Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
File: Clusj7JJCQH6YQSAoFtmNYuRJGw.mft (raw, json)
Hash identifier: blqbjLNKF1t4sCdVDwbRe+/Jfa+QPqALwTE1XEilrZo=
Subject key identifier: 60:00:FE:81:03:6D:FB:E5:0E:0F:F7:E7:89:E9:62:35:2C:AB:B2:F1
Authority key identifier: 0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
Certificate issuer: /CN=0a5bac8fb2490901fa610480a05b66358b91246c
Certificate serial: 0196AF56DA999127DBAA4A5AE25BC52EF797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 10:00:26 +0000
Manifest this update: Thu 08 May 2025 10:00:26 +0000
Manifest next update: Fri 09 May 2025 10:00:26 +0000
Files and hashes: 1: Clusj7JJCQH6YQSAoFtmNYuRJGw.crl (hash: UfLdxg0xi8VoyOSnF6HkoE61jDAmfFbSYlQ9F9bJowQ=)
2: EX1eqOI5AsdzNwXJw_T2K67SKuY.roa (hash: zTp74P0kNRRvfGdIA3tW3Yag+dPiX+7QsxAnkmFBj8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:da:99:91:27:db:aa:4a:5a:e2:5b:c5:2e:f7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5bac8fb2490901fa610480a05b66358b91246c
Validity
Not Before: May 8 10:00:26 2025 GMT
Not After : May 9 10:00:26 2025 GMT
Subject: CN=6000fe81036dfbe50e0ff7e789e962352cabb2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:00:d2:66:5c:cd:20:fb:51:87:c0:21:cf:
70:bc:6d:2c:b4:a8:ba:5e:8a:4f:1f:11:dc:9a:75:
3a:af:2c:ca:b5:29:40:f4:19:4d:9a:ab:f3:90:31:
df:83:1b:cc:3d:e6:35:f9:9f:7b:2f:b6:38:86:2b:
15:92:22:4a:2a:33:c6:69:57:4c:65:24:66:33:fc:
61:84:dc:2c:e6:29:c1:4b:a6:e3:17:65:3f:f7:e9:
38:53:b7:5f:16:e0:20:6d:cc:09:84:81:4f:ca:99:
f9:fb:f7:65:2b:3c:c0:e7:ff:33:96:47:0c:fa:09:
45:bf:4f:4c:b2:2b:78:13:b6:fe:b8:9b:6f:df:64:
93:b7:7e:78:ec:ed:10:78:13:38:2b:8d:00:23:7a:
d3:9a:f7:ee:69:8d:f0:e6:1e:eb:1f:1e:4c:3e:d6:
24:ce:ae:50:da:aa:36:69:43:5f:bd:ba:cb:c1:89:
61:a2:86:85:1e:e8:62:c2:35:2b:ba:a2:19:a1:cd:
8c:5e:1b:eb:e6:31:11:94:dc:d6:d0:04:2f:50:dc:
f9:26:be:27:e0:27:58:d5:49:8c:b8:d6:4b:7a:ad:
1d:96:58:8d:76:af:45:e2:95:7f:fb:d1:a0:d4:b4:
2b:55:4d:fb:20:ca:2f:7e:f8:1d:44:50:99:4b:7f:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:00:FE:81:03:6D:FB:E5:0E:0F:F7:E7:89:E9:62:35:2C:AB:B2:F1
X509v3 Authority Key Identifier:
keyid:0A:5B:AC:8F:B2:49:09:01:FA:61:04:80:A0:5B:66:35:8B:91:24:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Clusj7JJCQH6YQSAoFtmNYuRJGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d62daf-b254-4ea2-87a4-1f6b0b3a7644/1/Clusj7JJCQH6YQSAoFtmNYuRJGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:27:45:18:4e:ae:ce:e8:85:56:cb:55:ca:4a:f1:54:86:67:
