Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: C6ZjuWKeeYuSi7J9987n3EnRvbfJCYUahVyJnamX7ns=
Subject key identifier: 4B:CD:B9:F2:40:E5:D8:54:67:D1:D9:AB:1B:12:BD:29:58:4D:F3:90
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 0196C04AAB06424F1C357897330F76A94CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 08AC
Signing time: Sun 11 May 2025 17:00:40 +0000
Manifest this update: Sun 11 May 2025 17:00:40 +0000
Manifest next update: Mon 12 May 2025 17:00:40 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: GWcKhqgXCaW3PMyKOxWFoxmjsnLip6W/s6XMiMHTNWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:ab:06:42:4f:1c:35:78:97:33:0f:76:a9:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: May 11 17:00:40 2025 GMT
Not After : May 12 17:00:40 2025 GMT
Subject: CN=4bcdb9f240e5d85467d1d9ab1b12bd29584df390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fa:ab:a8:f2:1f:44:fb:47:78:70:c7:01:e4:
42:9c:b1:f1:d7:de:a9:89:72:22:4b:c4:ec:7c:d2:
06:fe:6e:87:6b:ca:34:e7:3d:37:0f:58:91:0e:78:
94:5e:a8:a0:d5:34:8f:52:c5:f9:15:b8:fc:f7:10:
10:4d:b3:63:cd:c8:d7:8f:05:ae:e1:51:10:b2:c9:
37:2a:e9:56:39:7c:3c:d3:f7:52:e5:87:76:23:00:
a4:52:29:26:20:e8:a3:60:b4:a1:06:ea:00:e1:b8:
56:3c:94:dc:2b:c0:78:4a:7e:43:c1:db:89:4f:9e:
53:0a:84:83:e9:8c:b9:7f:c5:29:6b:a1:73:4b:8b:
64:4a:32:a1:29:4b:0e:9c:d7:bc:05:3b:2b:00:8d:
6f:26:5b:49:78:8a:a1:e4:03:53:89:df:8c:72:8b:
8b:69:fc:7c:da:56:ba:75:60:a0:88:65:2c:6c:64:
61:d0:eb:58:9e:91:01:73:c6:3f:92:70:e1:b4:c1:
e3:e9:36:d0:97:99:95:81:f1:ff:5a:6a:5b:6f:e5:
36:16:b1:a8:b4:7e:e8:30:1f:8f:ce:10:31:39:5f:
9e:d3:2e:3d:2f:4c:81:19:4f:92:3b:29:6f:00:5f:
ec:aa:7d:b5:2f:a5:7d:b0:0f:0f:dd:20:ca:08:6f:
a0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CD:B9:F2:40:E5:D8:54:67:D1:D9:AB:1B:12:BD:29:58:4D:F3:90
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:44:83:5e:e6:7c:2d:92:37:9f:8e:89:7d:c6:c7:89:05:
69:d9:d1:6f:ee:e8:bb:0f:7d:2b:59:60:f7:f1:a9:37:ac:ae:
28:47:05:2a:cd:0a:18:5d:44:f7:35:f3:98:28:3a:cf:6a:fc:
e8:f9:c1:65:48:4c:3c:d8:54:1c:bd:63:94:a1:01:6e:7d:46:
e3:b7:36:72:ab:86:7e:d5:81:33:9d:80:0a:63:ed:fc:95:69:
1d:ef:e4:6d:86:ba:76:e7:22:62:54:b7:24:70:2c:07:26:f9:
5e:b7:b1:51:3a:09:83:21:32:b3:99:04:94:82:e7:36:04:a7:
2c:63:57:bb:84:6a:4f:60:b8:11:27:6c:06:7d:f2:80:f0:5b:
7e:4d:68:a9:f4:2f:b7:4c:a3:78:88:4a:0d:11:56:d0:6f:c2:
3d:87:9f:a6:fa:25:ff:61:60:a4:10:44:63:a4:07:0d:0c:49:
ba:14:1b:74:87:db:54:93:a6:1e:1c:ea:94:f2:95:0a:48:a2:
c8:a9:f4:c5:20:03:16:96:40:44:fc:85:8d:e9:d6:d8:2f:db:
20:1a:8a:b9:ff:26:61:17:b3:10:92:94:44:ce:5d:96:32:49:
24:4c:61:25:52:69:10:fd:55:b4:bf:e1:cc:06:ed:ed:a8:d9:
fd:a9:df:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASqsGQk8cNXiXMw92qUy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWQxNjZjNjQ4NDczODk3MmU5YjMzOTM4MTY1ZjQ0ODlh
NTE2OGMwHhcNMjUwNTExMTcwMDQwWhcNMjUwNTEyMTcwMDQwWjAzMTEwLwYDVQQD
Eyg0YmNkYjlmMjQwZTVkODU0NjdkMWQ5YWIxYjEyYmQyOTU4NGRmMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/qrqPIfRPtHeHDHAeRCnLHx196p
iXIiS8TsfNIG/m6Ha8o05z03D1iRDniUXqig1TSPUsX5Fbj89xAQTbNjzcjXjwWu
4VEQssk3KulWOXw80/dS5Yd2IwCkUikmIOijYLShBuoA4bhWPJTcK8B4Sn5DwduJ
T55TCoSD6Yy5f8Upa6FzS4tkSjKhKUsOnNe8BTsrAI1vJltJeIqh5ANTid+McouL
afx82la6dWCgiGUsbGRh0OtYnpEBc8Y/knDhtMHj6TbQl5mVgfH/Wmpbb+U2FrGo
tH7oMB+PzhAxOV+e0y49L0yBGU+SOylvAF/sqn21L6V9sA8P3SDKCG+gEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvNufJA5dhUZ9HZqxsSvSlYTfOQMB8GA1UdIwQY
MBaAFEqdFmxkhHOJcumzOTgWX0SJpRaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMt
YmZhOTYzOTJhYzVkLzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NmM5MDUtZTVhZi00OGFlLWI3YWMtYmZhOTYzOTJhYzVk
LzEvU3AwV2JHU0VjNGx5NmJNNU9CWmZSSW1sRm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk9Eg17m
fC2SN5+OiX3Gx4kFadnRb+7ouw99K1lg9/GpN6yuKEcFKs0KGF1E9zXzmCg6z2r8
6PnBZUhMPNhUHL1jlKEBbn1G47c2cquGftWBM52ACmPt/JVpHe/kbYa6duciYlS3
JHAsByb5XrexUToJgyEys5kElILnNgSnLGNXu4RqT2C4ESdsBn3ygPBbfk1oqfQv
t0yjeIhKDRFW0G/CPYefpvol/2FgpBBEY6QHDQxJuhQbdIfbVJOmHhzqlPKVCkii
yKn0xSADFpZARPyFjenW2C/bIBqKuf8mYRezEJKURM5dljJJJExhJVJpEP1VtL/h
zAbt7ajZ/anfDA==
-----END CERTIFICATE-----
Generated at Sun May 11 21:01:31 2025 by rpki-client