Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: HPOVms19+2vsuwn7c0U6CRWGRB8Z9tnpmxbmCVULTiY=
Subject key identifier: 8B:1C:DD:CC:33:47:0A:59:D8:21:D0:CC:C0:59:6B:DE:19:44:BE:26
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 0196A954DDA765E94D98F6B6B567AFBAD533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 152E
Signing time: Wed 07 May 2025 06:00:33 +0000
Manifest this update: Wed 07 May 2025 06:00:33 +0000
Manifest next update: Thu 08 May 2025 06:00:33 +0000
Files and hashes: 1: HevIcw-udVLHAsRMuVL8AXS5DmE.roa (hash: /vwUjeGhMDVH5p9rxYTRis9U3GgQG40VBJ1bShqGwbM=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: Y2O0d59NoP1LF7cAh7OS2lJCS4hkKtRlXCdQ4sTaS50=)
3: dfcipKIHJhkLM8tES7y9qnzOa0g.roa (hash: hdMZ+zVZPKGH8nt9Efyy+7bQ/S/VggiNWiYJsxgZkUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:dd:a7:65:e9:4d:98:f6:b6:b5:67:af:ba:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: May 7 06:00:33 2025 GMT
Not After : May 8 06:00:33 2025 GMT
Subject: CN=8b1cddcc33470a59d821d0ccc0596bde1944be26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:6b:61:ba:50:53:1b:d4:01:0a:cb:32:c7:
63:f4:8f:46:78:f0:34:1d:b8:32:bd:0f:94:1f:04:
41:16:c7:63:ed:1b:a0:3b:de:95:6f:69:16:30:5f:
5d:b8:6a:0b:bc:5b:e7:44:00:40:4a:e3:ff:25:e8:
a4:c4:15:3f:c6:9d:bb:56:f0:e5:40:29:eb:3f:b1:
b4:96:b1:48:c6:b4:46:6a:90:e0:06:78:2f:c4:c1:
ae:4f:07:9b:64:85:be:71:71:48:f9:98:5b:e2:f8:
2a:e7:79:6a:8c:1a:56:d9:b9:68:71:ea:3f:f1:9b:
46:f7:ef:f7:f6:71:5b:7c:67:87:ee:44:70:ba:4c:
19:cd:36:3f:a3:b3:fe:bb:4d:08:c1:28:e8:a1:4f:
d1:b3:f1:82:94:7e:54:d4:e6:c9:f5:26:72:76:14:
83:a7:6f:52:94:ee:bc:04:28:63:68:ab:2a:fa:b5:
ef:9e:08:b1:1c:52:74:8a:1f:c9:3e:48:82:02:17:
10:72:2b:4f:ce:db:36:12:22:02:23:8e:99:4e:30:
e6:f8:2b:cb:5c:86:dd:5c:a1:2c:ab:56:6d:07:f4:
a5:0d:76:23:30:83:4c:21:bd:c7:bd:e1:9e:52:99:
28:ed:b6:5e:72:65:11:d7:d7:72:03:af:52:72:9d:
e5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1C:DD:CC:33:47:0A:59:D8:21:D0:CC:C0:59:6B:DE:19:44:BE:26
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:64:db:01:5a:5d:f4:37:45:88:af:5b:e4:b6:00:42:32:9b:
b8:5f:ef:e4:69:57:7f:15:00:fd:fe:fd:37:fa:97:37:c5:b1:
6d:ed:a1:57:fe:f0:3c:46:30:3c:47:6c:b9:94:6a:0a:cd:54:
4c:7c:1b:e9:4c:03:d9:84:24:8e:b6:82:c3:c1:f8:1e:e3:6c:
4d:31:a7:e9:95:06:79:ae:32:04:d2:c7:5a:69:e5:26:94:9f:
ba:d2:dc:65:85:1f:1e:15:d8:ab:ad:54:61:c7:1d:44:f1:09:
51:54:ce:d8:9b:44:68:d1:31:89:f1:3e:34:1a:da:a9:cc:14:
04:28:68:34:ba:22:1f:7e:28:2b:26:0e:06:89:bd:55:e8:d8:
98:5f:03:e9:cf:97:bb:7a:0f:20:0b:7a:0e:37:f0:f3:a0:62:
86:ac:18:a3:cd:01:b9:43:ad:da:31:bc:f1:40:fd:15:e9:c8:
c3:f6:90:37:e2:f4:b6:e2:b0:1f:8b:82:57:ab:34:d3:4b:9e:
08:76:82:85:7a:43:a6:24:3f:c2:c6:c4:36:45:0c:91:8a:07:
a4:38:77:55:f9:70:a7:b7:e0:52:ca:7f:6a:2a:b2:8e:c9:3d:
a6:a9:0e:70:a3:81:04:44:dc:50:a3:87:36:b3:43:aa:73:11:
07:6c:77:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapVN2nZelNmPa2tWevutUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjUwNTA3MDYwMDMzWhcNMjUwNTA4MDYwMDMzWjAzMTEwLwYDVQQD
Eyg4YjFjZGRjYzMzNDcwYTU5ZDgyMWQwY2NjMDU5NmJkZTE5NDRiZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVZrYbpQUxvUAQrLMsdj9I9GePA0
HbgyvQ+UHwRBFsdj7RugO96Vb2kWMF9duGoLvFvnRABASuP/JeikxBU/xp27VvDl
QCnrP7G0lrFIxrRGapDgBngvxMGuTwebZIW+cXFI+Zhb4vgq53lqjBpW2bloceo/
8ZtG9+/39nFbfGeH7kRwukwZzTY/o7P+u00IwSjooU/Rs/GClH5U1ObJ9SZydhSD
p29SlO68BChjaKsq+rXvngixHFJ0ih/JPkiCAhcQcitPzts2EiICI46ZTjDm+CvL
XIbdXKEsq1ZtB/SlDXYjMINMIb3HveGeUpko7bZecmUR19dyA69Scp3lpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsc3cwzRwpZ2CHQzMBZa94ZRL4mMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeWTbAVpd
9DdFiK9b5LYAQjKbuF/v5GlXfxUA/f79N/qXN8Wxbe2hV/7wPEYwPEdsuZRqCs1U
THwb6UwD2YQkjraCw8H4HuNsTTGn6ZUGea4yBNLHWmnlJpSfutLcZYUfHhXYq61U
YccdRPEJUVTO2JtEaNExifE+NBraqcwUBChoNLoiH34oKyYOBom9VejYmF8D6c+X
u3oPIAt6Djfw86BihqwYo80BuUOt2jG88UD9FenIw/aQN+L0tuKwH4uCV6s000ue
CHaChXpDpiQ/wsbENkUMkYoHpDh3Vflwp7fgUsp/aiqyjsk9pqkOcKOBBETcUKOH
NrNDqnMRB2x3/Q==
-----END CERTIFICATE-----
Generated at Wed May 7 13:58:42 2025 by rpki-client