Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
File: Ek8WR55LcqylibqgEDn8jpI7TMM.mft (raw, json)
Hash identifier: nwH101hluPf/KhJo5hLZU7HdY0Jxb4nEcFsqLNvTEHQ=
Subject key identifier: 14:7A:0A:5D:AB:AE:F0:95:3E:A5:5B:0A:4C:43:51:A0:8E:A5:F5:F9
Authority key identifier: 12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
Certificate issuer: /CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Certificate serial: 0196B220EADC0AA45405D22A54FC47265316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
Manifest number: 1154
Signing time: Thu 08 May 2025 23:00:23 +0000
Manifest this update: Thu 08 May 2025 23:00:23 +0000
Manifest next update: Fri 09 May 2025 23:00:23 +0000
Files and hashes: 1: AwjoyZI8RTyi89MX4-dvyjy68_c.roa (hash: O+HLCbEiaTJH3eiSGGyiEXEPhXChr9l42nDt8xPiEPA=)
2: Ek8WR55LcqylibqgEDn8jpI7TMM.crl (hash: xXYCNCXu7U776gcqZR8/aRIvidNFEkeRBZvLyLST7RI=)
3: axNN3PR5BYZSBckAYRhvHQEN0tw.roa (hash: W+trSCmDZNAemLcLRmNFpK8OHj78354SaAShhhdbFn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:20:ea:dc:0a:a4:54:05:d2:2a:54:fc:47:26:53:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f16479e4b72aca589baa01039fc8e923b4cc3
Validity
Not Before: May 8 23:00:23 2025 GMT
Not After : May 9 23:00:23 2025 GMT
Subject: CN=147a0a5dabaef0953ea55b0a4c4351a08ea5f5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:cb:53:9c:2d:7c:97:00:30:4e:be:f2:14:92:
18:1c:b3:5f:59:b3:4a:f4:57:a0:0a:86:7d:66:b7:
3a:3d:84:4a:fe:20:2d:ac:5b:ce:88:66:c5:dc:28:
d4:14:72:06:77:0a:35:5c:67:0f:0a:83:67:d8:96:
02:c8:6d:4c:d8:d6:49:7e:a0:f2:e8:37:b9:9d:b4:
c8:10:3c:72:b6:e7:f5:4e:51:5b:08:3b:bf:04:04:
d0:bb:4f:01:6e:42:f4:a8:71:78:d0:1a:90:54:d1:
b4:c9:61:e2:1d:dd:26:5f:9f:fb:bb:fb:ea:d0:9f:
8c:e5:d6:2b:24:53:8d:55:b6:43:72:78:84:39:f2:
e5:0a:37:83:15:9e:7d:2c:4a:18:96:1a:04:8a:71:
17:b7:3b:db:1a:bf:00:3b:a7:80:4c:29:bc:6c:c9:
56:64:b6:3a:8e:7c:94:70:6d:8f:71:31:e2:d3:32:
1d:ca:0e:0a:f6:be:01:cb:24:ab:b2:c9:00:52:6f:
00:e6:b6:a9:3b:87:4f:17:b2:2b:ef:db:1b:09:5d:
f0:bd:bd:6d:76:f8:6a:58:d2:5d:0a:04:78:a1:02:
7d:5e:73:fa:af:d1:b9:90:e8:af:91:05:64:79:58:
f7:05:95:2d:71:7f:9d:e9:14:91:79:54:f1:5b:f6:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7A:0A:5D:AB:AE:F0:95:3E:A5:5B:0A:4C:43:51:A0:8E:A5:F5:F9
X509v3 Authority Key Identifier:
