Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
File: AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft (raw, json)
Hash identifier: r2TxtzbJxDJKdTpfxP5WdlrHAERJ1aFdPOSeu2FxTKM=
Subject key identifier: CC:8D:BF:D4:98:0E:1C:28:4D:62:30:0C:58:CC:6B:7B:C8:91:83:AD
Authority key identifier: 02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
Certificate issuer: /CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Certificate serial: 0196B8C8255E3314407C42728D8D3D7A0701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
Manifest number: 0649
Signing time: Sat 10 May 2025 06:00:46 +0000
Manifest this update: Sat 10 May 2025 06:00:46 +0000
Manifest next update: Sun 11 May 2025 06:00:46 +0000
Files and hashes: 1: AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl (hash: NKnuh6uJCY3aNbwLvXXtWSOwIDA3bcrIL4aP8Ih98dc=)
2: h2bGxUxbqOMwKZqb7G6CRO2lZho.roa (hash: mynhqYVK2VXcY1dJrTVkYeBGm7TzlIqS2eWaSHlhFbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:25:5e:33:14:40:7c:42:72:8d:8d:3d:7a:07:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c168ec597a3a37742cb4ded78356f1454f2bad
Validity
Not Before: May 10 06:00:46 2025 GMT
Not After : May 11 06:00:46 2025 GMT
Subject: CN=cc8dbfd4980e1c284d62300c58cc6b7bc89183ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:7c:2c:bf:15:ec:54:3d:0b:73:93:b1:38:
1f:b6:36:48:f3:2c:21:cd:59:34:95:e9:cb:71:29:
37:88:61:eb:42:56:34:cc:b0:59:70:19:99:b9:0c:
ed:57:d1:7b:e6:01:3b:5b:fc:2a:7f:81:c1:6b:de:
22:f4:21:57:d7:32:45:46:8f:34:32:16:ab:3a:e6:
32:6f:0a:ae:2e:cd:9b:fb:d8:47:b7:2d:e3:50:ed:
58:7a:0c:65:7d:83:1d:2b:7d:21:65:96:e5:06:99:
99:98:ca:2f:fc:fd:d1:4f:27:11:53:d2:bd:7d:50:
34:8f:a4:ee:d6:0d:48:dd:28:58:18:27:39:30:03:
d0:41:ee:04:ee:8b:cf:9f:20:3c:7e:9c:d5:df:c2:
df:f2:ba:ba:c8:ba:2a:de:91:be:42:11:db:c3:9b:
8b:7f:7e:48:d7:3a:3c:30:c8:f1:7b:d2:4e:04:80:
cf:db:6c:95:be:57:e7:fd:92:50:e8:c4:45:61:f4:
21:29:36:38:bd:93:6c:55:29:8b:f2:3f:1c:f0:e3:
7a:9e:a5:a9:50:7e:62:23:36:4f:6c:63:ac:58:db:
e6:b2:64:66:fb:5f:83:1c:cf:9c:c6:e6:4e:76:d6:
40:c8:d9:c6:cf:06:92:4a:58:bd:df:38:61:40:36:
cc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8D:BF:D4:98:0E:1C:28:4D:62:30:0C:58:CC:6B:7B:C8:91:83:AD
X509v3 Authority Key Identifier:
keyid:02:C1:68:EC:59:7A:3A:37:74:2C:B4:DE:D7:83:56:F1:45:4F:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsFo7Fl6Ojd0LLTe14NW8UVPK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f115cd-646b-491f-9e42-61d575241c1f/1/AsFo7Fl6Ojd0LLTe14NW8UVPK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:75:ed:14:9e:52:c6:e6:ca:e0:26:2f:93:82:87:70:72:
