Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: qy64ANUg4wceiaEHCRBImQsnBq/LPvyEW4Uw247OH5E=
Subject key identifier: 44:BC:AC:B6:3E:E6:BD:C1:D3:81:A5:21:49:E4:73:AB:92:26:98:3A
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 0196AF574EC019792138A21FEB50E11454D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 152C
Signing time: Thu 08 May 2025 10:00:56 +0000
Manifest this update: Thu 08 May 2025 10:00:56 +0000
Manifest next update: Fri 09 May 2025 10:00:56 +0000
Files and hashes: 1: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (hash: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=)
2: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: aAyg+3iaSLPphAmV+J4nqxy9w+VMg+QLo9QXd//vYBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:57:4e:c0:19:79:21:38:a2:1f:eb:50:e1:14:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: May 8 10:00:56 2025 GMT
Not After : May 9 10:00:56 2025 GMT
Subject: CN=44bcacb63ee6bdc1d381a52149e473ab9226983a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:00:21:80:44:55:58:90:69:ff:74:90:3a:
df:50:cb:28:c8:b9:2f:e0:46:c0:73:cc:e7:bb:6c:
6c:13:73:1c:0a:53:68:64:f1:da:b6:5d:12:1b:f6:
a9:68:91:77:16:72:9c:f0:ce:06:1d:83:b4:c3:6e:
9b:e8:36:25:4d:1e:c6:9e:68:20:d3:90:39:41:09:
7b:db:97:e2:9e:68:5f:bc:d0:a2:a5:fe:62:ea:46:
04:7b:62:28:e3:24:df:b9:7f:bb:3c:2d:38:88:df:
6d:94:07:e9:fb:96:cc:4e:7b:c3:15:88:1b:34:9d:
62:00:5c:f2:c2:2e:44:77:a1:7d:e1:14:f3:90:98:
3b:69:79:bd:dc:b9:6f:26:d7:7a:ac:5e:33:05:12:
47:07:27:b5:63:9e:d8:d5:9b:c8:35:a7:19:da:b4:
2f:7b:63:6c:62:0c:a9:01:b2:af:6b:ce:2b:83:d3:
3e:2e:b0:89:91:3e:52:a4:b2:b8:ab:c9:f9:6c:e1:
34:8a:2b:8f:59:15:5a:6f:f1:a0:23:9f:e9:ba:ee:
11:04:a7:a3:48:8d:27:e1:64:04:c9:60:36:33:89:
d1:62:7b:82:14:e6:d5:19:05:46:96:73:57:be:57:
18:94:d1:52:a5:51:84:4d:c3:fa:8e:6b:7e:97:3a:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:AC:B6:3E:E6:BD:C1:D3:81:A5:21:49:E4:73:AB:92:26:98:3A
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:8c:21:93:42:45:57:7b:77:e3:69:cd:8d:c5:b6:90:16:
7c:f6:44:19:e6:fd:81:ee:57:84:69:6d:59:2f:a8:70:31:ac:
72:a8:24:62:cd:e8:6d:75:d4:d9:f5:78:db:42:7b:16:e9:e4:
6e:b5:b6:a9:31:7f:83:76:3e:94:b1:5c:59:10:28:f8:0e:20:
8f:6b:23:e0:f1:b0:4e:fd:d5:87:48:b2:80:a5:9a:28:b4:7e:
0e:c9:54:1e:c5:90:e9:78:ee:03:85:6a:2a:51:78:52:4b:ba:
df:5a:c6:7e:5c:37:73:a8:c8:e7:0b:9e:ae:1a:02:1d:07:54:
be:e0:a9:9d:61:fe:6f:41:df:c9:46:63:ff:0d:1a:87:cf:a0:
00:fd:05:a3:c3:be:4f:c9:6b:81:e9:b5:00:63:62:f4:ac:5e:
13:a0:c3:78:b5:07:e0:49:de:e6:2e:d5:b2:b9:18:b6:52:8b:
a4:53:29:dd:c0:cc:6f:9e:fa:e5:cd:18:19:86:64:28:fa:b8:
7e:87:28:f2:ee:79:a8:d6:93:7a:a6:71:43:bc:76:af:d4:ce:
2e:7b:e7:76:83:d7:59:8e:0f:b7:58:bc:76:39:4a:4d:85:ae:
1f:3f:3b:79:49:05:61:be:f9:56:5c:21:e6:2b:92:bf:b3:a5:
45:5a:9f:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavV07AGXkhOKIf61DhFFTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNTllMDNhMDhlMTc0MTZmNjY1NDYzMDc5ODgzNDk5OTFi
ODRhMmUwHhcNMjUwNTA4MTAwMDU2WhcNMjUwNTA5MTAwMDU2WjAzMTEwLwYDVQQD
Eyg0NGJjYWNiNjNlZTZiZGMxZDM4MWE1MjE0OWU0NzNhYjkyMjY5ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CoAIYBEVViQaf90kDrfUMsoyLkv
4EbAc8znu2xsE3McClNoZPHatl0SG/apaJF3FnKc8M4GHYO0w26b6DYlTR7Gnmgg
05A5QQl725finmhfvNCipf5i6kYEe2Io4yTfuX+7PC04iN9tlAfp+5bMTnvDFYgb
NJ1iAFzywi5Ed6F94RTzkJg7aXm93LlvJtd6rF4zBRJHBye1Y57Y1ZvINacZ2rQv
e2NsYgypAbKva84rg9M+LrCJkT5SpLK4q8n5bOE0iiuPWRVab/GgI5/puu4RBKej
SI0n4WQEyWA2M4nRYnuCFObVGQVGlnNXvlcYlNFSpVGETcP6jmt+lzr64QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES8rLY+5r3B04GlIUnkc6uSJpg6MB8GA1UdIwQY
MBaAFHBZ4DoI4XQW9mVGMHmINJmRuEouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAt
OTE3NWM4NDA4ZTVlLzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8wNjVkYmEtZWVmOS00ODBkLWE4ODAtOTE3NWM4NDA4ZTVl
LzEvY0ZuZ09namhkQmIyWlVZd2VZZzBtWkc0U2k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkyMIZNC
RVd7d+NpzY3FtpAWfPZEGeb9ge5XhGltWS+ocDGscqgkYs3obXXU2fV420J7Funk
brW2qTF/g3Y+lLFcWRAo+A4gj2sj4PGwTv3Vh0iygKWaKLR+DslUHsWQ6XjuA4Vq
KlF4Uku631rGflw3c6jI5wuerhoCHQdUvuCpnWH+b0HfyUZj/w0ah8+gAP0Fo8O+
T8lrgem1AGNi9KxeE6DDeLUH4Ene5i7VsrkYtlKLpFMp3cDMb5765c0YGYZkKPq4
foco8u55qNaTeqZxQ7x2r9TOLnvndoPXWY4Pt1i8djlKTYWuHz87eUkFYb75Vlwh
5iuSv7OlRVqf3g==
-----END CERTIFICATE-----
Generated at Thu May 8 17:54:27 2025 by rpki-client