Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: 4yUTdVeWPQEWZdwJ04Zk5CsevawqmC0JwEuMqPTttEA=
Subject key identifier: 9E:97:8F:BA:45:19:41:05:B4:C3:70:91:56:B5:67:6D:B6:1B:9E:A2
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 0196A6F87DF72AE9098A5CFC3C1BA7C05062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 1529
Signing time: Tue 06 May 2025 19:00:25 +0000
Manifest this update: Tue 06 May 2025 19:00:25 +0000
Manifest next update: Wed 07 May 2025 19:00:25 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: yozNzj5Vydrky6o9FaZVVwhu397S6SEjS8doL55gqz4=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:7d:f7:2a:e9:09:8a:5c:fc:3c:1b:a7:c0:50:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: May 6 19:00:25 2025 GMT
Not After : May 7 19:00:25 2025 GMT
Subject: CN=9e978fba45194105b4c3709156b5676db61b9ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:a3:81:e5:66:1c:85:88:5f:b6:ee:3c:af:
02:6b:df:53:b6:aa:03:f9:3d:9d:df:df:64:a7:69:
d7:bd:4b:f5:25:83:c7:87:79:93:6d:57:e9:d1:7b:
23:a4:58:13:ab:e9:41:88:a2:d0:28:be:f3:14:0d:
d9:0f:06:71:59:10:92:6e:3f:f0:e9:4f:bd:c1:b0:
59:9d:4e:15:3d:92:41:da:42:31:ae:53:fc:a6:5e:
1d:63:c8:3a:03:08:a6:4b:ef:4f:57:9c:2f:d1:b1:
e3:6d:a5:5f:83:8d:f1:79:c0:cf:f5:a6:d1:97:93:
87:02:2a:3e:47:02:91:45:ca:50:37:0a:a3:0f:9c:
9f:cc:b0:f7:99:2d:2b:61:b8:95:30:2d:d4:a4:e5:
4e:99:60:ac:2d:1d:73:db:ed:ee:4c:c7:1a:ad:e3:
55:1e:e8:b0:5a:5f:5c:4e:bc:fe:7c:89:bd:d8:a5:
19:1b:50:d0:f2:cc:e1:87:33:03:a2:6c:df:48:ef:
86:83:06:cb:f6:dd:44:af:b9:9d:98:f6:ee:9e:70:
1d:79:fe:f1:4e:a6:a9:61:3e:54:bf:13:c9:ba:e5:
eb:b3:d9:a7:30:36:86:96:5f:26:ed:bb:46:e6:cb:
d5:7b:ca:af:b0:28:04:fe:af:a0:43:4b:12:49:b6:
5c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:8F:BA:45:19:41:05:B4:C3:70:91:56:B5:67:6D:B6:1B:9E:A2
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:52:e0:1b:84:bd:e9:da:ae:26:38:67:3a:5d:35:d4:93:da:
4a:a0:67:75:f3:3c:61:74:8e:87:9b:48:98:a0:f4:57:b4:9d:
78:18:3d:ea:07:69:29:1b:c9:ed:e8:a3:32:fd:86:7b:21:26:
a4:0f:94:2f:72:35:3c:c8:c2:46:a7:bc:19:1b:27:e0:72:d9:
1b:ca:d3:d6:d5:cf:32:8d:0c:fb:a1:45:42:6a:9d:aa:9b:03:
31:e7:d9:bf:7c:86:8f:41:2f:d5:34:57:aa:ad:d7:3a:c5:5a:
a4:3d:27:11:cb:b7:97:28:bd:c6:50:93:14:08:2e:d7:ab:96:
d7:48:37:19:80:ab:fd:33:42:1b:47:53:fd:22:03:3d:ed:84:
fd:f9:de:d5:3c:8b:7c:6f:28:e4:22:8e:6a:7c:79:6a:fa:21:
c7:d4:88:3b:1f:ae:e0:2c:96:0a:dd:8d:f5:e8:68:5f:c6:9c:
c2:8f:28:af:d3:f5:75:85:d9:85:99:41:b4:d9:73:bc:3a:09:
26:82:bb:fe:4e:5e:7e:14:e9:bc:47:28:c2:74:7f:02:be:47:
43:d7:1e:f1:e3:34:b8:5c:78:6a:6c:4c:bd:ac:6c:e6:20:e6:
e4:c0:27:7a:85:86:1e:94:e7:a0:a3:11:45:8a:21:33:fd:d8:
46:22:b2:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZam+H33KukJilz8PBunwFBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmYzRmNzBhOTJkNDZhYzAyYzhkZmU3Zjk3NWJlNDhhYmQ2
MmU3YTQwHhcNMjUwNTA2MTkwMDI1WhcNMjUwNTA3MTkwMDI1WjAzMTEwLwYDVQQD
Eyg5ZTk3OGZiYTQ1MTk0MTA1YjRjMzcwOTE1NmI1Njc2ZGI2MWI5ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh+jgeVmHIWIX7buPK8Ca99TtqoD
+T2d399kp2nXvUv1JYPHh3mTbVfp0XsjpFgTq+lBiKLQKL7zFA3ZDwZxWRCSbj/w
6U+9wbBZnU4VPZJB2kIxrlP8pl4dY8g6AwimS+9PV5wv0bHjbaVfg43xecDP9abR
l5OHAio+RwKRRcpQNwqjD5yfzLD3mS0rYbiVMC3UpOVOmWCsLR1z2+3uTMcareNV
HuiwWl9cTrz+fIm92KUZG1DQ8szhhzMDomzfSO+GgwbL9t1Er7mdmPbunnAdef7x
TqapYT5UvxPJuuXrs9mnMDaGll8m7btG5svVe8qvsCgE/q+gQ0sSSbZcqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6Xj7pFGUEFtMNwkVa1Z222G56iMB8GA1UdIwQY
MBaAFA/E9wqS1GrALI3+f5db5Iq9YuekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgt
NjViODZhMDM1YTA4LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80NmU0MDAtODdmYS00OWU5LTkxOTgtNjViODZhMDM1YTA4
LzEvRDhUM0NwTFVhc0FzamY1X2wxdmtpcjFpNTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1LgG4S9
6dquJjhnOl011JPaSqBndfM8YXSOh5tImKD0V7SdeBg96gdpKRvJ7eijMv2GeyEm
pA+UL3I1PMjCRqe8GRsn4HLZG8rT1tXPMo0M+6FFQmqdqpsDMefZv3yGj0Ev1TRX
qq3XOsVapD0nEcu3lyi9xlCTFAgu16uW10g3GYCr/TNCG0dT/SIDPe2E/fne1TyL
fG8o5CKOanx5avohx9SIOx+u4CyWCt2N9ehoX8acwo8or9P1dYXZhZlBtNlzvDoJ
JoK7/k5efhTpvEcownR/Ar5HQ9ce8eM0uFx4amxMvaxs5iDm5MAneoWGHpTnoKMR
RYohM/3YRiKylg==
-----END CERTIFICATE-----
Generated at Tue May 6 23:22:39 2025 by rpki-client