Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
File: R7gMqpfBMUfWgMgJdviksVyt4E8.mft (raw, json)
Hash identifier: Z6WuQ9r+11unrXFTIfRlM2ygjBTh/zetVMRKGFpvlQY=
Subject key identifier: FF:90:65:88:E0:B9:7E:E8:23:B9:5E:B2:AE:5C:B6:E5:81:87:36:5E
Authority key identifier: 47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
Certificate issuer: /CN=47b80caa97c13147d680c80976f8a4b15cade04f
Certificate serial: 0196C15D6C3D43B7E3572A1088E118663B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
Manifest number: 0FBB
Signing time: Sun 11 May 2025 22:00:47 +0000
Manifest this update: Sun 11 May 2025 22:00:47 +0000
Manifest next update: Mon 12 May 2025 22:00:47 +0000
Files and hashes: 1: R7gMqpfBMUfWgMgJdviksVyt4E8.crl (hash: 7kUF19JcvNjIH7s+DX6CpSc33IsGd4Q0BRAABov16+E=)
2: _Pgq84jrEp-zxajAzOXZ5wVPIRA.roa (hash: EbB6LGcx8MIH+W1ZkKFUETSvGMpVK6Hy6dyclc0VHiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:6c:3d:43:b7:e3:57:2a:10:88:e1:18:66:3b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b80caa97c13147d680c80976f8a4b15cade04f
Validity
Not Before: May 11 22:00:47 2025 GMT
Not After : May 12 22:00:47 2025 GMT
Subject: CN=ff906588e0b97ee823b95eb2ae5cb6e58187365e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:2a:b0:8e:0a:38:e2:dd:4a:f8:8d:83:42:
60:50:a6:87:df:c6:03:45:9e:30:43:f1:9f:31:eb:
35:00:f9:5c:6f:dd:2e:f3:19:4f:db:14:b9:8d:ff:
8f:30:e3:ca:f0:74:c3:21:64:9e:40:ce:32:5f:b7:
6c:e4:fe:26:c2:ce:88:40:c3:db:2d:39:79:86:9b:
9a:dc:30:80:18:60:c0:90:b3:0c:88:0b:54:33:69:
8f:43:06:ee:c9:e1:28:dd:8d:74:f7:6c:ce:41:1f:
d6:a6:aa:48:66:73:e4:c3:3b:18:65:74:91:09:6e:
4e:3b:5d:8c:ad:16:36:d0:c7:64:e9:9e:81:b5:f2:
e9:a4:28:24:18:cf:38:a4:b8:1d:d8:49:7f:e0:22:
c7:d0:be:ca:27:31:1f:74:03:38:5d:92:92:3a:17:
4f:ab:82:56:a2:46:05:3d:70:83:6f:03:c4:e7:f1:
06:62:c3:a3:62:24:ad:c7:0a:fb:ab:ab:98:d6:27:
07:83:83:9b:89:c4:30:1b:d8:14:d9:4b:9d:08:ea:
c0:53:e1:af:c9:36:f8:3e:98:86:c1:6f:0c:aa:d1:
d1:4e:dc:e7:2a:b3:5a:42:c8:9d:fb:24:75:8e:8a:
cd:b8:31:ec:cd:ff:34:9a:30:a2:77:4d:e9:df:bc:
b5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:65:88:E0:B9:7E:E8:23:B9:5E:B2:AE:5C:B6:E5:81:87:36:5E
X509v3 Authority Key Identifier:
keyid:47:B8:0C:AA:97:C1:31:47:D6:80:C8:09:76:F8:A4:B1:5C:AD:E0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7gMqpfBMUfWgMgJdviksVyt4E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a59fc5-2049-42de-b1b0-10e24e9d0fa7/1/R7gMqpfBMUfWgMgJdviksVyt4E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:59:61:81:c5:14:d0:c6:5b:0f:6c:f5:4b:44:da:7d:b9:08:
