Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: +ZffdJ24ty+RpSO1+l0h17RjmO7/yK41QS6f+yv9ih8=
Subject key identifier: 18:88:23:B3:7D:B2:E4:DD:8A:CC:61:89:51:38:2E:12:BF:DA:CC:EB
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 01968A011F614CE14CBB3E5451867F73DB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1517
Signing time: Thu 01 May 2025 04:00:51 +0000
Manifest this update: Thu 01 May 2025 04:00:51 +0000
Manifest next update: Fri 02 May 2025 04:00:51 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: B+0Bjy+HIlfmZy4rYI3GNzBtvtSKNhffJnxnNfnr7ik=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:01:1f:61:4c:e1:4c:bb:3e:54:51:86:7f:73:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: May 1 04:00:51 2025 GMT
Not After : May 2 04:00:51 2025 GMT
Subject: CN=188823b37db2e4dd8acc618951382e12bfdacceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:aa:ec:e5:ff:26:d8:7b:c2:10:cb:23:82:
45:d2:41:0f:a7:3b:98:70:e2:3a:e7:ac:3e:55:3f:
bd:e3:4d:da:a0:38:55:63:1a:b7:99:61:bb:cc:a7:
7b:cf:cc:4f:2f:1c:cc:e4:07:e4:0f:6e:95:50:af:
8f:7d:90:02:2c:54:1b:4d:1f:f1:72:5e:03:35:11:
3b:7c:bc:0c:bf:f9:d6:0b:22:72:fd:9d:8b:2e:52:
79:c2:70:ec:aa:72:2c:dc:82:3d:68:64:e5:39:7a:
e2:7b:d5:12:db:3b:ab:23:20:bd:ef:ac:92:37:90:
af:7f:95:40:04:67:c6:d7:2f:c3:04:c1:fb:17:18:
88:4a:bf:6e:ca:d8:3d:be:cf:7c:17:b4:47:26:04:
e3:5a:ef:73:55:bc:f8:9a:1c:71:88:77:27:e4:2d:
e6:49:38:81:08:1a:c4:43:60:ae:71:88:fb:3a:b8:
8b:8e:1b:97:b7:06:02:b5:3d:1b:d8:4c:6b:72:b6:
9d:4b:de:f3:b1:4f:00:72:00:6b:d6:9a:85:a5:8d:
d4:55:94:92:07:e3:40:da:f5:58:1b:9b:34:95:f1:
d0:e0:37:b6:66:71:50:76:22:f2:3a:b8:63:32:90:
52:d8:1b:88:e7:2c:2c:e8:96:5a:d9:cb:86:1f:b7:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:88:23:B3:7D:B2:E4:DD:8A:CC:61:89:51:38:2E:12:BF:DA:CC:EB
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:d9:b6:9a:77:69:a5:af:e4:eb:7d:e9:0e:56:ba:06:ff:
28:cc:f9:6e:38:14:56:8d:6e:86:83:d9:54:5a:0f:73:9c:6f:
d5:7a:4f:1e:03:1a:b5:01:e6:7b:f4:e0:36:82:fb:3c:72:b1:
0d:3f:1e:15:dd:e8:d8:4c:60:da:52:86:8e:0e:dd:81:f5:e7:
00:b1:69:76:e2:89:a1:6d:38:da:d3:59:60:ce:f2:79:ce:d7:
58:5e:7d:fb:14:aa:20:93:7b:28:8c:a3:d2:24:b9:c7:ab:af:
69:62:be:7d:6c:e1:5a:47:cd:38:f4:60:9d:a2:30:ad:c0:54:
0b:10:bd:5f:8e:a5:13:ed:3d:ba:85:8e:42:bb:b8:48:e9:1a:
ee:5e:3c:c2:b8:a0:02:fa:63:c9:51:da:a7:a2:ca:59:67:f5:
1e:81:c9:1f:66:9b:13:6d:80:79:6b:19:73:69:41:e2:32:10:
91:ce:05:8c:f8:5a:48:ac:ad:a5:95:e1:d6:00:5e:b3:af:81:
61:70:ae:48:ac:4c:59:bb:29:ce:e7:de:4f:14:a7:88:5d:e3:
eb:95:0b:4d:40:dd:12:6a:fc:39:d8:eb:34:46:5e:43:8e:04:
f8:f0:2f:47:25:c1:b4:03:e1:01:0d:53:4a:14:16:72:ba:53:
41:1a:eb:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKAR9hTOFMuz5UUYZ/c9uMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj
YzU2ZWMwHhcNMjUwNTAxMDQwMDUxWhcNMjUwNTAyMDQwMDUxWjAzMTEwLwYDVQQD
EygxODg4MjNiMzdkYjJlNGRkOGFjYzYxODk1MTM4MmUxMmJmZGFjY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5Oq7OX/Jth7whDLI4JF0kEPpzuY
cOI656w+VT+9403aoDhVYxq3mWG7zKd7z8xPLxzM5AfkD26VUK+PfZACLFQbTR/x
cl4DNRE7fLwMv/nWCyJy/Z2LLlJ5wnDsqnIs3II9aGTlOXrie9US2zurIyC976yS
N5Cvf5VABGfG1y/DBMH7FxiISr9uytg9vs98F7RHJgTjWu9zVbz4mhxxiHcn5C3m
STiBCBrEQ2CucYj7OriLjhuXtwYCtT0b2ExrcradS97zsU8AcgBr1pqFpY3UVZSS
B+NA2vVYG5s0lfHQ4De2ZnFQdiLyOrhjMpBS2BuI5yws6JZa2cuGH7fSlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiII7N9suTdisxhiVE4LhK/2szrMB8GA1UdIwQY
MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt
NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk
LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8XZtpp3
aaWv5Ot96Q5Wugb/KMz5bjgUVo1uhoPZVFoPc5xv1XpPHgMatQHme/TgNoL7PHKx
DT8eFd3o2Exg2lKGjg7dgfXnALFpduKJoW042tNZYM7yec7XWF59+xSqIJN7KIyj
0iS5x6uvaWK+fWzhWkfNOPRgnaIwrcBUCxC9X46lE+09uoWOQru4SOka7l48wrig
AvpjyVHap6LKWWf1HoHJH2abE22AeWsZc2lB4jIQkc4FjPhaSKytpZXh1gBes6+B
YXCuSKxMWbspzufeTxSniF3j65ULTUDdEmr8OdjrNEZeQ44E+PAvRyXBtAPhAQ1T
ShQWcrpTQRrrgw==
-----END CERTIFICATE-----
Generated at Thu May 1 07:21:37 2025 by rpki-client