Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: Ivv1MW8rQSMZQ8brXM8SvO90ojaiDrov9bRBSDr7wS0=
Subject key identifier: 7A:D0:41:D0:2E:68:29:D5:7C:82:E3:02:22:61:6C:A9:34:42:D5:C9
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 0196BD495B21A2FE4601D23C4CF930E76DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 03:00:23 +0000
Manifest this update: Sun 11 May 2025 03:00:23 +0000
Manifest next update: Mon 12 May 2025 03:00:23 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: TEcLDjY0WhDyldnnjaSkAygwiXoN2avJ5c2eHg6X5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:5b:21:a2:fe:46:01:d2:3c:4c:f9:30:e7:6d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: May 11 03:00:23 2025 GMT
Not After : May 12 03:00:23 2025 GMT
Subject: CN=7ad041d02e6829d57c82e30222616ca93442d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7d:44:e5:a6:a5:1d:45:00:98:b4:a3:16:08:
dd:0f:f3:cd:34:c6:e5:6b:ed:03:2a:59:e2:40:2d:
04:e8:4f:12:dd:f9:af:2f:0d:31:6d:2a:10:03:87:
a8:47:3e:27:b4:60:71:8b:b2:05:b8:f6:d7:18:31:
f9:cc:95:98:22:0a:51:fb:82:2c:22:35:13:0f:ec:
2e:80:d7:82:20:93:e6:26:3a:6b:23:85:a9:50:8e:
63:62:1e:d6:8d:b1:7d:29:30:a9:7e:21:69:2e:bd:
77:20:c6:11:f2:22:f4:f4:4f:64:04:a8:4f:1c:64:
83:11:af:4e:05:f3:59:ee:22:3c:af:17:44:31:20:
a9:8d:bc:6a:f2:a6:46:c9:42:3b:64:98:44:80:b9:
c9:da:9f:2e:76:62:53:2c:49:ae:48:ac:cc:44:ac:
8a:75:61:e9:33:7c:37:ae:4b:d9:2b:b8:e4:19:c4:
d3:23:c0:7e:04:be:0e:39:19:46:83:4a:9b:d4:fc:
be:e7:45:4c:bc:3d:85:70:35:9a:ae:4e:3b:1e:cf:
96:c5:bf:3b:0b:da:f8:2b:db:af:f9:fc:16:26:d5:
e3:af:41:1f:ba:ae:87:ac:f3:d4:dd:43:83:8d:34:
b9:dd:bc:14:50:ec:dd:97:e6:7f:c5:05:73:46:f8:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D0:41:D0:2E:68:29:D5:7C:82:E3:02:22:61:6C:A9:34:42:D5:C9
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0a:80:ca:db:4b:c4:51:b4:d5:06:9d:ca:2c:34:81:60:6b:
83:6d:38:8d:b3:91:56:82:7c:6e:71:43:19:eb:b9:8b:2f:f5:
ca:ad:6d:bf:af:db:51:a7:d3:ab:db:d2:1c:3d:94:20:16:90:
2a:5a:eb:40:d9:05:5f:44:56:b2:7e:ac:80:10:77:2b:73:36:
a2:13:95:b3:17:98:cb:fa:a7:37:f6:43:f7:38:21:dc:6c:8e:
65:a9:c8:25:4e:7d:bd:0e:ff:46:a5:5e:5f:a3:3c:8e:ec:a2:
8e:b1:7c:4b:de:a0:4c:9a:57:f8:e1:1f:43:0a:3d:47:ee:99:
06:b4:ca:c4:37:e9:af:0b:37:f7:4b:39:ff:e9:8f:3e:1d:77:
0d:ea:b1:98:40:5d:e4:58:fc:56:0e:a2:38:32:ff:a6:f4:4f:
33:9f:5c:68:8a:a2:78:bb:97:48:31:94:ec:0c:13:84:71:99:
df:65:61:ee:c4:37:ea:c4:8e:df:18:f4:bc:56:64:b0:2f:f1:
b0:07:9c:ba:b1:af:2d:8d:45:f1:c3:98:51:86:b4:52:a4:d5:
47:62:96:b9:cb:3a:5f:99:c2:65:55:97:8f:ac:3b:ca:45:f7:
72:7d:d9:10:e2:ee:ad:f7:91:c0:d3:03:32:92:b7:45:a2:7a:
e4:ac:b2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa9SVshov5GAdI8TPkw523uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNmQyYWM5YjY4YzMyNzExZjdlODdmZGU1MjM0NTg0ZjVi
Y2Y0ZjIwHhcNMjUwNTExMDMwMDIzWhcNMjUwNTEyMDMwMDIzWjAzMTEwLwYDVQQD
Eyg3YWQwNDFkMDJlNjgyOWQ1N2M4MmUzMDIyMjYxNmNhOTM0NDJkNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X1E5aalHUUAmLSjFgjdD/PNNMbl
a+0DKlniQC0E6E8S3fmvLw0xbSoQA4eoRz4ntGBxi7IFuPbXGDH5zJWYIgpR+4Is
IjUTD+wugNeCIJPmJjprI4WpUI5jYh7WjbF9KTCpfiFpLr13IMYR8iL09E9kBKhP
HGSDEa9OBfNZ7iI8rxdEMSCpjbxq8qZGyUI7ZJhEgLnJ2p8udmJTLEmuSKzMRKyK
dWHpM3w3rkvZK7jkGcTTI8B+BL4OORlGg0qb1Py+50VMvD2FcDWark47Hs+Wxb87
C9r4K9uv+fwWJtXjr0Efuq6HrPPU3UODjTS53bwUUOzdl+Z/xQVzRvjeTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrQQdAuaCnVfILjAiJhbKk0QtXJMB8GA1UdIwQY
MBaAFI9tKsm2jDJxH36H/eUjRYT1vPTyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3Njkt
Zjk0ZjA4NGIxZWU3LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9lNzhlZTEtMGEyYS00NmM5LTk3NjktZjk0ZjA4NGIxZWU3
LzEvajIwcXliYU1NbkVmZm9mOTVTTkZoUFc4OVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAqAyttL
xFG01Qadyiw0gWBrg204jbORVoJ8bnFDGeu5iy/1yq1tv6/bUafTq9vSHD2UIBaQ
KlrrQNkFX0RWsn6sgBB3K3M2ohOVsxeYy/qnN/ZD9zgh3GyOZanIJU59vQ7/RqVe
X6M8juyijrF8S96gTJpX+OEfQwo9R+6ZBrTKxDfprws390s5/+mPPh13DeqxmEBd
5Fj8Vg6iODL/pvRPM59caIqieLuXSDGU7AwThHGZ32Vh7sQ36sSO3xj0vFZksC/x
sAecurGvLY1F8cOYUYa0UqTVR2KWucs6X5nCZVWXj6w7ykX3cn3ZEOLurfeRwNMD
MpK3RaJ65Kyy4g==
-----END CERTIFICATE-----
Generated at Sun May 11 08:02:26 2025 by rpki-client