Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: PwNXyZOdiTd+31TUk2eus0QNdCDK7azk1z4p8tpN2ME=
Subject key identifier: 60:F5:0E:8A:CF:2E:0F:41:C8:FE:09:DF:BA:BF:5D:BA:C0:30:EB:FF
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 0196B33370D46E7899458224B26CAD38EDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 04:00:14 +0000
Manifest this update: Fri 09 May 2025 04:00:14 +0000
Manifest next update: Sat 10 May 2025 04:00:14 +0000
Files and hashes: 1: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: AKlPScG+JRWMHb14E5KtjSup5gZlXgbCKt+t3+b6rrY=)
2: fB3zFlody1nthwMkhJVJflJzOIE.roa (hash: J7sG0dYSoVKmJxeiq5++oBkxzchZIPPLFfINpg3QbHs=)
3: t7D4JJSP5z-u6M9bmWKtD19PybY.roa (hash: hgEfba4+416hOF8d8xJM4ix7obkJ8g22r+oy5Y4pB5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:70:d4:6e:78:99:45:82:24:b2:6c:ad:38:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: May 9 04:00:14 2025 GMT
Not After : May 10 04:00:14 2025 GMT
Subject: CN=60f50e8acf2e0f41c8fe09dfbabf5dbac030ebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:8c:4f:2d:f1:ff:a8:e3:0c:10:59:36:83:
df:fe:f8:8c:ff:bb:15:db:df:cc:de:8e:4a:37:fa:
2c:d5:59:c9:e0:e4:2f:dd:c0:21:a3:13:e4:54:09:
16:84:35:32:7a:0d:19:96:1e:5c:da:cf:fe:cc:be:
28:5e:95:7f:58:26:67:cf:0e:2e:4f:53:26:da:ed:
36:eb:f4:c2:72:47:75:5a:ad:75:7c:2a:0a:dc:2f:
c3:3f:c7:85:c5:62:94:b3:16:60:1b:1f:54:f4:c0:
10:5a:36:99:eb:93:6b:1d:e1:53:de:24:a8:31:32:
2a:6a:e6:0e:42:db:ab:e0:23:d9:41:a3:81:16:a8:
93:37:e0:25:99:38:e7:14:ad:e1:f6:b0:bc:03:1a:
55:d1:b2:dd:2d:7e:f8:56:8e:a9:5e:8f:95:83:2b:
73:84:4a:2d:7a:90:07:b1:b0:42:2a:0e:25:49:d0:
09:2b:2d:85:e9:85:05:aa:ec:a9:67:34:9a:11:cd:
e7:0b:a7:75:b5:7e:49:9a:7c:89:aa:9d:e2:22:97:
3c:4b:d8:ea:f5:82:1d:af:9c:f2:49:a8:d8:da:7f:
04:e8:e3:fe:6b:31:d7:07:ca:1c:1d:ef:67:2f:04:
da:07:92:dc:90:29:a5:eb:72:35:0a:17:f0:bc:62:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:0E:8A:CF:2E:0F:41:C8:FE:09:DF:BA:BF:5D:BA:C0:30:EB:FF
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:85:37:67:60:be:d7:5f:44:0c:a2:51:e1:11:2d:a1:3c:
cb:85:74:74:ef:da:97:1f:ed:9f:5f:3c:8d:94:b7:22:90:cd:
c9:c7:76:5b:35:32:87:23:99:fd:4b:6a:0f:9b:52:59:96:2e:
88:ff:3d:4b:aa:b2:c4:d5:11:61:9f:e7:7d:84:70:4a:6d:18:
2b:c4:2e:01:3d:de:aa:44:06:35:54:b2:86:8c:e4:51:c0:5b:
8b:35:a5:8d:7c:7e:a2:04:23:03:3b:84:52:92:7c:91:06:61:
37:7e:6d:d5:4c:d4:55:54:b1:2b:30:aa:43:f4:82:60:2c:82:
d3:a2:02:c5:e0:45:9a:25:c6:ea:97:b5:c6:c1:61:42:07:b5:
92:1b:8f:12:a8:b5:3f:3d:83:89:43:33:58:4b:b8:fe:83:06:
fb:5c:36:bf:42:2c:bb:44:f5:4b:bb:06:02:f4:e5:cf:6f:50:
de:1e:0c:3a:76:32:e9:f7:81:50:32:dd:46:3e:0e:79:56:b5:
29:04:32:25:e6:83:a3:ac:cf:f6:e2:63:ad:0d:38:63:8d:30:
e4:d6:e1:70:63:1d:2c:a4:99:4b:b5:75:f7:a7:df:f8:b8:d7:
23:1f:8e:21:57:0a:3f:13:7e:4b:5b:64:81:38:b1:34:65:89:
02:f7:16:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazM3DUbniZRYIksmytOO31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjUwNTA5MDQwMDE0WhcNMjUwNTEwMDQwMDE0WjAzMTEwLwYDVQQD
Eyg2MGY1MGU4YWNmMmUwZjQxYzhmZTA5ZGZiYWJmNWRiYWMwMzBlYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcKMTy3x/6jjDBBZNoPf/viM/7sV
29/M3o5KN/os1VnJ4OQv3cAhoxPkVAkWhDUyeg0Zlh5c2s/+zL4oXpV/WCZnzw4u
T1Mm2u026/TCckd1Wq11fCoK3C/DP8eFxWKUsxZgGx9U9MAQWjaZ65NrHeFT3iSo
MTIqauYOQtur4CPZQaOBFqiTN+AlmTjnFK3h9rC8AxpV0bLdLX74Vo6pXo+Vgytz
hEotepAHsbBCKg4lSdAJKy2F6YUFquypZzSaEc3nC6d1tX5JmnyJqp3iIpc8S9jq
9YIdr5zySajY2n8E6OP+azHXB8ocHe9nLwTaB5LckCml63I1ChfwvGLYKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD1DorPLg9ByP4J37q/XbrAMOv/MB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADi+FN2dg
vtdfRAyiUeERLaE8y4V0dO/alx/tn188jZS3IpDNycd2WzUyhyOZ/UtqD5tSWZYu
iP89S6qyxNURYZ/nfYRwSm0YK8QuAT3eqkQGNVSyhozkUcBbizWljXx+ogQjAzuE
UpJ8kQZhN35t1UzUVVSxKzCqQ/SCYCyC06ICxeBFmiXG6pe1xsFhQge1khuPEqi1
Pz2DiUMzWEu4/oMG+1w2v0Isu0T1S7sGAvTlz29Q3h4MOnYy6feBUDLdRj4OeVa1
KQQyJeaDo6zP9uJjrQ04Y40w5NbhcGMdLKSZS7V196ff+LjXIx+OIVcKPxN+S1tk
gTixNGWJAvcW4g==
-----END CERTIFICATE-----
Generated at Fri May 9 11:18:58 2025 by rpki-client