Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
File: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft (raw, json)
Hash identifier: XCUSZuhf0fw19aviDq6MNEyDKazrsswSxzHSxs4Srv8=
Subject key identifier: BF:B8:44:C9:A1:2B:B6:F3:7D:79:D7:13:0E:16:78:96:D1:A8:E3:38
Authority key identifier: 23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
Certificate issuer: /CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Certificate serial: 0196BC6E50E7642BA82D5AD25CD7FDC74490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 23:01:08 +0000
Manifest this update: Sat 10 May 2025 23:01:08 +0000
Manifest next update: Sun 11 May 2025 23:01:08 +0000
Files and hashes: 1: HLzZYAURdW7ECuJc4fBvkEOMPUU.roa (hash: HLSzvw8EJ6C84Lk+YNRBmj8BE3yMR8wKB5nstwpxKJ8=)
2: I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl (hash: C/846OaoXukCOw2gzWGrUAW8d5Ee8sZyXQgk/xL7zuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:50:e7:64:2b:a8:2d:5a:d2:5c:d7:fd:c7:44:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dcd6f17126d4e951d92bc5f4c06ba9450fc8d4
Validity
Not Before: May 10 23:01:08 2025 GMT
Not After : May 11 23:01:08 2025 GMT
Subject: CN=bfb844c9a12bb6f37d79d7130e167896d1a8e338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:49:e0:74:90:64:03:14:8f:ce:84:79:d6:
f3:42:91:b9:50:07:b3:de:49:7f:8c:42:cd:c3:de:
f2:d4:62:85:30:5e:22:5f:a4:2a:50:a6:c7:ed:ea:
b4:12:ab:36:15:1c:80:df:5d:e2:fb:7a:51:9a:81:
18:24:b7:82:a2:2e:6f:25:f8:b7:71:7f:58:71:5f:
f2:1e:2d:99:c8:18:0b:28:c7:7b:9b:de:0c:74:87:
6d:e7:72:39:37:81:95:ad:7f:1c:7b:59:d7:73:22:
4f:ce:8d:bf:70:49:47:fe:94:a5:73:4d:35:9b:d2:
65:f3:66:8b:b6:1d:11:40:62:89:dc:9a:5a:7a:23:
b5:21:bd:17:0c:3a:2f:28:2a:78:7a:64:5d:56:84:
e6:61:28:e4:2a:87:ec:bb:66:73:19:f2:ae:b2:6f:
25:ba:a3:75:7f:ea:60:68:72:f2:03:c7:73:29:ea:
fc:a1:81:38:5c:94:96:f3:36:ec:52:25:0a:62:e1:
97:4a:cb:9a:53:36:45:77:27:5e:d3:84:ce:63:36:
64:ad:f4:62:7f:be:26:1c:51:56:27:f2:93:1e:96:
66:46:05:2e:1b:6f:e2:42:a0:32:e6:5f:f5:5d:dc:
40:70:7d:60:f5:05:fd:fe:62:b5:0c:df:92:cc:af:
10:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:44:C9:A1:2B:B6:F3:7D:79:D7:13:0E:16:78:96:D1:A8:E3:38
X509v3 Authority Key Identifier:
keyid:23:DC:D6:F1:71:26:D4:E9:51:D9:2B:C5:F4:C0:6B:A9:45:0F:C8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fda059-3436-4158-a1e4-49da05978ad0/1/I9zW8XEm1OlR2SvF9MBrqUUPyNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:38:12:cd:3f:09:a3:86:2d:96:21:0e:ea:09:9b:f9:68:98:
