Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: BkxoyAijuUt6qbH57AQRU2S49abbbDRa2yI2Yk3D4ok=
Subject key identifier: FB:74:30:44:EA:AB:ED:D0:77:E7:74:37:BA:A4:E1:82:6B:9C:C2:1E
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 01968BEF8ED477CFFF5BE00C7388253EE925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 13:00:54 +0000
Manifest this update: Thu 01 May 2025 13:00:54 +0000
Manifest next update: Fri 02 May 2025 13:00:54 +0000
Files and hashes: 1: 48X0W84hRzbzikjtu3NRrgiUVes.roa (hash: P9ZEa8jjn4X+qLk45EN8bhgk1iRKqKb3xPDq8e5YB94=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: oHizkalMBQan5uoi8Xsb4uNfZqWZW5FdjYCH2C5aLis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:8e:d4:77:cf:ff:5b:e0:0c:73:88:25:3e:e9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: May 1 13:00:54 2025 GMT
Not After : May 2 13:00:54 2025 GMT
Subject: CN=fb743044eaabedd077e77437baa4e1826b9cc21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:51:d0:b9:e5:55:0f:63:18:1b:5e:68:14:
72:af:69:25:c5:03:ed:be:ee:7b:d1:05:6e:de:fd:
9f:46:1a:7e:80:7b:ff:b3:a6:94:3e:cb:13:02:d9:
71:57:a3:36:1c:84:b9:47:f3:97:ce:c2:51:c2:6c:
a8:7c:29:d2:ff:52:10:bc:18:4b:6b:b3:cf:af:8b:
2f:95:a2:b2:b3:a3:5a:48:a0:72:24:ea:89:f8:a1:
49:fa:ce:38:2d:48:d1:81:bd:3c:62:29:41:eb:23:
d7:6c:e9:1e:b7:5e:b7:d1:23:ae:91:26:ff:ad:47:
50:d9:fd:05:65:ac:20:b6:69:0f:7f:18:e7:54:f0:
28:fd:a6:8b:02:8c:03:63:2d:ec:4b:97:2a:41:15:
98:cd:ac:1d:a8:e7:c1:4e:00:f4:5b:97:ca:2f:88:
dd:05:da:2a:53:2d:47:61:43:2d:5d:6a:af:18:6a:
f9:53:18:f8:f5:13:3f:40:88:11:8f:a2:d9:4c:ab:
c5:69:20:5f:86:d9:3d:bb:31:e5:cd:01:41:ff:2a:
d3:74:b9:9f:64:a5:c1:4c:a0:f4:95:a7:bd:ae:87:
89:ee:d9:69:28:2d:c3:89:4b:37:e9:ae:d6:c0:38:
70:62:d3:a4:d6:83:75:3f:6d:c5:c2:88:62:b5:dc:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:74:30:44:EA:AB:ED:D0:77:E7:74:37:BA:A4:E1:82:6B:9C:C2:1E
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4b:48:5d:9f:54:ca:5d:7f:12:e2:2c:9b:d5:9d:8a:e8:b8:
56:50:7b:be:d5:70:00:0b:63:a7:97:c6:c3:6f:39:16:c0:8b:
40:4f:ee:f5:c8:57:11:c1:d8:9b:7f:77:df:c4:30:2d:a1:fc:
bb:cb:62:7a:b1:50:79:6c:7f:ee:0e:8d:b1:0e:75:46:0b:fd:
74:dc:66:f2:c1:c5:c6:20:a4:5a:04:56:60:2f:4f:fe:f4:3b:
48:a7:7b:4a:2e:12:0c:bd:89:51:7b:6c:bd:cc:1f:9b:1a:b4:
a5:01:61:3b:88:0e:bd:b4:72:17:28:8f:a2:4f:c9:6c:ba:4e:
06:d4:63:7f:17:29:17:39:87:b6:fa:f8:5b:45:c3:e0:ec:a3:
9f:f8:d4:4c:bf:59:ad:be:88:4c:a1:38:74:ec:c4:11:1c:9f:
f0:8f:e6:44:75:de:23:54:38:48:81:de:5f:5f:7f:0c:7d:10:
f5:c6:29:25:fb:27:36:ea:8a:cd:01:a2:ae:e5:7d:51:cf:70:
43:43:34:1b:7f:0b:18:0e:42:e3:2f:b9:11:25:7c:86:1a:31:
94:f5:4d:e5:20:65:1f:3d:bd:fe:dc:ce:55:60:93:23:5b:96:
fa:46:f4:c8:f5:1a:bd:a7:ae:bd:3c:f3:c4:16:e0:ea:df:0b:
cd:0c:d0:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaL747Ud8//W+AMc4glPuklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjUwNTAxMTMwMDU0WhcNMjUwNTAyMTMwMDU0WjAzMTEwLwYDVQQD
EyhmYjc0MzA0NGVhYWJlZGQwNzdlNzc0MzdiYWE0ZTE4MjZiOWNjMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3hR0LnlVQ9jGBteaBRyr2klxQPt
vu570QVu3v2fRhp+gHv/s6aUPssTAtlxV6M2HIS5R/OXzsJRwmyofCnS/1IQvBhL
a7PPr4svlaKys6NaSKByJOqJ+KFJ+s44LUjRgb08YilB6yPXbOket1630SOukSb/
rUdQ2f0FZawgtmkPfxjnVPAo/aaLAowDYy3sS5cqQRWYzawdqOfBTgD0W5fKL4jd
BdoqUy1HYUMtXWqvGGr5Uxj49RM/QIgRj6LZTKvFaSBfhtk9uzHlzQFB/yrTdLmf
ZKXBTKD0lae9roeJ7tlpKC3DiUs36a7WwDhwYtOk1oN1P23Fwohitdxk1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt0METqq+3Qd+d0N7qk4YJrnMIeMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUtIXZ9U
yl1/EuIsm9Wdiui4VlB7vtVwAAtjp5fGw285FsCLQE/u9chXEcHYm39338QwLaH8
u8tierFQeWx/7g6NsQ51Rgv9dNxm8sHFxiCkWgRWYC9P/vQ7SKd7Si4SDL2JUXts
vcwfmxq0pQFhO4gOvbRyFyiPok/JbLpOBtRjfxcpFzmHtvr4W0XD4Oyjn/jUTL9Z
rb6ITKE4dOzEERyf8I/mRHXeI1Q4SIHeX19/DH0Q9cYpJfsnNuqKzQGiruV9Uc9w
Q0M0G38LGA5C4y+5ESV8hhoxlPVN5SBlHz29/tzOVWCTI1uW+kb0yPUavaeuvTzz
xBbg6t8LzQzQDA==
-----END CERTIFICATE-----
Generated at Thu May 1 21:35:56 2025 by rpki-client