Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File: d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier: R9XRSl/QlHl3m7iWWJ6mYkr4bc0k7q9L9ZHdrcGD7ts=
Subject key identifier: 1A:00:68:B5:DD:7D:72:AE:3D:8A:1E:F9:EB:5F:4C:35:4E:EE:25:DA
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer: /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial: 01969F08740D798E6ABEE8A753A602A0B63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number: 012C
Signing time: Mon 05 May 2025 06:00:53 +0000
Manifest this update: Mon 05 May 2025 06:00:53 +0000
Manifest next update: Tue 06 May 2025 06:00:53 +0000
Files and hashes: 1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: JvViU/SJacjkq0/C35i4xBhpK75VinGVeZ+0+XXvqvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:74:0d:79:8e:6a:be:e8:a7:53:a6:02:a0:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
Validity
Not Before: May 5 06:00:53 2025 GMT
Not After : May 6 06:00:53 2025 GMT
Subject: CN=1a0068b5dd7d72ae3d8a1ef9eb5f4c354eee25da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:85:42:8f:5d:fb:7f:0d:a5:19:4e:62:a0:
d6:f1:cd:1e:de:fe:73:46:93:26:3a:c7:05:04:66:
29:67:9f:07:5d:36:2d:44:bc:fa:13:d8:86:6b:ca:
aa:d1:2f:6f:52:52:b0:42:0d:cd:58:a0:e6:64:25:
ca:bd:be:ab:d2:f6:2b:9f:16:20:c2:79:3b:dc:63:
84:9f:87:45:a2:af:0a:00:f9:12:70:03:8d:c1:5e:
53:cd:3d:a8:92:3e:0c:75:7e:ac:18:0f:8b:2a:6a:
81:73:94:30:ed:0e:2a:22:af:3c:e3:d6:78:08:7d:
70:81:a8:9c:9c:d2:ff:e8:af:50:78:48:4d:0f:bf:
21:3b:1e:5c:03:93:e7:cb:14:92:e4:01:1e:08:a8:
98:89:6d:b7:d9:5a:36:67:0a:8b:a1:3d:74:66:2d:
59:26:75:2e:1a:0b:74:cd:87:f1:a7:aa:09:a9:95:
d0:cc:15:cf:a2:3b:b2:10:6d:11:3c:48:98:a6:f9:
c6:0b:ff:60:e0:a7:29:be:58:42:c8:a4:ac:5f:6f:
43:f8:83:9d:d8:20:c4:60:db:5e:e3:1d:63:78:0c:
d3:e2:aa:32:58:b3:62:82:de:97:e8:a2:21:c3:c2:
b4:05:d8:c0:87:9d:65:71:9b:59:47:2a:2d:31:3c:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:00:68:B5:DD:7D:72:AE:3D:8A:1E:F9:EB:5F:4C:35:4E:EE:25:DA
X509v3 Authority Key Identifier:
keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a5:89:7d:cc:07:c7:4b:1e:19:bb:84:4c:77:50:25:e6:37:
e2:30:d5:c6:6e:94:10:6f:58:3b:b4:5d:d5:3e:4c:eb:88:9d:
3c:e0:a5:8c:39:85:56:70:ed:3f:96:fd:74:68:8d:b9:0e:41:
e0:f5:74:ef:93:87:a4:da:db:1c:2c:40:21:1e:76:95:eb:87:
e1:0e:30:09:7d:36:69:92:13:6c:c9:f5:11:71:68:89:4c:96:
8e:91:94:96:94:a1:90:84:99:54:63:93:0e:4a:1f:03:6f:7d:
1f:5c:3e:10:80:55:a3:4e:57:14:15:7f:f9:4e:51:0e:38:c2:
e8:85:1b:f6:64:55:94:9b:7d:de:1b:a1:d4:75:fb:0f:82:51:
86:32:12:3b:93:f6:ac:6d:9a:17:51:e1:88:c6:bc:59:cd:f8:
a8:c8:fc:9e:77:e1:8a:f5:53:ad:43:eb:6d:7d:81:de:55:94:
e9:d2:35:d3:0e:b2:48:f3:3f:03:37:05:74:4c:e0:da:45:53:
e5:71:b1:54:c2:3d:01:82:f9:02:f9:76:66:86:94:e4:6b:cc:
e0:be:45:b4:b5:8f:03:6a:4c:8e:34:f0:69:83:4b:b7:1b:b3:
91:e3:b4:f6:a6:64:45:15:d0:61:3d:6e:9d:4b:96:11:7c:26:
18:b3:6b:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZafCHQNeY5qvuinU6YCoLY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Y2YwOGVlOWEyODkxOTdiNzExMDBhNWYwMGIxOTUwMWQ5
NGMwOTMwHhcNMjUwNTA1MDYwMDUzWhcNMjUwNTA2MDYwMDUzWjAzMTEwLwYDVQQD
EygxYTAwNjhiNWRkN2Q3MmFlM2Q4YTFlZjllYjVmNGMzNTRlZWUyNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i+FQo9d+38NpRlOYqDW8c0e3v5z
RpMmOscFBGYpZ58HXTYtRLz6E9iGa8qq0S9vUlKwQg3NWKDmZCXKvb6r0vYrnxYg
wnk73GOEn4dFoq8KAPkScAONwV5TzT2okj4MdX6sGA+LKmqBc5Qw7Q4qIq8849Z4
CH1wgaicnNL/6K9QeEhND78hOx5cA5PnyxSS5AEeCKiYiW232Vo2ZwqLoT10Zi1Z
JnUuGgt0zYfxp6oJqZXQzBXPojuyEG0RPEiYpvnGC/9g4KcpvlhCyKSsX29D+IOd
2CDEYNte4x1jeAzT4qoyWLNigt6X6KIhw8K0BdjAh51lcZtZRyotMTwHpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoAaLXdfXKuPYoe+etfTDVO7iXaMB8GA1UdIwQY
MBaAFHfPCO6aKJGXtxEApfALGVAdlMCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTct
Y2ZhZjZlZjg0OWQ2LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85Y2VlYTYtMzIxOC00YjM5LTk3YTctY2ZhZjZlZjg0OWQ2
LzEvZDg4STdwb29rWmUzRVFDbDhBc1pVQjJVd0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaWJfcwH
x0seGbuETHdQJeY34jDVxm6UEG9YO7Rd1T5M64idPOCljDmFVnDtP5b9dGiNuQ5B
4PV075OHpNrbHCxAIR52leuH4Q4wCX02aZITbMn1EXFoiUyWjpGUlpShkISZVGOT
DkofA299H1w+EIBVo05XFBV/+U5RDjjC6IUb9mRVlJt93huh1HX7D4JRhjISO5P2
rG2aF1HhiMa8Wc34qMj8nnfhivVTrUPrbX2B3lWU6dI10w6ySPM/AzcFdEzg2kVT
5XGxVMI9AYL5Avl2ZoaU5GvM4L5FtLWPA2pMjjTwaYNLtxuzkeO09qZkRRXQYT1u
nUuWEXwmGLNrNg==
-----END CERTIFICATE-----
Generated at Mon May 5 13:37:03 2025 by rpki-client