Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: sfMhC85MqpT1tAt2gm5xD+zetNvYv9MW9R/VAqcwmwg=
Subject key identifier: FC:1C:DB:2B:42:22:3E:7A:A4:FD:BA:E7:59:9F:1F:DC:BE:A2:95:F9
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 0196DCD443E87919F2308F619163FA510AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 1543
Signing time: Sat 17 May 2025 06:00:20 +0000
Manifest this update: Sat 17 May 2025 06:00:20 +0000
Manifest next update: Sun 18 May 2025 06:00:20 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: J+ctLgF5B4Us4swQ/JQvagvhok15rpQYAvZg7hItJ44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:d4:43:e8:79:19:f2:30:8f:61:91:63:fa:51:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: May 17 06:00:20 2025 GMT
Not After : May 18 06:00:20 2025 GMT
Subject: CN=fc1cdb2b42223e7aa4fdbae7599f1fdcbea295f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:73:09:56:5d:09:34:3f:1b:68:bd:eb:cd:a4:
08:41:4b:e1:4b:dd:f0:d1:58:51:89:b5:74:12:6a:
a7:4e:fa:de:6a:f9:9b:77:1d:d8:2f:c5:c6:2e:85:
fb:0f:bc:15:5d:2f:d9:b4:f1:5e:1e:37:a6:71:ee:
c3:b3:26:55:a9:aa:10:b3:32:b0:ee:2d:4c:5c:69:
6f:81:28:58:62:9f:45:7d:3f:41:31:43:f0:15:42:
86:81:cd:af:1b:b6:a8:18:05:b6:9f:ea:b8:fa:5b:
af:b8:27:28:78:ff:4b:9e:e5:5d:31:b9:6d:a4:df:
71:8b:db:6c:50:92:f5:ac:29:47:47:f9:8c:0b:6e:
d2:86:3c:18:14:f4:d8:85:fa:8b:74:7d:af:23:f5:
63:b8:05:ed:36:61:32:79:cd:f0:3c:e4:4b:9e:2a:
ae:44:6d:0d:5f:42:c7:14:45:ae:1e:07:ca:80:97:
1f:f7:03:88:f1:4e:38:e0:5c:c1:55:ee:d4:7d:fa:
31:ff:b2:9a:20:3e:ee:60:3b:bd:b5:4d:77:5a:79:
94:73:c5:65:be:2d:12:4b:96:66:a7:20:82:62:cf:
0e:d1:74:24:ec:da:15:2e:ab:ad:21:fb:f7:94:4c:
42:c4:3d:f4:c3:66:08:9b:b9:e1:51:b5:bb:d9:51:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:DB:2B:42:22:3E:7A:A4:FD:BA:E7:59:9F:1F:DC:BE:A2:95:F9
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:09:1a:b4:b6:01:a2:6c:53:8c:16:d3:c4:d9:2e:10:ff:
80:b2:e8:f2:fd:5f:43:db:fc:95:44:c0:17:c6:69:b2:12:22:
33:05:e5:b2:c7:7d:f8:ba:48:fb:e7:af:e8:83:af:36:3b:67:
36:d9:1e:8d:2a:4f:04:d2:42:cc:9b:d3:28:61:0b:d0:60:f4:
16:e4:9f:0f:2b:bc:69:05:99:83:01:c2:27:06:b5:f3:75:a5:
0d:8e:fe:9a:c5:a7:2e:fc:32:15:c3:2e:8f:54:45:32:be:87:
e4:fd:16:f5:0a:77:42:99:92:d2:c3:c0:9e:fa:51:3e:b1:dc:
9e:e6:5c:49:19:53:42:12:52:df:95:df:5d:67:6e:9a:1a:66:
0f:cb:69:ef:e0:ef:3a:40:1b:ba:7c:b7:7c:a9:a4:c7:13:36:
54:51:c1:79:60:cc:77:9a:ae:14:30:81:cc:7b:49:c6:3e:fa:
c5:e5:79:d2:b6:7c:a5:4f:ea:2f:6e:73:fc:74:47:52:0d:d9:
7b:cf:46:be:e3:38:a9:86:22:db:e4:66:53:54:5d:08:6b:29:
18:dc:94:2c:b9:c8:3a:1a:8d:fe:17:2a:7f:5a:f6:e2:4d:67:
f6:80:a7:da:25:81:33:c6:38:98:8c:fa:40:18:3e:1e:9d:fd:
81:97:d0:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbc1EPoeRnyMI9hkWP6UQqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGYxMTI3NTZmMTQ1OGRjZjNlMzg3YTRiZTg5MGYzMGVh
OTQ5YjMwHhcNMjUwNTE3MDYwMDIwWhcNMjUwNTE4MDYwMDIwWjAzMTEwLwYDVQQD
EyhmYzFjZGIyYjQyMjIzZTdhYTRmZGJhZTc1OTlmMWZkY2JlYTI5NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nMJVl0JND8baL3rzaQIQUvhS93w
0VhRibV0EmqnTvreavmbdx3YL8XGLoX7D7wVXS/ZtPFeHjemce7DsyZVqaoQszKw
7i1MXGlvgShYYp9FfT9BMUPwFUKGgc2vG7aoGAW2n+q4+luvuCcoeP9LnuVdMblt
pN9xi9tsUJL1rClHR/mMC27ShjwYFPTYhfqLdH2vI/VjuAXtNmEyec3wPORLniqu
RG0NX0LHFEWuHgfKgJcf9wOI8U444FzBVe7Uffox/7KaID7uYDu9tU13WnmUc8Vl
vi0SS5ZmpyCCYs8O0XQk7NoVLqutIfv3lExCxD30w2YIm7nhUbW72VE+UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwc2ytCIj56pP2651mfH9y+opX5MB8GA1UdIwQY
MBaAFJ2PESdW8UWNzz44ekvokPMOqUmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2It
MDBlZDkwMjY5YmI0LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83YTZlMjEtZDQwYi00ZWViLWIzY2ItMDBlZDkwMjY5YmI0
LzEvblk4UkoxYnhSWTNQUGpoNlMtaVE4dzZwU2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIsJGrS2
AaJsU4wW08TZLhD/gLLo8v1fQ9v8lUTAF8ZpshIiMwXlssd9+LpI++ev6IOvNjtn
NtkejSpPBNJCzJvTKGEL0GD0FuSfDyu8aQWZgwHCJwa183WlDY7+msWnLvwyFcMu
j1RFMr6H5P0W9Qp3QpmS0sPAnvpRPrHcnuZcSRlTQhJS35XfXWdumhpmD8tp7+Dv
OkAbuny3fKmkxxM2VFHBeWDMd5quFDCBzHtJxj76xeV50rZ8pU/qL25z/HRHUg3Z
e89GvuM4qYYi2+RmU1RdCGspGNyULLnIOhqN/hcqf1r24k1n9oCn2iWBM8Y4mIz6
QBg+Hp39gZfQXQ==
-----END CERTIFICATE-----
Generated at Sat May 17 16:46:23 2025 by rpki-client