Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: g4lGpYd1cNJ+EoqVoGjJ09haVBu6RtNkN8fJH8oiCUY=
Subject key identifier: A5:36:25:00:89:9D:3C:28:9F:25:A1:E1:6C:B0:6E:70:8C:12:0E:AC
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 0196B8234ECED82E9D1175B86E20DF8CCD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 03FE
Signing time: Sat 10 May 2025 03:00:43 +0000
Manifest this update: Sat 10 May 2025 03:00:43 +0000
Manifest next update: Sun 11 May 2025 03:00:43 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa (hash: sfqipOVEI136CQV9RrCQ/2MEEAOWtOAMvL1rCoXPDGQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: sYYG6OQuG9hvnEIHGuf4yvbHGBYiR+/YJYhMih/e+18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:4e:ce:d8:2e:9d:11:75:b8:6e:20:df:8c:cd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: May 10 03:00:43 2025 GMT
Not After : May 11 03:00:43 2025 GMT
Subject: CN=a5362500899d3c289f25a1e16cb06e708c120eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f6:fc:16:db:00:89:51:af:33:8e:5d:5e:25:
06:d3:32:3d:73:e1:be:6b:18:e7:48:85:5a:0f:85:
01:ad:ec:8a:70:94:7f:0d:fd:82:b2:74:34:6a:14:
bd:de:dc:b9:c7:78:de:68:7c:ab:32:d2:06:ca:94:
57:2d:f2:0f:28:45:e9:4e:08:80:93:ad:a7:cc:10:
b9:41:df:78:e3:e4:3f:64:37:4c:5e:68:c5:2b:27:
2d:87:7b:5c:99:b4:a6:52:42:af:72:e0:e5:eb:04:
72:ad:21:57:66:13:77:66:a5:4a:87:e0:71:b8:6b:
41:6e:e2:6e:ec:b1:c4:54:9e:86:e2:58:38:72:84:
03:de:b9:e2:cc:0a:39:91:da:e7:e6:ca:30:f2:90:
36:87:64:6a:bd:33:7f:69:e3:bf:34:3f:c4:d9:bd:
44:2c:f0:a8:9f:13:d2:7f:5f:c3:c4:e5:bd:08:91:
23:0d:9e:c0:ca:b9:25:aa:1f:c2:4d:27:37:c6:82:
7d:45:b2:2e:60:be:65:34:80:f0:1d:e9:0f:7e:0e:
bf:65:ce:d9:3b:69:06:62:8f:43:25:99:00:7a:67:
88:6b:be:72:99:92:63:a1:1b:62:9a:07:7e:b9:23:
fc:b7:5d:88:b5:f2:b3:d9:db:8e:50:a4:a8:15:55:
61:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:25:00:89:9D:3C:28:9F:25:A1:E1:6C:B0:6E:70:8C:12:0E:AC
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4c:42:13:a4:3c:10:7f:5f:37:98:6f:47:93:4d:66:ab:ee:
a4:20:2f:cd:11:07:7b:1d:16:00:c4:bd:5e:83:c8:a9:ba:97:
4a:b3:32:8a:59:c2:12:c4:02:ca:1c:dd:50:47:ee:00:70:26:
74:39:bf:78:16:55:69:55:47:dd:20:f1:aa:7a:b1:92:f8:bc:
5f:aa:bf:5f:ad:1f:fb:ae:40:36:4d:dd:07:b6:d8:bf:aa:12:
49:45:bf:1e:38:d6:d5:09:85:91:1e:07:00:a9:49:3c:24:50:
2a:ae:4c:8e:ce:71:40:0e:77:08:d5:c9:0b:92:61:36:e4:1a:
26:8d:d5:d5:68:9c:47:bd:ee:0f:d7:e3:ff:c6:a8:4b:15:13:
98:0d:8b:70:0e:f6:9b:12:98:ef:39:03:dc:08:fc:5c:bc:8a:
51:2e:35:ca:5e:75:71:62:3c:08:76:13:ab:a6:38:8b:98:89:
de:fd:25:75:ff:47:5e:eb:63:87:bb:a2:e3:43:7b:82:41:9f:
c3:e2:1d:82:19:72:a6:d7:80:75:ed:e8:be:88:03:be:c6:42:
18:bd:77:e7:1d:70:7b:96:ce:b1:c5:c1:9b:2f:8c:fb:e0:23:
2e:95:17:5f:8e:ef:d7:53:88:3d:94:d0:ff:79:3c:4b:20:de:
57:26:8a:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4I07O2C6dEXW4biDfjM1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwODc4YzM5NjI0YWVkZTM5MjllMTdjY2Q5NTg3OGMyOTJi
MmYzNTEwHhcNMjUwNTEwMDMwMDQzWhcNMjUwNTExMDMwMDQzWjAzMTEwLwYDVQQD
EyhhNTM2MjUwMDg5OWQzYzI4OWYyNWExZTE2Y2IwNmU3MDhjMTIwZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvb8FtsAiVGvM45dXiUG0zI9c+G+
axjnSIVaD4UBreyKcJR/Df2CsnQ0ahS93ty5x3jeaHyrMtIGypRXLfIPKEXpTgiA
k62nzBC5Qd944+Q/ZDdMXmjFKycth3tcmbSmUkKvcuDl6wRyrSFXZhN3ZqVKh+Bx
uGtBbuJu7LHEVJ6G4lg4coQD3rnizAo5kdrn5sow8pA2h2RqvTN/aeO/ND/E2b1E
LPConxPSf1/DxOW9CJEjDZ7Ayrklqh/CTSc3xoJ9RbIuYL5lNIDwHekPfg6/Zc7Z
O2kGYo9DJZkAemeIa75ymZJjoRtimgd+uSP8t12ItfKz2duOUKSoFVVhvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU2JQCJnTwonyWh4WywbnCMEg6sMB8GA1UdIwQY
MBaAFJCHjDliSu3jkp4XzNlYeMKSsvNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzkt
ZDVhZWZjY2M5NTIyLzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZDMxY2ItNDZjNi00YjU4LTgyNzktZDVhZWZjY2M5NTIy
LzEva0llTU9XSks3ZU9TbmhmTTJWaDR3cEt5ODFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkxCE6Q8
EH9fN5hvR5NNZqvupCAvzREHex0WAMS9XoPIqbqXSrMyilnCEsQCyhzdUEfuAHAm
dDm/eBZVaVVH3SDxqnqxkvi8X6q/X60f+65ANk3dB7bYv6oSSUW/HjjW1QmFkR4H
AKlJPCRQKq5Mjs5xQA53CNXJC5JhNuQaJo3V1WicR73uD9fj/8aoSxUTmA2LcA72
mxKY7zkD3Aj8XLyKUS41yl51cWI8CHYTq6Y4i5iJ3v0ldf9HXutjh7ui40N7gkGf
w+IdghlypteAde3ovogDvsZCGL135x1we5bOscXBmy+M++AjLpUXX47v11OIPZTQ
/3k8SyDeVyaK2w==
-----END CERTIFICATE-----
Generated at Sat May 10 10:47:13 2025 by rpki-client