0e:02:93:08:0d:95:26:13:a0:e9:35:4d:16:09:65:52:28:3e:
a6:72:96:0b:d0:e7:29:6c:6f:67:0f:00:47:2d:f0:67:2b:40:
b8:b1:d0:f2:92:dd:30:9c:47:c3:c4:65:7a:dc:b0:99:3e:74:
ed:89:b4:c5:a0:fd:8a:72:48:90:43:6c:fd:5c:28:24:36:3a:
69:e2:25:a4:72:84:aa:f5:ac:d7:b0:c7:2d:73:62:fd:23:37:
1f:10:02:ed:59:c4:2b:35:32:29:84:c5:a8:c9:3f:89:64:19:
1e:d0:e0:82:83:ee:ef:c2:4b:83:5b:1f:3e:0e:f0:ee:a4:55:
ec:ba:41:37:c6:eb:9c:42:e1:1c:f3:6c:9a:41:f3:43:e7:8a:
00:51:76:9a:95:35:31:a6:8a:1b:12:d1:03:f6:95:26:59:3d:
a5:69:10:04:30:2d:ee:49:77:bd:fb:82:48:75:e8:e3:fd:c3:
19:f8:d1:41:03:45:ba:cb:a7:d5:71:f0:76:6a:31:2f:f5:d8:
f8:ac:02:4c:7f:66:cf:04:cb:aa:39:89:d0:7c:dd:53:bf:e0:
06:35:1d:9b:c9:86:d5:a3:86:7c:a0:bc:f8:46:bc:58:5c:56:
ae:55:ad:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4yCVeMxRAfEJyjY09egcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzE2OGVjNTk3YTNhMzc3NDJjYjRkZWQ3ODM1NmYxNDU0
ZjJiYWQwHhcNMjUwNTEwMDYwMDQ2WhcNMjUwNTExMDYwMDQ2WjAzMTEwLwYDVQQD
EyhjYzhkYmZkNDk4MGUxYzI4NGQ2MjMwMGM1OGNjNmI3YmM4OTE4M2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyip8LL8V7FQ9C3OTsTgftjZI8ywh
zVk0lenLcSk3iGHrQlY0zLBZcBmZuQztV9F75gE7W/wqf4HBa94i9CFX1zJFRo80
MharOuYybwquLs2b+9hHty3jUO1YegxlfYMdK30hZZblBpmZmMov/P3RTycRU9K9
fVA0j6Tu1g1I3ShYGCc5MAPQQe4E7ovPnyA8fpzV38Lf8rq6yLoq3pG+QhHbw5uL
f35I1zo8MMjxe9JOBIDP22yVvlfn/ZJQ6MRFYfQhKTY4vZNsVSmL8j8c8ON6nqWp
UH5iIzZPbGOsWNvmsmRm+1+DHM+cxuZOdtZAyNnGzwaSSli93zhhQDbMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyNv9SYDhwoTWIwDFjMa3vIkYOtMB8GA1UdIwQY
MBaAFALBaOxZejo3dCy03teDVvFFTyutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDIt
NjFkNTc1MjQxYzFmLzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMTE1Y2QtNjQ2Yi00OTFmLTllNDItNjFkNTc1MjQxYzFm
LzEvQXNGbzdGbDZPamQwTExUZTE0Tlc4VVZQSzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRF17RSe
UsbmyuAmL5OCh3ByDgKTCA2VJhOg6TVNFgllUig+pnKWC9DnKWxvZw8ARy3wZytA
uLHQ8pLdMJxHw8RletywmT507Ym0xaD9inJIkENs/VwoJDY6aeIlpHKEqvWs17DH
LXNi/SM3HxAC7VnEKzUyKYTFqMk/iWQZHtDggoPu78JLg1sfPg7w7qRV7LpBN8br
nELhHPNsmkHzQ+eKAFF2mpU1MaaKGxLRA/aVJlk9pWkQBDAt7kl3vfuCSHXo4/3D
GfjRQQNFusun1XHwdmoxL/XY+KwCTH9mzwTLqjmJ0HzdU7/gBjUdm8mG1aOGfKC8
+Ea8WFxWrlWtWw==
-----END CERTIFICATE-----
Generated at Sat May 10 12:46:16 2025 by rpki-client