Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
File: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft (raw, json)
Hash identifier: DNYHgWovhUjOXT03J7mXubtpqiNMhK8rp3mAIjPIdvM=
Subject key identifier: E8:C0:52:CE:3F:CF:13:3C:DC:D4:4A:E8:B2:88:E7:02:36:18:E4:A3
Authority key identifier: D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
Certificate issuer: /CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Certificate serial: 01968E4B8FEBF3E9A54B4ECEE4DFC5BB4905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
Manifest number: 0407
Signing time: Fri 02 May 2025 00:00:38 +0000
Manifest this update: Fri 02 May 2025 00:00:38 +0000
Manifest next update: Sat 03 May 2025 00:00:38 +0000
Files and hashes: 1: 0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl (hash: 0MxkPFAeojDUPUe1Kme/QAj4jEMFivK+c6bxgzlp/4I=)
2: cotZl6z9OJ-fauLOJe6XV8WAuTo.roa (hash: pFgMJLMj7SXSgI1OYpF9YOIHVLweh2wDrctvJeRJL4M=)
3: kchelfWvJ5H-ipXayPr2lYfELpU.roa (hash: 9NIJWgo1KUO6egMwGucTZhKbewDIQ9m/pLPQ1oGGlaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:4b:8f:eb:f3:e9:a5:4b:4e:ce:e4:df:c5:bb:49:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f51964ede12b4c03673d23cd44c8375315f45a
Validity
Not Before: May 2 00:00:38 2025 GMT
Not After : May 3 00:00:38 2025 GMT
Subject: CN=e8c052ce3fcf133cdcd44ae8b288e7023618e4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:b8:45:a9:15:d6:6e:03:96:a0:c0:74:a6:
bb:6a:1a:f5:e6:12:e0:dc:78:b9:ad:db:dd:6a:b1:
d1:76:77:56:69:a9:4e:58:e6:96:65:5f:84:bf:fc:
7f:cf:8e:56:94:17:8a:e4:e2:58:30:0e:b1:fb:17:
54:32:8b:2c:dc:4b:cc:5a:cb:a9:09:0e:39:a7:12:
25:3a:fc:2f:2b:66:2f:bc:f0:93:d3:bd:1d:7d:ec:
61:e9:5e:c5:48:bb:b9:88:d5:c6:c2:a9:dc:94:0c:
85:0a:8e:9d:99:80:41:d2:22:7d:e4:a0:3f:57:67:
e4:c5:1d:dc:57:18:ba:2f:55:b0:ca:89:49:08:99:
8b:cc:68:3e:d8:3f:85:f1:3f:28:ab:8c:90:4f:cf:
9e:2d:d1:05:29:22:cc:1c:82:76:be:24:52:34:07:
45:14:5e:bf:f9:7a:cf:5a:ef:11:df:4e:d8:94:ee:
3a:ff:15:3f:58:34:42:ed:1a:b0:11:ed:e7:94:a2:
ee:5b:c1:2d:e3:f6:47:ae:b2:66:93:9c:ba:d1:37:
e0:f1:28:ab:47:16:32:6c:f6:81:27:11:30:e5:ec:
6f:05:49:ae:6c:b5:5e:ec:ca:39:a0:c4:32:88:82:
fb:d6:61:82:e9:70:7b:39:bc:b3:60:fc:14:b6:41:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:52:CE:3F:CF:13:3C:DC:D4:4A:E8:B2:88:E7:02:36:18:E4:A3
X509v3 Authority Key Identifier:
