Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: dOp/SJjEYbnTcEAh0Gbf5xfcMU4aqpsVRwTPzUdhJUo=
Subject key identifier: 15:85:2D:99:49:8D:33:76:43:D7:BE:14:4A:6C:D6:30:37:73:9B:F7
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 0196A878CB7BFCB79ED46CE79E88D147E588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 0C50
Signing time: Wed 07 May 2025 02:00:10 +0000
Manifest this update: Wed 07 May 2025 02:00:10 +0000
Manifest next update: Thu 08 May 2025 02:00:10 +0000
Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=)
2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: pbkwAKByyV5x0s1rf82jQZ5Ds236All48bPa8okckMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:78:cb:7b:fc:b7:9e:d4:6c:e7:9e:88:d1:47:e5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: May 7 02:00:10 2025 GMT
Not After : May 8 02:00:10 2025 GMT
Subject: CN=15852d99498d337643d7be144a6cd63037739bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:c0:0f:56:d4:eb:52:ee:ee:e8:3d:bd:3c:
9c:34:52:ef:f1:8b:4f:ea:c1:26:df:b3:33:01:37:
79:77:bd:14:7e:26:d8:e0:35:49:6c:11:8d:55:93:
81:68:f6:57:ab:10:53:06:19:84:df:96:a8:34:4e:
b2:a8:81:e9:80:d0:a0:d4:10:ce:00:7f:d0:3c:a5:
0b:83:57:53:2b:48:ae:d4:ef:39:bf:22:8d:4f:92:
4e:45:7c:67:16:2a:29:9f:1c:d7:91:5e:3d:ac:99:
d0:97:bf:5c:c0:32:82:04:eb:5f:71:b9:b6:52:6d:
c0:8a:c9:43:37:89:a6:ed:39:62:c3:bc:2c:7e:f2:
93:7f:e7:2f:91:a4:c8:b2:96:6b:e6:e5:73:fd:5d:
3e:0b:43:15:d0:42:21:03:45:a6:08:fd:f4:12:4e:
c2:37:dc:60:f8:0c:89:e1:f1:ea:03:87:36:b7:81:
d5:0f:64:cf:d9:47:5e:d6:8a:17:7e:c7:c6:fa:f0:
2a:ab:46:32:2a:5e:5c:ea:2e:90:bf:db:77:b9:c9:
a2:1f:40:ea:5e:56:08:ab:0c:2e:ee:bf:5f:35:62:
94:8a:e1:bc:1d:3e:ea:8d:08:96:a4:3d:06:6d:c2:
1f:4e:25:97:f4:58:89:b3:c2:e5:3c:7a:cb:f4:86:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:2D:99:49:8D:33:76:43:D7:BE:14:4A:6C:D6:30:37:73:9B:F7
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:69:53:50:6b:ea:66:41:39:75:fe:51:d7:d0:47:9c:b0:52:
39:93:86:34:c2:a9:7f:cd:0c:d0:b1:9f:b6:11:d4:55:df:bb:
58:a1:bb:a2:b7:a9:0a:b8:bd:36:ff:b2:fa:40:a2:3b:89:1c:
c4:c6:be:07:43:7e:6e:03:1f:d6:cd:96:71:f1:ae:70:66:ab:
55:d2:fe:45:d6:c0:63:ba:33:3d:04:56:aa:a9:a3:58:4f:a6:
27:35:61:10:8f:f0:34:49:01:24:92:54:60:1e:dc:01:c7:f0:
45:4f:30:c9:43:5e:ad:17:ee:bc:cc:26:e0:b2:5d:21:fb:13:
91:db:03:74:31:3a:15:c9:e1:75:33:ba:e2:97:f3:06:fb:aa:
53:a3:62:72:fa:3c:2e:3b:5b:05:ff:1d:30:da:c2:b8:a5:9c:
cf:b7:bd:a9:f8:b4:85:ec:fc:1e:c9:1f:63:ed:ec:6e:7b:f8:
b7:99:bb:92:e0:cd:c0:90:98:d4:b0:4a:03:90:19:f3:7c:36:
73:6d:e4:43:a1:e3:fc:c2:23:d5:ec:93:41:4d:4e:7b:c0:95:
58:08:69:a4:02:e0:0b:32:af:1a:f3:84:97:c9:af:70:43:55:
7a:12:93:74:3b:0d:6a:9a:c7:9b:c2:48:12:08:5b:31:ba:cd:
24:4b:c0:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoeMt7/Lee1GznnojRR+WIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkOTJiNjc0NzUyNzA3NTUxMzZhOGEzY2E4MDJjYTEyYzhh
YzdlNzcwHhcNMjUwNTA3MDIwMDEwWhcNMjUwNTA4MDIwMDEwWjAzMTEwLwYDVQQD
EygxNTg1MmQ5OTQ5OGQzMzc2NDNkN2JlMTQ0YTZjZDYzMDM3NzM5YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtLAD1bU61Lu7ug9vTycNFLv8YtP
6sEm37MzATd5d70UfibY4DVJbBGNVZOBaPZXqxBTBhmE35aoNE6yqIHpgNCg1BDO
AH/QPKULg1dTK0iu1O85vyKNT5JORXxnFiopnxzXkV49rJnQl79cwDKCBOtfcbm2
Um3AislDN4mm7Tliw7wsfvKTf+cvkaTIspZr5uVz/V0+C0MV0EIhA0WmCP30Ek7C
N9xg+AyJ4fHqA4c2t4HVD2TP2Ude1ooXfsfG+vAqq0YyKl5c6i6Qv9t3ucmiH0Dq
XlYIqwwu7r9fNWKUiuG8HT7qjQiWpD0GbcIfTiWX9FiJs8LlPHrL9IZXgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWFLZlJjTN2Q9e+FEps1jA3c5v3MB8GA1UdIwQY
MBaAFH2StnR1JwdVE2qKPKgCyhLIrH53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUt
NDEwYzY3MWU3NTc3LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUtNDEwYzY3MWU3NTc3
LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWlTUGvq
ZkE5df5R19BHnLBSOZOGNMKpf80M0LGfthHUVd+7WKG7orepCri9Nv+y+kCiO4kc
xMa+B0N+bgMf1s2WcfGucGarVdL+RdbAY7ozPQRWqqmjWE+mJzVhEI/wNEkBJJJU
YB7cAcfwRU8wyUNerRfuvMwm4LJdIfsTkdsDdDE6FcnhdTO64pfzBvuqU6Nicvo8
LjtbBf8dMNrCuKWcz7e9qfi0hez8HskfY+3sbnv4t5m7kuDNwJCY1LBKA5AZ83w2
c23kQ6Hj/MIj1eyTQU1Oe8CVWAhppALgCzKvGvOEl8mvcENVehKTdDsNaprHm8JI
EghbMbrNJEvABA==
-----END CERTIFICATE-----
Generated at Wed May 7 07:46:34 2025 by rpki-client