Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File: M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier: OL45jBodbTULa1jCMOq0VJ1D+x2xWO7kjrhToz9FNLo=
Subject key identifier: 09:E7:21:63:CD:AF:83:38:CB:13:89:59:9E:79:A6:A4:85:5B:42:5C
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 0196A1D27286C4E468D168A7C4EA3B4F6B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number: 0EA9
Signing time: Mon 05 May 2025 19:00:45 +0000
Manifest this update: Mon 05 May 2025 19:00:45 +0000
Manifest next update: Tue 06 May 2025 19:00:45 +0000
Files and hashes: 1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: fc9hm1O2o+UMKiP51+9SpRuffYNMkHcTvQsfoez6xuk=)
3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:72:86:c4:e4:68:d1:68:a7:c4:ea:3b:4f:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: May 5 19:00:45 2025 GMT
Not After : May 6 19:00:45 2025 GMT
Subject: CN=09e72163cdaf8338cb1389599e79a6a4855b425c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:fc:4e:60:e0:f8:87:ed:ba:5e:9f:d6:63:
3e:4d:18:f3:a4:16:af:9f:0d:80:f8:78:d5:18:6e:
0b:2c:88:a8:2b:8c:f7:bb:a4:8e:06:11:d3:ba:c1:
72:7e:b1:ce:01:10:65:d2:5b:43:d5:1d:f4:29:70:
45:4c:f8:92:78:c8:f4:71:b6:12:44:56:f3:a8:ba:
b7:5e:c4:83:ef:1f:4e:b2:0f:ee:66:95:8a:fe:2a:
50:c5:d0:6a:bf:84:1a:6f:aa:33:b3:1e:87:46:fd:
6d:02:1d:c4:52:01:31:50:b5:d3:3b:19:8f:8a:3e:
d1:0f:c9:84:bb:bf:c2:0b:fe:59:ec:2f:ab:01:71:
04:64:48:e3:51:a8:e5:74:e0:93:7a:ee:d6:05:38:
c8:1f:e1:2b:68:95:af:9d:50:20:20:01:01:23:58:
29:a0:3d:37:dd:08:27:99:68:03:05:b6:fb:81:9a:
96:e3:0a:de:9b:a0:40:bd:8e:50:e2:40:ce:ca:f8:
a9:98:71:97:51:99:c2:39:6c:d6:2b:a1:2c:d7:c3:
56:b4:51:22:dd:19:dd:dc:6e:88:81:e4:64:6b:3e:
c3:cb:f5:38:a7:d3:f2:9a:b2:89:d6:13:78:f5:9f:
d3:7e:23:ac:4e:43:7f:0b:64:64:48:87:28:0a:db:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:21:63:CD:AF:83:38:CB:13:89:59:9E:79:A6:A4:85:5B:42:5C
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:83:2f:94:cf:6d:c9:07:a9:f3:d3:4d:05:ab:da:27:cc:8b:
34:8f:d1:d6:3c:5f:3c:d5:42:84:2c:39:a5:17:a8:75:90:8c:
c0:17:28:99:4a:17:d6:d9:6e:ad:29:8d:2b:3b:ee:eb:ce:7d:
61:63:a9:c6:98:80:4b:eb:82:74:89:e7:66:ce:0d:22:be:7c:
44:71:b0:c7:c5:bf:ab:30:33:7e:3e:24:e7:d0:dd:67:11:f5:
0a:5b:d9:8c:08:22:14:d0:e6:fc:07:b9:df:34:84:ca:fa:99:
e3:35:e5:82:ec:64:e6:67:c4:a4:17:52:1a:6e:ca:c8:6f:25:
66:ba:fd:d4:8b:78:50:79:31:72:62:81:0f:0e:39:89:3f:62:
5e:85:9f:8c:48:c8:c1:d5:c6:33:5a:68:db:7a:ff:92:a0:fc:
bc:5d:07:39:e3:b1:7c:91:ee:23:fd:ec:8a:84:39:6b:65:dd:
4c:47:19:a4:fb:72:43:20:b2:a9:3f:16:07:f1:e9:fb:29:3b:
70:ac:ef:6a:b9:0a:99:08:03:2a:03:f9:f3:bd:d6:9f:d8:09:
1c:46:0c:25:f4:6f:a3:f0:51:51:de:fb:52:a0:a7:9d:7f:b8:
21:82:de:96:99:18:01:a4:4d:0a:4a:9c:f0:0c:bf:70:f8:f5:
90:44:24:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZah0nKGxORo0WinxOo7T2suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4
MzhmMzMwHhcNMjUwNTA1MTkwMDQ1WhcNMjUwNTA2MTkwMDQ1WjAzMTEwLwYDVQQD
EygwOWU3MjE2M2NkYWY4MzM4Y2IxMzg5NTk5ZTc5YTZhNDg1NWI0MjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmX8TmDg+Iftul6f1mM+TRjzpBav
nw2A+HjVGG4LLIioK4z3u6SOBhHTusFyfrHOARBl0ltD1R30KXBFTPiSeMj0cbYS
RFbzqLq3XsSD7x9Osg/uZpWK/ipQxdBqv4Qab6ozsx6HRv1tAh3EUgExULXTOxmP
ij7RD8mEu7/CC/5Z7C+rAXEEZEjjUajldOCTeu7WBTjIH+EraJWvnVAgIAEBI1gp
oD033QgnmWgDBbb7gZqW4wrem6BAvY5Q4kDOyvipmHGXUZnCOWzWK6Es18NWtFEi
3Rnd3G6IgeRkaz7Dy/U4p9PymrKJ1hN49Z/TfiOsTkN/C2RkSIcoCtt1qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnnIWPNr4M4yxOJWZ55pqSFW0JcMB8GA1UdIwQY
MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt
OTc0YzQ0YWI5Y2ZiLzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi
LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYMvlM9t
yQep89NNBavaJ8yLNI/R1jxfPNVChCw5pReodZCMwBcomUoX1tlurSmNKzvu6859
YWOpxpiAS+uCdInnZs4NIr58RHGwx8W/qzAzfj4k59DdZxH1ClvZjAgiFNDm/Ae5
3zSEyvqZ4zXlguxk5mfEpBdSGm7KyG8lZrr91It4UHkxcmKBDw45iT9iXoWfjEjI
wdXGM1po23r/kqD8vF0HOeOxfJHuI/3sioQ5a2XdTEcZpPtyQyCyqT8WB/Hp+yk7
cKzvarkKmQgDKgP5873Wn9gJHEYMJfRvo/BRUd77UqCnnX+4IYLelpkYAaRNCkqc
8Ay/cPj1kEQklw==
-----END CERTIFICATE-----
Generated at Mon May 5 21:57:35 2025 by rpki-client