Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: I2aAvPy3BkV2DQegSIRyEOkz/YK8/rm17ov0ZMdKBA0=
Subject key identifier: 80:42:AF:0F:31:EE:C7:EC:AF:8B:8F:58:97:2C:A8:82:A3:25:22:A5
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 01969F07E6718AAEE52285CA65FC7427A561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 06:00:17 +0000
Manifest this update: Mon 05 May 2025 06:00:17 +0000
Manifest next update: Tue 06 May 2025 06:00:17 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: dt0+FSoFofewT/JuZ2UYk+m0R75jQCXicvEcLHfM9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:e6:71:8a:ae:e5:22:85:ca:65:fc:74:27:a5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: May 5 06:00:17 2025 GMT
Not After : May 6 06:00:17 2025 GMT
Subject: CN=8042af0f31eec7ecaf8b8f58972ca882a32522a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:d8:72:10:e2:cb:eb:e4:e6:e5:c3:62:a0:
87:5c:05:dd:12:06:2a:af:34:b9:eb:a6:44:94:87:
c6:db:7c:43:3c:9a:72:5e:f2:5b:1f:2c:44:3d:88:
27:57:47:28:c8:d6:14:7d:87:0e:a7:d4:7e:a3:4c:
bf:46:15:8f:0a:63:5a:91:af:63:78:89:c9:93:37:
ea:44:04:9d:cb:90:ce:9c:00:67:cb:d0:91:b4:74:
7b:ad:d4:49:5f:b6:94:93:67:a3:da:cb:d2:ca:3f:
ee:59:71:8e:48:f4:8f:d8:e3:d2:6d:8a:38:3b:f9:
f4:a3:dd:62:36:cc:28:a5:f0:99:9a:c4:94:0f:4d:
41:31:c7:04:11:3b:2a:76:f9:37:51:b3:6b:a3:dc:
15:ff:1e:b3:e6:27:e3:b7:6a:cd:55:95:4a:b5:de:
e0:d6:1d:bc:c2:a5:47:b4:40:3c:a2:fd:d9:3d:f5:
c2:33:98:5b:35:4a:63:28:54:0f:47:7d:3c:6e:5f:
27:e4:f4:51:05:13:67:dd:64:dc:7f:ca:53:81:05:
6e:9b:23:10:9d:f2:c6:1a:64:87:66:b2:11:1b:f5:
27:31:09:96:da:4b:99:80:dd:b4:c7:00:78:bd:08:
3f:69:3b:a9:f1:93:13:0c:1a:59:3f:a5:80:50:60:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:AF:0F:31:EE:C7:EC:AF:8B:8F:58:97:2C:A8:82:A3:25:22:A5
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f7:63:5a:4e:01:86:6f:1d:f6:cb:62:27:52:60:4e:41:fb:
9b:ce:b1:b4:1f:00:75:f5:f4:90:94:cf:1c:34:6e:3b:1c:ca:
58:d8:04:74:f6:0c:8c:82:bc:45:d6:bd:f2:5d:2c:f9:5b:fc:
11:06:38:cc:b5:bc:bf:ff:15:1f:96:e8:75:f6:c4:a0:4d:dc:
7e:55:59:a1:84:7a:db:ea:ad:f0:44:97:c2:0d:68:99:b7:b2:
77:8e:1b:4b:95:3a:d7:4e:60:bc:35:2c:f5:e6:72:c6:4e:74:
4b:ad:d2:23:d3:c8:22:d9:01:20:c7:ab:07:52:2b:bd:53:dc:
2a:bb:80:0a:74:4a:e6:ee:ad:29:5d:a3:75:65:e7:83:06:1a:
39:25:bf:45:d3:0c:09:cd:2a:86:8b:68:95:36:f9:be:8e:1a:
7a:e8:40:bc:2a:c8:17:d1:8b:d5:79:1f:3a:77:f2:29:06:4f:
7a:f5:96:09:a5:48:a4:f4:84:97:da:a7:52:29:dc:51:5b:05:
81:c2:4f:e5:6e:6e:22:b8:16:d9:8e:60:c9:c1:86:3a:6a:14:
17:75:76:27:03:1e:b8:06:4e:36:8b:8b:14:b6:28:62:ec:b6:
85:9a:25:dc:4b:a4:18:db:63:c9:09:ee:2d:98:54:aa:da:a1:
52:d1:36:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafB+Zxiq7lIoXKZfx0J6VhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmQ4ZTk5ZjgyN2ZmOTVkMjgxZDRmZjdiYzI3ZjA0NWZh
YmYxMDUwHhcNMjUwNTA1MDYwMDE3WhcNMjUwNTA2MDYwMDE3WjAzMTEwLwYDVQQD
Eyg4MDQyYWYwZjMxZWVjN2VjYWY4YjhmNTg5NzJjYTg4MmEzMjUyMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvHYchDiy+vk5uXDYqCHXAXdEgYq
rzS566ZElIfG23xDPJpyXvJbHyxEPYgnV0coyNYUfYcOp9R+o0y/RhWPCmNaka9j
eInJkzfqRASdy5DOnABny9CRtHR7rdRJX7aUk2ej2svSyj/uWXGOSPSP2OPSbYo4
O/n0o91iNswopfCZmsSUD01BMccEETsqdvk3UbNro9wV/x6z5ifjt2rNVZVKtd7g
1h28wqVHtEA8ov3ZPfXCM5hbNUpjKFQPR308bl8n5PRRBRNn3WTcf8pTgQVumyMQ
nfLGGmSHZrIRG/UnMQmW2kuZgN20xwB4vQg/aTup8ZMTDBpZP6WAUGAdhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBCrw8x7sfsr4uPWJcsqIKjJSKlMB8GA1UdIwQY
MBaAFK29jpn4J/+V0oHU/3vCfwRfq/EFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQt
MWQzMWExOTYwMTQ3LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9iOTkzYzctZmE4ZC00M2MwLTkzNzQtMWQzMWExOTYwMTQ3
LzEvcmIyT21mZ25fNVhTZ2RUX2U4Sl9CRi1yOFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfdjWk4B
hm8d9stiJ1JgTkH7m86xtB8AdfX0kJTPHDRuOxzKWNgEdPYMjIK8Rda98l0s+Vv8
EQY4zLW8v/8VH5bodfbEoE3cflVZoYR62+qt8ESXwg1ombeyd44bS5U6105gvDUs
9eZyxk50S63SI9PIItkBIMerB1IrvVPcKruACnRK5u6tKV2jdWXngwYaOSW/RdMM
Cc0qhotolTb5vo4aeuhAvCrIF9GL1XkfOnfyKQZPevWWCaVIpPSEl9qnUincUVsF
gcJP5W5uIrgW2Y5gycGGOmoUF3V2JwMeuAZONouLFLYoYuy2hZol3EukGNtjyQnu
LZhUqtqhUtE29Q==
-----END CERTIFICATE-----
Generated at Mon May 5 10:29:16 2025 by rpki-client