Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: aIEpUVqjvrjuWAlzZr1f0zNKWtxb+Ln6IXb+nLcMObM=
Subject key identifier: BF:B6:49:94:24:9A:45:AC:25:5B:D6:4E:4B:DF:DA:4A:04:91:52:C3
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 01969E9A545636EF711DC1A591B1C50ADCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 05B1
Signing time: Mon 05 May 2025 04:00:36 +0000
Manifest this update: Mon 05 May 2025 04:00:36 +0000
Manifest next update: Tue 06 May 2025 04:00:36 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: NIjlI0oXFgs/DZZ4Qo67gqsjsQOPgWDC0FXobW/5kAk=)
2: z_Ej6CoZbrKxrzLQhz11AHSKLRg.roa (hash: UVS5jjAa9OEvk26uuzlwcbiMZWOU5g+RlzuAxXPKfXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:54:56:36:ef:71:1d:c1:a5:91:b1:c5:0a:dc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: May 5 04:00:36 2025 GMT
Not After : May 6 04:00:36 2025 GMT
Subject: CN=bfb64994249a45ac255bd64e4bdfda4a049152c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:3e:2a:c7:a5:a2:15:42:8b:59:19:6d:82:
9a:08:f6:0e:2b:27:7e:5c:b6:cc:d7:f2:0b:73:b0:
49:a9:59:78:cf:c9:d8:07:98:56:54:1c:b6:a1:30:
9c:56:ea:f4:97:a0:05:fa:a7:91:ab:b5:52:3a:c6:
71:54:46:0a:7d:20:48:42:f8:12:52:68:8c:57:5e:
d8:23:87:d2:75:c4:68:4d:89:a6:7d:6e:ce:84:98:
99:e3:55:ce:49:49:40:fb:00:f8:4f:99:29:8c:04:
12:83:a9:43:6f:b9:60:05:ed:81:c7:a0:15:3e:cd:
05:07:5d:c2:e0:c6:7b:aa:64:c4:51:ac:f7:07:fd:
39:62:9b:65:ae:8e:9e:60:e8:ef:87:9b:eb:6a:93:
4d:75:5f:2c:29:fb:0e:8f:4a:3e:3f:83:89:a9:36:
10:40:d2:43:29:81:4c:6c:27:a0:aa:8e:c9:28:e3:
72:35:a0:09:eb:7e:51:d9:2b:68:cc:d8:81:7e:cd:
34:b2:43:7e:70:8f:c6:56:87:15:23:8c:40:4a:0f:
eb:0c:43:7c:a8:55:e7:03:29:41:1c:7a:2b:ae:01:
a7:97:5a:e5:26:48:90:65:04:b2:00:38:15:b1:4d:
7a:8e:10:59:db:49:b8:e5:f5:2d:ce:26:b9:45:b2:
db:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B6:49:94:24:9A:45:AC:25:5B:D6:4E:4B:DF:DA:4A:04:91:52:C3
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:4d:b1:df:57:b6:23:2d:39:1f:71:f6:a8:8a:61:cf:7e:
75:91:3d:92:67:72:14:92:0b:93:9f:57:7e:d7:f1:52:7a:96:
86:90:d3:d0:1d:9f:2a:b6:8e:b4:c3:74:99:8f:b9:40:13:cf:
02:c8:ac:0e:f3:a8:d6:b9:02:ed:23:5e:87:94:9f:7e:99:87:
32:30:4b:0f:86:e1:db:4f:30:fd:af:cd:9c:65:fb:5e:e6:c7:
a5:50:4d:ce:fb:94:c4:74:25:40:2b:d2:15:7c:87:04:9b:64:
14:13:96:b1:d1:df:72:9b:ef:fb:e6:3f:44:84:3f:61:a9:cc:
c0:98:4e:90:44:87:3f:9d:43:cb:f5:c4:13:c1:e2:6b:3d:e3:
a3:a8:36:a4:f9:6b:62:eb:98:dd:b7:0c:cc:fc:bd:0f:89:6f:
5f:41:aa:7b:4d:cb:64:8d:d5:d3:70:2e:b5:64:c3:d3:e0:1e:
31:9a:4b:d4:41:06:c3:0c:c7:d6:d1:9b:54:fb:17:31:4c:87:
bc:37:63:3d:21:e2:d5:ca:7c:10:0f:bf:dc:9e:ab:38:96:94:
71:f3:5c:e1:bd:51:52:3b:56:89:ba:0c:cd:54:ac:ba:ab:2e:
98:d3:b2:27:6a:e1:24:84:57:1a:7f:36:15:89:c8:77:8b:75:
e2:c8:cc:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemlRWNu9xHcGlkbHFCtzYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMzAxMTdhZTFjZGMyZGYxYzU4ODE2ZTAwZTU0NTFmODdl
ZmIzNzAwHhcNMjUwNTA1MDQwMDM2WhcNMjUwNTA2MDQwMDM2WjAzMTEwLwYDVQQD
EyhiZmI2NDk5NDI0OWE0NWFjMjU1YmQ2NGU0YmRmZGE0YTA0OTE1MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3so+KselohVCi1kZbYKaCPYOKyd+
XLbM1/ILc7BJqVl4z8nYB5hWVBy2oTCcVur0l6AF+qeRq7VSOsZxVEYKfSBIQvgS
UmiMV17YI4fSdcRoTYmmfW7OhJiZ41XOSUlA+wD4T5kpjAQSg6lDb7lgBe2Bx6AV
Ps0FB13C4MZ7qmTEUaz3B/05Yptlro6eYOjvh5vrapNNdV8sKfsOj0o+P4OJqTYQ
QNJDKYFMbCegqo7JKONyNaAJ635R2StozNiBfs00skN+cI/GVocVI4xASg/rDEN8
qFXnAylBHHorrgGnl1rlJkiQZQSyADgVsU16jhBZ20m45fUtzia5RbLbQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+2SZQkmkWsJVvWTkvf2koEkVLDMB8GA1UdIwQY
MBaAFNEwEXrhzcLfHFiBbgDlRR+H77NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUt
MjUwYTRkNzc3YmE2LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xMGNlNzMtM2Q0Zi00M2VmLWI2ODUtMjUwYTRkNzc3YmE2
LzEvMFRBUmV1SE53dDhjV0lGdUFPVkZINGZ2czNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLRNsd9X
tiMtOR9x9qiKYc9+dZE9kmdyFJILk59XftfxUnqWhpDT0B2fKraOtMN0mY+5QBPP
AsisDvOo1rkC7SNeh5SffpmHMjBLD4bh208w/a/NnGX7XubHpVBNzvuUxHQlQCvS
FXyHBJtkFBOWsdHfcpvv++Y/RIQ/YanMwJhOkESHP51Dy/XEE8Hiaz3jo6g2pPlr
YuuY3bcMzPy9D4lvX0Gqe03LZI3V03AutWTD0+AeMZpL1EEGwwzH1tGbVPsXMUyH
vDdjPSHi1cp8EA+/3J6rOJaUcfNc4b1RUjtWiboMzVSsuqsumNOyJ2rhJIRXGn82
FYnId4t14sjMIg==
-----END CERTIFICATE-----
Generated at Mon May 5 07:07:44 2025 by rpki-client