Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
File: 1-X_eytsyYTNDh88JHQLgcTt4HTE.mft (raw, json)
Hash identifier: zzIWvbJa7v8FT+5NDITIHIVDTaJNH0ua4IiiWXcnp04=
Subject key identifier: 32:C0:40:CC:85:34:BE:BE:03:5C:BE:29:34:A3:FA:47:17:F0:F3:26
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0196C6155E1A0C8A5672403BDDDC0707A01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 20:00:11 +0000
Manifest this update: Mon 12 May 2025 20:00:11 +0000
Manifest next update: Tue 13 May 2025 20:00:11 +0000
Files and hashes: 1: 1-X_eytsyYTNDh88JHQLgcTt4HTE.crl (hash: 3xnnNKFu950g3x6ZiiEbuATkWSL1FaeSImg/0ajK7Sc=)
2: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (hash: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=)
3: mAXlXNB9v-X9Wiu9xA-qkNOSmGk.roa (hash: oVGw8L/hb1uj03ZIPyJ/jrTD+46lhm6KM/O1Nxc9Los=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:5e:1a:0c:8a:56:72:40:3b:dd:dc:07:07:a0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: May 12 20:00:11 2025 GMT
Not After : May 13 20:00:11 2025 GMT
Subject: CN=32c040cc8534bebe035cbe2934a3fa4717f0f326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:a2:3b:00:b1:f8:9c:17:2f:db:f6:1c:88:
bd:21:ed:17:25:f4:96:8e:1e:3b:9b:87:99:ee:0e:
1e:77:52:79:ec:73:e4:aa:db:5b:00:7b:fb:c6:dd:
ed:c1:5e:50:a4:9b:2e:e1:9e:0b:cf:fa:54:40:b3:
bf:a3:ec:42:d2:1e:8c:c1:cc:1f:67:dd:06:90:55:
20:64:f9:c6:45:04:1a:e9:67:cb:4c:e1:f3:43:9c:
a6:76:d8:29:ad:d5:c8:33:a2:ba:2f:25:c2:a5:40:
53:51:4f:e5:f6:a5:4c:41:e0:c6:fe:b1:08:13:cc:
bf:93:cd:72:3f:7d:a4:ce:cd:b8:d7:1b:fa:65:f6:
6d:ba:49:58:d9:b3:c2:c5:32:a0:dc:c8:c7:f4:d4:
f9:45:19:00:18:59:1d:94:0a:f1:24:65:75:8f:d9:
59:06:75:8c:4b:17:86:a1:a3:80:6c:cf:39:41:95:
08:84:f0:8b:97:23:22:dc:0f:48:12:96:0a:e4:39:
ec:a7:36:13:c7:f2:ec:59:76:23:28:8c:a0:43:a6:
e5:80:78:91:fe:de:da:f8:ea:93:3a:53:51:91:a5:
8f:45:c8:33:53:b7:ff:66:9a:c6:f4:ec:c9:20:49:
b4:17:8f:83:6f:28:a7:5a:37:e0:33:6a:84:d8:fb:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C0:40:CC:85:34:BE:BE:03:5C:BE:29:34:A3:FA:47:17:F0:F3:26
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:53:b4:4a:12:99:8a:f5:a8:48:19:eb:05:e6:ba:06:d1:05:
91:95:79:60:b2:ef:f3:5b:01:8d:6f:fb:36:d0:c4:c0:6e:48:
df:9f:53:fc:c2:da:f9:18:b4:6f:72:dc:26:02:1b:88:b4:55:
1a:2e:af:90:09:1b:79:cb:a3:58:57:dd:c4:5c:98:2e:2d:f9:
59:ce:69:10:f0:2e:c9:c6:96:61:9a:fc:ef:4a:03:62:e2:4d:
c9:5b:69:29:27:86:4f:3f:30:24:03:8d:2e:5d:03:99:e2:0d:
56:4c:2f:63:50:ff:bd:96:02:09:62:f1:23:cb:ab:81:7d:6b:
53:83:6b:c0:59:58:24:bf:87:53:0f:f5:b9:d3:31:91:fc:15:
53:18:64:0f:a3:bd:19:ee:25:c0:f5:db:04:15:91:3e:ed:3a:
74:4e:aa:27:36:3d:e0:f4:9c:15:9d:c2:74:3d:99:57:b5:79:
45:e2:a0:de:74:e5:73:28:b6:19:72:d5:cb:37:fb:25:8a:be:
01:d9:27:21:26:a7:7f:c1:ee:99:a2:71:de:f3:db:aa:f7:33:
41:51:10:55:6e:23:7a:44:47:23:17:55:76:6b:88:15:11:45:
8f:50:d1:17:60:ea:9c:b3:9a:42:04:c4:8a:b6:3f:21:7a:f9:
de:f2:e6:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZbGFV4aDIpWckA73dwHB6AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3
ODFkMzEwHhcNMjUwNTEyMjAwMDExWhcNMjUwNTEzMjAwMDExWjAzMTEwLwYDVQQD
EygzMmMwNDBjYzg1MzRiZWJlMDM1Y2JlMjkzNGEzZmE0NzE3ZjBmMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtiiOwCx+JwXL9v2HIi9Ie0XJfSW
jh47m4eZ7g4ed1J57HPkqttbAHv7xt3twV5QpJsu4Z4Lz/pUQLO/o+xC0h6Mwcwf
Z90GkFUgZPnGRQQa6WfLTOHzQ5ymdtgprdXIM6K6LyXCpUBTUU/l9qVMQeDG/rEI
E8y/k81yP32kzs241xv6ZfZtuklY2bPCxTKg3MjH9NT5RRkAGFkdlArxJGV1j9lZ
BnWMSxeGoaOAbM85QZUIhPCLlyMi3A9IEpYK5DnspzYTx/LsWXYjKIygQ6blgHiR
/t7a+OqTOlNRkaWPRcgzU7f/ZprG9OzJIEm0F4+DbyinWjfgM2qE2PsgRwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDLAQMyFNL6+A1y+KTSj+kcX8PMmMB8GA1UdIwQY
MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz
LWViN2JmMmJkZGQwOC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzk4L2E4YTM2NC03NDMwLTRkYTYtOGY0My1lYjdiZjJiZGRk
MDgvMS8xLVhfZXl0c3lZVE5EaDg4SkhRTGdjVHQ0SFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlO0
ShKZivWoSBnrBea6BtEFkZV5YLLv81sBjW/7NtDEwG5I359T/MLa+Ri0b3LcJgIb
iLRVGi6vkAkbecujWFfdxFyYLi35Wc5pEPAuycaWYZr870oDYuJNyVtpKSeGTz8w
JAONLl0DmeINVkwvY1D/vZYCCWLxI8urgX1rU4NrwFlYJL+HUw/1udMxkfwVUxhk
D6O9Ge4lwPXbBBWRPu06dE6qJzY94PScFZ3CdD2ZV7V5ReKg3nTlcyi2GXLVyzf7
JYq+AdknISanf8HumaJx3vPbqvczQVEQVW4jekRHIxdVdmuIFRFFj1DRF2DqnLOa
QgTEirY/IXr53vLmdQ==
-----END CERTIFICATE-----
Generated at Tue May 13 00:30:01 2025 by rpki-client