Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier: nPy/t1gzO/Q9y8ScwxwJ/afF5ciFOE+tAx390q46NUg=
Subject key identifier: EE:FC:B6:05:64:66:3E:D3:F0:7A:E3:90:31:30:2C:35:74:DE:48:85
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer: /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial: 0196BF6EBA2AFDA368818F19E9C3DD85013B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number: 03E7
Signing time: Sun 11 May 2025 13:00:26 +0000
Manifest this update: Sun 11 May 2025 13:00:26 +0000
Manifest next update: Mon 12 May 2025 13:00:26 +0000
Files and hashes: 1: bKhEoTi8VyX_Q5KODWRSQwgQwKY.roa (hash: xvVp0HHxMjOmKvNmsan4is7a0Z8jz8EK1PXrOk2MzSo=)
2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: /J6ejxDPpfwsrY1no2sczvBBFUrsJXolyFpnUw9SV28=)
3: k3MkBKIkrmXV8hBuw2gGPp_sASw.roa (hash: kkGwe02sJUGG5OVjC1fC3C/lnFwMVxsODhInEGGgNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:ba:2a:fd:a3:68:81:8f:19:e9:c3:dd:85:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
Validity
Not Before: May 11 13:00:26 2025 GMT
Not After : May 12 13:00:26 2025 GMT
Subject: CN=eefcb60564663ed3f07ae39031302c3574de4885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:30:db:8a:ba:4f:ac:95:db:57:9a:7a:66:
f4:fb:49:09:7b:45:9c:28:f7:11:f9:2e:bc:66:6a:
53:9f:8c:53:b7:53:8f:42:6f:9e:07:6a:c1:0a:9a:
61:df:4d:f0:37:67:53:f5:54:4b:5e:f9:39:f6:f1:
c5:60:25:4b:70:65:3d:62:51:38:a6:fe:07:df:2e:
d9:2e:79:1b:9c:b3:37:6f:d1:da:bc:66:a8:d6:08:
24:9a:ed:05:9e:a8:d6:7a:1b:33:36:e2:85:e0:d0:
d4:2c:69:e6:0e:d9:58:c2:be:53:b1:06:7d:de:c1:
46:77:c0:7f:4a:85:a3:5f:fd:c6:e8:c9:73:10:d8:
3f:0d:4a:00:52:da:4c:48:c2:bd:b8:99:d3:e5:66:
5d:f8:28:3c:db:28:2a:35:11:5e:a8:6a:91:a5:85:
e3:7e:9a:75:58:3b:e8:21:9b:7a:96:5e:41:1a:fb:
9d:04:24:ea:f6:4f:1a:47:d1:0d:5b:d3:6a:78:4c:
fc:12:b4:59:43:72:82:74:db:6a:2f:b0:56:20:83:
bc:f2:9f:15:eb:5c:80:f5:a5:44:c2:58:71:7c:45:
1a:a0:db:3e:7a:ae:0c:9a:13:28:96:2d:6d:a3:20:
f7:d7:ca:4d:17:16:d1:f1:24:db:68:4e:62:16:bc:
4d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FC:B6:05:64:66:3E:D3:F0:7A:E3:90:31:30:2C:35:74:DE:48:85
X509v3 Authority Key Identifier:
keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:b6:07:ee:2c:48:a0:6c:d8:4b:1d:ea:f2:46:b0:b3:5a:
05:40:c8:c5:18:68:7f:f1:61:96:14:dd:db:16:3d:52:86:4e:
56:df:6f:99:62:79:66:38:9e:ac:0e:41:48:00:0c:b0:5e:66:
e4:ef:ec:03:f5:a1:69:3c:7c:e8:c6:96:3e:26:fd:5a:e4:6f:
05:b6:09:bd:3b:97:a1:b3:9c:0a:c5:7e:1d:6f:78:17:4a:21:
ee:b1:02:fb:ef:81:18:68:cb:ac:f4:38:d0:a9:e1:f4:60:79:
dc:68:97:ea:3c:b6:a7:c2:d3:cf:bb:29:c4:75:a1:a1:8b:c0:
5c:38:0d:ba:f8:e3:7c:bb:05:d5:50:02:a1:2c:56:96:25:f9:
2b:da:b7:6e:b3:9d:ab:de:00:7f:b8:fd:82:37:43:6e:6b:44:
97:10:10:aa:a5:8c:38:04:99:77:85:d0:9c:a4:1e:0f:2a:c6:
7d:4f:65:7a:cf:d1:1d:cc:88:0e:88:1c:f1:05:37:cb:79:19:
39:42:3d:85:97:32:cf:ac:7e:6b:24:86:d8:e5:36:20:68:d9:
cf:b5:02:b6:45:e6:99:03:38:e7:da:db:13:60:f8:64:27:26:
07:48:df:1b:b6:31:4a:a9:87:0a:98:14:b4:7c:92:85:4b:36:
c4:cb:af:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/broq/aNogY8Z6cPdhQE7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OWZiYWFhYzY1NDFhYjMxODUyOWViMDI1NjEzYzY1MjBl
NDc2NDYwHhcNMjUwNTExMTMwMDI2WhcNMjUwNTEyMTMwMDI2WjAzMTEwLwYDVQQD
EyhlZWZjYjYwNTY0NjYzZWQzZjA3YWUzOTAzMTMwMmMzNTc0ZGU0ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Yw24q6T6yV21eaemb0+0kJe0Wc
KPcR+S68ZmpTn4xTt1OPQm+eB2rBCpph303wN2dT9VRLXvk59vHFYCVLcGU9YlE4
pv4H3y7ZLnkbnLM3b9HavGao1ggkmu0FnqjWehszNuKF4NDULGnmDtlYwr5TsQZ9
3sFGd8B/SoWjX/3G6MlzENg/DUoAUtpMSMK9uJnT5WZd+Cg82ygqNRFeqGqRpYXj
fpp1WDvoIZt6ll5BGvudBCTq9k8aR9ENW9NqeEz8ErRZQ3KCdNtqL7BWIIO88p8V
61yA9aVEwlhxfEUaoNs+eq4MmhMoli1toyD318pNFxbR8STbaE5iFrxNVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO78tgVkZj7T8HrjkDEwLDV03kiFMB8GA1UdIwQY
MBaAFHefuqrGVBqzGFKesCVhPGUg5HZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjkt
MjAwMjQ5MThlZTY2LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85ODNiNDctNDdhOS00MjUxLWExMjktMjAwMjQ5MThlZTY2
LzEvZDUtNnFzWlVHck1ZVXA2d0pXRThaU0RrZGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTe2B+4s
SKBs2Esd6vJGsLNaBUDIxRhof/FhlhTd2xY9UoZOVt9vmWJ5ZjierA5BSAAMsF5m
5O/sA/WhaTx86MaWPib9WuRvBbYJvTuXobOcCsV+HW94F0oh7rEC+++BGGjLrPQ4
0Knh9GB53GiX6jy2p8LTz7spxHWhoYvAXDgNuvjjfLsF1VACoSxWliX5K9q3brOd
q94Af7j9gjdDbmtElxAQqqWMOASZd4XQnKQeDyrGfU9les/RHcyIDogc8QU3y3kZ
OUI9hZcyz6x+aySG2OU2IGjZz7UCtkXmmQM459rbE2D4ZCcmB0jfG7YxSqmHCpgU
tHyShUs2xMuvTQ==
-----END CERTIFICATE-----
Generated at Sun May 11 16:58:00 2025 by rpki-client