Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
File: V5NTy0LgxPulyuJTpXaLwfJGW5k.mft (raw, json)
Hash identifier: Xujh1NS8e//aSAysjwxPBmEqXdvgYRzq1NB2PIUJ2vA=
Subject key identifier: B6:50:69:7C:9B:43:31:09:00:56:33:B3:35:E8:0C:C3:2D:03:7A:CE
Authority key identifier: 57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
Certificate issuer: /CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Certificate serial: 01969E635B643718B3CA65C73E3D11C6DE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
Manifest number: 0FA9
Signing time: Mon 05 May 2025 03:00:33 +0000
Manifest this update: Mon 05 May 2025 03:00:33 +0000
Manifest next update: Tue 06 May 2025 03:00:33 +0000
Files and hashes: 1: D3QeUsU8Q-1bY74EwK2MA0No9Ew.roa (hash: N97kcfMNA4uFpsheDLzM7+Nl7AAF28L1BPIs41yYMZY=)
2: Q07EucI5XyAYo9s-A9qqwpcEGlA.roa (hash: VFWYrVVM3MpoRzNbOjii1yFOv4OAEiNvOV4MAp0ri4Y=)
3: V5NTy0LgxPulyuJTpXaLwfJGW5k.crl (hash: 14Cj/FANHlz6Dc3me0aC+rDkUewQCxYTQhhqJHF/Oc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:5b:64:37:18:b3:ca:65:c7:3e:3d:11:c6:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579353cb42e0c4fba5cae253a5768bc1f2465b99
Validity
Not Before: May 5 03:00:33 2025 GMT
Not After : May 6 03:00:33 2025 GMT
Subject: CN=b650697c9b433109005633b335e80cc32d037ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:a7:1f:7d:fb:42:54:21:35:23:6e:f4:c7:
d7:dd:27:e2:3f:4b:f5:88:9a:55:fc:b1:93:36:2d:
33:c5:5b:6f:5f:28:82:15:21:59:fb:e2:40:0b:cd:
3b:07:0e:62:e1:36:3b:45:2e:80:90:c0:15:b4:de:
4a:17:59:8b:0e:44:71:c3:18:a0:b6:db:85:0e:e0:
20:40:e2:77:cc:33:7b:f4:f8:77:dc:a0:a4:d2:70:
1c:dc:0c:66:cf:b1:3b:b8:d5:1d:b4:23:a7:7c:ca:
5f:56:cc:2e:82:85:3d:1d:e1:df:5c:2d:40:99:8e:
44:22:37:97:ef:15:12:05:0c:a7:0d:01:95:70:1f:
26:c5:98:32:b3:79:41:61:04:3a:61:66:ad:96:ee:
8b:38:85:bc:07:5e:f3:28:43:2b:de:0b:76:c2:3b:
d9:5d:7a:07:14:ac:00:aa:c7:21:46:ea:25:92:82:
03:73:0d:7d:71:16:59:e3:c2:0b:bf:10:62:a3:74:
8e:46:97:2c:7a:ea:6d:07:c8:4f:2a:5a:28:2d:c0:
f5:03:71:c8:f6:1d:d2:47:7a:bd:40:8f:ff:2d:58:
d0:08:62:16:4b:5d:fe:4c:69:f9:92:0f:be:ac:77:
5f:73:34:49:95:c7:54:5d:56:2f:76:c5:76:3b:96:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:69:7C:9B:43:31:09:00:56:33:B3:35:E8:0C:C3:2D:03:7A:CE
X509v3 Authority Key Identifier:
