Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File: e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier: M3hyLdOzut0oHNH2xEs7vcTDGzDOhJrtYOJ3XAfjVeQ=
Subject key identifier: 05:95:25:73:A3:B1:00:55:51:60:CF:7F:63:A2:FE:17:92:5A:9D:42
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer: /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial: 0196CB72A6CE58365E202EC56BC07A4F5AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 21:00:10 +0000
Manifest this update: Tue 13 May 2025 21:00:10 +0000
Manifest next update: Wed 14 May 2025 21:00:10 +0000
Files and hashes: 1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: IFNv7QzYlKW4y0y17GRgsZRAZWCnxAR6QW+xOljiW/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:72:a6:ce:58:36:5e:20:2e:c5:6b:c0:7a:4f:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Validity
Not Before: May 13 21:00:10 2025 GMT
Not After : May 14 21:00:10 2025 GMT
Subject: CN=05952573a3b100555160cf7f63a2fe17925a9d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:45:c5:72:79:be:80:e5:52:98:b4:6b:ef:
b6:20:58:66:8f:ea:d9:84:16:01:20:19:b6:0d:46:
1d:b8:9b:35:f9:5d:b1:2e:5a:27:8f:d4:09:d9:99:
24:5d:06:72:e9:0c:b3:0c:9e:c8:62:97:fc:7f:23:
1a:e3:06:84:30:72:b1:45:0d:e5:bd:ff:96:81:02:
62:07:26:11:5a:a1:c3:d9:26:5f:8d:ef:31:87:8d:
8f:81:49:b4:33:b4:cf:6d:e5:62:66:21:21:4b:66:
7f:32:ed:a3:91:f5:f5:9c:b5:74:c4:e7:95:02:b9:
f1:0c:cf:f8:39:ef:8a:59:75:b9:95:d3:92:eb:f6:
af:7d:df:a1:e6:f4:a1:63:63:96:46:e2:b0:fe:e5:
a6:a1:db:58:cf:32:58:05:8a:93:49:17:c9:bb:d8:
da:b7:70:5d:4f:d7:9e:07:d1:f0:29:a9:4d:fd:f2:
08:c7:a4:9e:8c:03:e0:64:41:54:fd:ab:f7:4b:20:
9e:b7:34:ee:6f:a6:e2:07:e4:f7:6f:9a:ef:6e:9b:
3e:27:9a:73:36:84:6a:f9:0b:a7:0a:67:3d:0f:3b:
09:db:d2:69:58:dd:ce:a1:a1:00:a4:a2:e7:5f:3a:
a4:1a:52:88:ff:81:58:02:ab:0b:96:a4:eb:e1:2f:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:95:25:73:A3:B1:00:55:51:60:CF:7F:63:A2:FE:17:92:5A:9D:42
X509v3 Authority Key Identifier:
keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:96:57:91:1c:42:d1:4d:d9:da:20:0e:cb:62:a5:86:a8:a1:
52:c8:da:09:bd:a9:50:f3:00:9d:f2:df:ac:24:8a:f9:0b:02:
93:25:f3:b1:ab:ff:aa:21:50:64:6d:56:b1:af:a8:bc:e0:35:
f8:35:46:41:11:72:df:86:88:7d:8e:8c:18:47:01:12:83:bf:
32:bb:d4:5e:a5:20:3c:f2:d6:fb:63:b7:d4:86:5e:dd:b1:5f:
73:15:cd:88:82:43:dd:02:af:ca:68:0e:83:c6:e1:c2:7b:5a:
ce:84:d5:7a:7c:b3:5d:34:d5:a1:40:29:76:d0:d7:61:b0:00:
70:21:a0:b5:ac:f7:3b:0d:c9:da:1f:b5:97:de:b3:e1:c1:a4:
37:56:4c:fa:0a:bd:93:11:9d:c3:f7:29:8c:db:38:f0:f7:93:
c4:2c:4a:f9:5d:a8:f1:a8:ca:30:50:c1:ca:09:c7:e1:0e:ca:
19:ad:2e:66:f3:df:54:5a:22:31:c9:b1:fa:11:bb:8d:83:48:
ef:fb:ef:f7:bb:cc:10:0b:d2:c3:fa:a9:ea:07:52:75:0b:96:
1e:6c:b5:b5:e6:07:a8:fe:6c:18:3c:86:18:ca:5f:21:c6:75:
58:6a:fc:95:16:82:a1:33:0a:2d:21:ca:88:53:e0:48:33:38:
6a:35:71:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLcqbOWDZeIC7Fa8B6T1rHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNjc1ZTI1M2I2MmNmOTU4MDM2NWVkNzNkYWExZGQ2NTlk
NGQ2NjIwHhcNMjUwNTEzMjEwMDEwWhcNMjUwNTE0MjEwMDEwWjAzMTEwLwYDVQQD
EygwNTk1MjU3M2EzYjEwMDU1NTE2MGNmN2Y2M2EyZmUxNzkyNWE5ZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjpFxXJ5voDlUpi0a++2IFhmj+rZ
hBYBIBm2DUYduJs1+V2xLlonj9QJ2ZkkXQZy6QyzDJ7IYpf8fyMa4waEMHKxRQ3l
vf+WgQJiByYRWqHD2SZfje8xh42PgUm0M7TPbeViZiEhS2Z/Mu2jkfX1nLV0xOeV
ArnxDM/4Oe+KWXW5ldOS6/avfd+h5vShY2OWRuKw/uWmodtYzzJYBYqTSRfJu9ja
t3BdT9eeB9HwKalN/fIIx6SejAPgZEFU/av3SyCetzTub6biB+T3b5rvbps+J5pz
NoRq+QunCmc9DzsJ29JpWN3OoaEApKLnXzqkGlKI/4FYAqsLlqTr4S8o9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWVJXOjsQBVUWDPf2Oi/heSWp1CMB8GA1UdIwQY
MBaAFHtnXiU7Ys+VgDZe1z2qHdZZ1NZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hMTg0ZjItYmE1MS00OTc3LWFlZmYt
NjZjNzU0MjlhODhhLzEvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hMTg0ZjItYmE1MS00OTc3LWFlZmYtNjZjNzU0MjlhODhh
LzEvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJZXkRxC
0U3Z2iAOy2KlhqihUsjaCb2pUPMAnfLfrCSK+QsCkyXzsav/qiFQZG1Wsa+ovOA1
+DVGQRFy34aIfY6MGEcBEoO/MrvUXqUgPPLW+2O31IZe3bFfcxXNiIJD3QKvymgO
g8bhwntazoTVenyzXTTVoUApdtDXYbAAcCGgtaz3Ow3J2h+1l96z4cGkN1ZM+gq9
kxGdw/cpjNs48PeTxCxK+V2o8ajKMFDBygnH4Q7KGa0uZvPfVFoiMcmx+hG7jYNI
7/vv97vMEAvSw/qp6gdSdQuWHmy1teYHqP5sGDyGGMpfIcZ1WGr8lRaCoTMKLSHK
iFPgSDM4ajVxrA==
-----END CERTIFICATE-----
Generated at Wed May 14 00:40:58 2025 by rpki-client