Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: K++x4p/ddq2QautKSElWBXQPMwTFnXtJ4OGnRZcf9HA=
Subject key identifier: 0A:93:E7:C2:90:D0:5A:91:FD:A5:17:F7:68:02:FD:6C:C6:88:F4:8A
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 0196A577D62A9CC32484FBB32712E81E55B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 085C
Signing time: Tue 06 May 2025 12:00:16 +0000
Manifest this update: Tue 06 May 2025 12:00:16 +0000
Manifest next update: Wed 07 May 2025 12:00:16 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: XjpENa6NbbnVVIyOMi6ZmBGleRtsz8k8M8i/xwfDWdA=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:77:d6:2a:9c:c3:24:84:fb:b3:27:12:e8:1e:55:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: May 6 12:00:16 2025 GMT
Not After : May 7 12:00:16 2025 GMT
Subject: CN=0a93e7c290d05a91fda517f76802fd6cc688f48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:aa:c7:b3:37:09:8c:44:2e:72:5e:2a:59:
aa:f5:c5:af:02:2f:a3:cb:ed:1f:4d:8d:63:12:e4:
0e:af:f9:a1:87:89:97:1e:31:98:95:35:bf:d5:15:
c7:82:f3:05:d5:bd:bb:c8:4b:32:13:41:a4:c9:c1:
79:c6:c6:be:39:46:7d:85:aa:d5:6f:b0:14:16:78:
c4:e7:02:79:9d:1b:ec:64:89:9e:a8:5c:25:ba:8f:
7e:2f:c6:22:09:e0:9c:93:db:92:76:8d:f3:f7:8a:
cd:50:35:7e:6a:f2:30:00:e2:0a:05:8f:a9:51:6f:
d4:2d:67:5b:d8:ec:17:e0:bc:61:93:5d:cb:ea:b3:
59:35:fe:6a:08:2a:b2:2d:86:0d:29:b0:5e:ad:2e:
c1:2d:e7:9d:78:ed:e5:40:95:de:02:98:f7:3c:4a:
40:2c:a5:8a:41:a0:b5:ca:62:52:19:5d:41:1c:be:
e5:84:76:77:1c:ae:33:4b:32:46:ec:cc:a9:ac:3c:
da:6f:f5:dd:c0:76:0d:b1:23:d2:3d:a3:4f:99:7a:
19:c9:55:de:4c:0f:80:01:45:19:f6:a7:bd:67:2c:
57:b9:93:8f:4a:63:74:ec:8e:55:31:e2:2d:08:36:
a8:5e:fc:4e:72:30:c6:9c:8d:63:1f:a5:c0:e2:72:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:E7:C2:90:D0:5A:91:FD:A5:17:F7:68:02:FD:6C:C6:88:F4:8A
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8b:d7:64:49:fa:60:61:eb:47:8a:74:55:fb:f9:ea:91:ef:
eb:5d:27:bf:e3:8e:a8:ca:08:1d:36:af:d4:6a:3c:55:81:47:
1a:8e:5f:58:54:ca:e8:c9:62:62:3b:22:94:52:da:4d:58:c2:
62:4b:1e:9f:d5:68:f9:09:73:fd:ca:d1:32:06:24:29:d9:b9:
0e:86:0f:42:53:58:73:b7:9a:ed:20:05:c8:41:c8:47:ab:90:
aa:ca:95:23:7d:e5:f0:04:39:79:af:0d:46:2b:a4:61:14:b9:
90:ad:22:47:49:c8:37:71:3a:e6:17:4c:58:41:41:58:86:85:
cf:67:58:01:e5:90:a7:a4:80:dc:e6:be:be:a8:9a:9c:44:30:
10:c2:dd:e6:7f:00:6e:70:b3:44:67:5f:52:fa:55:aa:06:24:
83:92:82:f5:2d:5c:13:69:f0:e8:d0:89:12:36:49:83:50:2b:
5e:6e:41:14:8f:64:54:56:1c:9b:29:dc:02:ac:33:f5:ae:a2:
37:68:ae:82:67:13:21:f5:90:9e:40:c0:27:fb:d1:77:bc:58:
8e:05:b9:75:84:a3:81:73:0e:74:25:78:d3:2f:c4:43:9b:f9:
41:e3:a4:bc:fd:d3:44:4a:be:50:7b:af:ed:d7:88:16:50:ba:
04:29:3d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZald9YqnMMkhPuzJxLoHlWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjUwNTA2MTIwMDE2WhcNMjUwNTA3MTIwMDE2WjAzMTEwLwYDVQQD
EygwYTkzZTdjMjkwZDA1YTkxZmRhNTE3Zjc2ODAyZmQ2Y2M2ODhmNDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv76qx7M3CYxELnJeKlmq9cWvAi+j
y+0fTY1jEuQOr/mhh4mXHjGYlTW/1RXHgvMF1b27yEsyE0GkycF5xsa+OUZ9harV
b7AUFnjE5wJ5nRvsZImeqFwluo9+L8YiCeCck9uSdo3z94rNUDV+avIwAOIKBY+p
UW/ULWdb2OwX4Lxhk13L6rNZNf5qCCqyLYYNKbBerS7BLeedeO3lQJXeApj3PEpA
LKWKQaC1ymJSGV1BHL7lhHZ3HK4zSzJG7MyprDzab/XdwHYNsSPSPaNPmXoZyVXe
TA+AAUUZ9qe9ZyxXuZOPSmN07I5VMeItCDaoXvxOcjDGnI1jH6XA4nL6owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqT58KQ0FqR/aUX92gC/WzGiPSKMB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUovXZEn6
YGHrR4p0Vfv56pHv610nv+OOqMoIHTav1Go8VYFHGo5fWFTK6MliYjsilFLaTVjC
Yksen9Vo+Qlz/crRMgYkKdm5DoYPQlNYc7ea7SAFyEHIR6uQqsqVI33l8AQ5ea8N
RiukYRS5kK0iR0nIN3E65hdMWEFBWIaFz2dYAeWQp6SA3Oa+vqianEQwEMLd5n8A
bnCzRGdfUvpVqgYkg5KC9S1cE2nw6NCJEjZJg1ArXm5BFI9kVFYcmyncAqwz9a6i
N2iugmcTIfWQnkDAJ/vRd7xYjgW5dYSjgXMOdCV40y/EQ5v5QeOkvP3TREq+UHuv
7deIFlC6BCk9GA==
-----END CERTIFICATE-----
Generated at Tue May 6 17:38:58 2025 by rpki-client