Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: TGYqqP1M7oPW/NNSZkQOT2GApDCNO38sj7kZAxRPuFQ=
Subject key identifier: 38:3F:F3:08:7A:CA:8C:B5:1A:58:BA:54:FC:2B:FC:2D:C0:B7:7C:7A
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 0196C570B188C4A5FCEDAFCA6483AD58E5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 0F35
Signing time: Mon 12 May 2025 17:00:18 +0000
Manifest this update: Mon 12 May 2025 17:00:18 +0000
Manifest next update: Tue 13 May 2025 17:00:18 +0000
Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=)
2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: XRU/H+0AbZLw16C0zq0wMudtSpNKQ8NTtpBG3gs80Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:b1:88:c4:a5:fc:ed:af:ca:64:83:ad:58:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: May 12 17:00:18 2025 GMT
Not After : May 13 17:00:18 2025 GMT
Subject: CN=383ff3087aca8cb51a58ba54fc2bfc2dc0b77c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:2f:e0:a2:df:4f:cc:0d:a4:42:b8:e7:62:
9c:55:6a:e6:ad:fe:61:4a:a4:6d:40:64:56:a4:02:
ff:a5:5a:2f:12:e2:92:40:54:2c:f2:48:f0:a0:34:
39:d6:eb:92:df:c1:e9:1f:4e:8e:ad:33:0f:88:ea:
66:53:3f:1e:6e:41:ca:50:dc:3d:74:2d:b4:1b:e4:
24:9d:96:2f:24:35:46:9e:91:f9:c4:8b:30:77:ec:
64:6b:62:99:9a:ca:88:69:1a:e7:09:8c:7b:07:3d:
31:9a:58:7b:9b:a6:12:c3:3a:d9:d1:e8:1d:c6:09:
1d:f5:17:28:2f:ee:1c:f1:3c:87:4c:71:0d:3a:cc:
16:12:81:e7:e8:0d:5d:11:a2:92:09:cf:94:db:51:
6f:de:5a:fd:4c:fe:d7:87:cd:a9:9f:b7:d4:d7:31:
82:2f:9c:25:b7:f3:35:20:53:c0:27:24:93:01:df:
e1:95:84:35:e9:49:ab:99:54:1d:21:06:0a:0d:ad:
a2:fe:ae:ac:c7:ba:c3:45:48:2b:ae:ba:9c:a8:36:
0a:c9:21:2e:67:4e:dc:ec:5a:b5:a5:81:52:75:a5:
82:ac:26:a6:6c:59:00:36:b0:a1:5f:87:80:ee:82:
40:05:bf:0f:9e:88:cf:4c:92:ff:dc:75:2a:72:70:
c2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3F:F3:08:7A:CA:8C:B5:1A:58:BA:54:FC:2B:FC:2D:C0:B7:7C:7A
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:d2:b3:cd:61:06:b4:a2:7a:25:05:12:da:cc:1e:d4:a1:
4b:7f:e5:50:ea:45:5b:89:90:73:0c:56:40:6f:24:d2:35:18:
52:82:6f:de:d6:c1:5b:00:4d:4d:26:bf:26:e0:82:a2:36:2f:
da:a2:e7:9f:34:33:fa:96:9f:e8:66:11:4f:dc:12:c5:c5:6b:
12:60:ad:76:f0:d1:b2:20:59:72:b1:ae:06:bb:25:d7:46:c1:
89:db:d2:54:23:8e:1a:6d:69:6b:e5:eb:79:06:c4:21:6f:9f:
bc:e2:50:02:ef:21:99:06:ae:5e:e4:2e:62:47:53:dc:c7:c1:
78:56:01:fd:a6:29:0a:dc:c4:25:50:0f:03:76:fe:38:56:15:
e1:2b:96:a3:f5:d1:e3:74:19:9e:0e:47:54:52:97:3b:43:6a:
e4:91:99:27:18:9c:bc:c0:3a:ab:fa:2c:32:77:07:77:d6:96:
17:30:66:3e:27:9b:86:ab:12:3d:b9:ee:c0:df:47:79:d9:37:
82:a1:43:a5:bd:6b:be:d4:44:9b:51:29:77:9c:7a:fe:8b:6b:
b7:52:c1:f3:5a:83:53:d2:59:59:f8:cb:32:08:74:9b:71:17:
02:83:8c:0c:2d:46:d1:22:9a:89:54:65:2d:d2:bc:23:ea:0e:
23:6c:51:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFcLGIxKX87a/KZIOtWOXFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWVmN2JkMmViM2RjZGJhYjA0OTA4MzgwZDQ4YThmMmZl
YmM2MmMwHhcNMjUwNTEyMTcwMDE4WhcNMjUwNTEzMTcwMDE4WjAzMTEwLwYDVQQD
EygzODNmZjMwODdhY2E4Y2I1MWE1OGJhNTRmYzJiZmMyZGMwYjc3YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk68v4KLfT8wNpEK452KcVWrmrf5h
SqRtQGRWpAL/pVovEuKSQFQs8kjwoDQ51uuS38HpH06OrTMPiOpmUz8ebkHKUNw9
dC20G+QknZYvJDVGnpH5xIswd+xka2KZmsqIaRrnCYx7Bz0xmlh7m6YSwzrZ0egd
xgkd9RcoL+4c8TyHTHENOswWEoHn6A1dEaKSCc+U21Fv3lr9TP7Xh82pn7fU1zGC
L5wlt/M1IFPAJySTAd/hlYQ16UmrmVQdIQYKDa2i/q6sx7rDRUgrrrqcqDYKySEu
Z07c7Fq1pYFSdaWCrCambFkANrChX4eA7oJABb8PnojPTJL/3HUqcnDCNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDg/8wh6yoy1Gli6VPwr/C3At3x6MB8GA1UdIwQY
MBaAFEZe970us9zbqwSQg4DUio8v68YsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUt
MzRiNjdkZjdjYjAzLzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80MDk5NDktZjIyOS00OThkLTkzMTUtMzRiNjdkZjdjYjAz
LzEvUmw3M3ZTNnozTnVyQkpDRGdOU0tqeV9yeGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxTSs81h
BrSieiUFEtrMHtShS3/lUOpFW4mQcwxWQG8k0jUYUoJv3tbBWwBNTSa/JuCCojYv
2qLnnzQz+paf6GYRT9wSxcVrEmCtdvDRsiBZcrGuBrsl10bBidvSVCOOGm1pa+Xr
eQbEIW+fvOJQAu8hmQauXuQuYkdT3MfBeFYB/aYpCtzEJVAPA3b+OFYV4SuWo/XR
43QZng5HVFKXO0Nq5JGZJxicvMA6q/osMncHd9aWFzBmPiebhqsSPbnuwN9Hedk3
gqFDpb1rvtREm1Epd5x6/otrt1LB81qDU9JZWfjLMgh0m3EXAoOMDC1G0SKaiVRl
LdK8I+oOI2xR3A==
-----END CERTIFICATE-----
Generated at Mon May 12 21:12:28 2025 by rpki-client