Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: qRjoBX/oJwrSh/tO7iFExBzk1m3XXImi3qQqp14xcME=
Subject key identifier: 99:67:CE:0C:83:7B:22:55:F7:9F:A5:83:DC:07:8D:11:8A:0A:45:D0
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 0196A0F6C15354EE43D4DE10DA737C3908A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1522
Signing time: Mon 05 May 2025 15:00:47 +0000
Manifest this update: Mon 05 May 2025 15:00:47 +0000
Manifest next update: Tue 06 May 2025 15:00:47 +0000
Files and hashes: 1: ElkjMSo_kXjP6q9aSDUGnZi_eU0.roa (hash: 7q4VbgFNWa3tnFNDab0oMeZop6uPRWY6PGIt1SoGlFs=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: WaqO9V1dTG1ecMuGsjhTyYXELQmMtu5lYgpi092ApFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:c1:53:54:ee:43:d4:de:10:da:73:7c:39:08:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: May 5 15:00:47 2025 GMT
Not After : May 6 15:00:47 2025 GMT
Subject: CN=9967ce0c837b2255f79fa583dc078d118a0a45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:67:69:86:a5:af:5f:0a:47:c5:8e:09:eb:
d3:3b:df:d6:6e:9d:ea:ca:b6:a2:ac:b9:b5:4f:d0:
65:af:b5:7d:44:72:3f:e2:a6:89:35:92:27:f3:53:
b4:29:11:69:be:28:a2:3f:af:dd:c4:a9:ab:21:2f:
f3:d4:45:36:cc:45:79:97:c4:72:4c:79:ed:4d:42:
39:58:a8:49:69:2d:90:eb:ea:b3:6f:5a:ee:dd:7a:
0f:b5:c1:da:28:37:b4:70:22:b6:e7:96:51:8f:04:
60:5a:15:5a:2d:93:62:0b:bc:da:87:e2:7d:6a:1e:
f6:ea:12:e8:3f:44:32:45:95:d9:08:4e:5b:89:cd:
b5:5b:bf:e4:ca:7e:43:39:b2:f7:33:c0:e3:50:40:
59:9b:f1:42:4c:8f:ab:ca:b8:1c:9e:21:98:fd:33:
b7:21:cd:5f:3a:6d:ad:33:86:d0:39:3d:09:0a:74:
c7:80:b2:0b:40:09:2b:85:04:2e:cd:8d:26:46:7f:
60:58:b8:e2:93:99:69:58:8a:c9:4f:47:77:68:ca:
94:8c:39:3f:d5:84:ea:cf:bb:fc:f8:92:df:6f:ed:
9f:43:d3:9f:58:02:95:77:25:ed:c5:8b:8b:6e:06:
97:bf:4d:94:2a:1f:4c:9e:d1:af:7f:9c:d4:96:a0:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:CE:0C:83:7B:22:55:F7:9F:A5:83:DC:07:8D:11:8A:0A:45:D0
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:81:97:83:48:b1:0d:59:b3:de:93:59:59:e8:6d:d8:49:cf:
95:31:41:88:59:2e:58:70:08:80:1b:de:a1:bc:ed:52:a9:07:
f5:51:97:59:da:93:b0:2a:7f:68:f3:7e:52:44:0a:85:dc:68:
99:36:61:08:8c:a9:1f:9d:01:b7:46:62:8b:2f:3b:4a:3b:37:
ce:e9:68:b0:88:bc:40:20:c3:f5:e7:cc:fd:16:53:0e:f4:79:
a0:a9:50:57:d6:1e:dc:15:2f:a6:2b:25:60:a0:fd:00:20:0f:
a9:c6:d7:ea:97:5b:99:77:c1:56:04:e0:cc:15:9a:1e:ca:15:
31:bc:c5:96:23:d5:81:17:8b:25:b3:d2:2c:7a:f6:27:26:9c:
8b:e3:e1:38:6b:20:51:7a:25:a6:2e:4b:85:a0:a4:04:98:a7:
68:d1:3f:88:96:cf:c1:32:63:c0:0f:3b:a0:37:a7:57:2a:97:
f0:95:3b:e0:cb:aa:3c:60:de:f0:b9:27:8d:99:6a:f7:7e:a3:
a0:ff:34:d4:2a:16:3d:65:0d:b7:e3:ec:18:4f:19:6d:25:82:
bb:45:34:7a:09:b0:12:6a:be:f6:2e:93:61:dc:30:7f:49:b6:
30:30:df:db:d7:8d:c8:59:5b:5f:1f:a6:0f:16:a9:2b:7e:be:
d0:cd:87:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZag9sFTVO5D1N4Q2nN8OQipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjUwNTA1MTUwMDQ3WhcNMjUwNTA2MTUwMDQ3WjAzMTEwLwYDVQQD
Eyg5OTY3Y2UwYzgzN2IyMjU1Zjc5ZmE1ODNkYzA3OGQxMThhMGE0NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWNnaYalr18KR8WOCevTO9/Wbp3q
yrairLm1T9Blr7V9RHI/4qaJNZIn81O0KRFpviiiP6/dxKmrIS/z1EU2zEV5l8Ry
THntTUI5WKhJaS2Q6+qzb1ru3XoPtcHaKDe0cCK255ZRjwRgWhVaLZNiC7zah+J9
ah726hLoP0QyRZXZCE5bic21W7/kyn5DObL3M8DjUEBZm/FCTI+ryrgcniGY/TO3
Ic1fOm2tM4bQOT0JCnTHgLILQAkrhQQuzY0mRn9gWLjik5lpWIrJT0d3aMqUjDk/
1YTqz7v8+JLfb+2fQ9OfWAKVdyXtxYuLbgaXv02UKh9MntGvf5zUlqCoDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlnzgyDeyJV95+lg9wHjRGKCkXQMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh
LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoGXg0ix
DVmz3pNZWeht2EnPlTFBiFkuWHAIgBveobztUqkH9VGXWdqTsCp/aPN+UkQKhdxo
mTZhCIypH50Bt0Ziiy87Sjs3zulosIi8QCDD9efM/RZTDvR5oKlQV9Ye3BUvpisl
YKD9ACAPqcbX6pdbmXfBVgTgzBWaHsoVMbzFliPVgReLJbPSLHr2Jyaci+PhOGsg
UXolpi5LhaCkBJinaNE/iJbPwTJjwA87oDenVyqX8JU74MuqPGDe8LknjZlq936j
oP801CoWPWUNt+PsGE8ZbSWCu0U0egmwEmq+9i6TYdwwf0m2MDDf29eNyFlbXx+m
DxapK36+0M2HlA==
-----END CERTIFICATE-----
Generated at Mon May 5 19:14:00 2025 by rpki-client