Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: aZ1k3202mhY3GDawr71vDQyCkUzpMElMwIx7evga5jU=
Subject key identifier: 63:9D:68:F5:84:2B:66:F3:FB:B9:D0:74:E0:7B:CD:FD:C1:10:41:52
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 0196C45E730A07C9770F2A22BE26CA6576CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0368
Signing time: Mon 12 May 2025 12:00:46 +0000
Manifest this update: Mon 12 May 2025 12:00:46 +0000
Manifest next update: Tue 13 May 2025 12:00:46 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: hGaS4OEVxy7QIOnKbza4woKGypfWmj1KR2qKqxTZJTw=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:73:0a:07:c9:77:0f:2a:22:be:26:ca:65:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: May 12 12:00:46 2025 GMT
Not After : May 13 12:00:46 2025 GMT
Subject: CN=639d68f5842b66f3fbb9d074e07bcdfdc1104152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:24:03:68:bb:4b:47:3c:d5:b2:b1:58:07:
55:4d:8c:65:06:22:ca:4e:36:d1:c1:8b:eb:66:a5:
05:9f:79:2f:8a:a9:86:dd:57:4d:8a:df:00:42:bf:
49:d9:38:f5:50:69:73:2a:a9:2d:00:45:70:33:20:
89:26:1b:bc:5a:ca:6a:84:f2:12:b0:a3:b5:be:34:
a8:a4:c7:df:3d:92:ac:96:2c:bb:1e:c3:65:3f:6d:
2b:08:6b:2b:4a:7c:eb:e3:1b:bd:a1:20:bd:60:a8:
f7:a4:6e:eb:a5:36:b1:d2:63:57:64:26:93:65:81:
2d:8a:81:da:ca:bd:2d:dd:eb:0e:cc:59:91:c9:b7:
16:9d:69:f4:e4:66:6f:bf:71:a4:f4:62:05:09:ab:
db:46:84:1d:84:85:d8:af:f8:0b:8a:fd:45:41:62:
d8:f8:4c:bd:ce:4c:b5:02:c2:92:f2:21:56:17:37:
03:1c:ef:89:5a:07:b1:97:fb:18:6f:1e:e2:63:c4:
69:91:14:c4:31:2a:01:57:72:51:48:16:b2:88:48:
ab:5d:dd:3b:14:91:b1:ac:44:89:04:8d:83:2a:80:
69:04:9e:79:51:aa:9f:dd:06:d8:21:1d:d1:39:0f:
18:c2:05:ca:7e:d3:d7:ee:63:47:2c:38:e1:d0:06:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:68:F5:84:2B:66:F3:FB:B9:D0:74:E0:7B:CD:FD:C1:10:41:52
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:15:8a:0a:8e:54:b3:b1:9f:4e:fd:c9:20:94:30:24:93:54:
88:b6:10:31:5f:b3:a7:2c:db:67:c1:0c:5b:ec:2b:cf:4c:03:
80:f4:81:e9:8c:75:7d:96:21:4f:06:0f:85:28:9a:b4:8a:e2:
84:3d:3e:06:a3:a5:14:cd:d8:ae:b9:8a:60:1b:46:ed:03:e4:
4a:23:f2:74:a9:d8:28:68:84:5f:3c:58:e3:a3:74:59:30:55:
d5:b4:69:5f:81:da:43:e7:46:ab:af:bd:d6:ae:62:eb:71:d2:
52:5d:83:90:c2:5a:6e:71:65:87:6d:c6:45:fd:43:62:cf:b6:
0e:25:60:a4:b5:8b:f1:81:a7:33:00:1c:ca:61:83:44:15:cb:
b8:98:ec:8f:8d:9f:b0:af:79:61:8f:c9:b5:b3:a4:91:d9:c1:
29:95:ed:e3:0b:c1:1f:33:82:5e:b7:4e:c8:72:04:e0:15:e6:
d4:a2:e3:fb:4a:3b:dc:41:6f:3b:89:1a:7c:fb:89:6a:29:27:
1f:cc:65:8a:61:53:7a:12:3f:1c:a8:bd:88:32:83:da:a0:15:
96:8c:8f:f2:2d:81:03:af:98:08:31:d0:de:c8:02:36:ec:ea:
c7:a8:6a:3e:08:6f:c2:41:88:36:6a:33:2e:59:92:3a:78:87:
e9:b9:35:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXnMKB8l3DyoivibKZXbLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2VmNzVlMDk3YTYzMTg4NmIzM2M4MWY2NGFhNWViYmMw
YzMyYTAwHhcNMjUwNTEyMTIwMDQ2WhcNMjUwNTEzMTIwMDQ2WjAzMTEwLwYDVQQD
Eyg2MzlkNjhmNTg0MmI2NmYzZmJiOWQwNzRlMDdiY2RmZGMxMTA0MTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOEkA2i7S0c81bKxWAdVTYxlBiLK
TjbRwYvrZqUFn3kviqmG3VdNit8AQr9J2Tj1UGlzKqktAEVwMyCJJhu8WspqhPIS
sKO1vjSopMffPZKsliy7HsNlP20rCGsrSnzr4xu9oSC9YKj3pG7rpTax0mNXZCaT
ZYEtioHayr0t3esOzFmRybcWnWn05GZvv3Gk9GIFCavbRoQdhIXYr/gLiv1FQWLY
+Ey9zky1AsKS8iFWFzcDHO+JWgexl/sYbx7iY8RpkRTEMSoBV3JRSBayiEirXd07
FJGxrESJBI2DKoBpBJ55Uaqf3QbYIR3ROQ8YwgXKftPX7mNHLDjh0AbsZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOdaPWEK2bz+7nQdOB7zf3BEEFSMB8GA1UdIwQY
MBaAFNfO914JemMYhrM8gfZKpeu8DDKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTIt
NWJhNTAxZTBiMzcwLzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTItNWJhNTAxZTBiMzcw
LzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqRWKCo5U
s7GfTv3JIJQwJJNUiLYQMV+zpyzbZ8EMW+wrz0wDgPSB6Yx1fZYhTwYPhSiatIri
hD0+BqOlFM3YrrmKYBtG7QPkSiPydKnYKGiEXzxY46N0WTBV1bRpX4HaQ+dGq6+9
1q5i63HSUl2DkMJabnFlh23GRf1DYs+2DiVgpLWL8YGnMwAcymGDRBXLuJjsj42f
sK95YY/JtbOkkdnBKZXt4wvBHzOCXrdOyHIE4BXm1KLj+0o73EFvO4kafPuJaikn
H8xlimFTehI/HKi9iDKD2qAVloyP8i2BA6+YCDHQ3sgCNuzqx6hqPghvwkGINmoz
LlmSOniH6bk1ng==
-----END CERTIFICATE-----
Generated at Mon May 12 17:45:14 2025 by rpki-client