Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
File: A8nqT5ZYixa9T8o41MHd9lwav9o.mft (raw, json)
Hash identifier: et4745pxvPxUUWvlrTNR6/v3RHPrXwb4GUSNxxbLdlI=
Subject key identifier: 66:63:AF:C9:B6:EC:69:10:8F:E2:E1:59:18:45:D3:41:BB:BC:AB:95
Authority key identifier: 03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
Certificate issuer: /CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Certificate serial: 01969F763D93BCB10047D479212E94021105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
Manifest number: 0132
Signing time: Mon 05 May 2025 08:00:48 +0000
Manifest this update: Mon 05 May 2025 08:00:48 +0000
Manifest next update: Tue 06 May 2025 08:00:48 +0000
Files and hashes: 1: A8nqT5ZYixa9T8o41MHd9lwav9o.crl (hash: FdsiQXhBapBkYWIdeOvoxbN7rHpGpzVfzCg1PXv8J/k=)
2: jMIN8b0BVc9eEY8W0xUyZYn9gu0.roa (hash: T+38e+ztuuV+6KtpVMPU6c7/hBQtyKbXl9bJ797XzNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:3d:93:bc:b1:00:47:d4:79:21:2e:94:02:11:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c9ea4f96588b16bd4fca38d4c1ddf65c1abfda
Validity
Not Before: May 5 08:00:48 2025 GMT
Not After : May 6 08:00:48 2025 GMT
Subject: CN=6663afc9b6ec69108fe2e1591845d341bbbcab95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:28:5e:b8:3e:e3:ee:96:87:ba:2a:f6:c6:
6b:33:11:09:a9:85:ac:39:37:63:e1:a8:ee:02:dd:
48:62:b5:f9:52:ef:3d:f0:ed:80:0c:2b:1f:03:17:
5f:59:01:2e:66:6b:fb:1c:80:9a:ca:8c:9a:fa:c1:
c3:5d:1a:12:2f:d7:71:bb:49:20:a3:ac:b7:f8:e1:
75:d6:f9:9b:cb:7d:30:06:a8:97:57:d8:a0:c4:67:
19:05:6d:35:f7:8a:cb:71:87:49:a8:f4:16:37:23:
10:93:1d:37:7f:55:74:58:80:9a:22:da:f8:0b:e1:
b6:9b:76:63:c4:77:c9:2a:b8:d3:5e:0f:05:d2:90:
b4:5a:f2:e4:fe:e0:5b:1c:a6:41:53:c6:6e:d9:15:
e5:df:58:b6:a9:28:01:bb:63:21:ad:48:a6:63:22:
82:03:90:24:91:66:fc:19:16:e8:82:15:7e:e3:b7:
d1:40:8d:a3:a8:58:9f:67:99:d9:70:2e:fe:4e:5b:
c8:17:d3:69:4b:4d:df:34:1c:1f:7e:fb:56:ca:54:
b2:c9:7c:f7:18:e3:22:02:eb:1b:e2:87:82:09:1f:
03:1a:21:83:9c:6c:b9:a0:9e:af:4b:ab:b1:a4:40:
e1:e9:75:15:ff:50:17:a3:42:64:73:c8:f1:57:e2:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:63:AF:C9:B6:EC:69:10:8F:E2:E1:59:18:45:D3:41:BB:BC:AB:95
X509v3 Authority Key Identifier:
keyid:03:C9:EA:4F:96:58:8B:16:BD:4F:CA:38:D4:C1:DD:F6:5C:1A:BF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8nqT5ZYixa9T8o41MHd9lwav9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e7d0f0-f481-4fe3-8677-1cd33c62c45c/1/A8nqT5ZYixa9T8o41MHd9lwav9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c8:52:5e:b3:9d:ba:01:16:02:21:86:fb:f4:9b:5b:05:02:
