Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier: 84QauaWy9+TsTvyysG9h2bquVgBsztk+OwgyhHBKtIA=
Subject key identifier: AE:29:83:E2:B8:6B:F9:1D:67:FF:F1:FD:11:66:96:7D:47:56:5F:BE
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer: /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial: 0196B935ACF6EB00EA50F30F27031C2B13F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number: 0250
Signing time: Sat 10 May 2025 08:00:24 +0000
Manifest this update: Sat 10 May 2025 08:00:24 +0000
Manifest next update: Sun 11 May 2025 08:00:24 +0000
Files and hashes: 1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: Wp2015X531gMPWbsVrQM/XrAdT/lQQ37CVEV1IoYDuM=)
2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:ac:f6:eb:00:ea:50:f3:0f:27:03:1c:2b:13:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Validity
Not Before: May 10 08:00:24 2025 GMT
Not After : May 11 08:00:24 2025 GMT
Subject: CN=ae2983e2b86bf91d67fff1fd1166967d47565fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:af:1c:79:54:ff:7d:ed:1b:bb:a7:6b:21:
a1:2c:1b:11:ed:f0:5a:88:26:03:86:f1:ab:8f:25:
7d:db:44:db:6f:49:24:2f:49:66:26:82:d6:4b:db:
b4:b8:6f:97:8f:5f:b2:ef:38:cd:98:9b:01:98:2f:
77:d8:6e:8e:c5:d3:1c:c6:83:0d:31:d0:28:a8:79:
ea:3c:d4:e4:43:b0:ae:09:80:f4:f2:4a:37:74:c4:
32:8a:b1:be:47:81:c0:35:86:15:5d:af:9b:93:4a:
99:3e:6b:2a:16:a6:0d:12:1e:08:7f:e7:3f:fa:78:
24:73:0c:af:16:01:98:ea:b3:6d:1a:2a:08:f7:89:
8d:6a:c6:d6:5f:ac:8a:0e:59:e8:22:a9:a1:fa:bc:
e2:af:f1:17:d0:32:80:bc:3c:d5:1e:0b:fa:0a:6d:
99:ea:c1:12:fa:9e:1e:e5:f8:d8:63:cc:4a:57:bf:
a8:e6:c6:ac:2b:85:82:bb:22:07:e5:6d:de:9e:98:
7d:08:6d:cf:4f:7b:14:08:90:1f:c2:e1:6f:60:a0:
c9:7b:dc:c4:c2:eb:a9:9f:f4:b9:62:f7:64:76:0d:
78:ee:74:5a:9a:b4:45:e3:18:3e:28:64:f3:d0:1b:
28:93:54:fb:d0:50:97:73:48:a0:85:c7:2f:02:66:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:83:E2:B8:6B:F9:1D:67:FF:F1:FD:11:66:96:7D:47:56:5F:BE
X509v3 Authority Key Identifier:
keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:91:c9:05:af:e6:fe:4e:83:3d:92:62:61:dc:db:a1:5d:5e:
bf:d9:4f:ac:3e:b2:af:30:b2:3f:d0:9c:f6:f9:61:22:b1:a9:
b4:34:85:ea:ae:dd:0d:2b:ef:5b:10:c4:a7:fc:52:6a:fa:18:
11:64:52:03:d7:de:dc:01:12:b8:d5:70:df:9b:4f:fa:77:fa:
54:91:9c:3d:ef:81:46:c8:8f:1c:01:d4:76:b5:db:1f:e7:34:
eb:e1:a3:c0:b4:5c:4a:1b:8e:64:83:ac:70:e5:b3:05:8e:6f:
33:2d:31:a2:1d:1f:22:6c:7d:52:7a:b3:f9:a0:00:d3:b5:0b:
cc:40:34:52:6d:fd:bf:bd:2d:32:21:81:2c:cc:50:74:c2:07:
e5:98:47:f7:4c:55:ed:da:09:85:73:34:26:d9:11:78:03:ce:
0e:83:95:4d:90:f4:d9:66:20:e4:85:ff:67:24:ba:ef:49:e8:
e9:c3:08:7e:62:d1:ab:1a:71:8c:ab:f5:d2:53:b6:81:b1:b5:
2a:03:6d:68:93:bd:74:0d:62:ee:64:82:7a:96:e3:4f:65:73:
d0:ed:4d:27:87:d8:83:ac:85:99:85:06:29:8f:f6:54:b2:3a:
c6:82:66:83:6b:66:af:5f:ae:f3:47:fc:b7:e2:a3:a2:a5:00:
74:ca:79:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5Naz26wDqUPMPJwMcKxPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzU2ODY1N2U1MGU2ZjhlNWM2YmZlZmE4OWNlZjM1MGQ5
NGY4MmUwHhcNMjUwNTEwMDgwMDI0WhcNMjUwNTExMDgwMDI0WjAzMTEwLwYDVQQD
EyhhZTI5ODNlMmI4NmJmOTFkNjdmZmYxZmQxMTY2OTY3ZDQ3NTY1ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7KvHHlU/33tG7unayGhLBsR7fBa
iCYDhvGrjyV920Tbb0kkL0lmJoLWS9u0uG+Xj1+y7zjNmJsBmC932G6OxdMcxoMN
MdAoqHnqPNTkQ7CuCYD08ko3dMQyirG+R4HANYYVXa+bk0qZPmsqFqYNEh4If+c/
+ngkcwyvFgGY6rNtGioI94mNasbWX6yKDlnoIqmh+rzir/EX0DKAvDzVHgv6Cm2Z
6sES+p4e5fjYY8xKV7+o5sasK4WCuyIH5W3enph9CG3PT3sUCJAfwuFvYKDJe9zE
wuupn/S5Yvdkdg147nRamrRF4xg+KGTz0Bsok1T70FCXc0ighccvAmYvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4pg+K4a/kdZ//x/RFmln1HVl++MB8GA1UdIwQY
MBaAFP3FaGV+UOb45ca/76ic7zUNlPguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUt
NDM1YWYxNGFhMDdhLzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MzRhYTAtYThmNC00NTRjLWIzMTUtNDM1YWYxNGFhMDdh
LzEvX2NWb1pYNVE1dmpseHJfdnFKenZOUTJVLUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpHJBa/m
/k6DPZJiYdzboV1ev9lPrD6yrzCyP9Cc9vlhIrGptDSF6q7dDSvvWxDEp/xSavoY
EWRSA9fe3AESuNVw35tP+nf6VJGcPe+BRsiPHAHUdrXbH+c06+GjwLRcShuOZIOs
cOWzBY5vMy0xoh0fImx9Unqz+aAA07ULzEA0Um39v70tMiGBLMxQdMIH5ZhH90xV
7doJhXM0JtkReAPODoOVTZD02WYg5IX/ZyS670no6cMIfmLRqxpxjKv10lO2gbG1
KgNtaJO9dA1i7mSCepbjT2Vz0O1NJ4fYg6yFmYUGKY/2VLI6xoJmg2tmr1+u80f8
t+KjoqUAdMp5og==
-----END CERTIFICATE-----
Generated at Sat May 10 11:48:05 2025 by rpki-client