Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json)
Hash identifier: QbpBpb2n/+5FNyPD/HTcYNzhUr866HX4MSteit8OSWg=
Subject key identifier: 9A:DF:36:7C:06:A9:1A:A0:09:4E:C7:D7:96:02:20:74:43:E1:F3:08
Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456
Certificate serial: 0196BA48730DD1C35282AA777C388D8E07B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 13:00:32 +0000
Manifest this update: Sat 10 May 2025 13:00:32 +0000
Manifest next update: Sun 11 May 2025 13:00:32 +0000
Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: E6kUc5uoMDra/R838aS2kMHu+SJBcsoAWS9Xi9L1Xag=)
2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:73:0d:d1:c3:52:82:aa:77:7c:38:8d:8e:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456
Validity
Not Before: May 10 13:00:32 2025 GMT
Not After : May 11 13:00:32 2025 GMT
Subject: CN=9adf367c06a91aa0094ec7d79602207443e1f308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:23:5f:b6:f0:99:ef:97:c8:8a:69:88:23:
3d:68:11:08:e9:d9:27:8e:09:b7:a2:45:d2:76:e8:
96:ca:46:55:b2:0a:bd:ef:be:a3:f9:3f:d7:2f:7a:
ba:18:21:16:73:31:e5:44:69:6e:b5:1f:e2:fd:84:
45:67:76:13:2d:a7:13:57:68:07:ef:e5:b5:ab:8b:
74:5f:d9:44:90:fb:17:bf:be:61:b8:42:65:c0:6c:
ee:76:1a:69:71:0f:31:51:49:96:04:24:79:18:61:
51:47:7e:d7:e2:42:24:f6:b3:15:4c:64:15:11:65:
9e:8f:02:3e:cb:44:25:d9:3a:73:e2:d5:66:31:e0:
a1:1e:7e:62:db:32:31:73:a6:0a:0d:45:69:fc:69:
30:f6:40:67:8e:94:f2:11:d9:c5:6e:4a:ed:fa:15:
36:b1:21:58:cf:e3:f4:ad:30:ae:8b:60:bc:ed:36:
61:91:c7:b1:68:0a:62:36:f0:8f:fe:47:f8:7e:26:
9e:fd:6a:05:d2:86:6c:73:b5:44:56:4b:7f:31:dd:
95:07:f5:ce:08:47:22:e5:bd:9f:a1:36:b1:c6:fa:
2a:74:06:09:0f:a8:ac:05:ed:5c:b1:02:5d:2d:85:
df:27:94:44:c5:ac:c4:02:d2:a1:52:9a:ae:e7:c8:
63:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DF:36:7C:06:A9:1A:A0:09:4E:C7:D7:96:02:20:74:43:E1:F3:08
X509v3 Authority Key Identifier:
keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:e2:0c:68:1b:63:6e:37:c5:dc:4f:9e:78:8b:b0:25:df:62:
4b:bc:4d:99:5b:2b:0d:42:94:0e:cd:a3:02:b6:54:10:a6:ad:
0a:12:61:1a:02:b9:28:b9:8a:57:1c:fa:6b:ce:b3:a6:7c:a7:
5b:cf:cc:c4:47:cc:2b:97:88:75:3e:4a:37:79:43:d5:b8:13:
a5:d3:51:c2:71:9e:83:fe:e6:98:db:09:67:a4:e0:c4:b2:94:
6d:92:41:4a:33:33:40:b3:d4:74:76:f9:11:b0:7c:a8:fd:83:
74:40:6f:1b:98:ce:15:77:e2:57:33:fe:5e:bd:9d:39:6f:27:
09:f7:cf:a7:43:f1:3d:d3:ba:e0:38:86:65:0f:0a:b2:00:67:
77:e2:c5:94:cb:e9:62:74:37:ee:c3:64:a0:74:1e:a4:9a:12:
03:df:ab:c8:2d:07:aa:ca:81:22:74:14:5c:3b:3e:ad:d3:a9:
0f:c0:c3:8f:3b:ea:4f:73:da:35:4f:77:76:31:38:61:cc:3c:
85:10:71:08:f0:8e:91:8a:2e:63:29:5d:86:8a:7d:3d:1d:58:
6c:65:2c:31:f2:8c:7c:b9:1d:df:41:71:8b:08:90:72:19:dc:
af:66:8f:b0:93:f4:91:28:e0:34:d0:39:c5:bc:61:8c:f9:bb:
77:f8:de:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6SHMN0cNSgqp3fDiNjge3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNWQ3OGQyMDc1Yzc4MjA5NzlkN2JhNTBkMjViMTQyN2I2
N2Q0NTYwHhcNMjUwNTEwMTMwMDMyWhcNMjUwNTExMTMwMDMyWjAzMTEwLwYDVQQD
Eyg5YWRmMzY3YzA2YTkxYWEwMDk0ZWM3ZDc5NjAyMjA3NDQzZTFmMzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQjX7bwme+XyIppiCM9aBEI6dkn
jgm3okXSduiWykZVsgq9776j+T/XL3q6GCEWczHlRGlutR/i/YRFZ3YTLacTV2gH
7+W1q4t0X9lEkPsXv75huEJlwGzudhppcQ8xUUmWBCR5GGFRR37X4kIk9rMVTGQV
EWWejwI+y0Ql2Tpz4tVmMeChHn5i2zIxc6YKDUVp/Gkw9kBnjpTyEdnFbkrt+hU2
sSFYz+P0rTCui2C87TZhkcexaApiNvCP/kf4fiae/WoF0oZsc7VEVkt/Md2VB/XO
CEci5b2foTaxxvoqdAYJD6isBe1csQJdLYXfJ5RExazEAtKhUpqu58hjXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrfNnwGqRqgCU7H15YCIHRD4fMIMB8GA1UdIwQY
MBaAFDBdeNIHXHggl517pQ0lsUJ7Z9RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYt
MDg2YzRlYTFkOGNhLzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYtMDg2YzRlYTFkOGNh
LzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+IMaBtj
bjfF3E+eeIuwJd9iS7xNmVsrDUKUDs2jArZUEKatChJhGgK5KLmKVxz6a86zpnyn
W8/MxEfMK5eIdT5KN3lD1bgTpdNRwnGeg/7mmNsJZ6TgxLKUbZJBSjMzQLPUdHb5
EbB8qP2DdEBvG5jOFXfiVzP+Xr2dOW8nCffPp0PxPdO64DiGZQ8KsgBnd+LFlMvp
YnQ37sNkoHQepJoSA9+ryC0HqsqBInQUXDs+rdOpD8DDjzvqT3PaNU93djE4Ycw8
hRBxCPCOkYouYyldhop9PR1YbGUsMfKMfLkd30FxiwiQchncr2aPsJP0kSjgNNA5
xbxhjPm7d/je6w==
-----END CERTIFICATE-----
Generated at Sat May 10 23:13:48 2025 by rpki-client