38:91:8d:16:ee:58:5f:dc:9c:39:13:ad:9a:
57:a6:6f:2f:32:05:01:4f:e6:72:b0:48:2a:a4:1b:
6e:da:c5:cc:87:db:61:e0:9f:18:ab:5f:17:cd:6d:
b4:e1:7e:6b:06:67:78:68:4a:7c:79:45:3e:dd:64:
37:91:9b:e6:5e:59:67:ba:a1:ba:0b:d2:f1:97:bb:
2e:e5:2b:5d:1f:be:61:ff:d1:f0:80:82:32:d6:b0:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FF:E0:8F:D9:59:2D:3B:C2:EA:93:D4:B4:D0:27:DE:5B:4B:4B:E9
X509v3 Authority Key Identifier:
keyid:D3:AB:F8:F4:CD:F8:96:3A:18:2D:A0:CD:F9:08:C3:84:47:FA:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06v49M34ljoYLaDN-QjDhEf6egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/26d193-40c2-417b-bd52-5c10bdb866e0/1/06v49M34ljoYLaDN-QjDhEf6egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:9f:a7:c2:92:6d:16:5b:42:5d:2a:5c:e2:8a:11:19:2b:
e6:05:eb:e3:a0:c4:3c:59:90:d2:3d:a8:78:d9:09:ec:67:ca:
72:10:bf:fc:13:34:4a:c8:dd:d5:93:7e:0a:c7:3f:5c:24:3a:
4c:77:e0:1c:7b:9e:9f:57:ba:1d:30:a9:0d:36:97:af:7e:f6:
e5:65:52:a4:1f:fe:cd:cf:44:45:c8:8d:7c:74:1e:98:a1:ed:
a3:97:75:33:d0:8e:ea:93:71:bb:74:90:76:7a:24:cc:06:d4:
22:2d:a1:07:2e:cc:02:09:50:e8:23:6c:5b:0a:f6:75:35:e9:
3c:d2:71:5b:0a:47:42:4a:04:ab:8c:aa:1e:fb:8a:05:22:0b:
58:a7:05:e7:83:d8:6f:97:79:b2:48:ce:d0:9f:ae:fd:b6:ef:
35:4f:ed:82:4b:71:94:0d:94:74:55:9f:0c:ed:bf:7b:48:ff:
7a:b7:d0:e9:e2:62:e4:a8:76:9f:50:f9:3c:d0:a2:87:14:8a:
da:ec:53:8b:04:77:be:3e:71:bf:61:a0:0a:eb:b1:b5:95:c5:
83:b3:c7:82:71:f4:ce:10:1b:b5:79:db:1e:13:3f:af:57:3d:
f1:d3:94:64:20:aa:d0:ee:e3:35:84:aa:a1:5e:1c:43:85:d2:
3d:e8:53:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaK3KI/cgSXv+afFvOI2h4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYWJmOGY0Y2RmODk2M2ExODJkYTBjZGY5MDhjMzg0NDdm
YTdhMDkwHhcNMjUwNTAxMDgwMDM3WhcNMjUwNTAyMDgwMDM3WjAzMTEwLwYDVQQD
EyhmZWZmZTA4ZmQ5NTkyZDNiYzJlYTkzZDRiNGQwMjdkZTViNGI0YmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFW890wGx+ylGER0FYviFMNisSvq
BDFFXM98SNBTpKfFJT7Xr0PfDs8QlZtH7E0slmndVs4029sLsk0XijzjXekKs1nB
z6s8SYP2Yi7C4dQZHFLQqHzWM+HhK+tg9+x23NZdbUUC1BlBm8aM4HUHkmfzf+AY
H3ay98guj1MuxxOoO4CcjkNbZ72y2zYnh5/9zKmtmbJ48sU3NCu2Sh+8baW4oG6d
rTiRjRbuWF/cnDkTrZpXpm8vMgUBT+ZysEgqpBtu2sXMh9th4J8Yq18XzW204X5r
Bmd4aEp8eUU+3WQ3kZvmXllnuqG6C9Lxl7su5StdH75h/9HwgIIy1rDBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7/4I/ZWS07wuqT1LTQJ95bS0vpMB8GA1UdIwQY
MBaAFNOr+PTN+JY6GC2gzfkIw4RH+noJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTIt
NWMxMGJkYjg2NmUwLzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yNmQxOTMtNDBjMi00MTdiLWJkNTItNWMxMGJkYjg2NmUw
LzEvMDZ2NDlNMzRsam9ZTGFETi1RakRoRWY2ZWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqqfp8KS
bRZbQl0qXOKKERkr5gXr46DEPFmQ0j2oeNkJ7GfKchC//BM0Ssjd1ZN+Csc/XCQ6
THfgHHuen1e6HTCpDTaXr3725WVSpB/+zc9ERciNfHQemKHto5d1M9CO6pNxu3SQ
dnokzAbUIi2hBy7MAglQ6CNsWwr2dTXpPNJxWwpHQkoEq4yqHvuKBSILWKcF54PY
b5d5skjO0J+u/bbvNU/tgktxlA2UdFWfDO2/e0j/erfQ6eJi5Kh2n1D5PNCihxSK
2uxTiwR3vj5xv2GgCuuxtZXFg7PHgnH0zhAbtXnbHhM/r1c98dOUZCCq0O7jNYSq
oV4cQ4XSPehTbg==
-----END CERTIFICATE-----
Generated at Thu May 1 18:13:04 2025 by rpki-client