Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
File: iO0MCQHGnlxdj1GmddBVmC-R0qc.mft (raw, json)
Hash identifier: KS0+b9m1Wg881wJN22xUjLhdTBuxQDtrEptanVeUwH8=
Subject key identifier: C0:A1:39:54:17:7F:C8:31:94:F5:60:F4:3A:5B:CF:56:92:F5:D1:B1
Authority key identifier: 88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
Certificate issuer: /CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Certificate serial: 0196BDEE3A1181AF35AEC4DD9A094F7CDA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
Manifest number: 0E62
Signing time: Sun 11 May 2025 06:00:28 +0000
Manifest this update: Sun 11 May 2025 06:00:28 +0000
Manifest next update: Mon 12 May 2025 06:00:28 +0000
Files and hashes: 1: 5bB3yoqJtJ8O9S62QfWorgiioFY.roa (hash: 8Ndb6O5ZdaPJ5izfIbfWtZrPZCIF+KxMhtKJ5R+rDRA=)
2: F2pyX4AW0yNP_DxkJy2c7z3MxKg.roa (hash: YtC8cOEf9B52eoNJhdsOBs1/lz34UsGpGhA4ymHbCSI=)
3: iO0MCQHGnlxdj1GmddBVmC-R0qc.crl (hash: 8rrUrgmtx5zff2a9or/T6zDxJRwx9gAt1WX7/9bmaQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:3a:11:81:af:35:ae:c4:dd:9a:09:4f:7c:da:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ed0c0901c69e5c5d8f51a675d055982f91d2a7
Validity
Not Before: May 11 06:00:28 2025 GMT
Not After : May 12 06:00:28 2025 GMT
Subject: CN=c0a13954177fc83194f560f43a5bcf5692f5d1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:c7:31:44:0b:ad:a4:95:a3:72:51:3f:7e:
ed:03:e3:b9:99:e7:58:66:67:07:a1:9a:56:f2:59:
c8:d5:9d:55:fb:ab:fc:a3:81:ad:4f:1d:e3:ee:64:
48:a7:32:d6:fd:b3:cd:4b:e5:19:64:a4:8a:dd:a2:
a7:4c:a4:41:b7:2e:3d:2f:46:e6:48:37:75:0e:82:
61:fa:8a:1e:a6:4b:ce:35:88:4f:ef:38:98:08:4d:
5d:3f:f9:f2:eb:01:d4:c2:f3:bd:17:be:35:d9:82:
80:e8:64:ed:10:74:ce:36:da:88:7b:cd:74:86:01:
cd:e5:a9:88:38:8c:17:ab:c0:db:f5:0d:b1:f4:fe:
57:ba:b7:73:77:29:62:72:3f:79:4e:81:75:82:58:
90:bd:b4:d0:7c:ed:09:43:32:b0:62:20:c2:9d:4b:
7b:2f:cf:ed:ff:00:a9:ab:2e:36:4d:34:db:a6:7a:
16:4d:d5:b2:21:e4:5f:b0:06:1e:08:73:07:79:08:
ec:24:07:b6:3f:db:0d:89:e2:f8:71:06:bd:05:b6:
52:9c:cd:ab:5e:d9:b5:14:e2:33:0f:c3:ca:31:c5:
4b:57:94:5f:5c:16:26:b8:4e:32:0f:aa:4e:06:91:
c1:3b:b0:33:a5:14:35:52:e2:b0:74:b3:c1:12:46:
72:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:39:54:17:7F:C8:31:94:F5:60:F4:3A:5B:CF:56:92:F5:D1:B1
X509v3 Authority Key Identifier:
