Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
File: 025dcJNbjLw3zyFsRGaX1MJ6mT4.mft (raw, json)
Hash identifier: OcZ5W0Sz6GyaFBgFi0QahwbhCG47F5cei1mOHz89V/I=
Subject key identifier: 08:3E:35:00:D1:FB:A2:3C:32:60:85:6F:43:98:70:2F:68:97:C1:5B
Authority key identifier: D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
Certificate issuer: /CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Certificate serial: 0196B859FF0FF2BEAB929A7F28EBEFFDA2B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
Manifest number: 021D
Signing time: Sat 10 May 2025 04:00:27 +0000
Manifest this update: Sat 10 May 2025 04:00:27 +0000
Manifest next update: Sun 11 May 2025 04:00:27 +0000
Files and hashes: 1: 025dcJNbjLw3zyFsRGaX1MJ6mT4.crl (hash: k3kmwUIcb38r6sKxle4kec2G63OnIVaJgy0vpWEA2QA=)
2: NOS2phI0mCKN8vvba7iknsg1tg8.roa (hash: FS8k6CBkj6b58p+lSJzaqjPgwXY7sIfiWMXiCi2T3/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:59:ff:0f:f2:be:ab:92:9a:7f:28:eb:ef:fd:a2:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36e5d70935b8cbc37cf216c446697d4c27a993e
Validity
Not Before: May 10 04:00:27 2025 GMT
Not After : May 11 04:00:27 2025 GMT
Subject: CN=083e3500d1fba23c3260856f4398702f6897c15b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:f4:2e:83:e3:7e:dd:ff:2c:ad:3c:96:e8:
b3:aa:ca:ae:c2:20:b4:de:84:6a:73:5c:27:f4:49:
fc:12:52:3a:6a:7f:1c:46:e9:94:f6:92:33:7d:0b:
5d:c5:71:8a:9a:88:d8:df:82:84:31:2f:5c:1c:b0:
b2:b5:78:60:cb:34:af:b8:36:55:4f:18:de:7d:6a:
07:dc:7c:ab:23:96:fe:b8:a6:02:1f:cf:c3:38:2a:
79:17:ca:30:20:f5:cf:72:04:31:9c:0a:b5:59:a1:
5e:5b:77:69:ab:41:36:9d:d3:b4:f5:79:ab:48:77:
d2:f2:42:d7:aa:b4:72:69:a5:03:eb:19:70:27:c5:
87:82:64:be:8f:1c:24:7e:d2:5f:51:42:46:5a:f5:
eb:67:fb:fc:85:f1:e3:db:e0:6c:5e:49:56:b7:65:
92:5e:74:69:1c:d5:62:08:d6:ee:3a:5b:b4:fa:45:
c9:ab:0a:d6:09:a6:92:b8:8c:70:52:f1:e4:f0:44:
d1:74:1c:91:90:db:9f:6e:cc:b2:6b:76:25:bf:35:
23:1e:dc:57:f3:b8:b3:a0:0e:14:c7:66:f4:2d:17:
1e:ae:c3:93:e9:b8:5a:69:8e:7c:ed:40:cf:22:aa:
d3:37:84:19:20:d7:b0:4e:7e:e6:e4:3a:74:23:69:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:35:00:D1:FB:A2:3C:32:60:85:6F:43:98:70:2F:68:97:C1:5B
X509v3 Authority Key Identifier:
keyid:D3:6E:5D:70:93:5B:8C:BC:37:CF:21:6C:44:66:97:D4:C2:7A:99:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/025dcJNbjLw3zyFsRGaX1MJ6mT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0b06c0-d890-49bd-a29f-f07efac4e2de/1/025dcJNbjLw3zyFsRGaX1MJ6mT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:af:34:e6:be:8c:14:f2:2f:8a:ca:44:98:c7:eb:18:fe:13:
