Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json)
Hash identifier: irixFJOHe9CeGkuR5Y298JLtrp5vpVqw8buNpfZeSqE=
Subject key identifier: 1B:06:16:C1:B7:50:FD:19:C7:07:B7:A2:EE:8F:16:9C:DE:A0:65:02
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 0196B1EAF998F78D05AB2A2EAD30EDD2DDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
Manifest number: 1531
Signing time: Thu 08 May 2025 22:01:28 +0000
Manifest this update: Thu 08 May 2025 22:01:28 +0000
Manifest next update: Fri 09 May 2025 22:01:28 +0000
Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=)
2: d411kki9lFxs44QujWQtzScxM00.crl (hash: SPDGKT7vnxxGnXri4LAykG2AM2MsQsRipFgOD0uhajY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:ea:f9:98:f7:8d:05:ab:2a:2e:ad:30:ed:d2:dd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: May 8 22:01:28 2025 GMT
Not After : May 9 22:01:28 2025 GMT
Subject: CN=1b0616c1b750fd19c707b7a2ee8f169cdea06502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:dc:7d:13:b0:69:fc:62:14:fb:47:1b:c5:
68:59:84:b3:19:d7:ce:df:b2:7b:72:92:5e:64:82:
73:13:b1:bc:64:cf:56:a5:b5:3c:5b:ec:24:3f:c9:
c8:ff:62:58:8f:d9:3a:45:6e:be:83:54:1f:d3:50:
df:2b:d6:17:be:0c:27:27:6f:bf:0e:ac:c8:54:68:
ba:ae:be:3c:28:20:77:04:bf:23:eb:c1:17:4e:8c:
68:56:9e:bc:2d:17:7a:20:b2:80:5e:13:19:89:81:
ed:10:11:e5:3d:b5:8d:49:35:05:68:94:f8:ad:7a:
34:95:d1:62:4f:09:c7:df:f6:6f:ed:f2:61:ae:04:
c1:cc:2e:6a:bf:19:68:c1:f1:29:f9:c5:4f:54:e9:
5d:3c:ab:c6:80:c3:cb:b2:c5:9c:a6:d3:6b:0b:a7:
32:cd:6d:75:d6:7b:62:d0:40:34:86:ca:6a:24:5c:
9d:fc:02:86:52:27:79:9a:bc:89:42:d4:67:49:9f:
c1:d9:d5:43:ce:d2:ca:5d:d5:a4:6a:7c:68:e3:c2:
2b:d2:4b:36:84:20:d7:4b:da:e8:57:f3:b8:58:1f:
e1:7e:3d:e5:68:1d:1e:e9:98:ae:f5:60:15:0d:31:
2e:54:7f:4a:e1:78:d2:a1:54:07:bf:62:8f:d4:90:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:16:C1:B7:50:FD:19:C7:07:B7:A2:EE:8F:16:9C:DE:A0:65:02
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3f:2c:34:cd:63:3d:ab:28:a1:f7:63:c3:bd:d0:e9:c7:54:
0e:a1:d4:2f:b4:63:72:63:b0:63:25:a1:49:d4:10:ad:f3:57:
9f:28:8a:6a:a8:6f:03:68:b9:69:6e:31:5b:b6:37:7f:fd:a1:
ad:b2:90:e3:3c:f5:dd:6b:b5:07:43:33:ae:e3:2e:92:e6:20:
76:05:46:bd:54:25:f1:00:d4:dc:0e:47:f9:57:b9:b5:45:75:
71:17:55:af:c3:d3:40:26:26:c6:d8:98:9f:d9:dc:1e:7d:a0:
05:a2:ad:f1:ed:85:f0:80:9e:04:22:b5:56:da:db:78:00:d9:
f0:e9:42:dd:bc:1d:66:be:77:b6:0c:14:55:c8:17:da:c3:73:
c0:60:1e:eb:e4:48:2a:3c:0b:a9:d9:63:65:a0:89:7c:40:89:
91:e9:67:c0:48:82:d1:29:b5:e3:33:a5:db:bb:83:f2:89:56:
f6:70:d4:eb:ad:bc:f8:bf:fb:97:6b:28:7f:19:25:54:8e:e0:
ea:4c:49:87:08:cc:c2:e6:73:42:24:52:6e:f5:b1:09:bf:f3:
b7:59:6b:b9:80:d6:e4:d0:ef:7d:bd:b1:91:9f:e5:ce:72:73:
2a:06:2e:cf:7d:c4:04:a8:80:d9:c5:e5:60:02:fe:b2:66:c2:
6a:9b:90:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZax6vmY940FqyourTDt0t3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz
MTMzNGQwHhcNMjUwNTA4MjIwMTI4WhcNMjUwNTA5MjIwMTI4WjAzMTEwLwYDVQQD
EygxYjA2MTZjMWI3NTBmZDE5YzcwN2I3YTJlZThmMTY5Y2RlYTA2NTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8rcfROwafxiFPtHG8VoWYSzGdfO
37J7cpJeZIJzE7G8ZM9WpbU8W+wkP8nI/2JYj9k6RW6+g1Qf01DfK9YXvgwnJ2+/
DqzIVGi6rr48KCB3BL8j68EXToxoVp68LRd6ILKAXhMZiYHtEBHlPbWNSTUFaJT4
rXo0ldFiTwnH3/Zv7fJhrgTBzC5qvxlowfEp+cVPVOldPKvGgMPLssWcptNrC6cy
zW111nti0EA0hspqJFyd/AKGUid5mryJQtRnSZ/B2dVDztLKXdWkanxo48Ir0ks2
hCDXS9roV/O4WB/hfj3laB0e6Ziu9WAVDTEuVH9K4XjSoVQHv2KP1JBbzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsGFsG3UP0Zxwe3ou6PFpzeoGUCMB8GA1UdIwQY
MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt
ZGZhMWM5YjNmZDFmLzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm
LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj8sNM1j
Pasoofdjw73Q6cdUDqHUL7RjcmOwYyWhSdQQrfNXnyiKaqhvA2i5aW4xW7Y3f/2h
rbKQ4zz13Wu1B0MzruMukuYgdgVGvVQl8QDU3A5H+Ve5tUV1cRdVr8PTQCYmxtiY
n9ncHn2gBaKt8e2F8ICeBCK1VtrbeADZ8OlC3bwdZr53tgwUVcgX2sNzwGAe6+RI
KjwLqdljZaCJfECJkelnwEiC0Sm14zOl27uD8olW9nDU6628+L/7l2sofxklVI7g
6kxJhwjMwuZzQiRSbvWxCb/zt1lruYDW5NDvfb2xkZ/lznJzKgYuz33EBKiA2cXl
YAL+smbCapuQHw==
-----END CERTIFICATE-----
Generated at Fri May 9 08:07:25 2025 by rpki-client