11:67:67:1a:8c:09:35:0e:8e:40:c3:73:66:0f:94:f0:01:0c:
40:67:91:d1:8b:54:e4:08:98:41:61:08:6b:fb:92:28:82:59:
dd:f3:ca:fa:30:48:38:e7:d9:5f:0d:da:cf:d0:b4:02:7f:89:
9c:34:30:8d:ca:79:ed:3d:e4:ba:b7:ca:06:1c:7c:75:8b:8b:
38:2d:06:18:65:f1:ee:58:0f:5a:7b:c6:db:6d:f7:28:c5:cb:
c8:53:40:5e:38:6f:7c:5e:51:ee:08:1d:1f:07:90:0d:c6:72:
2e:26:1d:7e:13:29:91:e3:4c:67:d2:f0:c8:98:95:f3:48:c7:
f9:c8:2d:ae:35:73:79:ad:ca:1e:42:31:1d:51:c9:38:d3:61:
ce:5e:58:d1:b8:de:03:60:b5:7a:4d:fc:9c:4a:9e:d3:4c:7a:
9d:56:00:6a:c9:19:cb:d0:89:80:ae:d7:40:47:44:81:c5:07:
df:44:fe:2c:f1:29:2d:ac:c2:71:6b:7f:73:6b:4a:cb:88:a6:
00:e6:c2:39:cb:d3:3b:0b:07:a8:2c:95:f5:10:d7:f4:7f:14:
d0:33:f0:77:e6:a2:b5:ec:f1:66:0c:f7:11:a4:9b:cb:77:c9:
00:ec:f6:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8blDnZCuoLVrSXNf9x0SQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZGNkNmYxNzEyNmQ0ZTk1MWQ5MmJjNWY0YzA2YmE5NDUw
ZmM4ZDQwHhcNMjUwNTEwMjMwMTA4WhcNMjUwNTExMjMwMTA4WjAzMTEwLwYDVQQD
EyhiZmI4NDRjOWExMmJiNmYzN2Q3OWQ3MTMwZTE2Nzg5NmQxYThlMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IJJ4HSQZAMUj86EedbzQpG5UAez
3kl/jELNw97y1GKFMF4iX6QqUKbH7eq0Eqs2FRyA313i+3pRmoEYJLeCoi5vJfi3
cX9YcV/yHi2ZyBgLKMd7m94MdIdt53I5N4GVrX8ce1nXcyJPzo2/cElH/pSlc001
m9Jl82aLth0RQGKJ3JpaeiO1Ib0XDDovKCp4emRdVoTmYSjkKofsu2ZzGfKusm8l
uqN1f+pgaHLyA8dzKer8oYE4XJSW8zbsUiUKYuGXSsuaUzZFdyde04TOYzZkrfRi
f74mHFFWJ/KTHpZmRgUuG2/iQqAy5l/1XdxAcH1g9QX9/mK1DN+SzK8Q0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+4RMmhK7bzfXnXEw4WeJbRqOM4MB8GA1UdIwQY
MBaAFCPc1vFxJtTpUdkrxfTAa6lFD8jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQt
NDlkYTA1OTc4YWQwLzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mZGEwNTktMzQzNi00MTU4LWExZTQtNDlkYTA1OTc4YWQw
LzEvSTl6VzhYRW0xT2xSMlN2RjlNQnJxVVVQeU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDgSzT8J
o4YtliEO6gmb+WiYEWdnGowJNQ6OQMNzZg+U8AEMQGeR0YtU5AiYQWEIa/uSKIJZ
3fPK+jBIOOfZXw3az9C0An+JnDQwjcp57T3kurfKBhx8dYuLOC0GGGXx7lgPWnvG
2233KMXLyFNAXjhvfF5R7ggdHweQDcZyLiYdfhMpkeNMZ9LwyJiV80jH+cgtrjVz
ea3KHkIxHVHJONNhzl5Y0bjeA2C1ek38nEqe00x6nVYAaskZy9CJgK7XQEdEgcUH
30T+LPEpLazCcWt/c2tKy4imAObCOcvTOwsHqCyV9RDX9H8U0DPwd+aitezxZgz3
EaSby3fJAOz2BQ==
-----END CERTIFICATE-----
Generated at Sun May 11 01:09:37 2025 by rpki-client