keyid:88:ED:0C:09:01:C6:9E:5C:5D:8F:51:A6:75:D0:55:98:2F:91:D2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iO0MCQHGnlxdj1GmddBVmC-R0qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/098583-36ce-4692-9dc3-9d988a600757/1/iO0MCQHGnlxdj1GmddBVmC-R0qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:77:f0:69:28:3d:15:a3:e8:5b:7f:c5:0e:0c:0a:e2:37:5a:
66:7f:ff:93:a3:70:c7:7f:54:73:34:89:2b:98:d4:54:57:bd:
ad:72:82:9e:5c:49:00:94:d5:a5:49:a5:c0:dd:c6:4d:53:2d:
cb:b6:42:6e:81:b1:d8:e2:89:55:38:8b:af:f9:72:55:b1:86:
82:5d:41:b5:63:d9:64:5f:af:d4:29:27:c0:5d:31:f5:5a:34:
f8:ba:9b:7d:68:84:f4:50:77:cd:60:95:88:0c:1e:67:87:11:
95:44:86:2c:6f:49:43:fa:19:b1:f1:aa:7f:d5:1c:fd:de:e5:
ec:c3:69:6c:4f:e2:e2:cc:5b:ba:3c:2a:29:26:69:01:1d:d0:
36:1c:4f:98:07:80:03:4f:2f:25:03:46:43:b8:3d:40:73:8f:
39:e2:47:72:ff:a2:b4:52:35:5e:a4:22:79:f5:34:20:d7:74:
fb:93:bc:f4:df:75:e5:43:66:f0:af:10:d2:05:50:ef:99:89:
2d:74:3a:06:dc:1e:65:8a:28:b7:82:91:37:af:b7:a0:1e:c8:
51:56:c0:dd:a9:12:4f:d2:52:1a:04:6d:45:38:32:8d:9a:5e:
1e:ad:26:a2:11:65:69:76:f5:d1:c3:aa:52:d6:13:3b:44:e9:
d4:48:62:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97joRga81rsTdmglPfNpeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZWQwYzA5MDFjNjllNWM1ZDhmNTFhNjc1ZDA1NTk4MmY5
MWQyYTcwHhcNMjUwNTExMDYwMDI4WhcNMjUwNTEyMDYwMDI4WjAzMTEwLwYDVQQD
EyhjMGExMzk1NDE3N2ZjODMxOTRmNTYwZjQzYTViY2Y1NjkyZjVkMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aXHMUQLraSVo3JRP37tA+O5medY
ZmcHoZpW8lnI1Z1V+6v8o4GtTx3j7mRIpzLW/bPNS+UZZKSK3aKnTKRBty49L0bm
SDd1DoJh+ooepkvONYhP7ziYCE1dP/ny6wHUwvO9F7412YKA6GTtEHTONtqIe810
hgHN5amIOIwXq8Db9Q2x9P5Xurdzdylicj95ToF1gliQvbTQfO0JQzKwYiDCnUt7
L8/t/wCpqy42TTTbpnoWTdWyIeRfsAYeCHMHeQjsJAe2P9sNieL4cQa9BbZSnM2r
Xtm1FOIzD8PKMcVLV5RfXBYmuE4yD6pOBpHBO7AzpRQ1UuKwdLPBEkZyLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMChOVQXf8gxlPVg9Dpbz1aS9dGxMB8GA1UdIwQY
MBaAFIjtDAkBxp5cXY9RpnXQVZgvkdKnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMt
OWQ5ODhhNjAwNzU3LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wOTg1ODMtMzZjZS00NjkyLTlkYzMtOWQ5ODhhNjAwNzU3
LzEvaU8wTUNRSEdubHhkajFHbWRkQlZtQy1SMHFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0nfwaSg9
FaPoW3/FDgwK4jdaZn//k6Nwx39UczSJK5jUVFe9rXKCnlxJAJTVpUmlwN3GTVMt
y7ZCboGx2OKJVTiLr/lyVbGGgl1BtWPZZF+v1CknwF0x9Vo0+LqbfWiE9FB3zWCV
iAweZ4cRlUSGLG9JQ/oZsfGqf9Uc/d7l7MNpbE/i4sxbujwqKSZpAR3QNhxPmAeA
A08vJQNGQ7g9QHOPOeJHcv+itFI1XqQiefU0INd0+5O89N915UNm8K8Q0gVQ75mJ
LXQ6BtweZYoot4KRN6+3oB7IUVbA3akST9JSGgRtRTgyjZpeHq0mohFlaXb10cOq
UtYTO0Tp1EhiBA==
-----END CERTIFICATE-----
Generated at Sun May 11 17:02:49 2025 by rpki-client