Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
File: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft (raw, json)
Hash identifier: 4oPvM6bTe12T8H0l8XMaB2CpABKp4e760PG9K7o8lP8=
Subject key identifier: 0C:D2:77:73:05:72:91:DC:B5:0C:BA:D6:58:F8:3E:66:8B:ED:9F:D2
Authority key identifier: 63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
Certificate issuer: /CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Certificate serial: 0196C4CC434516A9CDBB2CC40A29650EE745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 14:00:42 +0000
Manifest this update: Mon 12 May 2025 14:00:42 +0000
Manifest next update: Tue 13 May 2025 14:00:42 +0000
Files and hashes: 1: 0BwZhdU4Lc_MGtRgtacxMwCAmgo.roa (hash: YpXynUUs/IPOe7m4GtxSxjQNSHfpLk0MgTtZ8VR9x/E=)
2: Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl (hash: kkRJMNKxqne7DResQa05ZS3KH+5G95lfLzjjZuyjN5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:43:45:16:a9:cd:bb:2c:c4:0a:29:65:0e:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63427c535873e4c4ead8042d67bbf3f1f47b26b1
Validity
Not Before: May 12 14:00:42 2025 GMT
Not After : May 13 14:00:42 2025 GMT
Subject: CN=0cd27773057291dcb50cbad658f83e668bed9fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:9a:0d:81:bc:10:ce:8a:10:ab:38:04:e6:
15:ce:54:d8:18:74:ad:69:96:4a:55:62:dd:3b:e1:
04:c5:b6:53:03:53:8b:9a:18:e8:c2:3f:54:12:d6:
c8:ab:d1:c8:4f:18:09:0f:b2:dd:d2:d7:7e:d4:e4:
b1:64:95:5b:ae:b4:e5:39:82:8c:a0:85:61:a9:20:
1f:47:4b:a7:06:67:dd:d9:f4:4c:65:16:33:34:99:
e8:b9:62:4a:22:2d:88:57:5b:5f:09:d4:d3:6b:d7:
35:45:22:75:16:b4:4c:33:38:1c:da:d8:d5:2c:5a:
ea:90:fc:a6:e4:ca:f6:93:44:75:68:56:45:50:20:
a4:1f:55:d5:3e:f0:37:7e:61:34:ce:cf:c3:d5:eb:
d5:d3:b7:d3:b8:1c:90:b6:a8:f9:8c:17:d0:b7:8e:
d1:06:85:82:76:7c:9f:80:e4:c9:f5:e7:cc:71:6e:
08:28:63:e3:d2:3a:ed:6c:6f:8f:64:ca:7f:fd:a7:
d1:b2:6a:c1:df:df:39:3d:fd:ea:ba:f9:9c:61:49:
5d:e8:e8:18:90:15:ca:96:cc:dc:10:a8:ba:96:12:
f7:43:93:ac:fd:f9:9d:ff:2b:17:36:ec:0e:6b:2a:
5c:4f:6b:5f:53:35:07:4e:81:b0:04:41:45:a0:ac:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:77:73:05:72:91:DC:B5:0C:BA:D6:58:F8:3E:66:8B:ED:9F:D2
X509v3 Authority Key Identifier:
keyid:63:42:7C:53:58:73:E4:C4:EA:D8:04:2D:67:BB:F3:F1:F4:7B:26:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/61083c-4b3d-46d8-82aa-b2997bc61474/1/Y0J8U1hz5MTq2AQtZ7vz8fR7JrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:81:09:99:e4:f9:81:f5:53:15:47:bc:eb:e2:82:bd:a9:ef:
