Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier: 7e2zeivtCl82uYgd8vIZiqLocZy4gPi5slQZ/a5Eblg=
Subject key identifier: 8C:DC:B4:AA:B8:65:8E:15:0A:12:CB:68:E8:97:7E:33:BB:70:44:3E
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 01967FEAF2B5653669DC80ED6B3C5B6B71E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number: 0FA3
Signing time: Tue 29 Apr 2025 05:00:26 +0000
Manifest this update: Tue 29 Apr 2025 05:00:26 +0000
Manifest next update: Wed 30 Apr 2025 05:00:26 +0000
Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: KWwjdSh0tT9MOf4x43kQovyEBVtaAotrfD9h6TW4ejs=)
2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:f2:b5:65:36:69:dc:80:ed:6b:3c:5b:6b:71:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Apr 29 05:00:26 2025 GMT
Not After : Apr 30 05:00:26 2025 GMT
Subject: CN=8cdcb4aab8658e150a12cb68e8977e33bb70443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:a9:aa:a2:47:fb:db:af:fa:c6:ed:bf:8e:
8d:58:6f:75:38:65:b5:79:95:4a:48:62:bc:16:f7:
5c:cb:f9:64:c9:1f:73:c5:44:55:bd:36:cd:ba:aa:
d4:79:8f:a6:e8:88:8b:c0:bb:91:0b:fc:cd:79:0b:
dd:88:1f:c0:46:d2:95:d9:33:5e:5c:2c:31:9b:49:
86:62:d7:b6:88:a0:19:ce:00:df:2b:fa:1b:f4:3c:
34:83:f1:8a:ae:be:5d:69:e5:1e:88:63:d9:db:d4:
58:7d:8f:8e:20:1b:a1:5d:3a:61:e1:23:65:7f:12:
13:17:9c:48:6c:9a:3c:07:11:cf:8f:f0:ba:b1:51:
73:f5:10:2f:4c:38:e5:0d:ab:e3:cf:6f:30:d5:96:
80:da:c9:d5:8e:1c:23:3e:32:1f:89:1c:cf:f8:ac:
f2:8e:2b:18:6a:c4:23:8d:e3:09:41:42:67:d5:e8:
b6:8e:5d:29:19:a8:19:cc:23:ab:fe:5a:6d:7d:6a:
b2:3b:53:9e:80:b3:b1:7d:01:31:62:36:65:05:08:
0a:1b:55:38:96:7b:3d:81:07:7f:c6:6a:bc:f2:11:
fb:fe:49:48:a9:e9:2f:cb:25:46:02:8c:07:a9:12:
e4:25:80:79:3f:b5:04:91:3b:82:bd:56:88:9b:71:
59:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DC:B4:AA:B8:65:8E:15:0A:12:CB:68:E8:97:7E:33:BB:70:44:3E
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:ac:a8:13:f5:e7:5b:1b:fc:a5:e7:1e:94:a0:27:a4:55:
15:6c:d7:aa:24:0a:58:d1:6a:a2:b2:9e:89:fe:96:00:92:59:
aa:e0:14:71:05:30:3e:89:d4:40:b7:bf:2f:41:58:d7:35:8c:
ec:ca:75:60:75:d6:ef:c7:74:87:95:b9:fd:2c:7a:c7:37:ee:
fe:06:b2:30:39:7d:d8:2d:04:71:1e:1e:b1:ca:a3:a3:9e:70:
b6:80:b0:60:5d:0c:2b:32:dc:0b:db:9b:5a:15:36:ad:7a:e1:
7a:c7:f5:0b:67:60:6d:1a:87:3a:e7:21:6f:18:45:28:6d:c1:
6f:dd:2a:7c:3f:94:00:90:c6:d5:c1:c0:f6:42:ea:26:92:56:
d1:6f:69:9c:f5:62:9b:b9:73:56:5e:92:6f:ac:a1:b9:f0:3f:
49:14:13:da:1e:a7:67:af:a3:f8:be:63:03:12:26:59:2f:32:
4a:fe:05:0b:c3:9f:09:d9:b3:4b:20:87:58:71:9b:22:24:a6:
c4:e5:cf:e6:7b:81:92:73:44:51:4e:48:23:7b:f7:a8:2a:a4:
01:83:22:3d:19:ea:76:e4:73:78:fb:2d:06:4b:ed:53:fc:fe:
d2:8b:68:b1:e3:6e:3d:be:d0:68:5c:10:90:f5:5f:14:eb:f1:
2a:6f:f1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/6vK1ZTZp3IDtazxba3HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTlhZWI0MjZjMjhhMzQ4MDg3NzZmOTU2ODkzNWQzYjll
YzllMDgwHhcNMjUwNDI5MDUwMDI2WhcNMjUwNDMwMDUwMDI2WjAzMTEwLwYDVQQD
Eyg4Y2RjYjRhYWI4NjU4ZTE1MGExMmNiNjhlODk3N2UzM2JiNzA0NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPqpqqJH+9uv+sbtv46NWG91OGW1
eZVKSGK8Fvdcy/lkyR9zxURVvTbNuqrUeY+m6IiLwLuRC/zNeQvdiB/ARtKV2TNe
XCwxm0mGYte2iKAZzgDfK/ob9Dw0g/GKrr5daeUeiGPZ29RYfY+OIBuhXTph4SNl
fxITF5xIbJo8BxHPj/C6sVFz9RAvTDjlDavjz28w1ZaA2snVjhwjPjIfiRzP+Kzy
jisYasQjjeMJQUJn1ei2jl0pGagZzCOr/lptfWqyO1OegLOxfQExYjZlBQgKG1U4
lns9gQd/xmq88hH7/klIqekvyyVGAowHqRLkJYB5P7UEkTuCvVaIm3FZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzctKq4ZY4VChLLaOiXfjO7cEQ+MB8GA1UdIwQY
MBaAFI+prrQmwoo0gId2+VaJNdO57J4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYt
MzU5Zjc5MzYxZTk5LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83Nzc5MmItZTIwZS00YmY3LWIxMjYtMzU5Zjc5MzYxZTk5
LzEvajZtdXRDYkNpalNBaDNiNVZvazEwN25zbmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVasqBP1
51sb/KXnHpSgJ6RVFWzXqiQKWNFqorKeif6WAJJZquAUcQUwPonUQLe/L0FY1zWM
7Mp1YHXW78d0h5W5/Sx6xzfu/gayMDl92C0EcR4escqjo55wtoCwYF0MKzLcC9ub
WhU2rXrhesf1C2dgbRqHOuchbxhFKG3Bb90qfD+UAJDG1cHA9kLqJpJW0W9pnPVi
m7lzVl6Sb6yhufA/SRQT2h6nZ6+j+L5jAxImWS8ySv4FC8OfCdmzSyCHWHGbIiSm
xOXP5nuBknNEUU5II3v3qCqkAYMiPRnqduRzePstBkvtU/z+0otoseNuPb7QaFwQ
kPVfFOvxKm/xEw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:53:23 2025 by rpki-client