Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: hVhiWRwsYNKRVttqjVPY2Nh2Nt3WFidymBHeaNLa1A4=
Subject key identifier: F6:53:A2:9C:03:06:76:E0:DF:F1:85:F5:AA:FD:5B:89:D5:BE:A5:A6
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0196AF20200E8F311C3B09AC1CF3920B36BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 152E
Signing time: Thu 08 May 2025 09:00:40 +0000
Manifest this update: Thu 08 May 2025 09:00:40 +0000
Manifest next update: Fri 09 May 2025 09:00:40 +0000
Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: 2YrFMVTfj2OBP2t46SaLlSqXFNqjYlefB52iXf8mQGY=)
2: OB1GsVdt7iCzhWhmgirUwJgGaak.roa (hash: HNRDkQU9zd4iAZZaAQcAxCYiJZDSBKH3pYjhla6LGLs=)
3: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:20:20:0e:8f:31:1c:3b:09:ac:1c:f3:92:0b:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: May 8 09:00:40 2025 GMT
Not After : May 9 09:00:40 2025 GMT
Subject: CN=f653a29c030676e0dff185f5aafd5b89d5bea5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:43:e4:68:c5:fb:0f:3c:3c:4d:24:30:f5:
70:f1:5e:9d:8c:11:46:7d:8b:16:ce:cc:00:f8:47:
6c:c3:a6:97:48:62:6b:a1:7e:0b:c1:42:88:fc:84:
ab:d4:d7:26:d7:b6:2e:ae:9d:1d:ed:32:46:a9:bd:
81:dc:ee:b4:21:24:0c:3a:9a:d8:e0:4d:cf:d9:92:
40:78:e7:fc:6b:5b:d8:3e:6e:57:60:3d:b7:9f:48:
ab:d2:f7:08:64:f9:1a:b5:e4:8e:3e:c2:5f:3d:cd:
b3:0d:9f:5b:fb:03:b8:1b:d0:71:a7:51:97:91:23:
22:7c:78:a7:24:5e:10:6a:29:b5:9a:24:60:dd:2d:
5f:73:55:87:7f:8a:81:7f:84:44:85:53:c4:53:80:
25:80:9c:ff:df:2d:9c:50:b9:10:5c:99:76:49:ed:
d4:3f:39:e2:52:ee:69:6b:3c:8e:e0:1d:4d:fb:2c:
0d:d3:f2:11:57:83:8b:b6:cc:c9:7a:9c:0c:b1:d3:
77:a9:eb:9a:05:b5:5e:f0:1c:76:d2:a3:85:1c:66:
87:ad:07:ae:4b:d5:9b:63:c7:8c:6c:c6:9d:fa:3a:
42:77:58:c6:76:e3:22:3f:c2:c9:42:4d:03:20:f7:
91:90:3b:6b:d7:64:ba:50:4a:9d:c0:eb:c0:b2:41:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:A2:9C:03:06:76:E0:DF:F1:85:F5:AA:FD:5B:89:D5:BE:A5:A6
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d0:80:dc:70:2b:4c:88:6f:82:18:ae:54:67:b8:34:92:62:
8a:ba:4a:ae:b4:17:bb:55:c4:6b:13:19:a9:ca:fa:b7:26:f2:
c0:37:e7:0a:f4:e9:ca:da:15:71:26:b2:00:91:5a:76:ae:19:
ae:bd:b0:59:ed:3b:c0:4b:5e:81:78:e7:fa:e2:4e:f2:81:70:
36:3c:4b:f0:bb:77:8d:3f:e1:7a:e5:87:c5:f9:83:a4:85:fc:
64:31:f9:cd:cc:d2:d4:61:ad:ad:21:01:80:4b:a5:64:c9:8f:
8f:5f:3c:25:75:43:bf:bb:bd:a1:42:27:f6:4c:48:65:00:11:
27:cf:32:2e:c4:c7:77:d0:57:af:9e:9d:e9:6d:ef:c3:9c:85:
e3:cf:7e:aa:56:e1:e2:0e:c3:e1:b8:86:7d:7c:8c:bd:6f:26:
9d:cf:43:72:1c:2d:19:e3:91:8d:12:6a:46:6c:56:9d:60:ba:
cc:d3:6b:63:22:f6:3c:b7:5b:62:96:8a:3d:11:4c:0c:c7:87:
04:99:05:b6:41:41:8b:24:c4:13:38:6c:76:f8:93:dc:d4:5a:
7b:8c:9b:90:fe:10:97:17:84:58:0d:fa:44:e2:77:b4:fc:2e:
d1:69:dc:37:fb:88:84:a8:a1:9d:13:70:c5:a2:d4:d4:c6:eb:
19:09:c7:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavICAOjzEcOwmsHPOSCza7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjUwNTA4MDkwMDQwWhcNMjUwNTA5MDkwMDQwWjAzMTEwLwYDVQQD
EyhmNjUzYTI5YzAzMDY3NmUwZGZmMTg1ZjVhYWZkNWI4OWQ1YmVhNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoJD5GjF+w88PE0kMPVw8V6djBFG
fYsWzswA+Edsw6aXSGJroX4LwUKI/ISr1Ncm17Yurp0d7TJGqb2B3O60ISQMOprY
4E3P2ZJAeOf8a1vYPm5XYD23n0ir0vcIZPkateSOPsJfPc2zDZ9b+wO4G9Bxp1GX
kSMifHinJF4Qaim1miRg3S1fc1WHf4qBf4REhVPEU4AlgJz/3y2cULkQXJl2Se3U
PzniUu5pazyO4B1N+ywN0/IRV4OLtszJepwMsdN3qeuaBbVe8Bx20qOFHGaHrQeu
S9WbY8eMbMad+jpCd1jGduMiP8LJQk0DIPeRkDtr12S6UEqdwOvAskH5VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZTopwDBnbg3/GF9ar9W4nVvqWmMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNCA3HAr
TIhvghiuVGe4NJJiirpKrrQXu1XEaxMZqcr6tybywDfnCvTpytoVcSayAJFadq4Z
rr2wWe07wEtegXjn+uJO8oFwNjxL8Lt3jT/heuWHxfmDpIX8ZDH5zczS1GGtrSEB
gEulZMmPj188JXVDv7u9oUIn9kxIZQARJ88yLsTHd9BXr56d6W3vw5yF489+qlbh
4g7D4biGfXyMvW8mnc9DchwtGeORjRJqRmxWnWC6zNNrYyL2PLdbYpaKPRFMDMeH
BJkFtkFBiyTEEzhsdviT3NRae4ybkP4QlxeEWA36ROJ3tPwu0WncN/uIhKihnRNw
xaLU1MbrGQnHXA==
-----END CERTIFICATE-----
Generated at Thu May 8 18:53:54 2025 by rpki-client