keyid:D1:F5:19:64:ED:E1:2B:4C:03:67:3D:23:CD:44:C8:37:53:15:F4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ebbdda-9571-4ff5-b56e-75220d53a55c/1/0fUZZO3hK0wDZz0jzUTIN1MV9Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:eb:04:87:48:98:aa:6f:ab:02:62:f1:9f:ab:9d:6e:00:67:
a8:4b:b8:09:1f:6d:6a:d6:ed:8f:ee:57:c3:c0:d5:71:b3:1d:
f2:2d:b9:4f:3b:8f:7a:61:31:c2:1e:4e:17:6f:7c:f2:f6:06:
b4:0c:5b:1a:b6:f5:f7:89:7c:3b:5c:6f:05:03:44:ef:0f:3b:
eb:6b:d4:93:9d:80:57:b4:82:2d:2f:5b:94:9d:0b:c0:df:df:
8e:84:11:fa:cc:72:0f:f8:88:74:a4:00:fc:e7:6e:8e:80:95:
6a:a8:1c:31:73:93:f3:3a:27:b7:f5:bc:db:0d:27:44:d7:92:
ba:14:3f:82:47:de:ba:23:b5:97:b9:7b:41:92:2f:eb:10:80:
2c:a9:2b:e4:42:66:7c:99:cd:c6:1a:c3:53:d4:f8:ea:9a:2e:
1f:10:dc:aa:2d:da:46:40:5b:d1:51:2d:a9:47:5d:58:b5:7c:
24:33:b8:d8:71:01:6e:a5:32:dc:7e:d0:67:7c:86:32:65:08:
ed:58:cc:97:56:96:01:63:cc:82:89:f7:c5:04:13:73:4b:04:
29:bb:fd:ec:bd:78:18:9f:1f:a1:f1:b6:5a:a5:59:18:30:ae:
12:00:96:74:be:0a:ec:0f:5f:95:fd:d5:a1:70:0c:39:b8:38:
c8:42:c8:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaOS4/r8+mlS07O5N/Fu0kFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZjUxOTY0ZWRlMTJiNGMwMzY3M2QyM2NkNDRjODM3NTMx
NWY0NWEwHhcNMjUwNTAyMDAwMDM4WhcNMjUwNTAzMDAwMDM4WjAzMTEwLwYDVQQD
EyhlOGMwNTJjZTNmY2YxMzNjZGNkNDRhZThiMjg4ZTcwMjM2MThlNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYC4RakV1m4DlqDAdKa7ahr15hLg
3Hi5rdvdarHRdndWaalOWOaWZV+Ev/x/z45WlBeK5OJYMA6x+xdUMoss3EvMWsup
CQ45pxIlOvwvK2YvvPCT070dfexh6V7FSLu5iNXGwqnclAyFCo6dmYBB0iJ95KA/
V2fkxR3cVxi6L1WwyolJCJmLzGg+2D+F8T8oq4yQT8+eLdEFKSLMHIJ2viRSNAdF
FF6/+XrPWu8R307YlO46/xU/WDRC7RqwEe3nlKLuW8Et4/ZHrrJmk5y60Tfg8Sir
RxYybPaBJxEw5exvBUmubLVe7Mo5oMQyiIL71mGC6XB7ObyzYPwUtkGxdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjAUs4/zxM83NRK6LKI5wI2GOSjMB8GA1UdIwQY
MBaAFNH1GWTt4StMA2c9I81EyDdTFfRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUt
NzUyMjBkNTNhNTVjLzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lYmJkZGEtOTU3MS00ZmY1LWI1NmUtNzUyMjBkNTNhNTVj
LzEvMGZVWlpPM2hLMHdEWnowanpVVElOMU1WOUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOsEh0iY
qm+rAmLxn6udbgBnqEu4CR9tatbtj+5Xw8DVcbMd8i25TzuPemExwh5OF2988vYG
tAxbGrb194l8O1xvBQNE7w8762vUk52AV7SCLS9blJ0LwN/fjoQR+sxyD/iIdKQA
/OdujoCVaqgcMXOT8zont/W82w0nRNeSuhQ/gkfeuiO1l7l7QZIv6xCALKkr5EJm
fJnNxhrDU9T46pouHxDcqi3aRkBb0VEtqUddWLV8JDO42HEBbqUy3H7QZ3yGMmUI
7VjMl1aWAWPMgon3xQQTc0sEKbv97L14GJ8fofG2WqVZGDCuEgCWdL4K7A9flf3V
oXAMObg4yELIUw==
-----END CERTIFICATE-----
Generated at Fri May 2 09:32:53 2025 by rpki-client