94:79:df:09:83:91:81:8b:45:ba:c1:c3:58:96:f6:a2:02:21:
ae:6f:f3:6d:09:09:fc:15:36:84:a3:79:01:70:e0:7f:a6:a4:
bc:28:51:95:57:2a:fa:e2:68:d4:9b:53:7e:b1:00:3e:9b:10:
da:e5:95:34:1d:f4:92:d0:c8:b3:77:93:c3:22:08:a7:00:8c:
a9:ee:3a:4b:77:f5:54:9a:c7:17:d4:cb:cc:a9:43:c0:23:a6:
00:17:20:1e:6a:ba:ad:3b:71:64:41:f2:e3:87:aa:fd:6f:11:
ea:62:f0:ea:5b:ca:9f:51:3f:32:96:79:2d:54:a1:ec:e3:b0:
88:a3:9d:47:1d:d6:e3:a8:e8:3b:83:66:fc:0e:6d:42:cb:4b:
9c:28:06:73:e0:77:df:ce:f0:72:8a:e0:0c:08:10:37:a7:32:
b1:9a:24:74:89:07:0e:4c:27:fb:6a:a4:fc:74:04:7f:1a:8f:
e0:c1:9e:93:40:8c:ca:70:66:34:a8:ff:d0:fe:9d:43:0e:02:
e8:19:b3:34:2e:5f:40:96:84:c2:39:dc:19:27:c8:f5:b3:ee:
ab:5c:ce:e5:8d:63:e5:9b:44:1a:dc:04:1d:ac:f1:90:25:26:
e6:ef:55:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavVtqZkSfbqkpa4lvFLveXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNWJhYzhmYjI0OTA5MDFmYTYxMDQ4MGEwNWI2NjM1OGI5
MTI0NmMwHhcNMjUwNTA4MTAwMDI2WhcNMjUwNTA5MTAwMDI2WjAzMTEwLwYDVQQD
Eyg2MDAwZmU4MTAzNmRmYmU1MGUwZmY3ZTc4OWU5NjIzNTJjYWJiMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry8A0mZczSD7UYfAIc9wvG0stKi6
XopPHxHcmnU6ryzKtSlA9BlNmqvzkDHfgxvMPeY1+Z97L7Y4hisVkiJKKjPGaVdM
ZSRmM/xhhNws5inBS6bjF2U/9+k4U7dfFuAgbcwJhIFPypn5+/dlKzzA5/8zlkcM
+glFv09Msit4E7b+uJtv32STt3547O0QeBM4K40AI3rTmvfuaY3w5h7rHx5MPtYk
zq5Q2qo2aUNfvbrLwYlhooaFHuhiwjUruqIZoc2MXhvr5jERlNzW0AQvUNz5Jr4n
4CdY1UmMuNZLeq0dlliNdq9F4pV/+9Gg1LQrVU37IMovfvgdRFCZS38asQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAA/oEDbfvlDg/354npYjUsq7LxMB8GA1UdIwQY
MBaAFApbrI+ySQkB+mEEgKBbZjWLkSRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQt
MWY2YjBiM2E3NjQ0LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9kNjJkYWYtYjI1NC00ZWEyLTg3YTQtMWY2YjBiM2E3NjQ0
LzEvQ2x1c2o3SkpDUUg2WVFTQW9GdG1OWXVSSkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkidFGE6u
zuiFVstVykrxVIZnlHnfCYORgYtFusHDWJb2ogIhrm/zbQkJ/BU2hKN5AXDgf6ak
vChRlVcq+uJo1JtTfrEAPpsQ2uWVNB30ktDIs3eTwyIIpwCMqe46S3f1VJrHF9TL
zKlDwCOmABcgHmq6rTtxZEHy44eq/W8R6mLw6lvKn1E/MpZ5LVSh7OOwiKOdRx3W
46joO4Nm/A5tQstLnCgGc+B3387wcorgDAgQN6cysZokdIkHDkwn+2qk/HQEfxqP
4MGek0CMynBmNKj/0P6dQw4C6BmzNC5fQJaEwjncGSfI9bPuq1zO5Y1j5ZtEGtwE
HazxkCUm5u9Vbw==
-----END CERTIFICATE-----
Generated at Thu May 8 19:03:39 2025 by rpki-client