Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
File: j7YgpIOO9uIbzCatNRJi11ZusnU.mft (raw, json)
Hash identifier: nBFL9lAmTh5f7zA2/wiRGI5ieIxVyCWa+qeF4EbZC7M=
Subject key identifier: CB:80:DB:EA:A4:1F:E0:EC:F9:6C:57:02:8A:54:C5:72:19:18:D8:A0
Authority key identifier: 8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
Certificate issuer: /CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Certificate serial: 0196BFA56E05A872535896F2E9B891A808C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 14:00:11 +0000
Manifest this update: Sun 11 May 2025 14:00:11 +0000
Manifest next update: Mon 12 May 2025 14:00:11 +0000
Files and hashes: 1: STLMqI9B0bmg1HnzIFgocG7Jchs.roa (hash: nUpzGifMhuTClZtTuwuW+kY+JzHd2eUa3fEsyXVesAc=)
2: cOhtow46e90nlng9i61VmuKnZMk.roa (hash: 9ntslscCHsPGSEl0s6DMTT/r9BfyLOJ9a2yKRC4G0hw=)
3: j7YgpIOO9uIbzCatNRJi11ZusnU.crl (hash: B1MK9NShaoLIVjFvDlVMRekzP5Y4UKlpzMH+zTRP15w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:6e:05:a8:72:53:58:96:f2:e9:b8:91:a8:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb620a4838ef6e21bcc26ad351262d7566eb275
Validity
Not Before: May 11 14:00:11 2025 GMT
Not After : May 12 14:00:11 2025 GMT
Subject: CN=cb80dbeaa41fe0ecf96c57028a54c5721918d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:7c:ec:62:a0:88:ec:54:9b:e3:45:a1:44:
50:87:10:a4:6d:af:da:ce:2e:89:38:d5:10:ec:75:
37:13:40:b0:55:ef:9e:9e:3d:ce:93:32:a2:34:46:
be:ed:bb:c2:69:c4:cf:c7:98:00:ea:3a:e6:0a:60:
1b:06:0a:03:5b:07:78:50:5f:bc:b1:a8:c6:91:9a:
fa:b0:8d:0b:8c:0d:66:9b:bf:7a:db:93:72:8b:a6:
97:f5:82:3a:f3:75:95:e5:1e:4d:5f:31:33:75:00:
11:b4:9f:ca:0a:b4:ed:37:f5:aa:24:b3:ed:83:42:
08:ad:9d:85:38:f6:5b:86:67:35:8b:89:0a:98:31:
66:1d:cc:36:c2:40:79:03:78:9a:ec:e8:12:59:2a:
7a:33:eb:ed:68:80:fa:e3:68:6d:8f:cf:58:3a:f4:
ea:6b:3e:4e:ef:0d:44:b7:b0:b9:af:c2:45:9d:88:
c3:c0:3a:40:69:69:26:6a:bd:f9:6d:4e:40:0c:07:
4c:9c:bd:bf:77:f2:93:04:10:87:e1:45:26:41:6e:
d1:87:70:0a:e1:eb:46:0f:cb:d5:f2:e4:69:ba:63:
83:0b:6d:0a:2d:58:2c:26:c4:ed:77:a7:73:79:34:
55:27:67:24:fe:84:89:4a:7d:3a:de:6d:d8:c8:e0:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:80:DB:EA:A4:1F:E0:EC:F9:6C:57:02:8A:54:C5:72:19:18:D8:A0
X509v3 Authority Key Identifier:
keyid:8F:B6:20:A4:83:8E:F6:E2:1B:CC:26:AD:35:12:62:D7:56:6E:B2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YgpIOO9uIbzCatNRJi11ZusnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ec3512-71ba-441e-bfe1-da7d45b732fa/1/j7YgpIOO9uIbzCatNRJi11ZusnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:13:5f:8a:9f:7d:3d:8b:43:85:78:8f:30:7a:a5:7e:d3:
