Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: rvcOCei0AVr6Pa8bOeaYyeEaDza4spZiM8JxbTCUwUU=
Subject key identifier: A7:A6:AD:E4:16:16:94:13:3B:25:1B:75:2B:AD:A7:EE:8D:32:5E:8A
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 0196BE5C51C94AD892C42E6CD6A02A0A2229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 08:00:43 +0000
Manifest this update: Sun 11 May 2025 08:00:43 +0000
Manifest next update: Mon 12 May 2025 08:00:43 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: 7KD5gBY/qaxT1PIC5ZR7XuxDAlYPaaxos60A76W5hf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:51:c9:4a:d8:92:c4:2e:6c:d6:a0:2a:0a:22:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: May 11 08:00:43 2025 GMT
Not After : May 12 08:00:43 2025 GMT
Subject: CN=a7a6ade4161694133b251b752bada7ee8d325e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:f4:01:2e:e3:c3:22:a9:57:f5:44:13:3b:
42:da:15:6d:64:39:0b:43:67:54:7b:f8:36:dc:08:
f2:38:eb:f8:87:e9:fd:28:b4:c3:d8:20:cb:af:a7:
a0:26:4c:66:11:59:f6:da:57:b2:d8:e8:ab:ec:7f:
47:bf:c6:68:c1:cc:e0:29:11:98:5c:08:e8:b8:a0:
09:89:ef:88:6a:a4:07:04:07:4f:dc:af:a9:7b:19:
be:e7:c8:60:c4:88:20:da:8e:95:19:27:33:20:c7:
a8:73:9d:60:c6:82:75:62:46:da:c3:e5:cb:9c:77:
a6:0e:ca:d2:b7:ef:9d:43:61:84:bb:18:2f:df:72:
7a:d9:0c:5e:e4:b1:49:02:98:0c:8d:91:55:4e:54:
93:4b:bc:6a:d8:20:c2:e6:3a:a1:fa:a5:34:87:67:
3e:0f:69:a1:8c:e8:56:5f:46:9f:30:f2:07:84:46:
11:79:69:b1:7f:4a:2c:1c:02:04:c2:39:67:16:b5:
14:3f:8a:21:e1:9d:5c:e5:0e:83:4c:67:cd:4d:01:
3f:ec:6a:15:fa:9d:fe:b9:21:91:89:95:df:8a:b9:
71:9c:ba:21:de:37:be:0e:a0:eb:95:dd:f2:47:8a:
98:f4:07:28:a7:34:90:91:e9:37:72:95:9a:cf:bb:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A6:AD:E4:16:16:94:13:3B:25:1B:75:2B:AD:A7:EE:8D:32:5E:8A
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:bf:e0:6c:e8:32:8e:a4:47:41:d4:20:19:68:eb:7c:f5:
70:7c:5a:80:60:3e:75:9d:9d:86:37:2b:e4:c9:ca:76:11:73:
1c:ce:29:ee:e6:51:78:dd:71:6d:50:f9:1c:a5:d3:33:07:b3:
8a:7f:1b:e5:d1:ec:82:3d:8e:49:81:fe:a4:ea:b3:65:a1:d6:
ad:dd:b0:2d:85:75:bb:11:b1:44:73:f1:f3:35:70:14:bb:5d:
10:61:72:49:33:45:14:d5:bb:43:34:41:34:6d:05:ee:9f:43:
1a:6c:71:2d:ab:35:d7:b9:c3:a6:49:e3:be:a4:6e:b6:a2:e1:
a3:89:e9:d9:c8:94:3f:6e:a3:1f:90:38:3b:e8:be:45:5b:e7:
0d:06:fd:b8:9f:c9:2b:db:08:50:80:20:e8:03:e6:40:21:7b:
52:7f:71:7b:0e:48:62:64:9b:74:6e:33:71:98:16:ab:11:4f:
90:28:8b:95:cc:5d:82:74:ab:51:3f:35:72:e5:c6:df:01:78:
e0:11:c0:71:5a:d2:ff:9b:e6:50:b1:b4:30:09:67:c1:99:da:
16:4b:d1:f7:d7:b5:be:f2:9f:00:b1:d5:00:80:4b:55:a7:9c:
80:d9:c5:4b:46:cf:2c:36:89:6c:41:32:ee:db:da:85:f4:6e:
d5:80:fe:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+XFHJStiSxC5s1qAqCiIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZWE1MGExYzYyMDgyNzYyYWZkYTAwN2Q2ZmM4YjRiZGIw
NTc0OWYwHhcNMjUwNTExMDgwMDQzWhcNMjUwNTEyMDgwMDQzWjAzMTEwLwYDVQQD
EyhhN2E2YWRlNDE2MTY5NDEzM2IyNTFiNzUyYmFkYTdlZThkMzI1ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7r0AS7jwyKpV/VEEztC2hVtZDkL
Q2dUe/g23AjyOOv4h+n9KLTD2CDLr6egJkxmEVn22ley2Oir7H9Hv8ZowczgKRGY
XAjouKAJie+IaqQHBAdP3K+pexm+58hgxIgg2o6VGSczIMeoc51gxoJ1Ykbaw+XL
nHemDsrSt++dQ2GEuxgv33J62Qxe5LFJApgMjZFVTlSTS7xq2CDC5jqh+qU0h2c+
D2mhjOhWX0afMPIHhEYReWmxf0osHAIEwjlnFrUUP4oh4Z1c5Q6DTGfNTQE/7GoV
+p3+uSGRiZXfirlxnLoh3je+DqDrld3yR4qY9AcopzSQkek3cpWaz7ue3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKemreQWFpQTOyUbdSutp+6NMl6KMB8GA1UdIwQY
MBaAFEnqUKHGIIJ2Kv2gB9b8i0vbBXSfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAt
MjcyZGFiNWFmYTY2LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi80OGE5ZWItMThkYi00ZjkyLTk1ODAtMjcyZGFiNWFmYTY2
LzEvU2VwUW9jWWdnbllxX2FBSDF2eUxTOXNGZEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiI2/4Gzo
Mo6kR0HUIBlo63z1cHxagGA+dZ2dhjcr5MnKdhFzHM4p7uZReN1xbVD5HKXTMwez
in8b5dHsgj2OSYH+pOqzZaHWrd2wLYV1uxGxRHPx8zVwFLtdEGFySTNFFNW7QzRB
NG0F7p9DGmxxLas117nDpknjvqRutqLho4np2ciUP26jH5A4O+i+RVvnDQb9uJ/J
K9sIUIAg6APmQCF7Un9xew5IYmSbdG4zcZgWqxFPkCiLlcxdgnSrUT81cuXG3wF4
4BHAcVrS/5vmULG0MAlnwZnaFkvR99e1vvKfALHVAIBLVaecgNnFS0bPLDaJbEEy
7tvahfRu1YD+tA==
-----END CERTIFICATE-----
Generated at Sun May 11 15:07:48 2025 by rpki-client