Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
File: pstoJGZQvVjCKirgCtBmF4qB628.mft (raw, json)
Hash identifier: 2+/sEM658oMjylLxKwJwyFtYXJZFAEYaNFcwDfXjA/c=
Subject key identifier: 5B:78:08:D6:1C:F3:99:C4:E9:B5:BF:69:6C:0F:6F:5E:5E:23:68:35
Authority key identifier: A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
Certificate issuer: /CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Certificate serial: 0196C34C0ECC31F0A5240D4E360944137C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
Manifest number: 0DB4
Signing time: Mon 12 May 2025 07:01:03 +0000
Manifest this update: Mon 12 May 2025 07:01:03 +0000
Manifest next update: Tue 13 May 2025 07:01:03 +0000
Files and hashes: 1: PUpMBlY3y3LiEyvtN3mwZr7fC6o.roa (hash: 83wzwEaj6Lu4SVxQ13wsJpRArhNJgziukBIbApzP3jM=)
2: pstoJGZQvVjCKirgCtBmF4qB628.crl (hash: vVWPRsgk2AfQvWsxbvg0VnyyQa8INUIy6pYYUtMBRxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:0e:cc:31:f0:a5:24:0d:4e:36:09:44:13:7c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6cb68246650bd58c22a2ae00ad066178a81eb6f
Validity
Not Before: May 12 07:01:03 2025 GMT
Not After : May 13 07:01:03 2025 GMT
Subject: CN=5b7808d61cf399c4e9b5bf696c0f6f5e5e236835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:2a:e3:ac:9b:99:44:b9:7b:74:48:30:a0:
37:a4:e9:5b:a3:74:fc:c1:c1:b7:7a:ec:bd:c5:85:
3a:4a:a6:29:73:45:9e:51:04:62:6f:d7:b0:94:37:
95:2e:0a:65:f6:38:58:5d:b1:43:05:6f:5c:c5:3c:
ce:15:29:92:0e:0f:63:e4:0e:d8:6e:91:98:79:2e:
fc:9e:04:bc:1c:49:61:ff:f0:46:86:40:d6:6e:78:
64:9d:7d:50:0d:00:fc:24:96:1d:76:82:cb:9b:21:
c5:5f:64:13:91:dd:f8:b5:25:7b:4e:b1:74:92:1a:
eb:f9:cd:fd:01:fe:16:26:83:65:de:28:90:9c:68:
45:f8:51:68:52:e3:56:ac:dd:bf:55:23:85:33:9d:
22:c7:46:3c:1a:38:12:71:1c:c8:42:bc:1d:4b:68:
8f:9b:89:68:ca:1f:0d:63:e1:ff:66:c9:43:09:8c:
ee:84:52:30:e2:b3:50:ad:97:c1:b3:9c:7f:74:e2:
4d:3f:02:7e:ee:5d:7e:ce:89:67:fa:62:1f:26:d0:
16:73:45:61:05:2a:4e:71:31:1f:a5:72:ce:7b:b3:
1d:c1:51:3c:4d:91:40:6d:c4:82:28:6c:25:b6:1b:
d5:44:dc:83:87:82:18:f5:09:23:5e:ca:2d:82:a6:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:08:D6:1C:F3:99:C4:E9:B5:BF:69:6C:0F:6F:5E:5E:23:68:35
X509v3 Authority Key Identifier:
keyid:A6:CB:68:24:66:50:BD:58:C2:2A:2A:E0:0A:D0:66:17:8A:81:EB:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pstoJGZQvVjCKirgCtBmF4qB628.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b60d50-552a-44af-8ba5-36e4fb56fdb4/1/pstoJGZQvVjCKirgCtBmF4qB628.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:df:9e:9d:53:9d:95:a1:7a:5f:b1:c7:c3:16:9d:7d:2b:f4:
