Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: E8IToFl03mz2LoAZuFL+/cHPziuq/ufdVzGI81bcwVI=
Subject key identifier: 05:ED:73:1B:26:FA:75:AC:1A:93:82:D9:97:7D:F6:B4:2C:83:3D:C2
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 0196BBC8E65B95FD33A7139C2016BAF0846F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0BB1
Signing time: Sat 10 May 2025 20:00:27 +0000
Manifest this update: Sat 10 May 2025 20:00:27 +0000
Manifest next update: Sun 11 May 2025 20:00:27 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: t+nAw60FndkSpGMPX7Rr/rc8LyH7n1dwo/OaaQ7wF0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:e6:5b:95:fd:33:a7:13:9c:20:16:ba:f0:84:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: May 10 20:00:27 2025 GMT
Not After : May 11 20:00:27 2025 GMT
Subject: CN=05ed731b26fa75ac1a9382d9977df6b42c833dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:68:c3:f6:10:3f:3f:5f:a7:73:de:c9:7e:
48:4e:1c:dd:ac:56:03:bc:e0:35:48:ba:26:14:d9:
c4:1b:fc:04:6e:b6:db:0e:75:ec:dc:ca:e8:b4:9d:
65:40:02:c9:67:f2:34:79:d6:6d:de:1a:05:cc:65:
2d:58:a2:40:72:cb:51:2d:07:60:87:1e:e1:b9:89:
0e:91:b1:3a:9b:05:ee:5d:d3:ed:93:36:8e:0a:71:
c3:17:4b:2a:6e:9c:3a:a4:33:b7:0b:d6:68:38:92:
f5:22:ce:9d:c5:88:66:87:f9:9e:52:64:0c:fa:8d:
f7:db:e1:46:a1:d3:b2:ae:6f:26:27:29:71:d4:ca:
cc:70:f2:ab:03:64:a4:8c:2d:43:c8:69:51:86:23:
10:58:6f:56:a9:0c:2f:92:04:4e:2a:a2:a7:51:25:
58:c5:c3:90:07:20:df:1e:bc:e4:ed:e5:be:7c:1a:
08:c0:4e:1d:43:88:53:46:90:90:60:f2:dd:55:c5:
0d:48:39:99:72:84:f3:ca:85:a9:78:3b:32:88:af:
86:ad:f7:d4:0c:21:04:40:64:48:36:16:a3:fd:d7:
44:41:9a:3f:c0:2f:8b:04:c4:31:e3:e0:f2:48:f6:
a7:57:3f:5f:1c:f7:d4:f2:57:0d:ec:8c:47:6b:ab:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:ED:73:1B:26:FA:75:AC:1A:93:82:D9:97:7D:F6:B4:2C:83:3D:C2
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2b:6b:5f:78:c0:a4:75:6b:d0:e9:52:71:95:4d:e7:46:e1:
ee:ab:d2:b0:78:a9:4d:87:8b:4c:e6:be:a1:e1:9e:04:6c:a5:
c8:d9:1e:fe:e5:84:46:9c:e8:7b:52:40:c2:07:00:35:25:1c:
fa:13:f9:ed:d5:9c:03:e2:c1:c2:cd:aa:a8:31:c9:0d:99:04:
43:8c:b5:e0:86:f1:8e:e3:6b:b2:78:c3:5b:75:1b:58:60:db:
24:29:19:8c:53:b9:c0:25:a4:37:ac:cf:d4:f9:c5:03:ed:e5:
a2:42:ab:3a:a0:3a:cf:19:33:f1:70:0a:c6:d7:c6:db:84:12:
e8:fb:c2:b4:4c:41:87:fd:6e:c7:fe:df:db:b6:06:30:76:1f:
c9:ea:57:91:f1:0a:e9:c3:37:f8:e8:eb:76:d3:21:5e:c2:d1:
96:1d:fd:c6:92:f3:ad:b5:b1:fb:41:ea:74:a3:f0:fd:e7:a0:
38:58:97:44:bb:8a:df:df:70:cc:24:a9:9d:c6:16:d8:b3:52:
de:48:09:9a:6b:fa:ad:0c:ec:fb:c5:2c:74:09:94:d0:0c:4f:
1f:c9:30:7b:a8:c7:ae:0a:0d:67:26:59:33:49:1e:e8:27:46:
5e:4d:91:5d:35:df:54:24:d4:82:1e:c5:af:b0:8d:ce:f0:d1:
96:62:61:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7yOZblf0zpxOcIBa68IRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzNiNDRjYmJjNGYzZGE1YTRiNDI4NWM5NmVhM2NiNTBk
NGQwNzMwHhcNMjUwNTEwMjAwMDI3WhcNMjUwNTExMjAwMDI3WjAzMTEwLwYDVQQD
EygwNWVkNzMxYjI2ZmE3NWFjMWE5MzgyZDk5NzdkZjZiNDJjODMzZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzpow/YQPz9fp3PeyX5IThzdrFYD
vOA1SLomFNnEG/wEbrbbDnXs3MrotJ1lQALJZ/I0edZt3hoFzGUtWKJAcstRLQdg
hx7huYkOkbE6mwXuXdPtkzaOCnHDF0sqbpw6pDO3C9ZoOJL1Is6dxYhmh/meUmQM
+o332+FGodOyrm8mJylx1MrMcPKrA2SkjC1DyGlRhiMQWG9WqQwvkgROKqKnUSVY
xcOQByDfHrzk7eW+fBoIwE4dQ4hTRpCQYPLdVcUNSDmZcoTzyoWpeDsyiK+GrffU
DCEEQGRINhaj/ddEQZo/wC+LBMQx4+DySPanVz9fHPfU8lcN7IxHa6uCFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXtcxsm+nWsGpOC2Zd99rQsgz3CMB8GA1UdIwQY
MBaAFETDtEy7xPPaWktChcluo8tQ1NBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUt
NDc5Nzc2Njk5NThkLzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUtNDc5Nzc2Njk5NThk
LzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCtrX3jA
pHVr0OlScZVN50bh7qvSsHipTYeLTOa+oeGeBGylyNke/uWERpzoe1JAwgcANSUc
+hP57dWcA+LBws2qqDHJDZkEQ4y14IbxjuNrsnjDW3UbWGDbJCkZjFO5wCWkN6zP
1PnFA+3lokKrOqA6zxkz8XAKxtfG24QS6PvCtExBh/1ux/7f27YGMHYfyepXkfEK
6cM3+OjrdtMhXsLRlh39xpLzrbWx+0HqdKPw/eegOFiXRLuK399wzCSpncYW2LNS
3kgJmmv6rQzs+8UsdAmU0AxPH8kwe6jHrgoNZyZZM0ke6CdGXk2RXTXfVCTUgh7F
r7CNzvDRlmJh0w==
-----END CERTIFICATE-----
Generated at Sun May 11 03:21:29 2025 by rpki-client