Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: bUaelRRnYXNWxKOLW4WGxK+lysS4zOkf7c1I4F+hjbw=
Subject key identifier: AF:F9:16:CF:A7:A5:FA:65:16:F3:60:A8:23:4A:74:39:87:2F:CA:AB
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0196BE92E2265BF61FF71CF615D6BD47C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 09:00:19 +0000
Manifest this update: Sun 11 May 2025 09:00:19 +0000
Manifest next update: Mon 12 May 2025 09:00:19 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: R24c+GQ0lzNh9iZ0sypYYnqcseHiCNY1sE7GoQimtXM=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:e2:26:5b:f6:1f:f7:1c:f6:15:d6:bd:47:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: May 11 09:00:19 2025 GMT
Not After : May 12 09:00:19 2025 GMT
Subject: CN=aff916cfa7a5fa6516f360a8234a7439872fcaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:b0:06:6a:3e:d6:78:3c:8b:6a:74:80:78:
19:b0:c6:39:8b:44:41:52:d6:5b:59:09:59:a6:44:
b9:98:51:73:f4:0d:fe:ef:cf:89:26:07:05:43:13:
ce:55:64:ef:9b:b9:07:51:9d:99:ff:50:9e:49:73:
67:14:8a:0e:9e:be:c2:a2:af:d8:ae:c2:1e:d7:90:
83:d6:25:da:ec:16:51:e0:f7:99:f2:dc:6e:d2:47:
18:30:29:b5:94:7d:c3:af:c4:3a:ad:4a:59:1d:3b:
86:bf:5f:7b:f5:51:0a:b7:de:d7:de:d9:30:02:05:
9a:b6:cd:48:ea:11:fd:85:b7:38:bd:2e:08:5a:15:
46:2a:42:9c:61:55:b5:b5:c2:26:af:9e:0e:8d:9b:
4d:de:9e:f2:3c:69:38:2a:29:4e:ef:6d:5f:3b:a1:
d6:b1:b0:52:2b:39:7a:d7:a7:bf:76:fc:5e:f1:2e:
b6:1c:bb:6d:18:b7:50:2b:56:01:a9:8b:e1:67:70:
21:2a:10:ee:81:1f:d6:b5:bb:b2:84:4a:12:0d:a3:
a0:1d:f5:94:ba:ee:a7:cc:c8:46:4c:38:ed:e3:30:
e5:13:a6:9e:b5:35:79:df:f6:01:2e:ca:3d:61:81:
50:61:74:b4:60:f9:05:19:7a:4e:c3:9e:fd:80:f6:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F9:16:CF:A7:A5:FA:65:16:F3:60:A8:23:4A:74:39:87:2F:CA:AB
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4a:d2:0e:93:fd:2b:1f:32:3f:1f:9b:e0:0e:78:78:76:8b:
78:d1:f6:85:d5:47:ed:74:cf:cf:d4:08:08:e1:a9:11:3b:fc:
d7:6d:fd:4d:f9:ff:3a:68:dd:d6:26:ff:f3:c4:24:f9:1e:74:
26:97:56:dd:db:cd:06:8e:e7:a3:a5:4a:8e:6c:c6:3c:37:5b:
62:e6:2f:6b:94:06:bf:d3:a2:77:7a:de:2e:29:43:14:90:2d:
2b:11:79:c8:30:fd:ac:a8:11:01:80:8d:6c:a0:5f:60:39:c8:
d5:e1:61:09:40:bf:00:fc:f5:79:c3:f0:85:f6:95:55:37:a3:
bb:23:b3:18:8b:27:6b:9e:7c:7f:56:ca:00:56:6b:3c:31:75:
21:b8:dc:da:15:e0:d5:37:1e:5b:51:f5:65:ee:00:29:f7:a5:
61:00:8a:01:b9:3a:f0:1a:ce:35:52:9a:cd:05:44:f3:5c:8a:
52:f2:bb:a4:9d:3e:05:fa:8a:f3:52:9f:b6:4d:0d:3d:47:a8:
e9:06:ac:83:3c:a0:dd:f0:75:75:1b:fb:2d:42:d3:34:7f:a9:
e0:b1:f7:95:16:06:e5:64:d4:2b:2d:fa:4e:74:81:37:eb:d5:
93:71:07:37:f3:7f:05:9f:d9:af:fd:b0:d8:48:73:10:34:56:
0f:2a:d8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa+kuImW/Yf9xz2Fda9R8GkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYjM4ZGFiOTBjNjE0NTBkYzhhZDY2YjQ4NWQ1MzZjYmFm
OWUwZjkwHhcNMjUwNTExMDkwMDE5WhcNMjUwNTEyMDkwMDE5WjAzMTEwLwYDVQQD
EyhhZmY5MTZjZmE3YTVmYTY1MTZmMzYwYTgyMzRhNzQzOTg3MmZjYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sKwBmo+1ng8i2p0gHgZsMY5i0RB
UtZbWQlZpkS5mFFz9A3+78+JJgcFQxPOVWTvm7kHUZ2Z/1CeSXNnFIoOnr7Coq/Y
rsIe15CD1iXa7BZR4PeZ8txu0kcYMCm1lH3Dr8Q6rUpZHTuGv1979VEKt97X3tkw
AgWats1I6hH9hbc4vS4IWhVGKkKcYVW1tcImr54OjZtN3p7yPGk4KilO721fO6HW
sbBSKzl616e/dvxe8S62HLttGLdQK1YBqYvhZ3AhKhDugR/WtbuyhEoSDaOgHfWU
uu6nzMhGTDjt4zDlE6aetTV53/YBLso9YYFQYXS0YPkFGXpOw579gPaUDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/5Fs+npfplFvNgqCNKdDmHL8qrMB8GA1UdIwQY
MBaAFAqzjauQxhRQ3IrWa0hdU2y6+eD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMt
NDNlODExZjc3NjgxLzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMtNDNlODExZjc3Njgx
LzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0rSDpP9
Kx8yPx+b4A54eHaLeNH2hdVH7XTPz9QICOGpETv81239Tfn/Omjd1ib/88Qk+R50
JpdW3dvNBo7no6VKjmzGPDdbYuYva5QGv9Oid3reLilDFJAtKxF5yDD9rKgRAYCN
bKBfYDnI1eFhCUC/APz1ecPwhfaVVTejuyOzGIsna558f1bKAFZrPDF1Ibjc2hXg
1TceW1H1Ze4AKfelYQCKAbk68BrONVKazQVE81yKUvK7pJ0+BfqK81Kftk0NPUeo
6Qasgzyg3fB1dRv7LULTNH+p4LH3lRYG5WTUKy36TnSBN+vVk3EHN/N/BZ/Zr/2w
2EhzEDRWDyrYCQ==
-----END CERTIFICATE-----
Generated at Sun May 11 12:09:23 2025 by rpki-client