Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: l1OYEwZWQZ15ua6bt2duitmz7G7/BSDVLsyRcawj6hg=
Subject key identifier: C8:9E:71:86:B1:2B:78:0E:0B:CC:56:62:34:B7:56:59:9C:2A:D6:C3
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 0196BAB67774BAEC1DB65CB90F8FAD8667B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 0155
Signing time: Sat 10 May 2025 15:00:42 +0000
Manifest this update: Sat 10 May 2025 15:00:42 +0000
Manifest next update: Sun 11 May 2025 15:00:42 +0000
Files and hashes: 1: K09nrG0KqTizFLHUaMNyxM0z2ro.roa (hash: cExkaCJNm1PmYW065hiBGP/O4kugBu6fZ2Nczp2MsYg=)
2: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: 7TFQ0L+WcZihn/OzJ3KHXXnj2kSHF3qh6ZVQBwrzj7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:77:74:ba:ec:1d:b6:5c:b9:0f:8f:ad:86:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: May 10 15:00:42 2025 GMT
Not After : May 11 15:00:42 2025 GMT
Subject: CN=c89e7186b12b780e0bcc566234b756599c2ad6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:95:a4:56:01:c6:0a:a5:95:2a:74:ea:b8:
db:c4:04:81:a7:f8:57:69:50:13:a4:d0:ab:5c:ec:
33:40:f0:91:47:08:f7:c1:cb:9a:0a:ab:bf:3d:af:
58:b6:7b:eb:55:75:20:31:e4:32:45:08:2f:da:b0:
a1:84:14:eb:c0:ed:d1:df:f0:e4:5e:74:38:e4:91:
08:49:de:ee:22:8d:b1:3f:e1:dc:b0:67:b7:7f:30:
75:38:05:0d:4f:dc:07:13:35:60:61:80:76:41:90:
88:05:0d:9c:87:2a:a7:de:81:74:41:91:c9:87:b2:
4b:0b:94:2e:e5:2c:3c:fa:0e:cb:98:91:89:53:72:
9e:b5:22:8a:09:11:6e:4c:a9:a7:90:c8:aa:6c:ca:
c5:b2:fb:c2:cd:5d:f9:a2:16:9e:ed:48:b7:63:1b:
5e:34:e9:b4:c8:8e:21:3a:4a:77:0b:2d:3c:d2:a8:
ad:cb:c3:94:a3:11:e8:bf:25:29:77:4c:4b:1b:7e:
37:f8:cd:02:aa:cc:16:c5:9f:97:a8:69:8f:db:36:
a3:9d:45:35:26:14:64:28:2d:f3:a7:c5:fb:b5:06:
f6:b4:bb:34:fa:f0:e2:5e:6a:26:46:9c:3d:8e:f4:
b6:04:e9:3e:a8:16:f0:d7:04:43:6e:e2:36:d4:56:
b2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9E:71:86:B1:2B:78:0E:0B:CC:56:62:34:B7:56:59:9C:2A:D6:C3
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2c:40:1e:e6:4f:4d:18:a6:d3:72:ba:54:ce:a3:9d:97:4e:
f7:31:bb:1d:a9:51:cc:83:57:77:ba:94:ea:be:58:05:99:f0:
69:d6:d7:b0:cd:6f:ef:c6:1a:6a:59:df:52:65:0d:48:f2:64:
ec:46:1d:5d:ef:c9:f5:02:65:4c:ca:af:65:07:44:0c:2e:c5:
8e:1b:73:f0:95:fc:19:0c:4a:c2:65:53:1e:a0:23:ed:9b:22:
a0:b3:81:47:42:b6:e1:07:bd:fa:c3:91:a1:11:02:68:a9:93:
43:bc:4b:97:fd:a4:3e:6a:ad:0c:d6:fb:e4:ca:5f:d0:ec:03:
df:b1:54:8c:5b:15:15:1f:5d:c8:d9:a2:53:a3:9f:7b:4f:92:
12:15:f6:27:51:dd:85:48:a8:ee:90:84:6e:9e:8e:55:ed:20:
48:6c:e4:9f:18:18:e0:b4:41:b7:3e:4d:41:8c:f6:32:d4:c0:
d2:31:e1:08:8b:f4:d6:41:03:f2:b6:32:36:88:c2:b2:be:b5:
01:82:eb:6c:9b:ce:e4:9b:3b:3e:7c:52:a4:6e:a1:3a:ec:24:
5f:e3:2d:39:91:67:c7:c9:5b:c5:da:0b:d2:d9:0c:0e:3f:17:
23:cd:5d:f6:9a:93:26:52:b7:dd:30:af:62:0d:a5:70:c0:a3:
6b:ee:e7:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6tnd0uuwdtly5D4+thmexMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5
Yjc5ZjAwHhcNMjUwNTEwMTUwMDQyWhcNMjUwNTExMTUwMDQyWjAzMTEwLwYDVQQD
EyhjODllNzE4NmIxMmI3ODBlMGJjYzU2NjIzNGI3NTY1OTljMmFkNmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqCVpFYBxgqllSp06rjbxASBp/hX
aVATpNCrXOwzQPCRRwj3wcuaCqu/Pa9YtnvrVXUgMeQyRQgv2rChhBTrwO3R3/Dk
XnQ45JEISd7uIo2xP+HcsGe3fzB1OAUNT9wHEzVgYYB2QZCIBQ2chyqn3oF0QZHJ
h7JLC5Qu5Sw8+g7LmJGJU3KetSKKCRFuTKmnkMiqbMrFsvvCzV35ohae7Ui3Yxte
NOm0yI4hOkp3Cy080qity8OUoxHovyUpd0xLG343+M0CqswWxZ+XqGmP2zajnUU1
JhRkKC3zp8X7tQb2tLs0+vDiXmomRpw9jvS2BOk+qBbw1wRDbuI21Fay+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiecYaxK3gOC8xWYjS3VlmcKtbDMB8GA1UdIwQY
MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt
MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4
LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCxAHuZP
TRim03K6VM6jnZdO9zG7HalRzINXd7qU6r5YBZnwadbXsM1v78YaalnfUmUNSPJk
7EYdXe/J9QJlTMqvZQdEDC7Fjhtz8JX8GQxKwmVTHqAj7ZsioLOBR0K24Qe9+sOR
oRECaKmTQ7xLl/2kPmqtDNb75Mpf0OwD37FUjFsVFR9dyNmiU6Ofe0+SEhX2J1Hd
hUio7pCEbp6OVe0gSGzknxgY4LRBtz5NQYz2MtTA0jHhCIv01kED8rYyNojCsr61
AYLrbJvO5Js7PnxSpG6hOuwkX+MtOZFnx8lbxdoL0tkMDj8XI81d9pqTJlK33TCv
Yg2lcMCja+7nfw==
-----END CERTIFICATE-----
Generated at Sat May 10 22:46:46 2025 by rpki-client