Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File: dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier: mQ3nS/Xp8YDT9FoOqHfVzJ4SbdpK04il1j67amiTsMY=
Subject key identifier: 6B:14:D4:91:50:F6:5B:09:81:1C:FC:1E:A3:41:CA:D7:FC:DA:4F:4E
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 0196B0D78FE3C070106F5EE6022C8FADBE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number: 1530
Signing time: Thu 08 May 2025 17:00:39 +0000
Manifest this update: Thu 08 May 2025 17:00:39 +0000
Manifest next update: Fri 09 May 2025 17:00:39 +0000
Files and hashes: 1: HIDgrdHX_QU-bGXtDjZHW_ouIno.roa (hash: CeASJRYiDgx1fz5UAh5dDbAHwn7ALNNERk8t4H2LNDQ=)
2: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: w29IbSMk7bcsZdcIyJk3t8dDHAWADwhywIQWdtvczZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:8f:e3:c0:70:10:6f:5e:e6:02:2c:8f:ad:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: May 8 17:00:39 2025 GMT
Not After : May 9 17:00:39 2025 GMT
Subject: CN=6b14d49150f65b09811cfc1ea341cad7fcda4f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:32:5a:53:3b:c4:c1:4b:83:37:ad:06:95:
f0:41:81:35:7a:ba:41:44:f8:42:47:8b:93:b7:48:
74:54:01:42:9e:d8:90:08:17:c6:c3:e8:66:46:1f:
54:18:42:3d:f6:f4:98:7d:4b:eb:97:62:e9:66:9e:
9f:bb:f2:d7:ef:37:25:38:1f:5a:de:fa:d4:04:9e:
2f:9f:00:51:8d:03:6f:b7:31:23:cd:4c:20:08:ed:
34:79:9a:bc:af:18:b4:d3:bb:a4:7e:99:c0:66:d2:
8f:9c:0c:be:3d:9f:c8:80:f1:50:80:36:b5:3a:aa:
99:ae:16:4f:ba:47:a3:19:3f:17:c6:d9:f1:5c:3c:
1c:61:07:06:f5:b1:bf:d8:12:eb:2b:0a:13:69:83:
cb:97:f3:4b:b0:5f:e8:8b:6a:de:d0:d4:dd:7c:09:
37:78:a6:f6:9c:82:ed:d4:22:6b:b6:2c:88:97:2a:
48:83:cb:93:e8:7a:1b:6c:45:11:ca:08:a1:ea:e3:
44:69:81:d2:a1:ff:60:49:91:8c:7e:f0:7f:33:2a:
73:99:29:58:fa:59:ee:d7:4d:c6:6a:59:95:56:8a:
05:83:c6:db:9d:2e:3f:00:ac:0c:a6:2e:9d:c7:2e:
65:7f:e7:19:eb:2e:f8:16:9e:ae:1d:aa:c6:3b:d9:
f8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:D4:91:50:F6:5B:09:81:1C:FC:1E:A3:41:CA:D7:FC:DA:4F:4E
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:aa:eb:5c:0f:e0:62:15:09:a1:f9:95:63:3c:b7:e7:ec:17:
19:5f:0f:e8:ed:6e:8b:8f:f1:c7:ad:a3:11:16:42:94:91:22:
68:c4:e0:d9:94:e8:9c:4d:ed:df:66:a3:1b:87:01:00:33:8d:
00:97:7a:93:e0:d9:24:bc:19:c6:0d:1d:8d:6d:30:9e:e0:bb:
43:79:9a:44:e2:2a:9f:fb:37:5e:01:8e:91:58:06:8e:ef:46:
72:b5:aa:a6:0f:36:f6:f3:10:3f:57:28:c2:fc:3d:7b:0b:7d:
d1:6c:2d:80:70:cb:7f:e3:40:bf:70:ba:5c:4c:e2:57:2f:0c:
43:4e:a8:ac:fd:fd:f7:e1:8e:2a:ab:56:2f:ba:28:23:30:28:
23:27:77:86:08:bf:b4:1d:27:98:a1:e5:bf:f1:49:8e:76:e3:
ec:d5:a1:c1:dc:ee:14:75:71:eb:7e:56:7f:10:fb:7c:68:49:
61:1e:51:d4:5e:36:f5:b3:f2:fe:c4:a4:41:ba:85:93:11:13:
c4:fc:2d:cf:92:b2:14:26:1e:24:82:cb:0b:01:c5:bb:b7:a6:
72:97:f5:e0:08:50:5c:99:71:7d:36:48:70:3b:95:21:30:04:
ea:02:60:f5:5c:df:0b:4e:7a:07:86:b2:a6:6a:3c:10:2b:1d:
d7:a9:bc:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw14/jwHAQb17mAiyPrb6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1
ZTkyMzYwHhcNMjUwNTA4MTcwMDM5WhcNMjUwNTA5MTcwMDM5WjAzMTEwLwYDVQQD
Eyg2YjE0ZDQ5MTUwZjY1YjA5ODExY2ZjMWVhMzQxY2FkN2ZjZGE0ZjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp04yWlM7xMFLgzetBpXwQYE1erpB
RPhCR4uTt0h0VAFCntiQCBfGw+hmRh9UGEI99vSYfUvrl2LpZp6fu/LX7zclOB9a
3vrUBJ4vnwBRjQNvtzEjzUwgCO00eZq8rxi007ukfpnAZtKPnAy+PZ/IgPFQgDa1
OqqZrhZPukejGT8XxtnxXDwcYQcG9bG/2BLrKwoTaYPLl/NLsF/oi2re0NTdfAk3
eKb2nILt1CJrtiyIlypIg8uT6HobbEURygih6uNEaYHSof9gSZGMfvB/MypzmSlY
+lnu103GalmVVooFg8bbnS4/AKwMpi6dxy5lf+cZ6y74Fp6uHarGO9n4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsU1JFQ9lsJgRz8HqNBytf82k9OMB8GA1UdIwQY
MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt
NmYxNjM5NjZhZjhiLzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi
LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFarrXA/g
YhUJofmVYzy35+wXGV8P6O1ui4/xx62jERZClJEiaMTg2ZTonE3t32ajG4cBADON
AJd6k+DZJLwZxg0djW0wnuC7Q3maROIqn/s3XgGOkVgGju9GcrWqpg829vMQP1co
wvw9ewt90WwtgHDLf+NAv3C6XEziVy8MQ06orP399+GOKqtWL7ooIzAoIyd3hgi/
tB0nmKHlv/FJjnbj7NWhwdzuFHVx635WfxD7fGhJYR5R1F429bPy/sSkQbqFkxET
xPwtz5KyFCYeJILLCwHFu7emcpf14AhQXJlxfTZIcDuVITAE6gJg9VzfC056B4ay
pmo8ECsd16m89A==
-----END CERTIFICATE-----
Generated at Fri May 9 03:01:16 2025 by rpki-client