keyid:12:4F:16:47:9E:4B:72:AC:A5:89:BA:A0:10:39:FC:8E:92:3B:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek8WR55LcqylibqgEDn8jpI7TMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/60c7c1-8f0f-4b80-8630-3e4f35b66461/1/Ek8WR55LcqylibqgEDn8jpI7TMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8f:33:a6:3e:f5:79:f6:67:1e:a4:86:34:71:3e:2f:62:f3:
0b:b3:25:d0:f5:9c:61:80:9a:44:d6:60:bf:fc:b9:cc:02:9e:
66:91:52:ab:d4:2b:7f:d4:d9:19:66:39:d4:92:dc:d7:54:e4:
ad:a5:44:0d:a7:c9:82:36:fa:bc:58:d8:b0:ad:52:7b:e6:29:
4b:bd:78:00:4e:ca:c7:b3:e2:32:61:ba:8a:3f:5a:6d:bc:a2:
c5:53:04:f8:51:c6:74:9f:2a:ac:01:8c:21:3e:ab:09:74:e9:
d1:b3:09:b8:5b:4e:ac:ad:d5:d4:c4:b9:14:2b:90:e3:2b:91:
22:cc:68:46:b0:d6:1d:29:83:34:27:40:7f:5b:dd:e9:2f:76:
ac:67:c6:09:78:71:8a:5e:a2:b8:16:93:a4:a9:22:0e:bc:c4:
53:d0:56:d3:3c:5c:59:ad:0a:1f:72:ac:de:2c:86:0e:a4:24:
e8:7a:1e:eb:79:97:6a:d3:be:ff:ed:c0:a2:e2:06:fe:11:43:
5f:08:4a:55:85:af:57:6a:0d:4c:bd:46:6e:15:cd:16:9c:71:
70:9b:a0:e8:50:04:e0:b8:ae:e2:37:b6:e6:7b:e5:ad:7a:9a:
2d:91:95:1f:25:1e:af:42:49:46:86:4a:9c:28:a8:f7:5e:0f:
bf:cf:39:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayIOrcCqRUBdIqVPxHJlMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGYxNjQ3OWU0YjcyYWNhNTg5YmFhMDEwMzlmYzhlOTIz
YjRjYzMwHhcNMjUwNTA4MjMwMDIzWhcNMjUwNTA5MjMwMDIzWjAzMTEwLwYDVQQD
EygxNDdhMGE1ZGFiYWVmMDk1M2VhNTViMGE0YzQzNTFhMDhlYTVmNWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ctTnC18lwAwTr7yFJIYHLNfWbNK
9FegCoZ9Zrc6PYRK/iAtrFvOiGbF3CjUFHIGdwo1XGcPCoNn2JYCyG1M2NZJfqDy
6De5nbTIEDxytuf1TlFbCDu/BATQu08BbkL0qHF40BqQVNG0yWHiHd0mX5/7u/vq
0J+M5dYrJFONVbZDcniEOfLlCjeDFZ59LEoYlhoEinEXtzvbGr8AO6eATCm8bMlW
ZLY6jnyUcG2PcTHi0zIdyg4K9r4ByySrsskAUm8A5rapO4dPF7Ir79sbCV3wvb1t
dvhqWNJdCgR4oQJ9XnP6r9G5kOivkQVkeVj3BZUtcX+d6RSReVTxW/aC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR6Cl2rrvCVPqVbCkxDUaCOpfX5MB8GA1UdIwQY
MBaAFBJPFkeeS3KspYm6oBA5/I6SO0zDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAt
M2U0ZjM1YjY2NDYxLzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82MGM3YzEtOGYwZi00YjgwLTg2MzAtM2U0ZjM1YjY2NDYx
LzEvRWs4V1I1NUxjcXlsaWJxZ0VEbjhqcEk3VE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo8zpj71
efZnHqSGNHE+L2LzC7Ml0PWcYYCaRNZgv/y5zAKeZpFSq9Qrf9TZGWY51JLc11Tk
raVEDafJgjb6vFjYsK1Se+YpS714AE7Kx7PiMmG6ij9abbyixVME+FHGdJ8qrAGM
IT6rCXTp0bMJuFtOrK3V1MS5FCuQ4yuRIsxoRrDWHSmDNCdAf1vd6S92rGfGCXhx
il6iuBaTpKkiDrzEU9BW0zxcWa0KH3Ks3iyGDqQk6Hoe63mXatO+/+3AouIG/hFD
XwhKVYWvV2oNTL1GbhXNFpxxcJug6FAE4Liu4je25nvlrXqaLZGVHyUer0JJRoZK
nCio914Pv885Rg==
-----END CERTIFICATE-----
Generated at Fri May 9 04:36:50 2025 by rpki-client