11:2b:23:8b:a3:46:9b:3d:fc:52:f4:d7:f8:1c:8f:ef:8e:75:
1f:25:0e:13:41:4c:a6:df:59:10:01:b3:a3:8a:a0:e5:43:8e:
f0:85:a0:ef:b6:5d:62:9e:65:5a:e9:88:17:21:73:30:89:d0:
93:f4:df:f5:7c:d6:44:1b:4e:5e:24:be:72:60:81:e7:33:2e:
46:49:cf:ef:c0:97:24:1f:fa:e2:cd:3d:4d:63:f0:78:a3:f3:
b7:6e:6d:16:34:ca:88:f5:a6:fb:bf:a3:d6:4a:a0:23:86:54:
89:16:e4:27:23:37:91:94:1a:b3:e0:98:07:ef:4f:04:00:27:
1b:bf:7a:e3:26:bf:b3:d5:18:3f:62:98:72:e4:f1:9b:cb:e2:
0a:c8:36:f0:ed:e2:3e:c6:53:6b:31:e9:05:30:b1:f2:09:72:
09:d9:c9:12:bf:a9:bf:8b:8e:c4:6c:40:88:a6:48:8a:66:e3:
20:27:b2:9f:be:cb:00:95:e7:14:8a:36:fc:2b:7d:47:0a:ee:
d3:1e:ef:06:57:2d:0f:80:6d:85:e8:e9:f5:02:48:c8:54:e4:
c8:98:52:ed:93:1b:6e:19:f8:61:e7:f8:7e:5d:59:e1:13:ab:
09:b6:36:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEzENFFqnNuyzECillDudFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNDI3YzUzNTg3M2U0YzRlYWQ4MDQyZDY3YmJmM2YxZjQ3
YjI2YjEwHhcNMjUwNTEyMTQwMDQyWhcNMjUwNTEzMTQwMDQyWjAzMTEwLwYDVQQD
EygwY2QyNzc3MzA1NzI5MWRjYjUwY2JhZDY1OGY4M2U2NjhiZWQ5ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYqaDYG8EM6KEKs4BOYVzlTYGHSt
aZZKVWLdO+EExbZTA1OLmhjowj9UEtbIq9HITxgJD7Ld0td+1OSxZJVbrrTlOYKM
oIVhqSAfR0unBmfd2fRMZRYzNJnouWJKIi2IV1tfCdTTa9c1RSJ1FrRMMzgc2tjV
LFrqkPym5Mr2k0R1aFZFUCCkH1XVPvA3fmE0zs/D1evV07fTuByQtqj5jBfQt47R
BoWCdnyfgOTJ9efMcW4IKGPj0jrtbG+PZMp//afRsmrB3985Pf3quvmcYUld6OgY
kBXKlszcEKi6lhL3Q5Os/fmd/ysXNuwOaypcT2tfUzUHToGwBEFFoKyxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzSd3MFcpHctQy61lj4PmaL7Z/SMB8GA1UdIwQY
MBaAFGNCfFNYc+TE6tgELWe78/H0eyaxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEt
YjI5OTdiYzYxNDc0LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82MTA4M2MtNGIzZC00NmQ4LTgyYWEtYjI5OTdiYzYxNDc0
LzEvWTBKOFUxaHo1TVRxMkFRdFo3dno4ZlI3SnJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoEJmeT5
gfVTFUe86+KCvanvESsji6NGmz38UvTX+ByP7451HyUOE0FMpt9ZEAGzo4qg5UOO
8IWg77ZdYp5lWumIFyFzMInQk/Tf9XzWRBtOXiS+cmCB5zMuRknP78CXJB/64s09
TWPweKPzt25tFjTKiPWm+7+j1kqgI4ZUiRbkJyM3kZQas+CYB+9PBAAnG7964ya/
s9UYP2KYcuTxm8viCsg28O3iPsZTazHpBTCx8glyCdnJEr+pv4uOxGxAiKZIimbj
ICeyn77LAJXnFIo2/Ct9Rwru0x7vBlctD4Bthejp9QJIyFTkyJhS7ZMbbhn4Yef4
fl1Z4ROrCbY2iw==
-----END CERTIFICATE-----
Generated at Mon May 12 19:24:50 2025 by rpki-client