Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
File: es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft (raw, json)
Hash identifier: e9I/gs1OyGgv6d5yNHEyu2g5TBSYiP09erg7aYruyNM=
Subject key identifier: 80:20:13:88:75:06:77:09:59:F8:60:7C:CB:89:11:D0:6F:41:C2:B1
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019676EC29D03743499A2345EDF69EB50CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
Manifest number: 044B
Signing time: Sun 27 Apr 2025 11:05:10 +0000
Manifest this update: Sun 27 Apr 2025 11:05:10 +0000
Manifest next update: Mon 28 Apr 2025 11:05:10 +0000
Files and hashes: 1: Fzit0JPBkGamCwGt_jYjUwFfh_U.roa (hash: RmqesfttAKDRz0vKTseC0kvCAIayHrWc3uyH60D4Hc8=)
2: ZpHfWVjuEOKskBrtwaYIwjI0Guo.roa (hash: Wbu0UAoyfqfRNfVd83E/JzBGqxjkg6na3mvNKvAeptw=)
3: es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl (hash: JNF0UgbZ+YXZXPq4WvsCLg/6b6oJ2iTEVvEm6CXo1X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:ec:29:d0:37:43:49:9a:23:45:ed:f6:9e:b5:0c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: Apr 27 11:05:10 2025 GMT
Not After : Apr 28 11:05:10 2025 GMT
Subject: CN=802013887506770959f8607ccb8911d06f41c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:77:13:f6:85:49:e9:0e:98:ed:20:07:fb:
a0:bd:39:ee:66:a8:6a:85:28:5c:dc:f5:90:eb:64:
bc:74:14:f8:c7:49:19:32:8b:84:e9:e8:89:d4:5e:
38:6f:90:f1:9b:1a:e0:82:ed:6d:59:b1:52:c5:f9:
6c:31:34:38:cd:a5:83:e0:96:8f:f1:d4:19:ac:b0:
d3:c2:8f:7a:52:54:3b:89:57:7e:5d:97:f7:b4:8c:
ee:0b:bf:ef:9a:c7:3f:fe:5c:f9:42:41:2c:e5:68:
ff:2c:23:8c:a6:8d:37:19:18:12:86:86:b3:d4:d1:
f7:49:71:e9:bb:e1:7c:10:f1:08:60:c6:af:91:29:
34:b1:54:cc:b4:df:1c:21:35:56:fe:3b:76:d6:42:
78:bd:19:ea:2b:a9:e7:e3:6c:36:96:05:b7:76:3f:
33:3a:14:8e:37:0a:9f:b2:d4:93:55:89:c2:75:2d:
e6:52:7f:3c:09:c1:0e:ce:e5:a7:78:d9:a6:ed:0c:
a6:a4:5c:e0:27:5f:c7:9e:39:5e:a8:61:d6:de:97:
7c:df:08:59:50:57:12:09:de:5d:13:90:0e:e6:88:
53:03:a7:f5:c3:28:fe:8f:88:18:36:dc:9f:b7:d5:
46:2f:3e:f3:0f:66:e0:ea:2c:c2:e4:94:d9:ce:99:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:13:88:75:06:77:09:59:F8:60:7C:CB:89:11:D0:6F:41:C2:B1
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:5a:11:2d:65:53:dd:fc:ef:dd:79:17:54:9c:89:15:b3:
5a:31:c9:c2:9d:1f:f5:ae:36:28:89:34:e8:6e:d4:78:f2:1b:
ff:6c:eb:19:82:e9:7a:32:81:d9:67:ab:ef:c0:e0:9f:e0:96:
a2:cd:a6:d5:75:e3:b3:35:e0:8c:c0:57:11:ed:96:28:ee:41:
ed:45:be:97:0f:b8:a9:db:7c:cf:df:e4:c5:fd:7a:63:a4:6e:
12:18:74:dd:a9:f9:c0:0d:05:5d:29:a5:f6:1a:71:02:ba:ac:
b2:fe:71:be:ef:95:2c:17:38:19:87:6a:27:1b:55:8f:a0:bf:
00:25:87:be:6b:ed:3a:6f:c7:ea:43:05:cf:fa:ff:0f:c1:cf:
d5:58:5b:e9:1f:ca:96:14:e5:b4:c3:f9:cf:f6:57:e8:01:02:
11:01:b0:a9:82:36:b5:33:7d:42:6c:41:d0:0e:80:e7:6b:51:
9a:60:86:c5:0f:50:85:21:3e:42:67:bb:37:9d:6a:8a:22:f6:
99:e2:68:2f:86:5e:91:61:53:de:7c:93:1e:8e:37:c1:c2:14:
81:a6:66:08:4d:1a:52:e1:48:28:94:4f:1a:4e:64:20:1b:40:
5e:14:30:c3:a7:94:0f:df:d6:8a:81:5f:ec:16:57:d1:77:a9:
46:d1:6a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ27CnQN0NJmiNF7faetQyqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2Q4MTdmMjU4OTNlN2Y4OGIzZjNhZmZhOTE1MmM2NmQ2
YjY3MDIwHhcNMjUwNDI3MTEwNTEwWhcNMjUwNDI4MTEwNTEwWjAzMTEwLwYDVQQD
Eyg4MDIwMTM4ODc1MDY3NzA5NTlmODYwN2NjYjg5MTFkMDZmNDFjMmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqZ3E/aFSekOmO0gB/ugvTnuZqhq
hShc3PWQ62S8dBT4x0kZMouE6eiJ1F44b5Dxmxrggu1tWbFSxflsMTQ4zaWD4JaP
8dQZrLDTwo96UlQ7iVd+XZf3tIzuC7/vmsc//lz5QkEs5Wj/LCOMpo03GRgShoaz
1NH3SXHpu+F8EPEIYMavkSk0sVTMtN8cITVW/jt21kJ4vRnqK6nn42w2lgW3dj8z
OhSONwqfstSTVYnCdS3mUn88CcEOzuWneNmm7QympFzgJ1/HnjleqGHW3pd83whZ
UFcSCd5dE5AO5ohTA6f1wyj+j4gYNtyft9VGLz7zD2bg6izC5JTZzpkcDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAgE4h1BncJWfhgfMuJEdBvQcKxMB8GA1UdIwQY
MBaAFHrNgX8liT5/iLPzr/qRUsZta2cCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjIt
OTBlYjk1MTA5ZDg5LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jNTZhMWUtMzI2ZC00YzY3LWEwYjItOTBlYjk1MTA5ZDg5
LzEvZXMyQmZ5V0pQbi1Jc19Pdi1wRlN4bTFyWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUJaES1l
U9387915F1SciRWzWjHJwp0f9a42KIk06G7UePIb/2zrGYLpejKB2Wer78Dgn+CW
os2m1XXjszXgjMBXEe2WKO5B7UW+lw+4qdt8z9/kxf16Y6RuEhh03an5wA0FXSml
9hpxArqssv5xvu+VLBc4GYdqJxtVj6C/ACWHvmvtOm/H6kMFz/r/D8HP1Vhb6R/K
lhTltMP5z/ZX6AECEQGwqYI2tTN9QmxB0A6A52tRmmCGxQ9QhSE+Qme7N51qiiL2
meJoL4ZekWFT3nyTHo43wcIUgaZmCE0aUuFIKJRPGk5kIBtAXhQww6eUD9/WioFf
7BZX0XepRtFqjA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:52 2025 by rpki-client