9c:90:a9:68:30:39:31:6d:03:df:dd:d4:21:50:e3:4c:84:a8:
2e:b2:2d:2c:b9:81:43:19:6c:3e:4f:20:ac:38:ab:77:10:0d:
1f:f1:70:a4:84:16:99:01:ba:ad:d2:b5:18:d1:86:ce:01:9c:
80:d1:19:cd:e9:82:c0:0c:4d:f9:88:fe:50:f6:76:ec:39:30:
df:e3:d6:40:58:b0:99:af:06:87:4b:28:d5:6f:9a:e7:0c:5b:
94:0a:41:56:e9:0f:da:8f:8a:e4:7a:34:55:56:8a:96:7f:1b:
bd:64:3e:7a:54:0a:de:49:b1:ca:09:4b:7e:66:5c:38:4b:db:
67:13:a4:3b:8b:05:d7:2f:85:cc:69:01:ec:30:1c:93:1d:4b:
05:f2:0c:1b:0b:bc:0e:dc:fc:71:58:61:72:b7:2f:1d:1e:46:
d4:85:c3:b6:18:62:8c:04:50:af:69:93:f5:af:29:07:27:c7:
33:14:47:9e:61:68:9b:bc:6a:30:23:aa:30:86:87:d0:a5:3d:
0a:77:33:2e:85:bf:e5:fa:df:63:95:05:be:62:c3:af:df:7b:
26:5d:cd:5c:e6:31:07:ac:a7:98:2f:38:52:79:2b:02:d1:1a:
03:6c:b9:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafdj2TvLEAR9R5IS6UAhEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzllYTRmOTY1ODhiMTZiZDRmY2EzOGQ0YzFkZGY2NWMx
YWJmZGEwHhcNMjUwNTA1MDgwMDQ4WhcNMjUwNTA2MDgwMDQ4WjAzMTEwLwYDVQQD
Eyg2NjYzYWZjOWI2ZWM2OTEwOGZlMmUxNTkxODQ1ZDM0MWJiYmNhYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUAoXrg+4+6Wh7oq9sZrMxEJqYWs
OTdj4ajuAt1IYrX5Uu898O2ADCsfAxdfWQEuZmv7HICayoya+sHDXRoSL9dxu0kg
o6y3+OF11vmby30wBqiXV9igxGcZBW0194rLcYdJqPQWNyMQkx03f1V0WICaItr4
C+G2m3ZjxHfJKrjTXg8F0pC0WvLk/uBbHKZBU8Zu2RXl31i2qSgBu2MhrUimYyKC
A5AkkWb8GRboghV+47fRQI2jqFifZ5nZcC7+TlvIF9NpS03fNBwffvtWylSyyXz3
GOMiAusb4oeCCR8DGiGDnGy5oJ6vS6uxpEDh6XUV/1AXo0Jkc8jxV+JkjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZjr8m27GkQj+LhWRhF00G7vKuVMB8GA1UdIwQY
MBaAFAPJ6k+WWIsWvU/KONTB3fZcGr/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2Nzct
MWNkMzNjNjJjNDVjLzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lN2QwZjAtZjQ4MS00ZmUzLTg2NzctMWNkMzNjNjJjNDVj
LzEvQThucVQ1WllpeGE5VDhvNDFNSGQ5bHdhdjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMhSXrOd
ugEWAiGG+/SbWwUCnJCpaDA5MW0D393UIVDjTISoLrItLLmBQxlsPk8grDirdxAN
H/FwpIQWmQG6rdK1GNGGzgGcgNEZzemCwAxN+Yj+UPZ27Dkw3+PWQFiwma8Gh0so
1W+a5wxblApBVukP2o+K5Ho0VVaKln8bvWQ+elQK3kmxyglLfmZcOEvbZxOkO4sF
1y+FzGkB7DAckx1LBfIMGwu8Dtz8cVhhcrcvHR5G1IXDthhijARQr2mT9a8pByfH
MxRHnmFom7xqMCOqMIaH0KU9CnczLoW/5frfY5UFvmLDr997Jl3NXOYxB6ynmC84
UnkrAtEaA2y5IA==
-----END CERTIFICATE-----
Generated at Mon May 5 10:41:01 2025 by rpki-client