
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: asxdxvfTfnxhRLRzYbbhcfx4MmjRhzAwHNC0ZOQiMMM=
Subject key identifier: D9:7A:A7:96:4A:B4:51:0D:76:5A:F3:07:CB:6A:5B:98:39:E4:F7:02
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 0196B8234F322DC37EA0B692A9D2387BE5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 0FC1
Signing time: Sat 10 May 2025 03:00:43 +0000
Manifest this update: Sat 10 May 2025 03:00:43 +0000
Manifest next update: Sun 11 May 2025 03:00:43 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: SI0aeOaggmBMbRMMjIw9UPcfCPTuNBg6AwtGfA7PJh0=)
2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:4f:32:2d:c3:7e:a0:b6:92:a9:d2:38:7b:e5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: May 10 03:00:43 2025 GMT
Not After : May 11 03:00:43 2025 GMT
Subject: CN=d97aa7964ab4510d765af307cb6a5b9839e4f702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:36:8b:bd:2b:fa:1c:d9:ab:68:3d:62:a7:
43:20:18:d6:bb:ce:04:44:de:18:d4:17:a8:6d:25:
6f:ff:65:bc:fc:43:c5:10:bf:81:4f:33:cf:83:42:
05:24:fb:dd:d7:c2:1c:13:68:0e:4f:11:f1:2e:ec:
94:eb:c9:11:67:bd:3b:6a:0e:b2:e0:7d:f3:8e:94:
07:8d:a6:d5:71:13:6a:ed:51:a4:ba:a2:7e:95:f2:
0a:d3:db:47:42:f1:ef:6d:4a:cd:2e:59:c3:ec:55:
d9:ba:bd:fb:b6:b0:75:ed:47:f0:d7:15:a8:e6:d6:
9d:79:41:a5:f0:ab:c8:4a:d1:d7:fb:0b:6f:85:c9:
c2:72:58:dc:7f:59:de:46:f7:14:02:de:23:8a:72:
67:13:5c:54:0b:63:55:5a:d8:4c:4a:3b:91:b0:42:
8d:08:b2:df:3c:fc:60:82:7e:17:b7:58:77:ee:b3:
1a:60:a4:d6:0d:64:53:5f:f1:50:3b:00:d4:c7:cf:
ad:08:12:5e:53:6e:f8:5b:eb:6e:1f:d3:4f:f8:fb:
e2:1b:a9:75:40:49:d7:4b:79:15:d5:ce:7c:4a:2c:
ec:f6:76:f3:f1:a7:e3:b6:93:8d:83:98:a4:a5:63:
99:5b:d2:e3:e2:ef:e1:89:f1:4c:36:7b:a8:82:e5:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:A7:96:4A:B4:51:0D:76:5A:F3:07:CB:6A:5B:98:39:E4:F7:02
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:8a:96:0b:aa:89:3f:97:7c:dc:ea:3f:83:ad:48:0d:c1:
89:eb:d0:3e:05:ef:aa:e0:55:35:7a:d7:5b:8a:bc:54:29:b8:
83:21:2a:3c:8e:29:b9:18:86:f1:b9:81:76:be:d2:17:6c:6f:
d7:ac:21:cf:c7:06:9a:b5:dd:dd:1f:f2:ac:5a:3e:0e:70:ed:
da:98:e3:e3:0d:76:a5:98:c0:a4:a5:60:a0:f6:58:e8:99:0b:
f0:c5:0b:33:93:3a:84:e8:b7:5e:73:a6:0d:b4:3d:74:cd:61:
24:f4:a0:98:27:00:32:f0:5e:34:3f:78:9c:d2:41:5f:f0:88:
e5:b2:49:93:95:d4:5a:df:ac:78:43:89:ec:42:6a:72:42:33:
71:80:aa:7a:72:53:7c:e7:55:b5:fe:b3:e1:c6:54:22:07:ae:
5a:d0:08:6d:57:d7:02:66:77:db:20:c9:9c:c0:6d:02:00:e3:
1c:4b:c0:5f:65:7f:98:93:93:95:16:e1:06:23:00:c9:8a:c4:
07:7c:52:c3:ec:6c:81:19:09:bb:6d:cc:af:d3:4e:1e:94:e4:
27:08:f3:3d:70:e8:f9:ac:7b:f9:d8:00:5f:7b:c9:f2:35:81:
21:2c:9f:ae:45:a1:9d:82:9a:9e:8d:e8:fa:65:45:06:60:03:
9d:ae:06:7b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZa4I08yLcN+oLaSqdI4e+XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMjM2YjIxM2Q1NjQ5M2YzYjA3N2U2YjQxZjQyZTRmM2Rm
OGNkY2UwHhcNMjUwNTEwMDMwMDQzWhcNMjUwNTExMDMwMDQzWjAzMTEwLwYDVQQD
EyhkOTdhYTc5NjRhYjQ1MTBkNzY1YWYzMDdjYjZhNWI5ODM5ZTRmNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLg2i70r+hzZq2g9YqdDIBjWu84E
RN4Y1BeobSVv/2W8/EPFEL+BTzPPg0IFJPvd18IcE2gOTxHxLuyU68kRZ707ag6y
4H3zjpQHjabVcRNq7VGkuqJ+lfIK09tHQvHvbUrNLlnD7FXZur37trB17Ufw1xWo
5tadeUGl8KvIStHX+wtvhcnCcljcf1neRvcUAt4jinJnE1xUC2NVWthMSjuRsEKN
CLLfPPxggn4Xt1h37rMaYKTWDWRTX/FQOwDUx8+tCBJeU274W+tuH9NP+PviG6l1
QEnXS3kV1c58Sizs9nbz8afjtpONg5ikpWOZW9Lj4u/hifFMNnuoguXxrwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNl6p5ZKtFENdlrzB8tqW5g55PcCMB8GA1UdIwQY
MBaAFPsjayE9Vkk/Owd+a0H0Lk89+M3OMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS15TnJJVDFXU1Q4N0IzNXJRZlF1VHozNHpjNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODUvMjBmNGFjLTgwZDktNDBlMi1hOWU2
LTFjODhlZWJlYjI5My8xLzEteU5ySVQxV1NUODdCMzVyUWZRdVR6MzR6YzQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg1LzIwZjRhYy04MGQ5LTQwZTItYTllNi0xYzg4ZWViZWIy
OTMvMS8xLXlOcklUMVdTVDg3QjM1clFmUXVUejM0emM0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBaK
lguqiT+XfNzqP4OtSA3BievQPgXvquBVNXrXW4q8VCm4gyEqPI4puRiG8bmBdr7S
F2xv16whz8cGmrXd3R/yrFo+DnDt2pjj4w12pZjApKVgoPZY6JkL8MULM5M6hOi3
XnOmDbQ9dM1hJPSgmCcAMvBeND94nNJBX/CI5bJJk5XUWt+seEOJ7EJqckIzcYCq
enJTfOdVtf6z4cZUIgeuWtAIbVfXAmZ32yDJnMBtAgDjHEvAX2V/mJOTlRbhBiMA
yYrEB3xSw+xsgRkJu23Mr9NOHpTkJwjzPXDo+ax7+dgAX3vJ8jWBISyfrkWhnYKa
no3o+mVFBmADna4Gew==
-----END CERTIFICATE-----
Generated at Sat May 10 07:38:21 2025 by rpki-client