a5:78:ab:7e:37:25:70:e2:5c:34:49:16:c1:a4:c0:21:80:f1:
20:5a:89:bf:99:a8:54:fb:95:fc:77:3a:7b:db:dc:66:a9:82:
ac:e9:a6:55:6d:27:a6:1b:ad:15:c6:ab:b3:52:29:51:0a:a9:
d6:3c:56:f2:26:34:86:66:ae:57:24:3b:ce:9f:3a:28:32:ce:
97:e1:03:17:8b:70:ab:6d:e1:6c:3c:96:fb:3e:33:59:49:62:
ed:c5:5d:98:cd:d0:84:b7:72:78:c1:ce:c9:95:8d:0a:90:e5:
6c:96:59:56:08:4e:ba:1f:18:50:3c:e5:52:5d:aa:56:08:60:
bb:9f:bc:5b:33:e0:5f:54:22:7b:64:f3:ca:e8:00:8d:82:33:
b0:f9:4e:1a:4f:50:14:55:3b:31:d8:d6:c4:0d:b6:53:e6:da:
f8:94:ca:2e:13:27:40:1d:73:88:a9:dc:0b:08:50:26:d2:88:
43:b1:41:b2:f2:31:6f:86:64:fb:a2:23:43:27:05:e0:30:21:
e3:58:ea:94:67:2c:50:61:20:1f:40:e8:78:06:ff:92:c2:a0:
4d:d6:96:47:4e:61:62:4a:54:50:39:47:45:a4:3d:41:0c:5f:
1b:49:4a:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBXWw9Q7fjVyoQiOEYZjtfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjgwY2FhOTdjMTMxNDdkNjgwYzgwOTc2ZjhhNGIxNWNh
ZGUwNGYwHhcNMjUwNTExMjIwMDQ3WhcNMjUwNTEyMjIwMDQ3WjAzMTEwLwYDVQQD
EyhmZjkwNjU4OGUwYjk3ZWU4MjNiOTVlYjJhZTVjYjZlNTgxODczNjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8qsI4KOOLdSviNg0JgUKaH38YD
RZ4wQ/GfMes1APlcb90u8xlP2xS5jf+PMOPK8HTDIWSeQM4yX7ds5P4mws6IQMPb
LTl5hpua3DCAGGDAkLMMiAtUM2mPQwbuyeEo3Y1092zOQR/WpqpIZnPkwzsYZXSR
CW5OO12MrRY20Mdk6Z6BtfLppCgkGM84pLgd2El/4CLH0L7KJzEfdAM4XZKSOhdP
q4JWokYFPXCDbwPE5/EGYsOjYiStxwr7q6uY1icHg4ObicQwG9gU2UudCOrAU+Gv
yTb4PpiGwW8MqtHRTtznKrNaQsid+yR1jorNuDHszf80mjCid03p37y1mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+QZYjguX7oI7lesq5ctuWBhzZeMB8GA1UdIwQY
MBaAFEe4DKqXwTFH1oDICXb4pLFcreBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAt
MTBlMjRlOWQwZmE3LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hNTlmYzUtMjA0OS00MmRlLWIxYjAtMTBlMjRlOWQwZmE3
LzEvUjdnTXFwZkJNVWZXZ01nSmR2aWtzVnl0NEU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVlhgcUU
0MZbD2z1S0TafbkIpXirfjclcOJcNEkWwaTAIYDxIFqJv5moVPuV/Hc6e9vcZqmC
rOmmVW0nphutFcars1IpUQqp1jxW8iY0hmauVyQ7zp86KDLOl+EDF4twq23hbDyW
+z4zWUli7cVdmM3QhLdyeMHOyZWNCpDlbJZZVghOuh8YUDzlUl2qVghgu5+8WzPg
X1Qie2TzyugAjYIzsPlOGk9QFFU7MdjWxA22U+ba+JTKLhMnQB1ziKncCwhQJtKI
Q7FBsvIxb4Zk+6IjQycF4DAh41jqlGcsUGEgH0DoeAb/ksKgTdaWR05hYkpUUDlH
RaQ9QQxfG0lK4g==
-----END CERTIFICATE-----
Generated at Mon May 12 04:08:44 2025 by rpki-client