59:d3:2f:ab:03:1e:9b:87:f6:50:a0:14:eb:34:b5:3e:e0:ea:
a6:6a:24:ff:e1:75:7f:30:18:4c:80:bc:b8:c8:ae:8c:ce:f4:
06:2b:ae:30:d5:a2:aa:40:7b:6c:83:29:94:3d:61:c0:ed:72:
da:9e:f9:c5:90:8a:b9:cd:1b:3b:7e:dc:03:54:f6:2b:46:f1:
f1:02:4f:ec:8c:d4:27:7c:f5:65:d6:b8:71:e7:9c:3b:b6:23:
15:5f:b0:22:26:7a:45:6a:e2:ca:07:f9:f3:d6:97:69:67:02:
6b:c8:2c:dd:3a:63:b6:c6:6b:c7:c3:04:67:19:a0:ba:d5:5d:
61:60:63:2f:a4:28:51:65:53:b9:17:71:06:4b:83:6e:37:ef:
6d:1a:dd:eb:a9:43:ba:a1:9d:13:7d:dd:f2:84:6e:f1:9b:c2:
7f:4b:dd:6e:6e:b9:7b:e7:04:28:1a:b4:52:5b:60:9b:10:65:
cd:5c:d1:29:cc:18:6f:0f:1d:19:b4:60:00:55:f0:80:73:6f:
b2:3c:75:79:f1:03:51:6f:db:b9:0e:87:3b:8d:75:e2:ef:32:
6f:cb:b9:ff:00:1b:61:df:76:aa:a2:37:5c:30:96:ea:d5:ac:
b2:12:df:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbDTA7MMfClJA1ONglEE3wLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2Y2I2ODI0NjY1MGJkNThjMjJhMmFlMDBhZDA2NjE3OGE4
MWViNmYwHhcNMjUwNTEyMDcwMTAzWhcNMjUwNTEzMDcwMTAzWjAzMTEwLwYDVQQD
Eyg1Yjc4MDhkNjFjZjM5OWM0ZTliNWJmNjk2YzBmNmY1ZTVlMjM2ODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Goq46ybmUS5e3RIMKA3pOlbo3T8
wcG3euy9xYU6SqYpc0WeUQRib9ewlDeVLgpl9jhYXbFDBW9cxTzOFSmSDg9j5A7Y
bpGYeS78ngS8HElh//BGhkDWbnhknX1QDQD8JJYddoLLmyHFX2QTkd34tSV7TrF0
khrr+c39Af4WJoNl3iiQnGhF+FFoUuNWrN2/VSOFM50ix0Y8GjgScRzIQrwdS2iP
m4loyh8NY+H/ZslDCYzuhFIw4rNQrZfBs5x/dOJNPwJ+7l1+zoln+mIfJtAWc0Vh
BSpOcTEfpXLOe7MdwVE8TZFAbcSCKGwlthvVRNyDh4IY9QkjXsotgqZFwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt4CNYc85nE6bW/aWwPb15eI2g1MB8GA1UdIwQY
MBaAFKbLaCRmUL1Ywioq4ArQZheKgetvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUt
MzZlNGZiNTZmZGI0LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9iNjBkNTAtNTUyYS00NGFmLThiYTUtMzZlNGZiNTZmZGI0
LzEvcHN0b0pHWlF2VmpDS2lyZ0N0Qm1GNHFCNjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd+enVOd
laF6X7HHwxadfSv0WdMvqwMem4f2UKAU6zS1PuDqpmok/+F1fzAYTIC8uMiujM70
BiuuMNWiqkB7bIMplD1hwO1y2p75xZCKuc0bO37cA1T2K0bx8QJP7IzUJ3z1Zda4
ceecO7YjFV+wIiZ6RWriygf589aXaWcCa8gs3TpjtsZrx8MEZxmgutVdYWBjL6Qo
UWVTuRdxBkuDbjfvbRrd66lDuqGdE33d8oRu8ZvCf0vdbm65e+cEKBq0UltgmxBl
zVzRKcwYbw8dGbRgAFXwgHNvsjx1efEDUW/buQ6HO4114u8yb8u5/wAbYd92qqI3
XDCW6tWsshLfTw==
-----END CERTIFICATE-----
Generated at Mon May 12 10:21:10 2025 by rpki-client