Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File: ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier: qMwMeamB7LSr5WhutAD96m/PHD50SXS9ocPmPywFqOs=
Subject key identifier: 05:27:14:6B:2C:C6:1A:5B:F6:F0:E7:D1:00:D6:65:10:35:83:E8:A9
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0196BB243CD5B76CBD090B36493038CDB176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number: 0EA1
Signing time: Sat 10 May 2025 17:00:36 +0000
Manifest this update: Sat 10 May 2025 17:00:36 +0000
Manifest next update: Sun 11 May 2025 17:00:36 +0000
Files and hashes: 1: O4DnjMJxaB_pFWQmCkxEqVmtSEE.roa (hash: Q4by4xiYnixZCX5hEAZAkvk6E0p484+oatGMnccjr6w=)
2: S17iBhkERDhZ8BQHX4CBUU31c6Y.roa (hash: KN0zRr09424pw0sdcVfcRSqozH46+PiFTvb656E5OJY=)
3: Yv-tOf_tITvZrh8RooAtxp7TK0o.roa (hash: 9Wq1a/wEw3a8Ph1i4BUMD94Q3lQzmejrav8oStD8sBc=)
4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: hi0AXDR30nLscf1LcM6chYw2qy7vRdO1dPZj1W3uJJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:3c:d5:b7:6c:bd:09:0b:36:49:30:38:cd:b1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: May 10 17:00:36 2025 GMT
Not After : May 11 17:00:36 2025 GMT
Subject: CN=0527146b2cc61a5bf6f0e7d100d665103583e8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:fa:88:ad:66:0b:1f:5d:d2:4b:d2:9e:a0:
2e:6d:92:fa:2e:9d:f5:4d:bf:f2:b9:f4:f3:4b:11:
83:1b:fd:e0:21:ac:78:91:f5:11:a7:6e:d6:c6:02:
88:46:f3:58:d8:41:a9:a6:cc:b5:55:44:d0:68:f2:
27:21:b1:14:d3:40:fa:46:e7:df:1f:96:73:0e:8a:
48:fd:b7:90:73:95:da:93:dc:3e:e4:35:53:98:49:
be:49:36:bf:95:2a:ed:15:22:52:ed:15:10:94:11:
f2:59:85:02:55:db:1b:56:34:83:48:31:e0:ca:93:
78:14:a8:df:68:52:80:a1:8c:44:26:d4:0a:c5:18:
af:db:3a:a7:e7:ba:7f:14:64:44:65:4d:f3:cf:d4:
46:72:11:2b:2e:fd:ae:38:c4:7d:59:38:1f:d1:3f:
86:47:5b:99:2c:14:3f:3c:1a:42:5c:7a:c0:63:0c:
7c:23:82:93:57:bf:72:cf:7d:d1:a8:f2:5e:d3:86:
0e:0a:f4:d2:83:fd:4e:30:63:27:db:4a:eb:8a:57:
ca:d9:f6:da:64:1d:18:76:67:2e:ed:97:dd:6c:29:
d1:03:29:27:34:32:2a:9f:c4:6f:4a:c1:26:55:ea:
f5:83:0c:87:8e:d5:70:c3:02:3c:25:29:cc:94:5d:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:14:6B:2C:C6:1A:5B:F6:F0:E7:D1:00:D6:65:10:35:83:E8:A9
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:c2:a4:a9:09:b5:be:25:22:31:c1:cc:ac:2a:0c:1a:9f:
e6:63:8a:f9:e3:ba:22:48:04:7b:e4:38:07:f1:7e:ca:03:96:
ba:11:20:08:93:e2:cf:a1:d5:38:53:a1:44:2a:7a:30:17:6f:
8e:e5:c7:b8:b3:37:43:47:b9:4c:1b:a4:ae:8a:d2:45:a1:7e:
8a:03:31:ff:b8:63:0d:48:84:76:d7:58:8e:ec:fd:2a:60:b1:
b0:50:4b:a2:72:91:40:f7:5d:28:bb:68:06:7e:29:e2:e4:2d:
d0:dd:53:f7:0b:98:54:31:85:9d:8c:6a:8b:22:f0:64:7a:b8:
dd:6a:60:29:90:98:1b:cd:3e:eb:8f:c4:ad:cb:50:e2:f5:91:
cf:74:fb:20:70:b3:a6:48:30:cf:b9:b4:c8:71:cf:2a:34:f0:
71:59:dc:b2:cc:6c:08:39:b7:26:10:b4:66:27:91:66:c5:68:
ec:fe:ab:82:76:5b:14:ab:30:65:53:c2:f2:c1:77:26:ce:e2:
5a:60:66:d0:f2:92:9c:d7:8a:68:a6:fc:c9:f3:5c:93:24:1f:
87:93:9f:d9:6e:ff:c3:bc:d9:91:d7:3d:c3:a5:59:31:71:bd:
fd:1f:03:f6:41:77:13:8f:3b:22:2a:15:b7:ff:59:3a:08:57:
25:23:c3:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7JDzVt2y9CQs2STA4zbF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjUwNTEwMTcwMDM2WhcNMjUwNTExMTcwMDM2WjAzMTEwLwYDVQQD
EygwNTI3MTQ2YjJjYzYxYTViZjZmMGU3ZDEwMGQ2NjUxMDM1ODNlOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqb6iK1mCx9d0kvSnqAubZL6Lp31
Tb/yufTzSxGDG/3gIax4kfURp27WxgKIRvNY2EGppsy1VUTQaPInIbEU00D6Ruff
H5ZzDopI/beQc5Xak9w+5DVTmEm+STa/lSrtFSJS7RUQlBHyWYUCVdsbVjSDSDHg
ypN4FKjfaFKAoYxEJtQKxRiv2zqn57p/FGREZU3zz9RGchErLv2uOMR9WTgf0T+G
R1uZLBQ/PBpCXHrAYwx8I4KTV79yz33RqPJe04YOCvTSg/1OMGMn20rrilfK2fba
ZB0Ydmcu7ZfdbCnRAyknNDIqn8RvSsEmVer1gwyHjtVwwwI8JSnMlF1mQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUnFGssxhpb9vDn0QDWZRA1g+ipMB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt0/CpKkJ
tb4lIjHBzKwqDBqf5mOK+eO6IkgEe+Q4B/F+ygOWuhEgCJPiz6HVOFOhRCp6MBdv
juXHuLM3Q0e5TBukrorSRaF+igMx/7hjDUiEdtdYjuz9KmCxsFBLonKRQPddKLto
Bn4p4uQt0N1T9wuYVDGFnYxqiyLwZHq43WpgKZCYG80+64/ErctQ4vWRz3T7IHCz
pkgwz7m0yHHPKjTwcVncssxsCDm3JhC0ZieRZsVo7P6rgnZbFKswZVPC8sF3Js7i
WmBm0PKSnNeKaKb8yfNckyQfh5Of2W7/w7zZkdc9w6VZMXG9/R8D9kF3E487IioV
t/9ZOghXJSPD7w==
-----END CERTIFICATE-----
Generated at Sat May 10 19:49:14 2025 by rpki-client