Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: /CYxHw5E8lSAGXElD0dzj+sluQ9tUioy7URXSuQExJA=
Subject key identifier: B2:4F:8B:3B:1A:B2:32:73:42:3E:60:DF:C9:8A:9B:D0:11:D8:A3:D1
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 0196A01A7FD2087C1AA51464CF36A0938CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 1106
Signing time: Mon 05 May 2025 11:00:13 +0000
Manifest this update: Mon 05 May 2025 11:00:13 +0000
Manifest next update: Tue 06 May 2025 11:00:13 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: D99gKaxi77CdP0kWwXFBt/TXqF3BMlFh0Hba8oJ6D9M=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:7f:d2:08:7c:1a:a5:14:64:cf:36:a0:93:8c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: May 5 11:00:13 2025 GMT
Not After : May 6 11:00:13 2025 GMT
Subject: CN=b24f8b3b1ab23273423e60dfc98a9bd011d8a3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8e:b3:2f:7e:06:a7:ec:05:2a:c6:27:9a:d4:
01:41:15:61:19:c1:ba:03:b8:7f:d5:ce:54:49:86:
bd:64:32:29:f6:be:6b:61:d7:f2:55:9c:c6:ef:30:
5b:fc:34:c1:89:ea:75:b3:36:1f:58:fa:91:63:26:
d5:f7:d2:78:17:4e:24:b6:07:15:ec:87:b8:76:9e:
c9:c8:7a:91:0e:9b:c3:ba:e2:3c:a1:75:1e:fd:e4:
4a:af:2e:6e:3d:fe:2f:a7:44:68:99:51:63:51:fd:
26:15:53:a7:e0:fd:33:a7:04:f4:8b:92:a5:ed:50:
62:bf:2e:cb:ec:11:b3:a4:94:ef:0c:cb:11:6d:0e:
c9:60:8e:d2:1c:35:63:d1:df:1c:a1:43:4d:71:b2:
e1:9a:e0:e1:9c:8f:f2:95:fa:e3:38:d0:d2:3b:23:
3d:d5:36:7e:d2:12:0f:1b:f6:41:a3:38:62:dd:24:
34:fc:6c:0b:ac:41:69:c7:5d:45:f8:43:73:6f:f4:
5a:6d:a9:c9:f2:e2:1c:c6:12:28:8b:5b:b0:2b:8b:
ed:6c:51:2a:76:21:5e:30:63:1a:1a:d7:a7:d2:74:
4c:1b:0e:42:d0:d3:63:0c:c0:8b:6c:26:bd:e1:59:
3f:a5:ef:a0:ad:e5:98:39:65:75:08:63:ce:91:4d:
d6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:8B:3B:1A:B2:32:73:42:3E:60:DF:C9:8A:9B:D0:11:D8:A3:D1
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:97:33:dc:0e:08:fc:42:d9:da:06:16:16:6f:1d:9e:e1:92:
b7:74:f6:34:05:87:3b:5a:91:94:68:7a:10:25:0e:c1:e6:04:
1d:1f:7a:b5:8e:03:92:58:8a:f6:ab:32:45:a6:26:6c:bf:84:
de:4f:e0:a1:70:af:c2:fc:cf:ac:62:8d:6e:49:23:f9:17:b4:
e5:2e:6f:87:c5:8f:0c:db:3c:67:b5:a3:6b:3d:28:df:92:76:
28:65:5f:37:4a:82:a9:7d:2c:3d:bd:01:fe:0d:94:2d:d8:37:
f8:3d:40:94:fd:3b:bc:aa:ab:55:8a:c6:5d:5d:81:78:d7:01:
c0:ca:4d:e7:0b:fb:f8:75:29:e9:72:89:a7:8e:80:68:41:dd:
8d:f5:97:15:fa:25:f5:b4:f0:5d:a0:7b:36:ff:b4:b4:e7:a2:
2d:ae:23:10:02:39:ee:cb:0c:38:0d:d3:7d:23:12:b9:81:9d:
a0:cc:ee:47:31:f5:13:c2:88:83:93:4b:9d:83:ef:ba:65:cd:
85:c6:78:45:f1:b4:81:42:55:1a:61:75:b7:2c:02:fe:6c:cd:
b6:5c:38:d6:23:fa:d3:fa:23:77:e8:96:16:77:d5:aa:1e:a1:
5b:52:0b:81:d2:2f:69:fe:b8:a5:a6:a1:92:84:06:0c:dc:ca:
85:4d:c2:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGn/SCHwapRRkzzagk4yyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTVhNjQyMzc5Y2U1NzhmMzllYzBkMTA2MDNkY2ZhODNm
NmUzNGUwHhcNMjUwNTA1MTEwMDEzWhcNMjUwNTA2MTEwMDEzWjAzMTEwLwYDVQQD
EyhiMjRmOGIzYjFhYjIzMjczNDIzZTYwZGZjOThhOWJkMDExZDhhM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6o6zL34Gp+wFKsYnmtQBQRVhGcG6
A7h/1c5USYa9ZDIp9r5rYdfyVZzG7zBb/DTBiep1szYfWPqRYybV99J4F04ktgcV
7Ie4dp7JyHqRDpvDuuI8oXUe/eRKry5uPf4vp0RomVFjUf0mFVOn4P0zpwT0i5Kl
7VBivy7L7BGzpJTvDMsRbQ7JYI7SHDVj0d8coUNNcbLhmuDhnI/ylfrjONDSOyM9
1TZ+0hIPG/ZBozhi3SQ0/GwLrEFpx11F+ENzb/RabanJ8uIcxhIoi1uwK4vtbFEq
diFeMGMaGten0nRMGw5C0NNjDMCLbCa94Vk/pe+greWYOWV1CGPOkU3WowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJPizsasjJzQj5g38mKm9AR2KPRMB8GA1UdIwQY
MBaAFJtVpkI3nOV4857A0QYD3PqD9uNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMt
ODIyMmUyNTFhOTFiLzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iZTkyYjUtNTcxNy00MDQ2LWFjMWMtODIyMmUyNTFhOTFi
LzEvbTFXbVFqZWM1WGp6bnNEUkJnUGMtb1AyNDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpcz3A4I
/ELZ2gYWFm8dnuGSt3T2NAWHO1qRlGh6ECUOweYEHR96tY4DkliK9qsyRaYmbL+E
3k/goXCvwvzPrGKNbkkj+Re05S5vh8WPDNs8Z7Wjaz0o35J2KGVfN0qCqX0sPb0B
/g2ULdg3+D1AlP07vKqrVYrGXV2BeNcBwMpN5wv7+HUp6XKJp46AaEHdjfWXFfol
9bTwXaB7Nv+0tOeiLa4jEAI57ssMOA3TfSMSuYGdoMzuRzH1E8KIg5NLnYPvumXN
hcZ4RfG0gUJVGmF1tywC/mzNtlw41iP60/ojd+iWFnfVqh6hW1ILgdIvaf64paah
koQGDNzKhU3CJw==
-----END CERTIFICATE-----
Generated at Mon May 5 15:00:33 2025 by rpki-client