Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: AoD7Qg6WtcJcr/TQ/92hepUM36x/43k0dGGu5sN2XaY=
Subject key identifier: 6F:8C:29:EB:BE:AE:68:7D:3A:FD:DC:58:C5:06:7A:00:C4:B9:13:DC
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019687DC0A444AE9F45DBAE2C478192C8CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 18:01:06 +0000
Manifest this update: Wed 30 Apr 2025 18:01:06 +0000
Manifest next update: Thu 01 May 2025 18:01:06 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: uzq160QIG6+1mDLXLabXOoI0XmklQ+PbGulB7osYO3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:dc:0a:44:4a:e9:f4:5d:ba:e2:c4:78:19:2c:8c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Apr 30 18:01:06 2025 GMT
Not After : May 1 18:01:06 2025 GMT
Subject: CN=6f8c29ebbeae687d3afddc58c5067a00c4b913dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:fd:f4:dd:fd:06:7a:6d:0e:3f:89:05:91:
c0:be:0a:8b:d0:7d:d2:01:7f:02:0c:b2:62:f3:a0:
aa:35:92:16:f5:fc:ce:f2:ce:67:f2:23:f2:ed:86:
fc:45:3e:ff:9f:d1:91:bb:bd:53:d4:e1:29:84:74:
26:d2:07:78:d8:b0:3b:23:f7:83:07:61:2a:83:20:
14:18:8c:50:0c:be:f2:eb:8a:9a:c2:cf:36:46:05:
cf:25:4c:9b:1a:8a:fe:8b:99:f1:fa:e8:14:b8:0e:
76:86:68:3e:74:83:da:3d:3e:a0:2d:78:a3:df:57:
22:05:88:12:c0:5d:ae:81:98:c0:95:c3:f1:f7:bc:
83:91:30:a1:2f:13:96:97:39:17:3b:01:09:41:05:
48:66:fb:30:8d:b2:30:b5:71:c7:31:b3:84:6a:ed:
c0:ad:c9:c7:a5:be:d9:ce:5a:51:ba:53:35:64:33:
18:51:6e:34:77:63:db:c1:51:4e:4e:07:2e:90:79:
aa:53:d6:2b:87:50:77:ea:89:33:ee:2c:47:d1:cd:
ed:9f:fa:12:c5:00:8c:28:58:3e:4f:55:41:f0:0f:
5f:ee:2c:12:4e:1a:57:14:ad:dd:64:1d:f1:73:ee:
9e:3a:61:fa:21:39:df:d2:cd:3b:dc:93:d3:6c:d3:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8C:29:EB:BE:AE:68:7D:3A:FD:DC:58:C5:06:7A:00:C4:B9:13:DC
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c6:a8:91:55:72:c6:2d:0a:8d:69:26:e5:20:6a:3a:08:4d:
b4:9b:56:b9:b0:75:51:34:b2:85:da:ce:f7:42:13:27:c5:21:
a7:7d:b8:38:e2:87:06:3c:43:25:8a:1a:d9:58:06:57:c2:2b:
86:a1:fc:d0:01:bd:ac:6a:75:0f:04:c2:d7:0a:93:87:10:3d:
c8:86:18:39:9b:50:c5:b6:fe:f4:0d:f1:97:ac:e8:59:b3:bf:
01:5d:fb:05:ca:2d:a8:fb:21:05:6d:dc:3d:6f:f0:b6:82:fb:
06:cb:f9:42:c8:bc:99:f6:37:6c:43:3e:77:83:76:61:cf:45:
81:41:f9:97:3b:cc:83:d0:7b:e4:39:04:b3:5c:3c:70:85:2a:
83:a0:45:0e:c1:d9:64:d8:a7:5c:23:b9:53:22:fc:20:47:c7:
3c:a8:c2:53:ff:10:53:80:9a:f2:e5:a9:d3:72:9f:72:0c:59:
0a:39:81:8b:34:17:a6:95:93:3a:2a:6a:2f:5f:de:df:4b:a0:
5b:6e:1e:6b:4f:d2:13:03:c2:34:eb:e8:2a:a1:c1:63:2e:15:
ad:fb:ac:d7:12:40:5a:79:8c:b6:b4:ff:f9:c6:4d:f2:50:b3:
35:e3:b7:c7:5d:ee:9f:56:7a:0c:4b:a9:8d:dc:e8:92:6a:d3:
f9:94:2a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH3ApESun0XbrixHgZLIy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk
ODg0ZTIwHhcNMjUwNDMwMTgwMTA2WhcNMjUwNTAxMTgwMTA2WjAzMTEwLwYDVQQD
Eyg2ZjhjMjllYmJlYWU2ODdkM2FmZGRjNThjNTA2N2EwMGM0YjkxM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UX99N39BnptDj+JBZHAvgqL0H3S
AX8CDLJi86CqNZIW9fzO8s5n8iPy7Yb8RT7/n9GRu71T1OEphHQm0gd42LA7I/eD
B2EqgyAUGIxQDL7y64qaws82RgXPJUybGor+i5nx+ugUuA52hmg+dIPaPT6gLXij
31ciBYgSwF2ugZjAlcPx97yDkTChLxOWlzkXOwEJQQVIZvswjbIwtXHHMbOEau3A
rcnHpb7ZzlpRulM1ZDMYUW40d2PbwVFOTgcukHmqU9Yrh1B36okz7ixH0c3tn/oS
xQCMKFg+T1VB8A9f7iwSThpXFK3dZB3xc+6eOmH6ITnf0s073JPTbNPwPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+MKeu+rmh9Ov3cWMUGegDEuRPcMB8GA1UdIwQY
MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt
NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk
LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8aokVVy
xi0KjWkm5SBqOghNtJtWubB1UTSyhdrO90ITJ8Uhp324OOKHBjxDJYoa2VgGV8Ir
hqH80AG9rGp1DwTC1wqThxA9yIYYOZtQxbb+9A3xl6zoWbO/AV37BcotqPshBW3c
PW/wtoL7Bsv5Qsi8mfY3bEM+d4N2Yc9FgUH5lzvMg9B75DkEs1w8cIUqg6BFDsHZ
ZNinXCO5UyL8IEfHPKjCU/8QU4Ca8uWp03KfcgxZCjmBizQXppWTOipqL1/e30ug
W24ea0/SEwPCNOvoKqHBYy4Vrfus1xJAWnmMtrT/+cZN8lCzNeO3x13un1Z6DEup
jdzokmrT+ZQqug==
-----END CERTIFICATE-----
Generated at Thu May 1 04:06:08 2025 by rpki-client