Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File: iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier: bNUX9bm9Oum2wltysKMI/PJcF1ZjcBwd/NuuZNGkTys=
Subject key identifier: 7C:F6:F0:8F:5E:A9:AA:D1:63:CC:95:C8:9D:EB:05:98:C5:1C:0C:6D
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer: /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial: 0196A5E616875707DD5BEFAD9DA068FB52C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number: 1528
Signing time: Tue 06 May 2025 14:00:41 +0000
Manifest this update: Tue 06 May 2025 14:00:41 +0000
Manifest next update: Wed 07 May 2025 14:00:41 +0000
Files and hashes: 1: EJO9ljE1s0Q84FuNpxDY98O5gUs.roa (hash: MidhZCUKLP8FjCtsor/fdefcfGoS6d1va0RAyvBU+x4=)
2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: 5b3PC6oVNp7jPKa2GgKJNVs6kmurmaw8a+JIBdHkN6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:e6:16:87:57:07:dd:5b:ef:ad:9d:a0:68:fb:52:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
Validity
Not Before: May 6 14:00:41 2025 GMT
Not After : May 7 14:00:41 2025 GMT
Subject: CN=7cf6f08f5ea9aad163cc95c89deb0598c51c0c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:16:ac:c7:98:3a:a6:7d:ff:c9:ab:b7:d5:
71:0d:04:4e:98:88:20:97:37:9d:82:de:99:1f:56:
52:9f:1e:57:db:66:c7:df:a6:86:4c:a2:03:21:49:
cb:a7:02:64:c8:49:22:50:41:65:04:a2:9d:91:da:
46:4f:a5:b3:29:0a:e4:6b:52:0e:64:8f:eb:c4:90:
80:86:c8:ea:3b:45:eb:36:69:f4:bd:2c:4c:55:e0:
4f:3a:ef:03:2e:59:ea:83:72:70:ac:4b:c8:de:2d:
ad:7c:f8:64:56:51:88:ad:4c:2b:15:21:26:08:50:
ba:80:a3:a8:78:4b:ab:bd:7e:0f:a3:c0:b1:a2:4b:
7c:f7:2c:34:68:f8:69:ae:c4:cd:43:26:33:34:7d:
75:66:61:29:4a:5f:0a:89:f1:73:07:6d:3b:b1:e0:
fc:a3:28:64:65:17:e1:92:dc:99:8b:55:de:5f:4e:
9e:e9:23:55:44:b1:d8:e4:93:c9:b2:20:4e:df:87:
e7:0d:f7:d1:60:0e:13:3c:93:06:64:96:7c:fa:bb:
b0:7e:b1:c8:ec:99:a4:2f:79:28:b2:72:b7:50:e8:
63:61:7e:71:26:61:48:f4:8f:c0:8e:25:4c:05:d1:
6e:27:ef:72:ba:b3:60:f5:1f:61:f0:c6:1a:76:ec:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:F0:8F:5E:A9:AA:D1:63:CC:95:C8:9D:EB:05:98:C5:1C:0C:6D
X509v3 Authority Key Identifier:
keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:61:b2:9d:d3:cb:e2:ff:be:b4:d9:74:50:6c:71:61:ba:b3:
3f:85:6c:12:4e:a1:3d:75:a2:2f:25:2b:e2:fc:18:06:15:a7:
4d:68:f4:78:64:26:67:16:5a:12:b6:0a:59:07:38:33:ce:74:
62:cd:09:19:40:6d:b1:aa:07:ee:6e:20:cf:b9:e5:77:95:d3:
1e:7a:22:79:ab:2f:df:f1:5b:b6:1d:ed:2c:6e:62:59:97:3b:
74:36:cc:f1:0a:9c:25:5e:cf:a0:a0:e9:3d:dc:da:d5:3e:08:
e9:03:66:d3:6c:44:3f:ce:25:d9:78:a8:6c:80:20:da:90:27:
f6:29:38:71:d4:a6:06:a1:c4:7c:08:1b:da:b2:13:83:fb:20:
fb:b3:8d:ef:18:75:15:41:0a:dd:4a:82:db:34:5d:86:28:21:
43:3f:83:50:87:4f:5e:7b:f1:a9:53:fa:9b:8c:10:39:36:35:
ea:4a:91:81:87:f0:97:e4:4b:c9:b2:0d:8b:84:07:e1:10:95:
d0:37:64:eb:21:d0:a8:97:cd:e2:80:28:79:90:e4:88:36:45:
a4:11:e9:2e:b5:83:13:cf:db:db:13:9b:23:c0:ab:e7:0a:d8:
35:34:66:ab:39:6e:5c:18:c6:7d:64:e9:3f:e9:e8:8d:6b:64:
cc:46:21:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZal5haHVwfdW++tnaBo+1LBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MTZhYWE1ZDI1MmZkOTAxNDVmZWRhYzY4Mzc2MmQ2ZTIw
NzQxNTUwHhcNMjUwNTA2MTQwMDQxWhcNMjUwNTA3MTQwMDQxWjAzMTEwLwYDVQQD
Eyg3Y2Y2ZjA4ZjVlYTlhYWQxNjNjYzk1Yzg5ZGViMDU5OGM1MWMwYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PsWrMeYOqZ9/8mrt9VxDQROmIgg
lzedgt6ZH1ZSnx5X22bH36aGTKIDIUnLpwJkyEkiUEFlBKKdkdpGT6WzKQrka1IO
ZI/rxJCAhsjqO0XrNmn0vSxMVeBPOu8DLlnqg3JwrEvI3i2tfPhkVlGIrUwrFSEm
CFC6gKOoeEurvX4Po8Cxokt89yw0aPhprsTNQyYzNH11ZmEpSl8KifFzB207seD8
oyhkZRfhktyZi1XeX06e6SNVRLHY5JPJsiBO34fnDffRYA4TPJMGZJZ8+ruwfrHI
7JmkL3kosnK3UOhjYX5xJmFI9I/AjiVMBdFuJ+9yurNg9R9h8MYaduyAWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz28I9eqarRY8yVyJ3rBZjFHAxtMB8GA1UdIwQY
MBaAFIkWqqXSUv2QFF/trGg3YtbiB0FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYt
ZDY5ZWE5M2NiYWZiLzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85MDc0MDktNWU2MS00YzY2LTk0ZTYtZDY5ZWE5M2NiYWZi
LzEvaVJhcXBkSlNfWkFVWC0yc2FEZGkxdUlIUVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmGyndPL
4v++tNl0UGxxYbqzP4VsEk6hPXWiLyUr4vwYBhWnTWj0eGQmZxZaErYKWQc4M850
Ys0JGUBtsaoH7m4gz7nld5XTHnoieasv3/Fbth3tLG5iWZc7dDbM8QqcJV7PoKDp
Pdza1T4I6QNm02xEP84l2XiobIAg2pAn9ik4cdSmBqHEfAgb2rITg/sg+7ON7xh1
FUEK3UqC2zRdhighQz+DUIdPXnvxqVP6m4wQOTY16kqRgYfwl+RLybINi4QH4RCV
0Ddk6yHQqJfN4oAoeZDkiDZFpBHpLrWDE8/b2xObI8Cr5wrYNTRmqzluXBjGfWTp
P+nojWtkzEYhvw==
-----END CERTIFICATE-----
Generated at Tue May 6 23:24:52 2025 by rpki-client