Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: u7LTC4VE5XZUI2eresbiPJ8pNZQXcwspREk4c4mr9cE=
Subject key identifier: F0:58:A8:B3:AD:74:BF:09:36:06:14:2E:1D:6A:E9:A8:50:D5:17:CA
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 0196B53E2349CE2F5BA552C9A1565980BAE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 10D6
Signing time: Fri 09 May 2025 13:31:10 +0000
Manifest this update: Fri 09 May 2025 13:31:10 +0000
Manifest next update: Sat 10 May 2025 13:31:10 +0000
Files and hashes: 1: 2x3GH0uugj9PiKapw7_y_5XF8YY.roa (hash: Q5ocnBPifUXZuaMrfYFAL794jt6aZyPuaM4u2/TpMXA=)
2: PXiVKqc-gzBW0DpV9A_yfa7v6KE.roa (hash: L22rZjAObHC63x5DS7bDRlGFpJbFt5MxhJzGQ+tq5BE=)
3: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: Aq9f9G5xunoLWAKacEMPG18G2wv4w2YwfmNa8SlrUfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:3e:23:49:ce:2f:5b:a5:52:c9:a1:56:59:80:ba:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: May 9 13:31:10 2025 GMT
Not After : May 10 13:31:10 2025 GMT
Subject: CN=f058a8b3ad74bf093606142e1d6ae9a850d517ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:79:58:00:80:8f:55:06:4a:b8:f5:0d:b3:
68:27:a0:d7:6a:43:c9:0c:7a:8a:11:9f:14:b5:99:
60:36:4e:d4:80:d5:20:5b:97:cb:db:cb:6e:bc:db:
5d:ac:1e:4d:f4:d2:0b:00:61:51:b0:ca:30:30:56:
44:3f:09:0f:2e:6d:78:ee:55:86:7a:50:5d:d9:ce:
fb:5f:66:78:61:5b:ff:cf:53:ba:17:cf:7e:13:7b:
fe:49:58:e5:9d:11:a0:35:be:88:9d:8e:64:64:eb:
de:ee:d2:5b:5b:25:7c:51:75:79:d8:a2:49:f6:a9:
a1:47:6c:92:de:2e:c8:21:0d:3b:a8:a8:3a:d2:17:
e3:59:d2:49:8d:34:b6:3c:93:30:22:e8:c1:24:0b:
99:c3:b9:ff:2b:32:7b:d4:de:b8:6c:99:a2:66:d1:
45:b0:72:36:07:75:36:2b:a3:fe:1d:0e:b9:e6:f5:
0b:e3:63:95:c8:82:dd:1c:e3:7c:2a:ab:a6:08:87:
47:53:f1:89:07:d8:4d:c9:41:fa:81:4e:4e:65:91:
51:1b:63:b9:56:80:b1:99:a6:d6:16:a6:45:bd:6e:
1d:cd:9a:06:05:9b:4f:71:94:ec:a9:3e:91:77:ef:
c4:db:0c:75:8e:3d:74:e1:0b:74:71:94:01:91:da:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:A8:B3:AD:74:BF:09:36:06:14:2E:1D:6A:E9:A8:50:D5:17:CA
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b4:ed:a7:c2:d7:c0:fd:9c:c3:0b:6b:ab:a4:7a:e7:b5:a1:
27:bc:ee:e9:81:06:c6:e4:4f:04:fd:e6:04:a4:f9:19:d6:cd:
d3:ba:4f:e6:e7:e7:83:99:06:86:c0:d9:ff:cc:b5:fe:ee:5b:
04:7a:5f:c5:cd:f6:56:ab:2d:d6:4c:44:ce:fa:bb:a0:33:2e:
6d:8d:22:05:d9:08:59:45:2c:c1:e6:fb:0a:10:42:b3:2f:d1:
3f:fb:53:f1:35:83:1e:0f:a7:b9:ad:99:d7:c1:69:db:32:c9:
13:06:8d:4a:69:c6:ed:4b:97:8d:44:4a:c6:e8:46:ed:9e:5e:
14:e6:ff:ac:90:2d:8b:dc:4c:35:18:72:40:59:f4:b7:2f:5f:
3f:14:99:fd:02:d8:b1:4b:51:6e:15:f7:bf:9e:07:46:86:64:
fd:bc:ef:d5:07:81:40:46:3a:6a:a8:57:dd:c4:e5:d8:4b:79:
e4:ae:53:a8:c0:86:17:2d:56:03:4f:fc:85:ca:09:7f:fd:dc:
c9:a1:80:7c:e3:d0:8f:59:c2:7a:87:7b:4e:d2:3f:95:fb:c0:
a8:db:8f:0b:60:9e:be:49:c5:04:ba:f9:06:db:a1:e0:d5:14:
6e:39:2a:16:5d:bb:7f:2b:ce:2d:a8:0d:7b:c1:72:f1:b3:47:
d9:dd:32:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1PiNJzi9bpVLJoVZZgLrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjEzNmU2ODIwZDk0ZjAzYjFjNWQ3MWVlZTNkNGIyMjE5
MTUyOGYwHhcNMjUwNTA5MTMzMTEwWhcNMjUwNTEwMTMzMTEwWjAzMTEwLwYDVQQD
EyhmMDU4YThiM2FkNzRiZjA5MzYwNjE0MmUxZDZhZTlhODUwZDUxN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSN5WACAj1UGSrj1DbNoJ6DXakPJ
DHqKEZ8UtZlgNk7UgNUgW5fL28tuvNtdrB5N9NILAGFRsMowMFZEPwkPLm147lWG
elBd2c77X2Z4YVv/z1O6F89+E3v+SVjlnRGgNb6InY5kZOve7tJbWyV8UXV52KJJ
9qmhR2yS3i7IIQ07qKg60hfjWdJJjTS2PJMwIujBJAuZw7n/KzJ71N64bJmiZtFF
sHI2B3U2K6P+HQ655vUL42OVyILdHON8KqumCIdHU/GJB9hNyUH6gU5OZZFRG2O5
VoCxmabWFqZFvW4dzZoGBZtPcZTsqT6Rd+/E2wx1jj104Qt0cZQBkdoO4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBYqLOtdL8JNgYULh1q6ahQ1RfKMB8GA1UdIwQY
MBaAFIKxNuaCDZTwOxxdce7j1LIhkVKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEt
MGRhM2NhYTkxNDI5LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yMjExMmUtNGUxMy00M2QwLTllYjEtMGRhM2NhYTkxNDI5
LzEvZ3JFMjVvSU5sUEE3SEYxeDd1UFVzaUdSVW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7Ttp8LX
wP2cwwtrq6R657WhJ7zu6YEGxuRPBP3mBKT5GdbN07pP5ufng5kGhsDZ/8y1/u5b
BHpfxc32Vqst1kxEzvq7oDMubY0iBdkIWUUsweb7ChBCsy/RP/tT8TWDHg+nua2Z
18Fp2zLJEwaNSmnG7UuXjURKxuhG7Z5eFOb/rJAti9xMNRhyQFn0ty9fPxSZ/QLY
sUtRbhX3v54HRoZk/bzv1QeBQEY6aqhX3cTl2Et55K5TqMCGFy1WA0/8hcoJf/3c
yaGAfOPQj1nCeod7TtI/lfvAqNuPC2CevknFBLr5Btuh4NUUbjkqFl27fyvOLagN
e8Fy8bNH2d0yCg==
-----END CERTIFICATE-----
Generated at Fri May 9 19:23:23 2025 by rpki-client