Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
File: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft (raw, json)
Hash identifier: tsFVBOZe3IU5TRkKKeMKzWJPOl8Jm+qdvCsnnVao8zU=
Subject key identifier: 0F:BB:47:D7:89:4C:A4:53:07:68:EF:C5:6E:5C:F6:5B:9E:C9:8E:9A
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0196C382B8306680E59589D832AFB28C0F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 08:00:45 +0000
Manifest this update: Mon 12 May 2025 08:00:45 +0000
Manifest next update: Tue 13 May 2025 08:00:45 +0000
Files and hashes: 1: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (hash: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=)
2: 2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl (hash: TbvkbnOf0Sp+Pkoi6IWv3zybxpbhYeZrj2bQC2JwWMU=)
3: F-T6XFqFnI_sbUUjNxNcNd87BhY.roa (hash: 6o0pvXXHkL7jKBhk4FmzhB8YNuZ27KgrcAM6QK83Qb4=)
4: F1ShlRrx5ZPQmtQlj2ftFMW353w.roa (hash: Xetg03+rB7SCygrrXAn/7tOc08cqxoGNbraAHZ0gKtM=)
5: IPUd7GCIW2gsU9xakT1oNUwSIio.roa (hash: dGuEAfVSkLkoM8KnSMOWFIaomaZjWrbWxTVDngrHaFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:b8:30:66:80:e5:95:89:d8:32:af:b2:8c:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: May 12 08:00:45 2025 GMT
Not After : May 13 08:00:45 2025 GMT
Subject: CN=0fbb47d7894ca4530768efc56e5cf65b9ec98e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:56:85:d0:5b:9d:49:1b:24:20:ef:85:a2:
12:13:81:7e:83:73:25:fa:97:6f:5d:00:f4:3e:53:
34:e2:b7:0e:ea:25:5f:2f:37:1c:de:70:f2:fc:b5:
12:9a:28:5e:e8:57:56:08:e3:66:ad:2f:1b:90:cb:
19:3c:a2:59:6f:90:69:b1:4c:aa:e2:11:69:2a:20:
44:d7:dd:38:70:2e:c1:8c:a1:7a:5a:eb:22:61:e4:
59:11:72:63:2a:9c:5b:98:c0:d4:75:4c:39:78:ed:
11:7b:0d:26:aa:11:81:c8:4e:2e:bb:b8:91:82:6b:
64:03:75:55:67:f7:b9:22:58:25:47:c7:7f:ad:19:
41:dc:78:0c:cb:7c:5f:ec:2c:b2:12:84:45:7a:21:
cd:0d:c0:d0:a0:a8:e0:5e:89:ed:db:94:a0:72:6a:
3b:e9:25:3b:50:77:70:c9:5c:78:9c:94:2d:5a:00:
ab:49:12:83:db:c2:cc:6f:e2:c4:3c:83:40:7a:2f:
5a:f3:c9:29:86:a3:16:02:66:e3:48:3f:6c:da:1b:
29:a1:5b:ad:1b:08:0d:3e:0c:49:e4:a6:00:a8:94:
c2:af:35:c8:4f:13:a9:df:38:bf:e0:c1:e5:b9:93:
e7:0d:63:c9:f0:9b:90:d9:e5:ac:50:36:65:54:39:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:47:D7:89:4C:A4:53:07:68:EF:C5:6E:5C:F6:5B:9E:C9:8E:9A
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:47:1c:3a:86:15:38:0b:6d:26:b0:50:da:f0:cb:18:81:5d:
fc:77:8f:c7:56:65:d7:cc:98:39:bf:35:af:ea:b3:63:7b:d0:
78:a5:6a:a5:10:cf:77:fd:52:53:b4:ec:56:f7:4f:83:46:ce:
1f:ef:bd:a9:07:3a:80:7d:61:f6:ab:02:34:e4:9f:21:5e:ec:
42:08:cb:49:fa:02:0b:a9:ed:fa:76:1e:14:c4:2f:df:21:b7:
f0:df:6a:2f:ca:e5:a8:21:98:a7:5a:c4:3d:e2:b5:81:98:f5:
78:ed:9f:ed:ca:87:20:b9:a4:26:37:c8:4d:8a:c8:11:47:d7:
cf:1b:20:07:06:fd:bb:4e:c2:d0:b5:9f:ba:42:92:de:e4:da:
a3:d6:c5:dd:f4:bc:8a:66:8b:c8:37:f8:aa:5c:f9:77:5a:82:
81:dd:96:45:27:fe:f7:e8:96:2e:97:b0:b4:8d:f2:80:e0:db:
ea:98:c0:b0:4c:6c:1d:8b:71:de:d6:3c:cb:06:2e:cc:a1:74:
8c:83:b7:62:11:05:c0:c7:dd:12:3f:80:a5:f6:0f:41:64:e0:
f9:ca:6c:67:94:a4:b3:21:ab:0c:d7:51:b6:ed:01:9f:6c:05:
42:70:85:a8:53:17:7d:d6:c6:bc:91:3f:c0:94:bf:7d:93:15:
93:df:a4:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDgrgwZoDllYnYMq+yjA+PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjUwNTEyMDgwMDQ1WhcNMjUwNTEzMDgwMDQ1WjAzMTEwLwYDVQQD
EygwZmJiNDdkNzg5NGNhNDUzMDc2OGVmYzU2ZTVjZjY1YjllYzk4ZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wVWhdBbnUkbJCDvhaISE4F+g3Ml
+pdvXQD0PlM04rcO6iVfLzcc3nDy/LUSmihe6FdWCONmrS8bkMsZPKJZb5BpsUyq
4hFpKiBE1904cC7BjKF6WusiYeRZEXJjKpxbmMDUdUw5eO0Rew0mqhGByE4uu7iR
gmtkA3VVZ/e5IlglR8d/rRlB3HgMy3xf7CyyEoRFeiHNDcDQoKjgXont25Sgcmo7
6SU7UHdwyVx4nJQtWgCrSRKD28LMb+LEPINAei9a88kphqMWAmbjSD9s2hspoVut
GwgNPgxJ5KYAqJTCrzXITxOp3zi/4MHluZPnDWPJ8JuQ2eWsUDZlVDlr0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+7R9eJTKRTB2jvxW5c9lueyY6aMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0ccOoYV
OAttJrBQ2vDLGIFd/HePx1Zl18yYOb81r+qzY3vQeKVqpRDPd/1SU7TsVvdPg0bO
H++9qQc6gH1h9qsCNOSfIV7sQgjLSfoCC6nt+nYeFMQv3yG38N9qL8rlqCGYp1rE
PeK1gZj1eO2f7cqHILmkJjfITYrIEUfXzxsgBwb9u07C0LWfukKS3uTao9bF3fS8
imaLyDf4qlz5d1qCgd2WRSf+9+iWLpewtI3ygODb6pjAsExsHYtx3tY8ywYuzKF0
jIO3YhEFwMfdEj+ApfYPQWTg+cpsZ5SksyGrDNdRtu0Bn2wFQnCFqFMXfdbGvJE/
wJS/fZMVk9+k7w==
-----END CERTIFICATE-----
Generated at Mon May 12 15:55:55 2025 by rpki-client