Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: oSnj8Y1Za74aq5R5TZ1MeUke/XQvAq+UU+UpJE+Z76g=
Subject key identifier: 40:CD:A5:A6:C2:69:B0:4C:CB:CB:5E:33:9A:9B:C6:91:90:A6:C0:64
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01967A1F8DA03A085D6320FD3974300317FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1511
Signing time: Mon 28 Apr 2025 02:00:10 +0000
Manifest this update: Mon 28 Apr 2025 02:00:10 +0000
Manifest next update: Tue 29 Apr 2025 02:00:10 +0000
Files and hashes: 1: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: HnDzk98cxu1BB2jX5uV6rFwuh0CjDtWKk5Tcd9QnlqM=)
2: XbLNbpcMzthn6l0veRfIZ9QxeEk.roa (hash: Zbud2lYm0I4TklwYM90yu2xM4m8NLbFwJE0Y7F2RnFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:1f:8d:a0:3a:08:5d:63:20:fd:39:74:30:03:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Apr 28 02:00:10 2025 GMT
Not After : Apr 29 02:00:10 2025 GMT
Subject: CN=40cda5a6c269b04ccbcb5e339a9bc69190a6c064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:14:2c:00:82:8e:05:9f:08:d1:93:15:51:
46:ee:1e:47:ac:d7:cc:68:b1:10:d5:5b:59:21:16:
e2:c8:b5:f9:4f:de:93:42:24:8a:2d:1c:23:a2:71:
2d:57:e8:dc:98:16:1a:15:e2:3e:7c:23:dd:16:f8:
ea:28:9e:68:74:50:42:f7:a5:e4:c0:25:c3:3d:59:
5f:64:d9:e7:04:47:ff:c9:20:de:a2:35:46:db:c9:
7f:6a:85:6d:53:69:2a:8b:05:79:51:ff:cb:76:ca:
61:b9:09:78:ac:08:6e:8c:d9:88:fa:af:f3:5d:3f:
2d:6a:c9:d1:f1:0b:bd:a7:a0:0e:28:87:33:d7:4c:
86:d3:42:b9:1a:c7:8e:60:df:42:27:c3:a7:52:14:
80:9c:6d:dc:3a:4d:9e:73:71:be:ff:d2:bb:e2:af:
4c:5c:57:9a:db:40:73:de:56:63:07:31:87:86:33:
67:b7:a1:09:f4:41:84:06:c3:26:9d:63:df:23:a2:
1d:8e:82:c2:2e:39:ad:d1:5a:c6:f6:86:fc:14:dd:
dd:f1:6d:bf:d4:e2:34:73:f0:72:c0:4e:ac:d5:d3:
c8:cd:ea:76:e7:1a:b8:f0:5b:a9:f0:a2:c7:78:47:
4a:bf:71:0f:fe:84:e9:a6:8c:42:cd:fe:9d:ac:47:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CD:A5:A6:C2:69:B0:4C:CB:CB:5E:33:9A:9B:C6:91:90:A6:C0:64
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:00:68:13:e1:cf:40:2e:54:3e:f7:2b:5c:ad:15:9e:35:ce:
fe:22:28:45:84:37:10:be:f3:c7:af:27:72:a3:dd:89:34:59:
70:e6:95:f5:52:fe:a1:28:ea:1a:7c:5b:05:44:9f:15:63:12:
28:7f:b5:83:72:ca:3b:1e:b8:e4:04:1d:05:11:15:de:7c:b8:
1d:ee:ee:2d:3c:f8:b3:35:eb:59:07:47:06:a4:05:86:a2:9b:
3c:95:26:eb:28:b0:17:39:64:74:75:d4:54:8b:0f:83:80:3c:
ee:4c:71:46:d0:3d:85:cf:93:41:85:cf:d5:99:d4:40:b0:21:
e3:31:b1:b9:db:f4:e7:f6:c2:83:4c:81:01:eb:76:1f:ab:e5:
c3:ee:bb:67:6b:ec:94:c0:9c:e8:9c:b9:95:a7:ea:db:ed:c3:
e5:47:bf:e9:ee:aa:06:74:f4:eb:54:c3:3e:10:e8:03:50:64:
39:59:79:9b:61:c3:56:4a:bd:de:3b:41:7d:e5:f7:10:fc:a1:
b9:04:6f:ad:cc:a5:96:1d:d5:60:75:df:04:9c:1c:7e:b0:d9:
dd:6f:e5:ae:79:31:42:17:d3:99:89:c8:f4:59:2e:aa:bc:65:
7d:00:fb:0d:17:21:b2:4c:5e:38:3e:87:53:37:9d:aa:46:e9:
61:0c:c9:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6H42gOghdYyD9OXQwAxf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjUwNDI4MDIwMDEwWhcNMjUwNDI5MDIwMDEwWjAzMTEwLwYDVQQD
Eyg0MGNkYTVhNmMyNjliMDRjY2JjYjVlMzM5YTliYzY5MTkwYTZjMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD8ULACCjgWfCNGTFVFG7h5HrNfM
aLEQ1VtZIRbiyLX5T96TQiSKLRwjonEtV+jcmBYaFeI+fCPdFvjqKJ5odFBC96Xk
wCXDPVlfZNnnBEf/ySDeojVG28l/aoVtU2kqiwV5Uf/LdsphuQl4rAhujNmI+q/z
XT8tasnR8Qu9p6AOKIcz10yG00K5GseOYN9CJ8OnUhSAnG3cOk2ec3G+/9K74q9M
XFea20Bz3lZjBzGHhjNnt6EJ9EGEBsMmnWPfI6IdjoLCLjmt0VrG9ob8FN3d8W2/
1OI0c/BywE6s1dPIzep25xq48Fup8KLHeEdKv3EP/oTppoxCzf6drEedTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDNpabCabBMy8teM5qbxpGQpsBkMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwBoE+HP
QC5UPvcrXK0VnjXO/iIoRYQ3EL7zx68ncqPdiTRZcOaV9VL+oSjqGnxbBUSfFWMS
KH+1g3LKOx645AQdBREV3ny4He7uLTz4szXrWQdHBqQFhqKbPJUm6yiwFzlkdHXU
VIsPg4A87kxxRtA9hc+TQYXP1ZnUQLAh4zGxudv05/bCg0yBAet2H6vlw+67Z2vs
lMCc6Jy5lafq2+3D5Ue/6e6qBnT061TDPhDoA1BkOVl5m2HDVkq93jtBfeX3EPyh
uQRvrcyllh3VYHXfBJwcfrDZ3W/lrnkxQhfTmYnI9FkuqrxlfQD7DRchskxeOD6H
UzedqkbpYQzJ8w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:35:28 2025 by rpki-client