Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
File: sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft (raw, json)
Hash identifier: oUVEKsK0aB/Jl0hRQcuexPYXnde2qvp5+goXIh4AaRQ=
Subject key identifier: D8:C4:45:5E:AA:5C:53:09:B4:B7:64:9E:DD:05:90:18:73:24:99:53
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 0196C202540B3E79B4BF3B87A9A543B5DC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 01:00:54 +0000
Manifest this update: Mon 12 May 2025 01:00:54 +0000
Manifest next update: Tue 13 May 2025 01:00:54 +0000
Files and hashes: 1: SjIkpyQ7a466hqkgdpcQ1k2IFnM.roa (hash: Ka4bOW3Lwex81O0FRlMpa0sWUNlOOrrrXHeIztmbIBM=)
2: sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl (hash: tEn3bUQuZSHJjAvFR5NIedbbqeNpI4V7KEDT2Dvs/dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:54:0b:3e:79:b4:bf:3b:87:a9:a5:43:b5:dc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: May 12 01:00:54 2025 GMT
Not After : May 13 01:00:54 2025 GMT
Subject: CN=d8c4455eaa5c5309b4b7649edd05901873249953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4e:55:22:76:3d:4f:a2:15:52:31:38:f8:11:
fd:dc:2f:ae:77:f9:36:28:93:f7:ca:dc:0e:b4:16:
d7:3f:70:62:4f:35:5e:ab:6f:68:8e:62:1b:2e:c5:
45:82:c3:f8:42:90:d3:6e:b0:90:0b:9d:73:74:be:
7f:f1:a1:11:f4:15:0d:df:23:fb:5c:3a:ff:7a:5e:
9d:6d:cd:2a:92:ca:71:6a:d9:a5:90:70:32:91:69:
5a:64:0f:db:7b:01:d2:c0:f0:6b:71:3a:a6:48:7d:
af:dc:42:ca:ea:f8:9b:dd:e4:ae:54:91:84:5c:a4:
21:aa:c8:c5:9c:3b:ea:84:ac:db:dd:5a:69:9f:af:
72:ce:c9:8f:f1:aa:33:c2:bb:fd:a7:a6:ed:c5:7e:
9a:e9:fe:62:54:5f:d4:a3:e9:8f:0c:9f:7a:3b:0e:
68:13:f8:bb:5a:c2:81:d4:41:b3:97:99:7d:da:27:
f0:9f:a4:ff:44:79:45:d5:05:f3:b8:75:d9:3c:47:
bb:91:62:6c:8b:e6:e4:7c:9b:c5:90:fa:45:3e:27:
80:0d:c0:11:fa:70:49:e9:16:86:cb:52:01:72:35:
4c:d0:6a:94:76:17:6d:a3:8c:59:29:4b:a8:ad:15:
aa:d4:2a:75:20:f4:d6:cb:2b:3f:27:fc:2d:32:5c:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C4:45:5E:AA:5C:53:09:B4:B7:64:9E:DD:05:90:18:73:24:99:53
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:70:04:c4:34:07:60:6c:82:12:1b:34:91:7b:c8:96:1f:9e:
d9:d7:75:ca:1a:e8:46:cd:7a:7d:54:81:cd:30:82:d4:ab:3a:
bb:5d:90:67:43:1f:c3:4e:3d:1e:70:f4:56:95:ed:a4:e6:80:
73:d6:07:d1:b3:8b:51:90:4d:cc:d0:0b:83:35:66:d7:50:db:
6c:35:4a:dd:8b:aa:de:bc:58:ce:a3:17:63:77:f3:47:f5:3e:
e3:85:19:53:47:58:f6:b5:5f:5f:98:27:b2:a7:cb:18:a7:50:
a2:56:b4:ec:ce:9b:f3:a2:36:a0:b3:cc:21:b6:24:c3:37:56:
dd:b1:69:b7:c5:22:34:1c:6d:32:79:df:ff:9f:62:63:44:e8:
64:b3:16:4b:70:66:09:c7:68:97:82:3a:95:a5:10:58:2c:b5:
1b:30:ed:21:f6:34:94:63:f3:f7:78:09:38:c4:66:d3:cd:90:
0f:e8:3a:f7:73:00:5f:13:9f:53:ee:db:66:28:65:2b:42:36:
37:fe:3d:e2:29:58:4f:6a:84:04:62:41:e4:15:6b:aa:9c:ea:
78:8c:44:dd:a0:15:61:47:8a:f5:3b:43:70:99:c7:35:c0:90:
dd:29:9f:1b:c2:01:d4:48:27:8e:7c:ff:b6:b5:6d:a9:dc:2c:
69:9f:e2:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCAlQLPnm0vzuHqaVDtdyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzU4ZTg4YzIwNzAyMTMxYjkxN2E0ZGZkYjIzNzRiYzM2
NTU1ODcwHhcNMjUwNTEyMDEwMDU0WhcNMjUwNTEzMDEwMDU0WjAzMTEwLwYDVQQD
EyhkOGM0NDU1ZWFhNWM1MzA5YjRiNzY0OWVkZDA1OTAxODczMjQ5OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE5VInY9T6IVUjE4+BH93C+ud/k2
KJP3ytwOtBbXP3BiTzVeq29ojmIbLsVFgsP4QpDTbrCQC51zdL5/8aER9BUN3yP7
XDr/el6dbc0qkspxatmlkHAykWlaZA/bewHSwPBrcTqmSH2v3ELK6vib3eSuVJGE
XKQhqsjFnDvqhKzb3Vppn69yzsmP8aozwrv9p6btxX6a6f5iVF/Uo+mPDJ96Ow5o
E/i7WsKB1EGzl5l92ifwn6T/RHlF1QXzuHXZPEe7kWJsi+bkfJvFkPpFPieADcAR
+nBJ6RaGy1IBcjVM0GqUdhdto4xZKUuorRWq1Cp1IPTWyys/J/wtMlwLsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjERV6qXFMJtLdknt0FkBhzJJlTMB8GA1UdIwQY
MBaAFLB1jojCBwITG5F6Tf2yN0vDZVWHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2It
NjM4NzNlODg0NDEzLzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2ItNjM4NzNlODg0NDEz
LzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3AExDQH
YGyCEhs0kXvIlh+e2dd1yhroRs16fVSBzTCC1Ks6u12QZ0Mfw049HnD0VpXtpOaA
c9YH0bOLUZBNzNALgzVm11DbbDVK3Yuq3rxYzqMXY3fzR/U+44UZU0dY9rVfX5gn
sqfLGKdQola07M6b86I2oLPMIbYkwzdW3bFpt8UiNBxtMnnf/59iY0ToZLMWS3Bm
Ccdol4I6laUQWCy1GzDtIfY0lGPz93gJOMRm082QD+g693MAXxOfU+7bZihlK0I2
N/494ilYT2qEBGJB5BVrqpzqeIxE3aAVYUeK9TtDcJnHNcCQ3SmfG8IB1Egnjnz/
trVtqdwsaZ/ixg==
-----END CERTIFICATE-----
Generated at Mon May 12 08:17:31 2025 by rpki-client