Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File: 60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier: mENoVdipt8R1fhQsIhlj0vucUzAZRSuYCLVvGWUTy/k=
Subject key identifier: 5B:A5:4A:56:88:51:C9:60:BF:7D:B8:06:96:0D:14:6D:CA:6D:2A:02
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 0196DC9D45922798A83BF35442897A3DA6AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number: 09B8
Signing time: Sat 17 May 2025 05:00:16 +0000
Manifest this update: Sat 17 May 2025 05:00:16 +0000
Manifest next update: Sun 18 May 2025 05:00:16 +0000
Files and hashes: 1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: AlYnEU9OZA/cjowpra8wDOf4BJZI5BAS1qcNwTpXosw=)
2: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (hash: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:9d:45:92:27:98:a8:3b:f3:54:42:89:7a:3d:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: May 17 05:00:16 2025 GMT
Not After : May 18 05:00:16 2025 GMT
Subject: CN=5ba54a568851c960bf7db806960d146dca6d2a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f9:be:75:cd:1c:06:eb:6e:25:40:02:da:2f:
77:c2:e5:d6:87:8a:e0:c7:11:1d:97:76:34:9a:98:
7e:6e:c6:32:70:fb:1c:26:57:49:3c:47:64:3a:5e:
2f:ac:da:59:d5:d0:bb:fd:1b:83:f5:9b:60:56:c5:
c6:1e:84:84:49:aa:53:02:b4:b2:2e:3c:dc:7b:8e:
c7:7f:f0:b7:84:ca:27:f2:d9:0e:c6:e9:dd:52:5c:
bf:88:44:ab:67:d5:02:b2:8f:d8:e1:00:ec:51:06:
a6:e6:6c:2b:9e:f2:2e:7c:8e:28:de:6a:b0:b4:f0:
29:65:39:dd:a2:60:fb:ab:db:35:7f:db:2b:d9:4c:
a5:c9:99:72:de:25:9c:49:c4:26:fd:07:a1:68:03:
5a:a6:f6:23:b5:95:bd:55:a8:93:83:14:73:19:34:
12:1a:e1:53:b7:f6:30:a8:c1:fe:ed:b7:95:b2:8c:
3f:f2:af:05:31:64:a2:d8:e0:1f:6a:a2:a0:ef:46:
31:19:18:19:4f:ee:2b:2d:db:83:92:fd:c3:85:19:
25:8d:b7:7d:90:10:51:41:dc:32:73:3c:e1:24:74:
d0:25:9d:29:9e:ef:3c:12:4b:b2:62:65:20:b8:29:
d1:cb:44:fd:0c:94:23:77:6d:1e:64:2e:39:1b:d3:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A5:4A:56:88:51:C9:60:BF:7D:B8:06:96:0D:14:6D:CA:6D:2A:02
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:80:4b:da:85:8b:f1:9b:db:18:d9:fc:16:41:03:bf:3b:
d9:01:6d:95:4c:ba:1a:1d:e9:d5:1a:db:73:ef:0a:c5:e0:1d:
fe:b7:9f:13:7c:30:51:76:b3:5a:43:6a:b3:68:a7:3e:36:94:
b0:ff:95:ab:6c:57:cc:22:b5:3e:a9:41:e8:3a:a0:20:c3:a6:
a2:0e:44:c6:47:cb:80:20:fb:21:ae:6b:3d:26:8f:5e:df:cf:
44:fd:f0:07:51:cb:34:42:ba:01:43:f4:a2:d3:0d:32:4c:a9:
74:6b:a8:2c:45:af:72:ac:44:a4:ef:e6:c0:cb:e3:ac:1e:74:
6d:66:c2:07:89:96:fd:17:7f:d2:22:3d:d7:28:20:3f:83:56:
22:79:89:bf:14:51:e4:d0:0d:d2:9e:70:be:bc:47:1a:f8:34:
4f:47:58:eb:93:88:da:14:c2:62:3d:03:b7:5c:e1:7f:10:86:
cd:dd:84:a0:83:c5:a4:a9:5d:0f:00:a1:8f:8b:35:08:36:18:
f9:ba:f9:3d:7f:53:73:1a:d7:39:a1:1a:c4:b8:14:0f:74:1f:
2e:db:61:22:8a:61:15:ba:14:08:f6:fd:31:8c:6d:3c:ad:0d:
17:20:32:86:a9:75:2a:c0:e2:06:d6:71:34:68:63:66:02:e3:
b0:a9:2c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbcnUWSJ5ioO/NUQol6PaasMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjUwNTE3MDUwMDE2WhcNMjUwNTE4MDUwMDE2WjAzMTEwLwYDVQQD
Eyg1YmE1NGE1Njg4NTFjOTYwYmY3ZGI4MDY5NjBkMTQ2ZGNhNmQyYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pm+dc0cButuJUAC2i93wuXWh4rg
xxEdl3Y0mph+bsYycPscJldJPEdkOl4vrNpZ1dC7/RuD9ZtgVsXGHoSESapTArSy
Ljzce47Hf/C3hMon8tkOxundUly/iESrZ9UCso/Y4QDsUQam5mwrnvIufI4o3mqw
tPApZTndomD7q9s1f9sr2UylyZly3iWcScQm/QehaANapvYjtZW9VaiTgxRzGTQS
GuFTt/YwqMH+7beVsow/8q8FMWSi2OAfaqKg70YxGRgZT+4rLduDkv3DhRkljbd9
kBBRQdwyczzhJHTQJZ0pnu88EkuyYmUguCnRy0T9DJQjd20eZC45G9OTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFulSlaIUclgv324BpYNFG3KbSoCMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8WAS9qF
i/Gb2xjZ/BZBA7872QFtlUy6Gh3p1Rrbc+8KxeAd/refE3wwUXazWkNqs2inPjaU
sP+Vq2xXzCK1PqlB6DqgIMOmog5ExkfLgCD7Ia5rPSaPXt/PRP3wB1HLNEK6AUP0
otMNMkypdGuoLEWvcqxEpO/mwMvjrB50bWbCB4mW/Rd/0iI91yggP4NWInmJvxRR
5NAN0p5wvrxHGvg0T0dY65OI2hTCYj0Dt1zhfxCGzd2EoIPFpKldDwChj4s1CDYY
+br5PX9TcxrXOaEaxLgUD3QfLtthIophFboUCPb9MYxtPK0NFyAyhql1KsDiBtZx
NGhjZgLjsKks4Q==
-----END CERTIFICATE-----
Generated at Sat May 17 08:29:54 2025 by rpki-client