keyid:57:93:53:CB:42:E0:C4:FB:A5:CA:E2:53:A5:76:8B:C1:F2:46:5B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5NTy0LgxPulyuJTpXaLwfJGW5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/V5NTy0LgxPulyuJTpXaLwfJGW5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f1:71:d1:3b:32:89:6c:2c:de:4d:ab:ef:90:05:6e:1e:bf:
6f:80:aa:60:d5:88:d0:db:9d:b9:12:85:27:3e:60:02:fe:8c:
09:a7:2c:06:4e:10:12:76:7f:2d:6a:11:d9:91:60:40:74:d1:
50:0c:9b:f5:69:51:7e:9b:22:ec:69:c6:fa:83:a6:5c:9a:8e:
5f:4a:30:a8:86:ad:ac:c9:29:73:00:43:c6:9b:70:25:6b:02:
57:de:5f:f9:95:23:8f:8f:40:fb:93:45:8f:71:74:2b:5e:31:
c8:fb:d0:66:c6:91:ee:4a:8a:3c:01:1a:94:4d:19:e0:69:bb:
ed:ee:5d:6d:f0:38:c7:4c:16:ac:c8:0c:cb:b2:39:06:d4:49:
3a:3d:fd:37:e8:ef:f0:16:c8:87:d8:bb:20:5c:d2:ad:39:04:
2a:65:12:06:ff:09:30:d9:92:b4:03:6b:13:b6:0a:66:a6:67:
a7:99:66:17:62:1f:7f:0a:be:42:bc:3f:da:d3:78:05:21:91:
02:a0:9c:d1:0d:d4:1e:52:c7:3d:da:3b:6f:5d:d0:92:49:d2:
9f:95:a6:f8:9d:1c:21:e0:1d:fb:e1:c2:59:6e:da:64:c0:1c:
0e:50:a0:e0:42:ab:37:d6:ae:b4:4b:30:13:e1:a6:1e:ab:55:
40:d6:a1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeY1tkNxizymXHPj0Rxt5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTM1M2NiNDJlMGM0ZmJhNWNhZTI1M2E1NzY4YmMxZjI0
NjViOTkwHhcNMjUwNTA1MDMwMDMzWhcNMjUwNTA2MDMwMDMzWjAzMTEwLwYDVQQD
EyhiNjUwNjk3YzliNDMzMTA5MDA1NjMzYjMzNWU4MGNjMzJkMDM3YWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnynH337QlQhNSNu9MfX3SfiP0v1
iJpV/LGTNi0zxVtvXyiCFSFZ++JAC807Bw5i4TY7RS6AkMAVtN5KF1mLDkRxwxig
ttuFDuAgQOJ3zDN79Ph33KCk0nAc3Axmz7E7uNUdtCOnfMpfVswugoU9HeHfXC1A
mY5EIjeX7xUSBQynDQGVcB8mxZgys3lBYQQ6YWatlu6LOIW8B17zKEMr3gt2wjvZ
XXoHFKwAqschRuolkoIDcw19cRZZ48ILvxBio3SORpcseuptB8hPKlooLcD1A3HI
9h3SR3q9QI//LVjQCGIWS13+TGn5kg++rHdfczRJlcdUXVYvdsV2O5agywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZQaXybQzEJAFYzszXoDMMtA3rOMB8GA1UdIwQY
MBaAFFeTU8tC4MT7pcriU6V2i8HyRluZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt
YzY3MmQ2NzM2ODZmLzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm
LzEvVjVOVHkwTGd4UHVseXVKVHBYYUx3ZkpHVzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/Fx0Tsy
iWws3k2r75AFbh6/b4CqYNWI0NuduRKFJz5gAv6MCacsBk4QEnZ/LWoR2ZFgQHTR
UAyb9WlRfpsi7GnG+oOmXJqOX0owqIatrMkpcwBDxptwJWsCV95f+ZUjj49A+5NF
j3F0K14xyPvQZsaR7kqKPAEalE0Z4Gm77e5dbfA4x0wWrMgMy7I5BtRJOj39N+jv
8BbIh9i7IFzSrTkEKmUSBv8JMNmStANrE7YKZqZnp5lmF2Iffwq+Qrw/2tN4BSGR
AqCc0Q3UHlLHPdo7b13QkknSn5Wm+J0cIeAd++HCWW7aZMAcDlCg4EKrN9autEsw
E+GmHqtVQNahWg==
-----END CERTIFICATE-----
Generated at Mon May 5 05:00:29 2025 by rpki-client