a3:ba:20:38:ee:c4:52:a8:54:09:44:02:1f:cd:8a:af:96:68:
51:93:25:49:8a:95:7f:8e:eb:4d:8a:ed:b4:a4:fc:7c:10:b1:
57:32:e5:3d:9c:be:13:b8:32:f5:2d:cd:52:df:d4:17:00:85:
5a:be:d7:a5:74:da:d2:f3:11:fc:02:04:6e:08:71:dc:ec:8f:
3a:7d:4d:be:c5:c9:b9:e3:c5:9e:09:97:ba:e1:d0:c9:39:22:
94:8a:eb:5c:48:10:29:3e:94:92:56:db:cd:f0:c8:c1:a0:48:
79:77:f5:c7:6e:4e:d5:3e:13:8d:ac:ff:d8:ba:82:35:81:3b:
b3:09:8f:ff:9b:ab:c8:a2:46:2e:16:48:3b:48:60:f5:3e:c0:
fd:56:2f:c0:e4:74:b1:40:d7:19:56:67:b6:1a:bf:56:58:d6:
d7:97:7a:54:51:5a:19:09:9c:a1:e0:5f:41:d7:72:e4:54:fd:
98:7d:3d:0f:67:fc:01:df:41:2d:e5:f5:16:67:9e:60:e9:2b:
00:1f:12:d4:cc:e3:c4:aa:53:f8:7d:39:2c:a4:e6:cd:66:30:
8a:09:eb:9d:da:8c:e0:ba:87:19:56:a8:2b:3d:97:91:52:55:
bd:65:fe:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/pW4FqHJTWJby6biRqAjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjYyMGE0ODM4ZWY2ZTIxYmNjMjZhZDM1MTI2MmQ3NTY2
ZWIyNzUwHhcNMjUwNTExMTQwMDExWhcNMjUwNTEyMTQwMDExWjAzMTEwLwYDVQQD
EyhjYjgwZGJlYWE0MWZlMGVjZjk2YzU3MDI4YTU0YzU3MjE5MThkOGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Z87GKgiOxUm+NFoURQhxCkba/a
zi6JONUQ7HU3E0CwVe+enj3OkzKiNEa+7bvCacTPx5gA6jrmCmAbBgoDWwd4UF+8
sajGkZr6sI0LjA1mm79625Nyi6aX9YI683WV5R5NXzEzdQARtJ/KCrTtN/WqJLPt
g0IIrZ2FOPZbhmc1i4kKmDFmHcw2wkB5A3ia7OgSWSp6M+vtaID642htj89YOvTq
az5O7w1Et7C5r8JFnYjDwDpAaWkmar35bU5ADAdMnL2/d/KTBBCH4UUmQW7Rh3AK
4etGD8vV8uRpumODC20KLVgsJsTtd6dzeTRVJ2ck/oSJSn063m3YyOBOyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuA2+qkH+Ds+WxXAopUxXIZGNigMB8GA1UdIwQY
MBaAFI+2IKSDjvbiG8wmrTUSYtdWbrJ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEt
ZGE3ZDQ1YjczMmZhLzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9lYzM1MTItNzFiYS00NDFlLWJmZTEtZGE3ZDQ1YjczMmZh
LzEvajdZZ3BJT085dUliekNhdE5SSmkxMVp1c25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQATX4qf
fT2LQ4V4jzB6pX7To7ogOO7EUqhUCUQCH82Kr5ZoUZMlSYqVf47rTYrttKT8fBCx
VzLlPZy+E7gy9S3NUt/UFwCFWr7XpXTa0vMR/AIEbghx3OyPOn1NvsXJuePFngmX
uuHQyTkilIrrXEgQKT6UklbbzfDIwaBIeXf1x25O1T4Tjaz/2LqCNYE7swmP/5ur
yKJGLhZIO0hg9T7A/VYvwOR0sUDXGVZnthq/VljW15d6VFFaGQmcoeBfQddy5FT9
mH09D2f8Ad9BLeX1FmeeYOkrAB8S1MzjxKpT+H05LKTmzWYwignrndqM4LqHGVao
Kz2XkVJVvWX+kg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:29:20 2025 by rpki-client