4f:02:9d:34:ab:ff:cb:7b:5a:68:08:60:14:a5:c2:25:73:6c:
50:00:2c:23:e8:12:03:66:37:d0:1f:68:cf:45:35:e8:fe:c2:
22:a0:fa:78:66:9c:cf:6f:63:37:6b:b3:55:9a:79:0e:40:bb:
7b:6d:4b:aa:04:21:ff:61:5d:8e:44:3e:1c:b5:3d:51:5a:20:
01:03:5b:d2:49:13:31:bf:5d:68:9e:dc:48:90:36:df:af:d0:
e3:0f:f6:fd:a0:f4:dc:dd:2a:0f:7e:95:f3:36:6d:67:1b:1f:
66:b1:71:bb:75:a1:a4:3a:aa:04:45:6c:73:05:81:0f:5e:66:
87:05:d7:f3:24:34:18:0a:6e:6d:39:6d:6f:f9:c4:9e:f0:46:
09:69:f6:a5:0d:e7:c1:e4:dc:65:6d:37:15:2f:71:f3:53:ec:
7f:24:9a:22:a2:d9:03:dd:c7:7b:ee:e8:35:69:ef:5d:22:90:
0d:e5:11:20:85:1e:a9:dd:c5:18:45:15:0e:e2:32:4d:5b:fb:
cd:9f:9f:d4:e1:38:58:97:77:00:13:99:b1:db:0f:8e:1c:a0:
61:d2:dc:bd:c7:0a:c0:8b:ad:4c:0b:0b:9e:24:d7:14:94:6f:
f5:f5:13:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4Wf8P8r6rkpp/KOvv/aK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNmU1ZDcwOTM1YjhjYmMzN2NmMjE2YzQ0NjY5N2Q0YzI3
YTk5M2UwHhcNMjUwNTEwMDQwMDI3WhcNMjUwNTExMDQwMDI3WjAzMTEwLwYDVQQD
EygwODNlMzUwMGQxZmJhMjNjMzI2MDg1NmY0Mzk4NzAyZjY4OTdjMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14r0LoPjft3/LK08luizqsquwiC0
3oRqc1wn9En8ElI6an8cRumU9pIzfQtdxXGKmojY34KEMS9cHLCytXhgyzSvuDZV
TxjefWoH3HyrI5b+uKYCH8/DOCp5F8owIPXPcgQxnAq1WaFeW3dpq0E2ndO09Xmr
SHfS8kLXqrRyaaUD6xlwJ8WHgmS+jxwkftJfUUJGWvXrZ/v8hfHj2+BsXklWt2WS
XnRpHNViCNbuOlu0+kXJqwrWCaaSuIxwUvHk8ETRdByRkNufbsyya3YlvzUjHtxX
87izoA4Ux2b0LRcersOT6bhaaY587UDPIqrTN4QZINewTn7m5Dp0I2k9YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg+NQDR+6I8MmCFb0OYcC9ol8FbMB8GA1UdIwQY
MBaAFNNuXXCTW4y8N88hbERml9TCepk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYt
ZjA3ZWZhYzRlMmRlLzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYjA2YzAtZDg5MC00OWJkLWEyOWYtZjA3ZWZhYzRlMmRl
LzEvMDI1ZGNKTmJqTHczenlGc1JHYVgxTUo2bVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq805r6M
FPIvispEmMfrGP4TTwKdNKv/y3taaAhgFKXCJXNsUAAsI+gSA2Y30B9oz0U16P7C
IqD6eGacz29jN2uzVZp5DkC7e21LqgQh/2FdjkQ+HLU9UVogAQNb0kkTMb9daJ7c
SJA236/Q4w/2/aD03N0qD36V8zZtZxsfZrFxu3WhpDqqBEVscwWBD15mhwXX8yQ0
GApubTltb/nEnvBGCWn2pQ3nweTcZW03FS9x81PsfySaIqLZA93He+7oNWnvXSKQ
DeURIIUeqd3FGEUVDuIyTVv7zZ+f1OE4WJd3ABOZsdsPjhygYdLcvccKwIutTAsL
niTXFJRv9fUTjg==
-----END CERTIFICATE-----
Generated at Sat May 10 14:40:23 2025 by rpki-client