Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft (raw, json)
Hash identifier: iMd/ij3MOiuf0GYXnOy8bbfYFiCguZMw/zZxdWkZmbc=
Subject key identifier: D8:92:20:0D:CA:7F:9E:44:40:8A:E3:A9:9C:37:B0:D5:D4:B9:A0:AB
Authority key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Certificate issuer: /CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Certificate serial: 0196DB1CFD2687D1C72C574B2A06AA1FAA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
Manifest number: 038C
Signing time: Fri 16 May 2025 22:00:32 +0000
Manifest this update: Fri 16 May 2025 22:00:32 +0000
Manifest next update: Sat 17 May 2025 22:00:32 +0000
Files and hashes: 1: 7IU0huufqQxYxItg8zFZPOwzYRM.roa (hash: I4C8M2jxvU1m60xK7AT2Uz7jOA8Cd0LrtZ3lmEnNBLc=)
2: fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl (hash: IG2p7GbQRYNI+jpTyK4X3x9IWWsy4zQbTKB5GEChd2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:1c:fd:26:87:d1:c7:2c:57:4b:2a:06:aa:1f:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Validity
Not Before: May 16 22:00:32 2025 GMT
Not After : May 17 22:00:32 2025 GMT
Subject: CN=d892200dca7f9e44408ae3a99c37b0d5d4b9a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:5a:2f:c5:77:04:2c:f2:90:c7:00:4a:43:
5b:f5:ee:c1:d9:5c:20:97:d7:85:f5:80:41:9b:69:
61:4a:52:6a:87:74:3d:84:b3:93:da:73:46:df:b4:
fc:17:d4:10:28:c7:39:3d:65:dc:ae:4f:c7:8b:98:
75:24:5b:a1:c7:88:ec:df:8c:7a:e0:e3:40:fa:2d:
a4:a3:86:ae:55:15:7e:40:0b:51:c8:11:e4:c2:4b:
7e:df:0a:9c:4c:c5:fa:48:53:38:67:72:77:43:f1:
00:bb:7c:7a:0a:03:3a:7f:b0:1f:08:2a:c4:8a:b1:
69:0a:40:91:cf:b3:84:f2:4c:90:d0:1b:c1:1f:a0:
b4:62:ea:56:71:0c:a8:46:25:88:e1:23:76:3d:44:
8a:04:4f:e5:c0:f1:f9:f3:bd:73:63:40:84:48:18:
6d:a6:ec:bc:59:6a:5d:4b:4c:28:81:e2:a6:97:69:
7c:dd:29:89:15:90:81:95:25:a7:0f:9c:f7:37:9a:
e4:23:49:13:e7:6a:5a:1f:27:01:65:20:b3:70:49:
99:ae:d2:bc:e2:a1:07:5c:3e:36:ca:d9:1d:86:7b:
3f:3c:a7:42:ce:f0:3a:c7:7c:ab:b3:7c:c4:23:cb:
6c:2d:39:83:cb:04:e7:4a:00:b4:87:a6:09:53:31:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:20:0D:CA:7F:9E:44:40:8A:E3:A9:9C:37:B0:D5:D4:B9:A0:AB
X509v3 Authority Key Identifier:
keyid:7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c0:6b:88:37:e9:6c:9f:ec:c7:25:38:2c:44:ff:0a:b1:7b:
ee:f9:f8:e6:62:0a:40:2a:b1:04:93:d4:81:c2:e4:aa:84:13:
56:59:a9:f7:aa:1a:d0:90:cb:77:99:fe:43:a4:2c:46:ce:6c:
03:40:e0:28:29:28:3a:af:b0:41:65:1f:22:f8:15:a9:05:ed:
a1:d7:ae:db:99:50:3a:76:79:fc:f3:14:85:16:36:3d:fd:22:
c4:d3:dc:71:6b:f1:d9:2e:b8:a7:42:4e:eb:2a:f9:67:73:26:
06:c6:a4:96:a5:12:1a:ea:17:02:fa:aa:cc:05:02:a6:1f:6c:
9e:94:ca:5d:a1:f7:fa:a0:33:f4:b7:13:fd:ca:30:25:c6:90:
13:20:a9:a4:fe:38:3a:2b:ee:ff:33:1e:ae:ee:41:cc:9c:2a:
eb:c1:23:cb:4d:68:bc:4f:01:be:57:f7:25:0e:46:b6:3a:3b:
19:c6:30:54:e1:83:03:e2:7b:fa:0c:43:01:8b:57:e7:3d:12:
08:18:f0:6b:1e:cf:c6:5b:b5:c9:2d:2d:fe:d4:19:29:20:36:
14:d7:40:28:44:0a:a6:84:a1:a3:53:6d:52:8d:af:44:02:04:
67:39:0d:e0:26:e5:2d:22:5e:3f:d5:f7:32:aa:4e:fe:79:24:
9e:cd:8d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbbHP0mh9HHLFdLKgaqH6p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNzg1NmM5N2JlYjk3YzJiMzg2ZmI5NThjMmRiMTIyYzU3
ZGIzNmMwHhcNMjUwNTE2MjIwMDMyWhcNMjUwNTE3MjIwMDMyWjAzMTEwLwYDVQQD
EyhkODkyMjAwZGNhN2Y5ZTQ0NDA4YWUzYTk5YzM3YjBkNWQ0YjlhMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S1aL8V3BCzykMcASkNb9e7B2Vwg
l9eF9YBBm2lhSlJqh3Q9hLOT2nNG37T8F9QQKMc5PWXcrk/Hi5h1JFuhx4js34x6
4ONA+i2ko4auVRV+QAtRyBHkwkt+3wqcTMX6SFM4Z3J3Q/EAu3x6CgM6f7AfCCrE
irFpCkCRz7OE8kyQ0BvBH6C0YupWcQyoRiWI4SN2PUSKBE/lwPH5871zY0CESBht
puy8WWpdS0wogeKml2l83SmJFZCBlSWnD5z3N5rkI0kT52paHycBZSCzcEmZrtK8
4qEHXD42ytkdhns/PKdCzvA6x3yrs3zEI8tsLTmDywTnSgC0h6YJUzHSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiSIA3Kf55EQIrjqZw3sNXUuaCrMB8GA1UdIwQY
MBaAFH14Vsl765fCs4b7lYwtsSLFfbNsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEt
M2M3Mzg1NDQ0ODJlLzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jMDNkMzctNGVmYy00YzNjLTgyODEtM2M3Mzg1NDQ0ODJl
LzEvZlhoV3lYdnJsOEt6aHZ1VmpDMnhJc1Y5czJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcBriDfp
bJ/sxyU4LET/CrF77vn45mIKQCqxBJPUgcLkqoQTVlmp96oa0JDLd5n+Q6QsRs5s
A0DgKCkoOq+wQWUfIvgVqQXtodeu25lQOnZ5/PMUhRY2Pf0ixNPccWvx2S64p0JO
6yr5Z3MmBsaklqUSGuoXAvqqzAUCph9snpTKXaH3+qAz9LcT/cowJcaQEyCppP44
Oivu/zMeru5BzJwq68Ejy01ovE8Bvlf3JQ5Gtjo7GcYwVOGDA+J7+gxDAYtX5z0S
CBjwax7Pxlu1yS0t/tQZKSA2FNdAKEQKpoSho1NtUo2vRAIEZzkN4CblLSJeP9X3
MqpO/nkkns2NPA==
-----END CERTIFICATE-----
Generated at Sat May 17 02:30:34 2025 by rpki-client